{"type": "bundle", "id": "bundle--83ee5e1f-638b-4b0d-bf10-62671a7fd41a", "objects": [{"type": "identity", "spec_version": "2.1", "id": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "name": "James Brine", "identity_class": "individual", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "location", "spec_version": "2.1", "id": "location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c", "name": "Reverse Proxy (Perth)", "latitude": -31.9505, "longitude": 115.8605, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "AU"}, {"type": "location", "spec_version": "2.1", "id": "location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a", "name": "Vultr Melbourne", "latitude": -37.8136, "longitude": 144.9631, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "AU"}, {"type": "location", "spec_version": "2.1", "id": "location--73054ef4-7a76-4e2a-98ff-bf055c36433d", "name": "Vultr Tokyo", "latitude": 35.6762, "longitude": 139.6503, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "JP"}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--9022deed-e7dd-4b57-9625-bb57c0802011", "name": "Cloudflare Global Edge", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--0e42b20b-02b8-47be-91f6-f93e380c2c6c", "name": "OpenCLAW Dashboard Decoy", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--975bf34c-5b4e-4afe-b674-7dc4e9523afa", "name": "Reverse Proxy (Perth)", "infrastructure_types": ["firewall"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--164bde03-86ec-4409-9037-0561289701bb", "relationship_type": "located-at", "source_ref": "infrastructure--975bf34c-5b4e-4afe-b674-7dc4e9523afa", "target_ref": "location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--f32805ec-bc91-4bcf-a874-7a59edc488fc", "name": "Vultr Melbourne", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--af14cab9-4564-49be-a2ae-fed79dbaa7cf", "relationship_type": "located-at", "source_ref": "infrastructure--f32805ec-bc91-4bcf-a874-7a59edc488fc", "target_ref": "location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--aaaf2afc-80c9-4cd0-bdf5-a34b6ca577fd", "name": "Vultr Tokyo", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7742ec06-8095-403c-8beb-905cd9ac1f9f", "relationship_type": "located-at", "source_ref": "infrastructure--aaaf2afc-80c9-4cd0-bdf5-a34b6ca577fd", "target_ref": "location--73054ef4-7a76-4e2a-98ff-bf055c36433d", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--f409d74a-c834-4732-8fe0-37db64648729", "name": "CVE-2000-0868", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2000-0868", "external_id": "CVE-2000-0868"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--e244d6a3-dc81-4710-a38b-6edfe4916bce", "name": "CVE-2002-1149", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--d20fa7cd-c4cf-4426-9064-b6b9c8f4f7c8", "name": "CVE-2019-0193", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0193", "external_id": "CVE-2019-0193"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--d703b0cb-2349-4a45-adfd-079d8cfe4296", "name": "CVE-2019-5418", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--de361e24-96c0-4a5c-aa33-63a63cf40f2e", "name": "CVE-2020-5902", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-5902", "external_id": "CVE-2020-5902"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--7c846a00-ec07-4cc7-9160-34835270151d", "name": "CVE-2021-21985", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21985", "external_id": "CVE-2021-21985"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--3b0d42a9-3156-4406-8848-77877543eb66", "name": "CVE-2021-22005", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22005", "external_id": "CVE-2021-22005"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--5d2aa6fe-f699-482b-ad3b-a207f1fb2da5", "name": "CVE-2021-26855", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855", "external_id": "CVE-2021-26855"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--aa93b2dd-345a-42c9-b051-3862202e31ea", "name": "CVE-2021-34473", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-34473", "external_id": "CVE-2021-34473"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--7a369f54-0fdf-449c-bdf0-e287fc8fdc98", "name": "CVE-2022-22274", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--8844fc8a-e028-4e7f-8caf-909ce7a03c63", "name": "CVE-2022-22947", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--9cecf465-ce84-4269-b927-dca2ba0b43cb", "name": "CVE-2023-0656", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--87578ce7-bd64-4d09-a580-4b3f1c5fac4a", "name": "CVE-2023-1389", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1389", "external_id": "CVE-2023-1389"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--30311f6c-f26f-47da-bff1-b2323ba8673e", "name": "Network Service Scanning", "external_references": [{"source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1046/", "external_id": "T1046"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--bfe6a08a-e023-44ea-be23-fdfe6b3f5314", "name": "Exploit Public-Facing Application", "external_references": [{"source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1190/", "external_id": "T1190"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--bdec63ce-006e-41ad-9ffa-e50b03aa63d1", "name": "Credentials in Files", "external_references": [{"source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1552/001/", "external_id": "T1552.001"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--f4ef225a-7ab0-40d1-851c-51f72d2a3af1", "name": "Cloud Instance Metadata API", "external_references": [{"source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1552/005/", "external_id": "T1552.005"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eef6d41-20a2-4276-a3f8-ddc63e308a25", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.14.110.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8092d7a6-b28f-49ca-a8ea-81114bab2c70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.171.65.145']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9c09190-0ec1-4b78-8aa6-3cabecbb1105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.221.134.6']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d1d012-2113-47a9-a67e-741fc0f9a6e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.24.16.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5504de6d-be99-4b4a-bb0a-559306df4616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.31.1.99']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecfb020e-0371-4134-8ef5-5f82dd34f98f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.34.2.110']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5581576-a866-47cf-9449-0a6b1ce472db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.83.125.114']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6840b9e-ec5d-4ed6-86f0-a2a8919c2604", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.28.153.226']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd411dde-0eb5-40e6-babb-81b3fbc09da3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.28.191.174']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bf5688c-e85e-4eed-9484-b99234f97d1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.108']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e867677-f700-446f-a7d7-f8fe17a562d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.115']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e0d959f-726d-4d7d-940d-ea71a5c5953e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3511f00b-a67f-410a-8d68-cf13d92ff259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.13']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bbfc5bc-64a1-4770-89e7-9b8a177ad485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.14']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc876c2e-a015-4af2-ab67-2a035c81e529", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.18']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b82f485e-6764-476b-bc86-f42006c86ddb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.27']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed6b5a1-77c1-4635-b8fc-1259cea87ea0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b81a441e-0e88-40c6-9804-144e0911974d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.3']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e50d4cbe-4691-4e9c-b859-70bc99116df4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccb19bf2-f3a8-4abc-9c2d-dae114bf8993", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.37']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c555b72-cc7a-4a53-9dbe-efb52d21670d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.4']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69ce972c-1ca6-46aa-8cdf-7d0ed975ff5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.58']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39360fe4-9fb8-4596-bb9f-48477762a347", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.67']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--616ded2b-f09a-48b4-b717-3ec134492038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.69']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b704c04-69ae-4163-9c46-03f5c9b18bad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.78']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3a288b0-a1ae-4dad-89bc-3e34aa50be2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.8']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e8b8e9b-0313-413a-8df5-1e477b8ee99a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.83']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2469084-3099-4b5e-a038-ee6a615b98d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95e41dd1-48f9-4830-9151-159506f29f88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.9']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f053bb9-6226-4e23-8a79-39df737ac3d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--995f1080-d817-4aee-9308-41310abdb118", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.97']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d8312bc-8bae-4372-be91-932039331ebc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.99']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d8e9509-0241-481d-a6c7-754dc45dfa06", "name": "Malicious Host", "description": "Web exploits: aws-credentials, php-backup-grab, spring-boot-actuator. CVEs: CVE-2002-1149. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '100.31.109.160']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f5dd6a97-da01-45d2-bd2b-a9944e833396", "relationship_type": "indicates", "source_ref": "indicator--0d8e9509-0241-481d-a6c7-754dc45dfa06", "target_ref": "attack-pattern--f4ef225a-7ab0-40d1-851c-51f72d2a3af1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dfc54317-fa50-416b-9bdc-90cf0f603071", "relationship_type": "indicates", "source_ref": "indicator--0d8e9509-0241-481d-a6c7-754dc45dfa06", "target_ref": "attack-pattern--bdec63ce-006e-41ad-9ffa-e50b03aa63d1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1fe992de-e269-4360-8739-61885ed6fdb8", "relationship_type": "indicates", "source_ref": "indicator--0d8e9509-0241-481d-a6c7-754dc45dfa06", "target_ref": "attack-pattern--30311f6c-f26f-47da-bff1-b2323ba8673e", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3fd08b2c-aedd-4bb3-bd93-1860a4501734", "relationship_type": "indicates", "source_ref": "indicator--0d8e9509-0241-481d-a6c7-754dc45dfa06", "target_ref": "vulnerability--e244d6a3-dc81-4710-a38b-6edfe4916bce", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--59cf4fd7-de43-4256-b13e-791badcece1f", "relationship_type": "indicates", "source_ref": "indicator--0d8e9509-0241-481d-a6c7-754dc45dfa06", "target_ref": "vulnerability--8844fc8a-e028-4e7f-8caf-909ce7a03c63", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b6bff99-6791-4d41-9274-28fef8a8537e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.49.117.77']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fafd2ed0-96cb-41dd-8a42-3302b7cdb2b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.50.17.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65f6d085-f09e-4761-8bb6-122d98b90ce4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.51.195.110']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81ca6273-6521-4aee-a97c-5b8589de9e1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.51.6.16']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e18318de-1d42-4864-a19c-24c9f780ceff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.54.143.192']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f85f418-43b0-4320-8ef6-5060f3eb80f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.200.236.207']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb5c93f3-6d9a-40f4-b741-37e9670bca68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.200.243.197']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6d06ae7-70f5-418f-85ae-15ebeff3bc82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.134']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49a28c84-cbe7-4426-bf32-a598b06dc28e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea9d151d-b324-4c10-b84a-17ab6e003c36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b973749-1fcf-430e-b73b-d72618b31520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.9']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ec57418-c14e-4830-a87a-8c6ab7098b45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.112.101']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--478ca5a0-b46f-4684-b6c3-1cbf4452c64a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1e2d871-cd1b-41ba-b6c3-9bcd6503a5f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.118.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c655b31e-9cd2-4cb0-987f-d89a1faa71d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.121.72']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7ceceea-8f79-4da6-8774-abb6755532ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.123.67']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0ca38a2-0c92-4213-8212-58767509116b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.127.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab3a438-76f3-4215-9d6a-675965ac52b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.172']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05e63672-bc00-4df8-b600-4479297e0db5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.205']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9c9c0ee-a33a-4370-b919-cafa3dd4fb17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.70']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7a5079d-9a1e-4959-a92f-271830ed6972", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.17.146']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d55a3b2c-dda4-451e-93da-b47faa4d0785", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.20.224']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f2e30c-c6f4-4e82-8b76-dd7ff4754394", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.25.101']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f61f62b8-8d83-4fd9-8975-aae028b958eb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.25.129']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6997641c-f77b-4ad6-a0eb-068be11654dd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.26.56']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca72808e-355a-4ea4-9015-49689ee0ca5c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.27.249']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e0d2dfd-5504-4626-8e27-5b76c6693507", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.96.192.88']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c117bee-6510-409e-9574-4697d4e9cb27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.179.98.9']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64aac258-2e7d-47e4-ada0-9cc1a93ac817", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.182.250.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6bdf9d6-f803-424b-95c5-b4a896845987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.170']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16a2994f-4182-4080-bbeb-649141ff650f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.200']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cca5c934-d6ac-4b37-b081-8acdfbce8995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.201']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc823505-bbca-46dc-8f1d-f161231cf8d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.227']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55d74f3a-65fd-4080-a44f-77753224351d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.237']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b58bf81-d203-430c-a43b-32c2b7ed2910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c937c70c-4404-4d64-b277-ceb77f084ce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.67']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46658294-d68a-44a3-9717-5215aff9fda7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.161.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d47f2df1-634e-4ce0-a75a-8279adc7b61f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.161.64']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8705bd2d-8a85-4b2f-b3e4-7354883742c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.161.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ba7ee42-e00f-4739-93fe-c5d9fb7e858e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.161.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e352749-c399-40ed-b878-1d05569d38c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.88.21.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc644550-fde7-46dc-a4e4-277bfe54370e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.90.99.75']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28ffa693-1447-4a5b-a6cf-54eb47f77daf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.98.1.120']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8e9d22d-50b7-44a4-a7d0-7b8b6a639ae2", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.1.112.109']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f87bd8c0-0f3e-4b53-ad43-20d157164f34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.1.210.25']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea4f30b9-66fd-4ddb-9c6a-26cd1e1dff86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.110.182.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4624fbf3-8a61-4b27-a8a6-ad2fb93055aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.119.2.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa880f7d-b268-4e69-8078-25fe20e8b946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.121.231.202']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a744c01-3744-4560-8de7-3b9cd8c6f42d", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.124.105.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f753d4f-5759-4132-a5a9-9a2eca6324e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.142.26.14']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acf13be2-d9dd-415e-8aa4-018eb88c0274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.148.103.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76449047-0f68-4704-b827-eca70ba38bfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.197.34']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce269bef-f50c-4f8e-9aa1-a2001c1521a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.152.101.207']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--610d838d-1ac5-4076-95be-fefed49e3cc0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.153.155.184']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aada14a4-98e6-4dd8-98d7-63c44f94015f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.160.59.70']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20646c51-27be-409d-97e9-7a55a44f972a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.161.207.6']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12160aa9-f0ea-460f-894b-eda75af07432", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.165.206.238']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12fd0251-b877-4d7e-aff0-6da10645fdc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.170.154.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea8beb6-e07c-4709-bd7f-d3d1a0a69d52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.12']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae304bf6-5ec9-491b-8b22-aba323777746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.17']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aea4f0e-0d54-4d4e-acd8-99d9289fdeff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.2']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1218cc9-a875-42e0-b3d0-72b231a6aa49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fb878d9-2beb-4a87-9c5f-f0bc9dbc477c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65844ad6-ee07-4de2-9e2b-766c6c083698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.59.3']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1eb35e4-fb9e-4208-b450-65687da5f4a2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.210.21.178']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03c304c4-17cb-43c6-af60-609146068ff4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.210.22.74']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--875d7a98-774e-4bdc-b517-a0bfcb97ab56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.217.158.173']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16784b17-8df1-42ae-94c7-1ea02e7c9b64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.217.186.187']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99efc04f-75a2-4a17-9ab8-59de5dc24e2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.218.241.7']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd44ea10-6e6e-4021-9d1d-a72e3da5eb43", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.239.255.205']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--657bbc42-af81-4c1e-90dc-7539016ac21b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.26.82.163']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffb8dc0c-b64e-41c7-8023-f4a46bf5ecdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.133.74']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba55566f-5265-4e30-a9d5-c09739e2a49a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.46.186.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ff3db1-2766-4328-a56c-da34c7db8a61", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.66.148.71']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f65f4582-4651-49d8-b093-143e0a6283de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.180.250']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--457d8741-7ee0-4b58-8368-965c4259a261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.83.233.160']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe6f12c1-ef5c-4e40-88d5-9471ab4329e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.87.175.110']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b99635ee-79f3-4007-a6b7-0acc5da7c631", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.88.232.57']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e17952b4-d948-4ec4-81c9-825bb1f11b6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66f34932-bfaf-4430-98ca-991a0974b83b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.209']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd385100-a581-4a19-9a12-4585a7ce8ab7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.35']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33afdcc4-b9e3-4413-9ee1-c86464a6ed1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.47']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b1e872b-dd13-4570-b415-7a9f2740787d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.51']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c42cae3e-bf2a-41df-b69d-c3e8caff96bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2f55aca-0503-4a04-8351-e9dfed74e799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.205.204']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcdc4ed4-e793-44f9-bd5e-daa55dc507e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.77.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a889ab59-b9f6-4433-b5c4-b4b2d9551a2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.0']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdddc4f3-a78c-4f30-b88a-955390b82bd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.1']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--235f1fc4-0c7e-4048-bdb2-59866b9fa3a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.102']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c9b7df9-a16c-4348-8bf6-81ae8faf4319", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.103']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--339fb4a4-715c-411d-932b-4637274f7c98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.104']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50b698e7-a767-414d-a28c-3494b23d2473", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.105']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c015e572-a88b-4d88-9c52-04498b74fd2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.107']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6d2193f-b0a4-41e3-be98-13e1c2dbfdc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.109']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23a9175b-aaa2-4de9-8157-3768240347c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.11']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cb87d7f-9a3c-4189-a0cb-053e40b6d313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.114']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92b17ab0-5d85-4135-9c63-b955858bb0c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.115']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c80b211-817e-4865-9872-904e83273b9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfa8d3ff-3c36-4f42-b6c5-de4aa9146e8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6868e93a-f83c-44c8-856a-96fff60af717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.12']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f938db8-8cc2-4f2a-bc09-6d9183ad48f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.120']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--905fbde6-1e74-4a09-a791-fe3597bef9fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.121']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fcea77b-f759-49af-a3b9-00c283ae0896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.122']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ba9ff4f-fc14-4989-be52-197c2f449db5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.123']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16d34ab4-eede-4f67-a728-44f755a83536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b2ac40a-77e1-4f11-ba23-558a49f23079", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de847d5f-f4b1-43fe-9bed-b759018fdfc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db44dd80-00dc-4319-9368-cf2278ffdcd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.128']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e811fcfa-b79f-4789-9825-87c6d9fc65a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.129']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f4f830e-c046-4b8f-bfa0-922d494f7d91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.13']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc6f5db-5f84-41a4-8713-abae793d8b3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.130']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bcb765a-803a-4fcd-9ca3-011c784ec516", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.131']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b505f833-3677-471c-ab61-c4db78ed3689", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.132']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dfe7523-94ee-40a3-a880-857b04cb1c6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.133']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ea0aad8-e449-4fe3-ba87-efecbd112268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.134']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee64c58c-13b7-4b83-97a7-ce5dd7591ae8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.136']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4aca33f-2a35-4c34-b72a-fc14382849d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.137']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc32a8af-7e9c-4db8-8485-4a60d10b5f44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.138']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29450ae8-8ca1-4d00-acc9-bfd0845d837b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.139']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56b0a005-5fad-455e-ac3f-38ad4e862081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.14']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02aae3a1-6b65-4a15-b88b-a1c79c3cca3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.140']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2745853-023a-476e-a096-4fa8247b9f08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.141']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44090dad-2c16-4256-a7d1-da31fbfa0737", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.143']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4076486c-8dca-4b13-9410-d869913b7c76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.145']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a00a8ce2-ddfb-400d-9fc3-170596c6d565", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.146']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93bdf114-f5b1-4bb4-88fb-5f533bbc2969", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.147']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--077052a3-bfa7-4140-995a-7a3bae3e0fd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce46ea6d-3cfb-495b-9dbf-cbf954de2517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.15']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b1f7aff-1d18-4f6f-8e05-8423998f61e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--875e71cc-b04f-4a2d-a6c4-d40122f6c4af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.153']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91b5ab28-b326-4c7a-b9f5-81a3c0027faa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.155']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acd2e5cf-c03a-42fb-ad75-886bf82aa4b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b068954-61ac-43c6-8688-5bb1d0532bb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.16']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a43ca19a-8aa7-4f7b-b9fb-b0cd537eeabb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.160']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--329169ff-70f9-41a1-a177-fc9eba81c743", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.161']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0e9b82c-8edb-415a-a4ae-97552c69958c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.162']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--212a0906-fd00-4cfe-b7e7-53e57ef9aeb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.164']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07515dcf-1dd2-4db6-bd16-16d6a39d17b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.165']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--480b8d90-20b1-422c-aca1-f01e33dd2a2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.166']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fcd165d-158e-40dc-ba28-f1eb5332a2d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.168']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--903b64f7-b759-4ff3-a5ba-a86cb364c14b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.169']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cba16d5-d873-4500-8418-98ec1c166f1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.17']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee6b55e2-3dfa-42a8-bd76-6184c86c6f07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.170']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9e89f6d-8100-40e6-b260-c4d10846eff4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.172']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--779e20f4-f55a-4f64-927a-e75e63b953ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.173']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--186f707d-170d-472f-8277-9d5d93e09415", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.174']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca9883c6-33c5-4772-80b0-c7e31e35a0e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.175']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f710794-cfca-4a90-977a-0a49464dbb29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.176']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54da736b-c096-4023-9f9d-6c5797f2f071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.177']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--087423f1-6404-4ea2-87cd-9a1222ac0ad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.178']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--713636a5-825f-4089-9bdf-aa7cf7b95ad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--514d8811-1e0d-48e3-8008-dc2c80e13a7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bda2759f-2e3c-4475-9d7c-78a97cc308a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--798f543c-6b4b-42c2-baea-0b6af3085469", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.184']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--968dc472-c1e7-4369-97a8-a210dadc5e87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.185']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14279731-0396-48e9-99b1-8f82ed07ec0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.187']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--976b87e9-6275-4c05-a612-def4385579ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd6b8f4b-a7eb-4fa8-8865-f56bd1f5d424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a913be2-2465-4d29-b502-c1cc53df964c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20a0b6b5-073c-42c4-b247-9d56e2bc0b79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed8fa23c-bf2c-4064-bab0-2a04aff1dfbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.192']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff7e32cc-5ea5-4b8e-a7b5-4fc70afebf6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.193']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--873f3b12-8383-4d43-a52e-2b793edafbcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.194']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--681e50ac-67b1-46ed-8690-f2632cda21e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.195']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02583b4b-360b-43b8-a010-b3665b91ca11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.196']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c40d43c-77a4-42e9-8b42-40d43241a43e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.197']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a6df1eb-be5a-40bb-9e4a-4f388d54d172", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.198']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caef1e93-37fd-4611-ac4a-35327194e0fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.2']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d93ff49-4a11-431f-adc9-bb7ed23099bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b590067-5e8e-4530-ad00-20777524984c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.200']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c1b516c-0a5e-4d21-b8c3-ea4dce5bac9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.201']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c28eef2-1260-43dc-a7a7-44257d92d814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.203']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baa01882-e3d2-497e-ba0a-1936b4bfecb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.205']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f443395-ad55-4a27-8a62-d2040d9c6a76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.207']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a95fa64c-f6fb-4e39-90f5-f3fcf372eea7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.209']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b216665-5100-4eff-be84-e32c70f9e4f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--513cb3bd-1832-49a9-a152-a391b72ffe33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.210']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaf78a3a-7eb0-4f1b-af27-dc290472b772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.211']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41be2cc2-5f8a-4252-985d-3dbd07d524d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ae8d10e-fe2f-4069-8437-bfa38ebcf095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d62ef5e8-1021-4945-b140-622f264e3c21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--600db4b9-ec02-4420-8594-27c647a3246f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01e0ef30-8469-4c1e-8030-03e6b0f3088f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.216']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--345070a8-8cd2-479d-8914-f517256ce6b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.217']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d34619b7-dca1-41ea-9b02-3f9f32761d1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.219']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d14b1af-dbab-4e35-a130-fbde9b9c1d25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0629e3cf-e190-4e24-9f0e-6a2c3000019e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c1b1fca-c9e3-48e3-8729-57a8140085dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.224']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a4927c6-c82b-40c4-977f-810a001237c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.225']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a07c9a4a-32f2-4a50-8316-f9d615d29bc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.226']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7543ec38-0aef-42c2-a738-98f26b323123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.227']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--197bd452-65f6-40b8-a1fb-be201e4317b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.228']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85f5831c-6c2c-4961-8b18-e60d2dfa7e14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.229']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8ac1ff5-d59c-43a7-9d4e-e65752ce7691", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.230']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c57bcbfc-77fb-4d17-8438-3874a5a0d055", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.231']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6e97263-62d0-4eb9-9120-c9081821b504", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.232']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c497b610-7a5d-4d86-a1fe-96f67b5cd62a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.233']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f93476b7-a5ca-4cee-9966-427707179cba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.234']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--259552e8-89b9-491d-bd40-463af98be790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.235']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28b9c37c-cb41-40b0-85b4-142a1cdf386c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.237']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f9d405c-6eb8-4100-9209-085b84d0df81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.238']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e81213fe-fa8e-460b-aaef-301cee9977f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.239']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--906e8c48-633b-4fee-a1ff-4d535b2a2bf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.240']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1467c9a6-292b-4bb8-b745-9166c03c2d44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.241']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c71dfa2-baea-475e-9393-cf66449649eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.242']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1733aa0e-ea16-41f6-b84c-af8e622face9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2465bdfa-8efd-45a1-85b7-28b56bf22c0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b21acff-3cde-4131-93b1-fbfc58ca680f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09043e37-0a7b-4c38-a084-b48b6f127d8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.249']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09993431-fea6-4560-a3d3-ce82cf3ee66e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.250']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15dcb879-507c-4076-a8d7-74e3748bf4cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.251']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc376bf1-3a79-43f1-af9e-e158d142bc4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b9a5546-b467-4d96-b3cb-bbd74669167f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b771cedf-343f-4f93-8418-037eb75d6745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38c16c37-4f91-4ee0-b1f0-97ee427e2e41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.26']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec8a066b-216f-4c47-8438-7bf537beab35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcef07ce-8255-40cf-821a-3f417b439f31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdcfba84-9ebd-47f6-9ac0-add602b65fd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e6af91d-68ae-4be3-98ee-581f2bef424d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d236b822-54ef-4ea5-a063-35aaf054b022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.32']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be65341c-a13c-40b2-9372-2e32ac03dbdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.33']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c775d6f-fc7c-436b-b18d-e468250f6b0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.34']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fee6f0cb-0bab-435e-9b9b-c7d33a107036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.35']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a98f3f7-8db5-4d24-ba6b-2024591cfb85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.39']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6c42803-f0ad-4c86-9a1e-7efe561aeacb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.4']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3818ad92-3d9a-4ed9-8646-26ae328a94c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.40']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ece027b-ab97-4f56-8a1c-000099b1f7db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.42']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d43f538-ab27-4f3d-911e-6ea93397dd8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.44']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a687dd3a-efef-46ad-b204-394817d40b4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.45']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05ddf3e8-bc2c-4b73-b16d-4fa720b9794f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.48']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d3d1555-5ac2-4f41-8651-c9e20867ad16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.49']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2512a87e-49eb-486c-b2c6-e0aecadfcff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.5']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59c6b099-12b5-4a13-9905-222a3451d01f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.50']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7776d769-76bf-4030-9ee3-f1cabdd59d4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.51']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97d3d18c-7eb0-4d3e-a784-0db4aa43b292", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73d28a3f-6c68-4822-af6c-03072bf27819", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.58']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98b48be3-df0a-4f5b-a42d-3fe9420496af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.59']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fd815f7-d244-40c0-afe2-de147d5d7e33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfb8a6cd-344b-487f-8e1d-3a3527a9e2c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6f492d1-3818-42bb-bcda-44d6c3232420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08fb29fe-5088-4a5c-9bfe-34da9b14030b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.64']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac262e56-bfab-452c-8b5e-0c779bd085e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.65']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daa7962b-56bf-43a5-868c-36422269e428", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.66']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4251453-6db2-4597-9305-bc786ccc2d85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.68']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f594d5f9-6c15-4e00-8d9f-d1b26e5aa33a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.69']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd44be37-4f95-4605-8073-8c38b110da6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.7']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--827b9bf8-27ab-4e0b-b4ab-00d144dad09e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.72']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a79f4d8-8372-458b-b081-30ccca704a0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.73']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44ffa019-ec88-4d26-8758-4ae56dce643c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.74']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06eff056-65e7-4d3c-af3b-2c8b0a9b349a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.76']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--becff67c-9162-4ce3-90ef-bf3a05aa5d4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.77']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b8546f-a034-48ff-8405-22141db7fab1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.78']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d43c4eae-a499-4cd8-9f80-e71a95b695e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.8']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdfab5c2-6127-4241-bc06-c27d8b11a5a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.80']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--908a55a0-ba45-4ea6-9495-039fb1c82c02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.82']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ba1d16c-7151-4454-a2f0-72f0b0531096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.83']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--686a84c9-bfe9-4cb7-98f1-d549a27fe3b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78f6adca-bd2c-4ca9-bf82-7e8760b0ab72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7dea135-aea1-454e-beea-489a76777edb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a8f759-b491-4ac8-abf9-f6e1362b1362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.88']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--681c3da3-9c85-4663-b8da-acc80124c056", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.90']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a03747b4-5540-4e5b-b492-f8ec2c845e95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.91']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e8457d5-5796-48c4-8d95-e02805e90385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ff5c2d3-d722-44bd-ba64-2812d0f3b7bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e6b17f3-fdb7-4e80-8f00-e5e355db7fb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b35631af-3ff9-4a0f-be20-8ade35517497", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.224.98']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f2915f6-18ff-4c7b-bcff-bcb0381c4d11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.0']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--005eb1e3-43bd-4df0-93d3-2a6762d64d81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.1']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a9dd623-c2b4-4162-8267-44770bd895a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.10']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a681473d-8f5e-450b-a095-7a3c816259b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.100']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21a766c9-d547-462e-9677-a90a2dffc3cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.101']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f713dd5c-0704-4228-81ab-e298e73f1ed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.102']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c16f668-bbb0-42f9-96e8-4c145d5a95d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.105']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb2a174d-55cc-4c30-8d98-96a783d4652d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.106']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33a78820-e2a5-4974-95d0-7e20601b78d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.108']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b5eac87-2fd1-43f8-93aa-4130c52f83c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.109']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93258e3a-7cd7-46bf-bb83-2133eb8528da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.11']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd69066c-0e82-4dc9-bd8c-4bc8f87ea6e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.110']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--310f6350-3d32-485e-9c6c-554ea4ee43d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.111']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--383ef90d-2209-4b3b-8433-74d85fa8fa05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.113']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd421fe1-06ba-4fb5-8267-dfa1dc01cf24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.114']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0f5acc0-0da5-4a1d-8ce4-3b531fcd627b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e78d3904-c6ec-4ab4-8be0-1faca0b75c6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9539567f-abb4-4129-9428-40c6d23fe4db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cae8f6b1-cb23-459b-bf42-b4d0b5f5ac5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.12']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11db34e4-b94d-42ed-bf4d-188519c1a849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.120']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f92f00af-e4e2-4a98-958d-6715d621a3f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.122']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e5cb0cc-f0a1-4275-aa78-fe1f0b49da4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.123']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b68cf95-86ef-4160-a0d1-c5389687b121", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e93abd60-97eb-4a37-ac1f-1bb72fd7e4d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bebdd41a-e30b-4486-ab29-0e1d035bd3ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1f58d88-de17-4cd5-91cc-df065842dc6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.128']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1263158-0db2-4d91-b544-aa4654c19b40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.129']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7373324-bec6-4d03-bf69-c3f65da6999a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.13']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a386d5f-c00d-41a1-b3a9-64604e9de5b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.131']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29175bbe-08c1-42d4-aeea-534cf285080f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.132']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--169c962f-0468-4994-b876-63bd9ccf9d84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.133']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f1ce1e0-7fbd-4d4d-b4e0-df8d2337e76f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.134']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aa02c3b-7f5e-47ec-b5ff-74e351d2d8b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.135']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cc4d9ed-c61a-4238-9f36-483f55fb7978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.136']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5703fa1c-d59c-424e-bf04-0e675e1b1540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.137']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4592e383-a02e-4980-8390-7c83c4d153b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.138']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7edf416-1a19-40f7-b90c-6cef99c00e68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.139']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a445f57d-9a5b-4fda-85c6-5e22e6c686ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.14']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00a4798a-1459-49a9-88d8-cf76eee971fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.140']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b434fa6-6386-4294-a7f5-4738f2395338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.141']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6c8d486-01af-4104-b18a-d31b077becab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.142']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab6d0dd-1636-4989-b3d3-a9db91ec183b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.144']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1011349a-e123-4773-949c-87c767cedf80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.145']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fc4ae8b-d41c-4bbc-8ada-a579d916f88e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.146']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34392c7b-4f38-43c0-9399-58f5f86224be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.147']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f5bee56-c3bd-4802-9422-a62fa5b429fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc9cae19-ad08-4930-88e2-001163afbb55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1efffe58-6a5c-4858-b50a-942edb91f47b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.152']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--443f1c9f-0e39-4ba0-8b46-e716361d305f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.153']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d49867e-df0e-4dfc-b9b0-abd3dd52d8e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.154']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5203053-e531-4cab-a51d-f067a736cfd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.155']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2481495e-beec-4797-980e-1ed1a4fc192e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1942d66-2c2a-4170-aed3-9c798f4725bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62962995-a0fa-4f89-bfb4-41c58caf0ba1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.16']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3df7baa2-6b68-41b8-ad6f-146626b06b03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.160']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99b8b3e8-8188-49c9-bfc3-3eec2b98d00b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.161']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0b1bde8-f931-442f-adee-34dff8e21a55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.162']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb56ba64-ee3f-4f4e-b502-d920b13eca31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.165']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e93df2b5-4436-4ef4-9532-e42838f3434e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.166']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--391f95d1-a7d7-47aa-8f7d-462d8172118c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.169']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb2bdd81-a423-41d7-8439-c2b9760119c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.170']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54c3f1eb-f278-40ba-b145-69e37775b6aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.171']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64f0c83e-0886-41c3-b3fe-21dbacb91a36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.172']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2ac6e88-8a72-4b9f-906c-b9700808d388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.173']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5ad1bf7-587c-4b78-a927-b3acce0e65f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.174']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52a16a56-5d8a-4c71-97e9-c4b4ceb415fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.175']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c660247-8aa6-4488-b7af-b8a1cd53849c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.178']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e5c4b1a-3aab-4736-9fe5-d57e6cff31af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.179']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cd583a3-6686-430f-a9b5-2f94729022cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91483124-264f-47ee-8f92-e356ab7bca48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cfceeea-5da9-4b9c-8271-46a6cef98c90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.184']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a02230c-d36f-40f6-b34e-2618379a55ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.186']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bd5787d-1dce-4e0e-a29d-4eb52fb97bff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b80c7e31-0f1f-4cb4-ad1f-005d445eec2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b25f40d-4c7c-4a28-a49b-9b67165d1d3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71905bf1-4128-4cc0-9824-ee86d4f6af1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0915d21f-7d06-4409-909c-095fe8426d81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.194']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc4b2f1a-a9a2-4d08-9d2d-f0f9dd66ef98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.196']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04631831-d1c7-4ecd-9040-6a9c2cec51d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.197']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--872e8686-0a9c-46e1-b422-6b5e451b514f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.199']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd7c8828-13c3-4d38-b9c9-0b1655e884e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.2']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--077d30ae-216d-4bdb-823f-3d03c1d61caa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.200']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49573b15-771c-4db0-b881-3d0a00fa0658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.201']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0593650a-d87b-4d3e-879d-c56f4e1b7916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.202']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35018fda-c447-4f96-afbb-561d8e1042b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.203']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5cd1381-49a9-4ba3-9980-ca2207ebcf10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.204']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d22d1aa-e746-45f4-b77d-9969ed145f1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.206']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8321525a-33d9-456e-95aa-a4518babac9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.207']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daa6902a-abdd-4190-948c-886af6919ae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.208']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba7cb4fd-3fd7-4c46-a34f-920a3a6e9852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.209']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff5a75af-171e-4988-8688-6ff01c747a5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f8f7ba-c7b0-4e59-a199-89c378d1fe9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.210']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01a4e0cc-6d7b-4899-a7ae-68dbd1897f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d70128b-cf40-4d13-b32f-e48dd6eb449e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c05660b-7278-49c0-82fc-da8fb0ebfa2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e6f9f3-022b-4aaa-b693-ee3cc7d0b907", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.216']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59e11cc9-ce35-4f8e-8896-fe00984484ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.217']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c826e7b-feee-43a3-8415-865707deca00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.218']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac04323-10d5-4348-8b6c-ead5ca9c6970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2676c004-c329-49e2-83a2-bd077611291c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06cf931a-0287-40f7-b776-609ea45ec625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5c483d4-12fe-4398-8225-839302dc7617", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.224']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01e07918-7ff0-43e2-a87a-9d9a8737ee96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.225']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d5bca1c-46b5-4e48-9280-d484c2807c24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.226']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d322158-8d16-4ad2-929c-d28f21e5418f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.227']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c04a3693-98ec-4145-b1e3-013095aa6ca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.228']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c624e659-59f4-442d-9a96-fd100d53ac75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2188c746-20a2-49ff-aab2-1fe81ea54a49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.230']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47d9c68f-8830-4edc-8854-565018629e88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.231']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b96e089-0c94-4c84-8daf-8de4ba4d9970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.232']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63068101-6167-44e7-ba4c-12a56ff2453e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.235']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bbd0a40-7f5b-4f6e-822d-add0d9b0b8e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.236']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--877cafce-6d81-456d-a78e-e74b10e4397a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.237']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--881fe1b4-5ffb-44af-9fc1-d83443d84891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.238']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4672775-8c2f-410b-b947-79cc9f3c4feb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.239']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5eb7f29-1fb9-412a-aa4e-32d83d15a354", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.24']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--372b927f-6e9f-40fc-a66c-4c830b8e56c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.240']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7732e97f-7e8a-4182-99ad-9330576acf44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.241']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66dc3a7d-b2cc-4af3-aff0-ea50f3aecb28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.242']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dfaafc7-7eb0-45a3-8986-51ac4842629c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcd668a8-1bcb-40f0-86de-f186b79975bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04fc2281-5d1a-45d7-83ad-7b0a82ba48a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.249']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c3d762c-f15a-47c6-8ac9-4396690b020c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.25']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--494db794-d39b-4d9a-96e6-32474ddbb216", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.250']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52d81cf8-2834-49cf-aa4c-02bacf03c156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.251']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5508097-1d26-4bb7-8823-c082f413295f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6316d3c-440e-41a6-9a3f-85564758f0ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d6ac922-26d0-4f73-b9d4-4811a0989387", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.255']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a2e5bc5-706e-4140-90fb-0cbafd5c57fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b282be84-cd6c-4f9c-80e3-5a84e611fd21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ec2cd4-fea5-4d32-9673-ba1e76da7bab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.33']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5ad6698-44b1-4f7b-96b5-4838d90dbb5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.36']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b954534a-6dbd-4829-857b-e471bce13c43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.38']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbae5ae2-3ae3-4864-b260-e621a7bba97d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.39']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--434820ae-e878-4101-9f98-3f3fb307b600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.4']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed19119f-3638-43d2-888b-1d5a5f87da00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.40']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12cb7da9-64b7-4f29-8745-10c8e9158a31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.43']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f042779-f864-422a-aab9-cf2c55f1d079", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.45']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bd91ed1-fd0b-4f63-aadc-f49fd25cb8eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.46']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b47839e-8691-4377-ae6d-b1a8422a949e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.5']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1d5b2d1-c01b-4ae1-83a8-a493e7472e87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.51']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--242046cb-06e5-4766-ae86-8985b59c71d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--342aadd2-65b1-4888-b7dd-ebfe42947e65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3db1dc4-33f9-48a0-a00b-f07726d3c1e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef2e7c7f-4a02-4648-84af-b6047501bcbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.56']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a550dff-6a2a-40f4-90e7-e60d0973d7ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.57']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ceaf6c-5b18-4bca-9ec8-0c259321934b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.58']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bab27977-71f1-4b4a-a5ce-df4376c5625e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.59']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13cd0112-ebcd-46ed-a70d-3b552224d683", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b05701ab-5a57-4b83-81e0-a04fc3b24c3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26e43d40-42b6-4f4a-8a5a-c1e5f4893627", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60e0c4af-8c4e-4c59-94bc-04be1e06d180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.67']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--257c7c06-4b53-414b-a3ff-c9a0e747a989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.68']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7f35093-5035-4d2e-bfba-f2754a88aca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.69']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6ed7003-9a87-4ab6-a710-4ef5def14bd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.70']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce0090bf-6727-40bb-a215-d60dbe36569e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.71']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1db820e-f48f-491f-9df1-d2ec14eb27d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.72']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bfa3cf4-576f-439d-872b-2d8a4499781a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.73']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53d4f2e4-7018-4e1a-b725-4e2ab6325d6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.74']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--886322fe-7618-4cf8-872c-b0fd5218b57a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.75']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16467f0e-f66c-4a67-a5c1-2b9257c28e0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.76']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d4ccee3-3602-4f98-9405-f4737f0b2a87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.77']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84b70f2d-51da-4966-bf58-1ce097d7da0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.8']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be70e138-1c6b-466c-bc04-3e99b0693ad9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.80']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2083d19-924f-43eb-ba22-01b5d0dd876b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.81']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5abe4847-6eab-44c6-9c49-2dda1ff51bd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.82']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85802017-c882-4ca3-b3bc-098dda261c1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.83']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fd5cb8b-c15e-4bbb-b76c-d56759b7dbea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b68aca8-c7be-4b50-a1c0-e9673ee2bd15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ec0c42a-f38a-4299-a5f6-a12fbd5f94f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a963ad9b-31c1-4be9-9492-bc6fd44081f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.88']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7615e35-1932-4fb2-b9d7-78142e9417a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.89']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6874901-9a6e-4963-a5b9-bf8edcb0c47f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.9']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75aa3d4b-4211-4073-a5c5-5e0f14819b4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.90']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dae0349d-ffac-420c-8f13-bf7bf258daea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44191ba1-b36c-40f5-9f53-df4212880519", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8772ae8-0134-43b3-9f50-0e69822b1163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.96']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--169c417f-4603-4460-8129-4e80e8ccc535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.225.98']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cf2009a-32f7-480b-b2eb-14f240bc906f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.0']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42574496-53b5-47c7-9ba2-1bf7dcf4c7c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.1']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2a2dfed-e257-4dac-a7dc-0da4df7a2be0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.10']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55f36044-9e5b-414e-a166-82b4527699d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.100']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00ca85b4-4524-4e10-84fe-a5c3c0738093", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.101']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ade24c2d-c790-4138-ba9d-e083052fc57d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.102']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98953183-3ab5-400f-b430-b419bf930c86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.103']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afea9865-4e45-44ab-a58b-9dd462c3ec96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.104']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14f990a7-bb8c-4922-b2e1-3f8f7e221822", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.105']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86e3b442-21f7-4973-94cc-10b13a1f190a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.106']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faee2661-4543-4812-8680-9baeba65b0e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.107']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2fa93dc-521e-4d7a-9a87-7a92dc5d1149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.108']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b887e669-554b-4e0f-8fba-c6e9e65f8232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.109']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a8887f1-56d0-4841-91e6-51ca61e375c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.11']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c61e9fdb-924c-4a87-bdf4-37d76340d165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.111']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31e5959e-28cf-44d3-9c65-f2de9b2d749d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.112']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16d6b72f-2c0e-45cc-a692-0ec20863eb51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.113']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b366a1cb-0505-493c-91a7-7d51b390f672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.114']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e8c1605-9b09-43e5-8234-a564181bccf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.115']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98626e3f-6709-44b8-a43f-6a98684e79a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccd44ed3-3678-42ff-abe8-4329ae954213", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.12']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7cae3c2-cc1e-4dfa-86b4-de3e40234db1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.121']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a6f3661-2281-4263-8665-4445a148c1c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.122']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1849823-2bbd-43b6-bcc3-c14e7a31d64d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08a9ed75-5076-48e0-b3bd-df092f167e0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a59b7477-2e34-47d9-bbd8-b66d277ca79e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0feaf113-f084-4924-994d-c0bf3b1d7b82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.128']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88d4e979-2777-4825-8eab-bce01bd0b145", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.129']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6b69817-f2ba-47f8-8ef4-b0ebbc1ab806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.13']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4ffe87c-ff52-4965-a028-a41923e5834b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.131']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e4c32d1-d951-43d2-8c96-60a0e716d901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.132']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8651af99-d006-4635-a1d9-223ee9445a19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.134']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad82b464-fa5d-4fdd-9397-44da8b7b5afc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.139']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8c7642e-9891-4f02-b1a9-0f29d9b0a856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.14']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c465a00c-3fde-4426-8232-7ace27c5dcbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.141']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92b52b27-562e-4b60-8d05-b03314fe65d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.142']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff03a129-52ab-4032-bf28-c654ca512dff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.144']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7259851-52da-44fd-b357-67477033c17e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.145']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f489e15-7edf-4117-b2f4-1aa4d4571df1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.146']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48306fbe-127a-43a0-bdd5-65889183a8bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec443248-928b-4182-856e-b1fee49622ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71b101bd-c8eb-47dd-9155-f032dfdbc515", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.152']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0823dee1-04eb-408a-b069-267a4da88285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.153']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d21f9b08-f3ae-4ae0-84bf-1e7d2342b708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.154']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1827e620-84d1-49ff-ab9f-69a865483028", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.155']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf1cbd8e-d434-43ee-ae65-dcd4478bfd89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ada2d671-5fa5-4600-a384-a0e4a72cd199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58358a1f-90a1-490d-8a10-ccaca99b5084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00632478-c238-4e6a-b597-734490772a1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f612c8e6-fb15-46f2-9b10-cdf1b73c24ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.16']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab3b2802-dfc5-4035-a907-e649b3751889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.160']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68e8ba9d-8d3b-484f-8ba0-ea7b52c81eb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.163']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31a9df97-dbbd-4b3e-9adb-ccb952cf6a47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.164']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3847d2a-2dd3-4109-8e21-4b80a9d01294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.165']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d4860a0-07ce-4bd3-b6d8-21c1f69d863d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.167']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f738b739-b356-447e-9f43-c36238cc0794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.168']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--494ce483-fde9-42a2-8d3d-c51056cf73e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.169']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad498a35-6604-4075-9543-6a7fda9e5125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.17']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d7c700c-ae5d-486d-9a8d-8bf742668bb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.170']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--482b18e9-6dcf-4898-87fb-d2e897363536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.171']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf679ad9-d5eb-49f8-b97b-464289f680b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.174']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9301ad9b-5a33-4d0c-b8e1-6838cca19cb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.175']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12512784-594d-4114-a2f7-2bc79bb04181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.176']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd36c044-44de-4a71-b1f6-91b0a663d8d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.177']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d14cd95-fe75-4106-9bbd-c9d7ba9e66ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.178']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f58f85e1-9ed8-4de1-b515-1ff010a2a49b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.179']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90b699a6-8b88-4fc7-9ff2-ac534c3de250", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a89cb483-ab1a-49c4-ba91-99e0f39633ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08982548-f1dd-4add-8a79-b21138c81b1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.185']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee4bb5f8-917b-45ed-81b6-aaa82821dc74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.186']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--257ad3d5-a582-4236-8f8a-328f349dc05f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.187']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c92c120a-a38b-47fc-bb23-f67430cd8353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--755a89fd-366f-4504-b145-46a10232d2da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.19']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--660ad0fe-143f-4127-bc5b-774381e8d9ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34023d99-d077-430d-ab8c-72d44dedd12f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d86c4616-1b92-40c3-baa9-93556bc83ca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.193']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e985b1-bcf0-45ff-a130-65c227264e7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.194']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c5df6d7-a1bf-435d-a838-c1f9ba8ade39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.195']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a19c126-1e9e-4c5c-a350-2b0f97c3551e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.196']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01b65e4e-fb69-4044-8c72-332351ce84f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.197']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4c58f85-4168-46d5-abfe-fc79dd5d4d29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.198']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1b40aa8-dc71-4864-8c78-b8c5eba86e06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.199']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0134f9a4-a3a7-4609-8f6f-5e0ecdd11a7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.2']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--814668af-2f81-4e7e-8e7e-fcc4540ff6be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af25d2a9-6d2f-486b-a743-66569d8df9a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.200']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86df4577-9297-4861-be74-efe9bca1fea8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.202']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee29c83a-cb67-42ab-9a72-6f153e7e800b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.203']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d4ef23c-8d8e-4db6-a40f-60882131f2cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.204']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b818162-d05e-4fb6-87b9-4850bd4250c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.206']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40399e99-c173-4106-83f4-5a7ac1ef0005", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.207']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08968d08-4c1c-401c-a0c9-90622d055aa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.208']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cea7c8c-b6be-4298-8e1c-b4e62c8a5b58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.209']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59846884-096d-4c6f-a0e8-e99467a259ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--293f6cc5-7a1e-44d7-a9ab-640ef80ffb80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.210']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b07f9c0e-af3a-43f5-bb27-be3dbb3c4825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f13b5bb6-963f-40af-a15e-dc8d557b6e13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4142a56f-1727-4625-ad67-10c5f4567770", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--932a7ed9-8c10-4616-a8b8-d503c2bd397b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f72f81-426e-4631-a161-51d1413a88d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.217']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00466874-8009-4806-9a00-9c5dad6c83ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.218']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b8f1860-6a97-4e78-9d47-01d73e945887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.219']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0a39aa5-5cbf-4e2c-8144-fb29fb1dcdf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--313c1ade-8c36-4a75-aa88-062e3574238a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4154406e-0091-4a78-917f-0b945b9c7e7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec75b281-b6a1-4aaf-8c0a-3b7c23ac8dd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a27b7700-719f-450e-9311-c640ce723750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.225']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e812537-f067-4eb2-922a-43d971d78361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.226']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd6a6735-ba80-4447-932a-7e8384ec257d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.229']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faa70570-6948-4e0c-9352-c99ae07058b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--544b0668-11ce-4047-83c6-7077997e36fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.230']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f406fbc3-805a-464f-8ce0-06adb401a009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.231']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--025d6b15-188f-44a7-8ec7-68edfd463b6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.232']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edeb352a-c103-4bcd-8302-1187bbf0b926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.234']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1f50096-6b31-44d6-9009-cac1d60d871e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.235']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80b54f66-b72e-4645-a688-0449c3808a61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.236']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cb169f1-c317-4505-b9f4-1ec3837d4484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.237']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09a6e006-eae3-4fb3-b209-ac0d17de06eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.238']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4d55080-7664-45cf-b93c-a2d69895191d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.239']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1691369-0812-4bda-8b38-1ceafaf1af95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.24']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76bb6ac6-7a60-4bc7-90e6-5346215b405b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.240']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2946ffaf-5ac7-4569-b4dc-28fd890cbbfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.241']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--608e839d-67e2-4e92-83d2-bdf13c18fa13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.242']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab6ec9c0-85cf-4225-8051-6a8513690e46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.243']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--838c55f3-fa3b-4d5a-b56c-68e7d8fe5de1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed0547d1-b28e-408a-b623-1abdd159e2ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d224b9ce-b44f-42a0-8f40-9dc763f491fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f1d2ca0-e998-4beb-87ba-12590dd8d5be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da9fd395-4bdc-45d6-9ce0-f3c6a4559f20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.249']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6743265d-ebca-4f43-a89a-0759407cbe61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.25']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faeadc5d-8035-4554-a5ef-324ab12556bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.250']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--534b4996-9b72-48ab-b662-1535a4504436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.251']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1651b461-382d-4246-bbf8-0b9b2298cc61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9ee0049-e06e-4a93-9328-5a3ef708bcd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17429bb1-184d-45e8-aeac-eaad393f1280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15b8c347-2600-42ca-ab5d-67d8397d76e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.26']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e98b8f8-16bf-48d9-a7fb-80f5af315e6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.27']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c50bc85-2fd4-4ee3-a86c-afc48ee9fde8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc97cfec-4fc3-4313-9aac-da7f3fdec0cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d0f6629-37fb-4b2b-80a7-9028c568df0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.3']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7efc0052-bcef-44e0-a751-32002f9050b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e886a9b-3eb2-4287-872f-0180280d1755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebab2ff9-2fe5-4039-9513-bd2b6f41bbf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.32']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c0a375b-c3c1-4b50-b66b-d8b75cd33aa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.33']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a4bc838-8305-41d5-9b0e-f3a5b7aa88e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.34']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f3e4285-38cc-4fbd-8c5d-d3fdb71b721f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.35']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15a55171-1b6a-4927-8b0b-8754d31a2256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.36']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0de8ab27-156c-4993-bb03-49d7a70115a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.37']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3df01b4-a02b-44ef-9f5d-2daa99121982", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.38']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cb8b295-4141-4bc8-8df9-22483ef3f90a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.4']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98943182-f778-417c-a0cc-163a157c191e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.40']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3ea6fb8-6487-43b9-9e85-f4eeff5bbbae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.41']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2af059fd-07fb-4bda-a480-6a7742532d72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.42']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0e188bc-ed3d-48e4-8697-aedfdf6e68c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.43']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d729eec0-a7d9-4594-8233-07286b589794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.45']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3fa3f20-18cf-4351-90b9-291fd9846288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.47']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4993e04f-3227-4e58-8cb2-9b9494ae9da9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.48']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1ea1316-ebda-404f-8c9d-eaec04dcf75f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.49']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffe075cb-08a6-4ebc-99c1-89740ac39877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.50']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd10b44d-f15a-440e-940f-0a0db096ed96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.51']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10124adb-8cbf-4f80-b63c-9c49026346ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b371315c-c540-4719-9b87-70c7edaeab3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d45d9797-970c-4643-9ddd-a14a38ea0872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.56']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1f61fa3-9d4a-4856-ad49-c1be2607236b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.58']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f7aee0c-1b1e-4ae7-ae30-c4b825e56696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.6']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46f44ea7-1df4-434a-b17c-4d452d40ff43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee54d2e-5c0b-4186-8ae3-e1ce275aa3c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f40132af-1107-4897-b41f-7db60bb958d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb37442d-6881-4ec5-b4ba-ac7cf132f92f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e0c3e71-75c1-4819-ba1d-280d0f44fa7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.64']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2337bbc-2090-4317-b992-8d0107f2268a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.65']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d05577db-cf13-410f-a4f8-1bb4b5eefb4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.66']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caa9307e-3a36-4469-98bd-60d5a970e4ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.67']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e731fb68-947a-4148-913d-861c4b280ce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.69']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66441e41-6291-4339-bd2e-1e2c42f88cb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.7']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--938bdaca-812d-4d6b-b6da-993c302def70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.70']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feb29b77-5499-4bf3-bf75-5b9ee6436416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.73']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--027e585a-6ad1-484b-98f1-b3eb928327fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.75']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87e9488b-f16c-4fcc-9e51-ee39e4f8ff96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.76']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--034f48d8-1c37-4048-a5e0-3ac0c62b46f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.77']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58cac4f3-44b7-47d6-b49a-a116de1e9486", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.78']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--583d4789-eccf-46f0-8f86-a4fa5be3ced0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.79']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be4cf9ad-f185-4a32-ae6a-dd1cb35cc2ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.80']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5733f18-4447-427e-8afb-ff901c86113e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.81']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--760ed74d-918c-43d6-95b3-a6ccfc1ab5fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4a518e3-4b08-464f-a7a8-b1b538abd4b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74b6afc6-a668-43ed-b0a4-e08c65413495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b30a4ec9-c4ce-48dc-a3bd-cd9f2323087e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.89']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11390afd-f56a-41fa-ba8b-7267b6ad7643", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.9']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a59b269-a0a8-448c-be67-4f16cf55533e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.91']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ffb70fa-ef3c-4bb8-af0c-7890215b5a56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--493c7b3f-3da2-498a-a1cb-db192f9c9b4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9afd0578-d5d1-4e2d-9aeb-6b10ec9dbd75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aa645e4-c273-40bc-b469-3899202d821c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.96']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dd74a76-d765-490d-811b-966e10a9094b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.226.98']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a80240b6-5c4a-457c-a5e2-a957ec55bc8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.0']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c551571-d3f0-4fb4-80ff-c8b5325ee91a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.10']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d269fab0-5ce6-471d-97a1-7c1f649ae3f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.100']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68f2b503-7194-4c63-a11d-422040e65469", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.101']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51e8a8f2-3fe7-4ea3-9324-e0a827a0a162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.103']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5341e3b3-b0d5-4375-adcb-61d237753f94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.104']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8728e52-a8d5-433f-9086-02ffe73d312c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.105']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3bdb549-0dee-4d7e-928a-ec6ffed59170", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.106']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e095342c-5284-4469-9cbb-5d870326ec34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.107']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54abefdc-592e-4383-bcaa-85408eeaf6fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.108']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba985cad-302e-404c-ba99-dc3746d65a56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.109']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--683709ef-ff42-4ba0-9bb6-cccc7018f424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.110']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--829cdc73-5b14-45db-8c32-d8056bab922a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.111']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac1a073f-cf77-45f7-914d-a4ce16f98456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.113']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eefffa26-0659-44e6-a0e2-2b149bcc7c30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.114']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc6fc49e-8e47-4ba1-8ab1-52fb13c0faf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.115']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd8942c7-40b0-4bae-8dc5-2cc4a8eb93a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e39b7c4c-770b-41f8-9251-b9d64111d9a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b972ae0c-fe54-4d69-83b2-a77890fe33e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--145d66b3-1291-44aa-822b-b9c57d8d3690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc30bda0-7616-4db7-9521-76dd9f5efac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.12']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d45691c-5c7c-4181-aab8-d67399311c13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.120']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0df69dfe-b3b4-4f80-85e1-7b8438614cd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.121']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e6345d7-cdc0-481b-81d7-128e8a412efb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.123']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abc4a7a4-0450-4f27-a5ad-327f5ad3e549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a074e3f-4bc6-43e0-8494-a0b947043e3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca1df837-91c0-4aed-a29c-18051f8b6afc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--074b1d06-92ee-46ef-847b-bc7e15713e37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5f6bdcb-be5f-46f6-9602-73ca77ac4423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.128']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94e6a741-a03d-4a3a-b14a-25323f6d85af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.129']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cc75234-990d-4f7e-8c8d-52fabc390d59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.132']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a9801c-5ac4-4219-8310-5e90b694797b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.133']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1937651-e78b-4f53-abd1-33bc143fda2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.134']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--197009cd-9961-4d43-b28f-c99a189e5f7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.135']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f691b4eb-6be2-47c3-bb25-1f8487edd0d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.137']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4036a8aa-4be7-4df5-9e53-c93118ce0c8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.138']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3d24868-82fd-4c0f-9e37-84197f3b10cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.139']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5e02947-3ed3-4b64-8f80-4229a9b97707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.14']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b26c3b4e-52c9-48bb-b66a-858c43a31f01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.140']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db37a6ed-f054-47c9-b4b5-0ada93b323dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.141']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e010b60a-b87e-4c68-b5af-a408c17121db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.144']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17cf9801-4c76-4928-8fa4-d117b53b3300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.145']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef1e7127-a83e-4aa6-80d7-669ebe1cdbb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.146']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fe84722-dbc2-4907-9d5c-39508ff092ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.147']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43fdf665-223e-4476-9d56-79aa348d0473", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31744d8b-65f3-4d3d-a7a5-b7ab35da2299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--436059b6-fc97-4683-a077-22fd008e9837", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.152']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25c8bc07-3697-4c82-90a8-9858d6ce384e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.153']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50bfb698-04a6-4361-b19d-9e859730e4dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.154']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8395591c-ac4e-4f98-87da-7a0f0b3e3b4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a91ff472-f9f4-40dd-9911-38857d12a25e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a973f9a-10a9-4937-bd89-4cd18a6b283c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e829f88-cc8b-4fd1-b0e8-d7158e691275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.16']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--505287c7-86d8-45e8-81b6-da94c69e70e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.160']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec4da427-1116-44d6-9945-2fea7c87483a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.161']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df55be90-e40a-4bdd-bbb2-ea121dd13daa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.162']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b641bb4-5cab-4d79-872e-781ead8dbd08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.163']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e5b94d1-54d5-46fa-b894-c271dcc7bced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.164']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7628c87f-cf2a-472a-bccf-ac5b58537836", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.165']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25c1eb2b-b97e-49f8-9084-8e6b42a4acf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.166']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bdc5534-db86-4195-96a9-4ab95c7254ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.167']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63444f25-a299-425c-b0ec-b9506161a185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.169']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db35745e-4dd0-46f3-b5c5-88f0aaad57ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.172']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aae0dbd2-5f77-4998-80a0-d49b2f95a421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.173']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--405920a8-1bc9-4559-8408-bcaa86335283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.174']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f22b4a8-1859-4344-8a6f-c3f2c84cc2d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.176']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5ebf76e-73a0-42d8-9798-22f6d2d8fc86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.178']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f62dd91-2228-4873-8506-a2bf18950318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.179']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb9f175-7142-44ae-b7f6-dbf7b624a587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.18']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41191022-e32e-495a-9962-59cb12f42364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b025e265-c6e9-464b-8836-9050566fb6f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c78c3f8f-195a-4f6e-a0e0-a97759ea6066", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.187']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a749e5aa-d6ec-47f5-8c15-38b02fed8095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19bec6fc-9304-443a-8752-fc51565762f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02449185-6c59-4e2d-a561-0e31012205ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.19']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc63f748-5315-4944-9c6c-cdc5a156ce5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b8d5a71-c9f3-437e-9eb8-a5bfb74ce428", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b092b2f-8fd9-4e84-8d97-4201985d74b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.192']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--086ff34d-861a-4c5d-bd0c-5f69e47becd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.194']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7aad6e2-f48c-486a-9876-d257bf701ccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.195']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc96be01-8d28-41a3-b252-9d8732128641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.2']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bed559c8-721f-4682-8506-a13b44331c0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.202']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baab6b04-d4ae-4468-b403-4733635fb854", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.203']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--247938c0-b6cd-4ac4-b87e-3344e395c5ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.206']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--426f2462-729f-41f7-b916-6f8294f17cbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.207']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35248083-6548-4ba7-91dd-86b53c0ea110", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.208']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6ff7f0a-bf9f-4c55-bda1-8ee3a360e316", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.209']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dab5fdf-3d50-45c1-b25f-9342d9fb93f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.210']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36c39538-54ea-403c-b556-eb7c5ddca3ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bd32040-83df-4c3c-91d9-fe286a9cbaf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.216']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efa10684-ebe6-4378-9337-af540ea47144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.218']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a94fc617-c240-4107-939f-24467163502f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.219']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9df72d71-5fa8-4fa3-b33a-df711d8aebfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34ee9c73-2e4f-4bb8-adfa-33eedd6d1459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e371b84-375f-4f41-8bec-a60f2a233de0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9770265a-bba1-4120-a22d-7696673cb5e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41344a97-79f2-45df-b0c6-9d42362e09a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.224']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--607f5d36-25ea-47f4-98ca-ae4abe24f26a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.225']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe0dc90d-2741-4e74-baae-dbc79e4811ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.226']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ab23a73-b20d-480d-befc-3ffcab74bdae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.228']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9079d213-f3e4-4acb-b4d2-5767a74e2a61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.229']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--237c5d56-a7e1-4e99-9fb2-11cba4c8cc05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--632324c5-1efd-4bf8-b56d-aa593cf8ec10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.230']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc1e9301-7a16-4700-9845-f6f97d3732e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.231']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16561f71-709f-4553-a095-c28291e5a091", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.232']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--679f7851-5635-4913-b9fd-8e00362800a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.234']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f45043c1-6cc5-4b9c-863f-ab65993c9d5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.235']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c0510ad-3e74-4249-9cf8-97bfb798053b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.236']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2484f3f9-7b63-4872-a0b7-69f4a7b3f0ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.238']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--235a59e4-4d58-47b5-ba32-668060afb9c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.239']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--534be39a-a337-425c-bdbd-8b70a99b005f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.24']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e84080f-3276-40a0-9068-1af105b3c89b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fada9c0f-aeea-4d5b-ae25-f9cfd1d4bb37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2df6177-5060-4607-9511-7603faddbe2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a93c14d-d348-4dac-9877-b4331b4f6cc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f8c802a-e9b9-4e4b-9e8f-f310890efcc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.249']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f50b9673-8d88-4b8b-a57e-5fa5a7d3e10a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.25']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e568883-387c-402b-bc05-2f934b01a851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.251']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90ad3844-9f18-4b49-b136-21cf8e42ef50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04444d27-7f3b-458e-89eb-2b1e4ae41da1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2670cd25-907e-418d-ada6-075bab58a7cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.255']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5a48ce5-734c-4820-b140-de2a72846a10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.26']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d363e8a-276f-449f-a761-b3ed47f94f3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.27']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2024a956-a6b4-4a75-8267-b3aae80546e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66e467d7-5693-4620-9403-db53b4873fc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--224a79e3-79cb-474a-8fd6-bbf39aa3a69c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.3']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3167f289-eb87-4988-a657-2442d3b8fcb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.33']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--451813b1-e66a-47b4-a0c6-47a455db1d3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.34']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--386538e5-f3fd-4540-9d56-88e4225026dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.35']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab151271-3358-4e48-b069-9acf089d8ab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.37']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1acb6921-92ab-470c-9e33-391a5b9c0074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.39']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--908f9184-f6a9-4609-8233-cfc76748cc6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.4']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0871980e-7b84-474d-96f2-97bae1c36859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.40']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77fb0d16-82bd-4b9e-97ce-94d0516e2dc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.42']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09b2263e-d93d-46d9-a44a-c03df0b5d7e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.43']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1e4f7a2-b889-4eed-b239-ec8e47939dde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.44']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5035a91-b7f9-4b67-8163-d179cf3c64ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.45']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5529cf75-3d4a-4b52-bf1c-e1ff8fef08f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.46']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93405192-4249-4d35-8bae-57af22563e1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.47']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52313813-5a68-4169-b065-3687ff5b38a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.48']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4679653-2773-41ea-ae8b-046ae03024bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.49']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13227fa8-b8d4-4a2f-899c-840447d7ff16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.5']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f37e68c-4680-4805-9f59-96fff128db1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.50']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a487285-ccc4-417e-8b24-f0c95bb89c7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58b26429-c9e8-4097-8afc-dbb2f67999e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b042ec41-20ab-4780-b106-123725c38d02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1629af91-df9f-49af-bb5d-58d76f44bc7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.57']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef865fc2-b988-485a-a5bd-8f2a461f6aa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.6']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7230f33-60e7-4f38-bc46-a1dc5ab483aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62c16091-e92e-45ac-8a23-d6b9f3490d6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.64']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef708d2f-8585-4666-af24-2124672de365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.66']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8314f3e1-6a69-48aa-bf02-a904cf6541d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.67']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7535ec39-392b-4d29-b13a-de799c9dc650", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.68']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a40d54ed-e202-4e4a-8f32-12daba8bc0a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.69']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42f4510b-91d3-4700-8a27-e996b98748e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.7']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe61751d-7327-4941-8d94-c7e3ef829ecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.70']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d7c97c6-1da6-4cd2-aea2-91b130cad31f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.71']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--771c46b6-a09a-4895-be1a-e27072668dbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.72']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b86c68e-23af-4e13-a262-215550c99786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.73']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35eb2623-4aa3-46d5-b1e6-c05be9d337cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.74']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee9ec9ea-9191-4d1c-b273-bf9c4dbe4826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.75']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aef8098a-c0cd-43d3-8eef-5c3999cf67a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.76']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c56b556-b557-44ec-801e-49574c3d3a64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.79']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21f27f74-ad49-4a7a-94dd-61d7b12e31fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.8']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba5f130d-3a23-4082-a4a3-9b882a59bbdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.80']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21449b9c-7010-4116-869a-3e25f8b6521d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.81']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0018ace-444f-4ea6-9408-1b2514915b53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.82']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4799ca5-ad35-4aee-b3e7-bdb6a69685c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.83']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e74c627-ca89-45c2-8c76-4e437a4d8852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--857f6576-e567-4c20-bc2f-445765094950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d772b9b-fe92-40df-88f0-52bdac8dbfd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.88']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92ba9866-03fb-4184-9162-1425f950dcfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.89']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f7865d-64cf-4965-81b7-b9633de179e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.9']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac16701f-3ca2-4711-af1a-f1fc8dee53a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9720743-f7d8-4bbe-968c-969c50a1f1a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f184364-233b-4849-9e6e-7ca5286b452e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.96']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--327f84d9-b768-4e70-96f5-5ef1e957ffa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.97']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9bf3d67-e1b6-49fb-ba26-6208d9b63e89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.98']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5019e439-e9b3-4976-9fd4-87363b803c22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.90.227.99']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--880bd52c-1f67-4cd7-b762-7fe9977d61f9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.96.71.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aa04a47-1c08-4a79-aaac-516cd4f7d4ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.99.27.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c205f28-39c3-4d51-9078-2c52064214a2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.143.218.6']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9a7a948-ab4e-4552-9f37-dcfdbe8ee180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e1bc3f-b9d1-403a-8123-f2a3be37359d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e59bc7b-3904-4742-9db5-6d0d8ace15b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.129']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--647aee2e-abf9-4da9-a837-32eec23454c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.131']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c675b8f-67ce-487f-bb85-7ec2ce596606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.132']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a33b3b79-8133-4fef-b120-b4a49c1abf28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.133']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--017b0e23-7361-4533-9f2e-cb8b34fd6ae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.134']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31e2dda5-5bb6-4d5f-9faf-7bc35e084771", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.136']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab056762-9101-46c3-abdf-30936aca305d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.140']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd921b48-8699-43dd-ba67-17f86e750f99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.141']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92df2682-89b0-4ae8-8948-cabb1386d08e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.142']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8252ee7c-2415-4ba1-ab0f-d6b9383ac7e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.143']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af6be829-a75c-44f9-8dd7-857b2013eb52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.144']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6ff44f4-ea15-4ef1-bf73-6cd11a21a4af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.145']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8585e484-e2d2-4b85-ade5-87411ac8246a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af985631-1dcb-4a15-acde-fcb69f09090c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a73270c4-30a5-49eb-a0be-740ce37eb795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.200']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61173af8-02ce-4740-81cb-a17b45ff04c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.203']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abcbd0d7-5e7f-4d9e-97c6-84cc721ba7fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.206']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--898a8146-7ec1-4652-b712-5226ac0037bd", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b7c2542-c55c-4cf0-aed4-53ca33f9db11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.228']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4be2fb45-3892-4e46-ae8f-5a2ad82f02fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.5.16']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--936637d2-758e-469d-be47-46fc9f8427b7", "name": "Malicious Host", "description": "Web exploits: aws-credentials. CVEs: CVE-2019-5418. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '104.199.221.96']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2b2a297e-7dbd-4b26-91b9-82724979634d", "relationship_type": "indicates", "source_ref": "indicator--936637d2-758e-469d-be47-46fc9f8427b7", "target_ref": "attack-pattern--f4ef225a-7ab0-40d1-851c-51f72d2a3af1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9b9310d6-b1da-4c29-b399-dc4a84500b53", "relationship_type": "indicates", "source_ref": "indicator--936637d2-758e-469d-be47-46fc9f8427b7", "target_ref": "vulnerability--d703b0cb-2349-4a45-adfd-079d8cfe4296", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05fe2675-8c61-45e7-8537-46825fa07263", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.199.67.154']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73d540b8-7397-4a60-96f0-282de3dcd2cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.21.89.9']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e4e4529-8f92-49bd-bbee-1018020ece24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.214.54.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47908583-7adc-4fdb-bc0a-13569b434c62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.214.61.237']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa5bca75-94bf-4a04-8ee1-9c6f923d4220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.218.145.107']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ad04ec2-622a-414e-ad7b-8eecd00367ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.223.85.26']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c2982b0-c9df-4bc3-ae54-665c6421774c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.232.79.58']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c62bbcca-0617-4b46-a50a-8aeef34e14af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.1']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff8cca49-85f7-4362-a519-ae2b516858bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3441e40-8548-498a-a1eb-f89876b7879a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.154']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39667072-88ee-4463-b6f5-9bbabd372827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.16']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e63fb46-f6b0-4366-85b3-a6fb9e41d504", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.169']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae88b823-7fab-493f-a8a5-d5ed66ffe3e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.192']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e438d8a-b19b-42b3-b195-24ddb870ca91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae13caf4-1e75-40b2-b273-f8ffdad379b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.202']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dd3e417-299e-48f3-848d-7107a7419b8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.208']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--490fc395-ac98-414f-ad78-a5c4dd39347d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--173a4fa7-a918-4b5c-862a-4399af4615d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.229']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--254f0538-9b5e-4748-bfcd-b7bfedf30efc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.237']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d635b0d-d1f1-4791-9a61-3ad465d7ad71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.239']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cee3cb6-4c8e-4242-afe3-6abde48df8fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.249']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfa1bdb4-a88a-4343-a7ac-4a975b023535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.37']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--331a2f82-b550-4726-ada5-fbe5659db639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3e91ee6-e86f-4da2-b518-2a8fda5b9560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.65']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87dab56f-ec3d-4464-a9a3-724de5eefc26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.74']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50f57a11-1700-445a-9804-4ccdb107016d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.81']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82a28819-c864-4966-aeb0-11bb600a872b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66c481a8-eaf6-424c-9ddc-a85817c898ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.89']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8af656f-db93-4033-9ed0-4faca0a5fc2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.91']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84dce344-a29a-4b2b-9435-4337f785b18f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.98']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--072c52e8-4379-4bc0-82e8-d891acb98612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.94.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a89ac528-4ea4-423d-9c8a-861fc93786be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.238.23.141']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c6fc715-2243-413e-9301-0c50a4325807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.245.240.175']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0de84ebd-3b59-4479-9939-2c11169b12ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.245.240.187']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79a2be69-018a-4bb3-a4a2-bb157bfd62d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.245.240.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d1f44a3-98a1-40a4-a607-1c4934739f7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.245.240.43']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--310997cb-82c8-4cd1-9cce-e613c0a26bf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.245.241.64']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66590727-5cf0-4cfa-aa05-df6bad3f605f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.245.242.109']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41c8d6f5-c731-4b9a-92b9-a453383c5d78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.245.242.110']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62836e9a-3714-427f-93a9-fb6b43d5d703", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.245.242.136']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--026c4c9b-75ea-4416-9920-e0dddcb794e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.245.243.168']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b34928b8-6a17-45be-aa35-ae0678520ca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.245.243.171']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81ec9419-17d8-4dcf-8175-04bbcf6680cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.245.243.187']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fbae0ef-89e7-45bd-8a72-bc213dd9400f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.245.243.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--660daf8d-921b-450b-bf41-f7a90fa915ba", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.121.99']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b0e51f0-59e2-452e-8b40-f74e4d3d0c0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.130.34']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af52a3ad-c24f-4357-bdac-f930c5a27d1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.250.236.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa3a6524-6785-4fcc-9538-c7cf99d85e95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.250.236.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f755d29f-fe17-466d-8420-aa4bf4650c42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.28.161.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca8193d1-8193-401b-b257-34ad447bde65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.28.162.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ffa9ab7-efd8-4401-b2d4-b01230b34820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.28.165.145']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ff70df3-877e-4300-b2ac-a546476877bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.28.165.163']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a3271c7-316d-446c-bff8-30eb0a88d12b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.28.201.80']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3444477-3a65-4c92-a916-cefd9efb47bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.28.205.121']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bf48256-3337-4937-9e0d-5e876b90967d", "name": "Malicious Host", "description": "Observed: FTP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.28.238.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4354509d-2c0d-42df-acd0-97c882fe952f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.59.121.228']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e64d2767-473f-4cad-8e1a-15fee28764f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.156.79.248']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7b2e5bb-7424-49fa-9dcc-c1ba6886715f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.105.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7871c88-d14f-489a-9053-661974cc43dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.36.154.232']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6571cb1-3af3-4dd5-8057-fd284ff89cee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.40.240.225']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f283ea1-910e-4036-aa56-b27cf4ffa9d7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.54.62.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac2398c0-f053-4ea4-9e4f-714ca203ebe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.59.8.165']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55d30cd5-6371-43c0-b0e2-84f3e80fdb07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.146.153']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4e670de-8239-49e2-abce-6f00f15c0034", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.166.174']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--613e34f8-230e-42fb-8ee2-731a5ecc0d4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.174.120']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9d8550b-c01f-4bc6-9694-887737a6a3a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.174.91']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e1d3e72-658b-4a00-8217-654b0121124c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.175.5']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--973e94d2-e985-4611-abf2-f8ce3c089090", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.188.200']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec982e21-9084-4d31-add0-6030534ba7fc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.1.166']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33562023-5b45-4e75-af04-d1480275ba8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.5']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cbd4e51-dbe9-4910-bd95-daa5f8ac4d96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.59.235']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76c5738e-a896-45ae-8df3-7ed9caad5ab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.59.237']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--572fd4cc-aef1-4927-ada7-fe61e0123a87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.59.238']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--727a055a-02f3-46bc-94b0-ab2ae4c42ce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.10']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3c5c14d-f64d-4166-aab0-cd474d3bf42f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.173.241.217']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c395b492-bfef-447a-b9bd-a3bd5ac73afb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.173.85.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30a742f7-9806-44c3-a581-8edd54f05080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.180.102.1']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7537ad5-4a88-4482-8c2a-028c941f21e2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.211.37.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a584c2c-5588-484e-abb5-a506ec93c0cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.165.147.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d08d0fb-37da-439b-bcee-4aacd3bfc607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.59']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6a8247f-bc2c-4d32-bd2a-e2908b6328d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbd74dc2-7501-4fd8-b1ca-325f5d317465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaf64f5c-c6c5-4bbb-9908-9c9b9d1452c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.68']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e6c4817-5218-4ef8-82a8-2ee632aad199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.97']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b97e8f0-9513-4f9d-8388-1f6e418e2f31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.123.237.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ac59b67-ff9e-422e-9848-5568280efdad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.123.238.248']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f5bb888-79a4-4f80-9b22-dfb807a9e89f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.160.32.10']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--febe14a6-99d9-47f2-a5f2-6f64ad449096", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.160.32.106']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--487ce77e-2c53-44e8-abfa-cd73cea3f4ab", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.160.32.32']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b2a2e6f-c0a4-46b6-9bb4-2c1ba4ef4505", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.160.32.34']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8730d65b-1e5c-4020-b7b5-6b6d5a528af2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.160.32.38']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eff1f392-d71d-42d7-8920-6b55c6a2025d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.160.32.46']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--550d2e9c-5e27-4069-9b88-f8d8c7280a93", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.160.32.67']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abd935bd-e9f0-4343-871e-09ee5c1b8df5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.160.32.79']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f85872b4-8f5d-4e40-83f8-1a7b385b8b34", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.160.32.82']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e3c8f0b-cea4-44c0-897f-14e71ea483d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.161.174.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12471d0d-c282-4edc-9573-51d85cd91fc1", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.172.160.110']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d535e59b-9569-466c-81cb-74a0e39c20e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.172.54.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f93e38b-3a74-4cb2-b0cf-808b2b9ca978", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.184.35.64']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40f8c9a6-29c7-4d8e-8e5a-176538227c59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.195.209.152']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c5bc6f2-b77a-4da2-8ec4-2a26989de579", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.199.106.34']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb66f73-6bc0-46de-847e-65e8bc87f9cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.205.180.231']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fef14a2-0665-4ea1-818d-417339045e39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.205.211.34']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf349e0c-d537-4b57-b02a-b499def8ac74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.206.247.77']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3d023d4-a12f-4d28-8318-e1f25369a16f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.248.156.26']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd0eac18-18b8-49c2-92a3-d424732ddd68", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.86.231.26']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aae2be2-d114-4726-9792-f8674bb7ee4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.94.173.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48187780-497a-4eef-b7a6-81921317a48b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '11.190.15.200']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3667e2d1-3861-42e9-bfcd-5a9d044ae81a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.179.80.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86c9edcf-541f-4c6e-991c-795b14ff37e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.42.37.68']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b5fd322-c78a-4029-a1a0-5a0073ce5ee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.46.15.135']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1ac4c85-fb73-48fa-ab74-1c377a1f0a6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.83.135.122']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24bd14c7-61f8-4b85-ba2c-7fabc42e5677", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.127.79.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d839cb5e-f5fb-4f7f-bca8-7db81600afce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.170.35.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f94a04b3-c9a4-459b-a0db-d8ea7a91d829", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.176.107.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--097e4497-3f86-47a9-bbea-625fa891ca4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.177.121.226']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29505ed6-59c4-4ac5-a5db-a426d1b9b177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.178.104.196']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f46af101-644f-4ce9-aaa1-e036de8cb73a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.178.123.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64334f66-75b4-4600-9a38-5d856e6f24fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.178.126.154']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e34cba69-30cb-4b50-be83-e5ddc1ab4c79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.179.157.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17fa6c09-d8a3-4636-9a9c-0c169c6d14df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.251.201.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8728c64e-b152-4087-a5c6-21d9d4b1ad2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.53.105.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75ebf915-36f3-4530-ab8f-6d963e718f5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.103.204.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c2d80e5-5929-4896-bb8c-104993e1287d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.20.86.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b5ad636-f3e8-41bd-bcbf-0aca32d6fc2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.23.183.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5cb55bb-b96a-410b-bed2-70b67856f914", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.251.15.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b331da2b-8cc8-43de-afdf-4fc73cfa7a28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.28.234.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a03dc41-5ae2-4661-96dd-11ca1823d0f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.46.217.83']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51b08248-a65a-47eb-9f01-124dad6d66bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.94.252.146']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9ea32be-53a0-43bf-966d-ad0e121f059c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.2.172.98']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b7227c8-7b97-4f2c-97bc-37b40ee9cb56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.88.65.39']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11d2ca56-4b14-450a-bf37-9c61b56a6b2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.10.45.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4e35be7-8c9e-4f12-a703-b45189b56e90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.101.51.248']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b29dfc7c-71ea-42b2-a088-24486589a495", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.129.24']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50f163b2-57b6-47d4-9dd1-33d4ff78c9e6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.129.81']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--344301ee-eddc-449e-b89f-587c37f67f70", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.130.217']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9b31a5f-7437-44ef-b013-4b0bf0f26e65", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.131.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78473f24-d6a4-4a67-8133-38114431cbc7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.131.166']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b42889b-9533-47d9-9d81-787179f7909b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.132.89']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--016974b0-b231-467c-a959-536fdd75cf6d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.135.207']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--547e10b3-075c-405d-b2d3-d3375b224d7d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.136.72']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cacf67df-6f76-4ebe-8e8d-4ce8e9caa336", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ea11213-be75-462f-84f6-e1fabbfff23b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.232']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17774c2b-7041-4903-8a1b-6288ed0cebf5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.7']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bac451e9-7c8f-4cc4-8ca5-f1e0afacc992", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.139.133']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bfc47c2-eb0e-4f2c-b843-eb379fea2374", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.139.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a44c2de9-bcae-44a9-b51d-ff4e2e040d67", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.139.48']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1ef79fa-f27b-4ceb-a077-b7c0d906ef22", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.206']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66986404-5595-4da6-be7f-91b1087d3626", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.141.103']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34a2d552-a591-4d68-a7cb-e57873cecb0a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.142.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a7a6436-b3f9-4dd6-9333-67e7ad935a10", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.145.47']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e90f182-17df-42d6-b369-9508ebae51c3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.145.78']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2371fdf3-1199-422b-bc7a-ac00d56e537f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.149.3']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8940811f-4bfd-4f1d-bbdd-8a75cff49914", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.151.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a8d3c91-8175-40d4-88f3-bf24b0935961", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.151.219']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--576ebacd-62a8-4ddf-abd9-1f6f746b8282", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.152.69']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2a0329b-153a-424f-860b-183ced39915c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.153.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd9a893-76fd-42c7-b400-d19b2f6c9e61", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.154.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7322b488-ed45-4251-a8bc-cecebbd68395", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.210']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de4f4da1-afaa-42b8-ab12-b2b690c63ca0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10f7d568-5958-4eef-acca-61e714b27fbc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.235']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa487677-ad34-4a32-ab7e-2a7450ffe6da", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.44']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96000a33-5645-4fce-9328-cd857b6b22a7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.58']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abc45aab-0a4a-4477-9a92-ca79fa78d531", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.156.175']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebe5d22f-4f15-4344-af37-4e08f8c7665a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.158.146']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36d0e9b2-4010-42c6-a220-beaa87b99172", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.159.8']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52e22064-e3e3-48de-a656-7ef12c0a1c22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.241.253.204']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--587db433-7a9f-4b30-b598-f27349641f42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.33.122.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59383acf-6677-4cc2-b497-a7ddc5f4f375", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.34.106.146']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68afeed8-9ca6-4891-a8ed-faad3251aa19", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.140.161.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--869152e3-877c-4f88-ba75-e3432c7a0a3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.179.102.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--530aa87a-23ae-4e04-bb48-1f058fc77d6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.244.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a9dc95b-2c0d-4025-814e-80508f1f4398", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.195.196.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c490d3e-d17d-4da7-9efc-e7cd7b7e5f21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.23.0.108']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39b9c4e1-bb91-439a-acfe-22555733e0ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.40.150.83']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6044134f-2545-4d2d-8e9e-2652549d0ee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.51.231.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb00c81-123e-43c7-954f-4c58749dded4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.56.149.10']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4900f33-219e-4ee7-9b3d-7a431e9a5cb5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.68.208.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3b9fd11-2077-49f3-90e1-238cbc6e96c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.68.227.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f58ba573-5459-47aa-8b88-7706aabed600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.109.189.129']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0802c76b-2d09-4d51-a13d-7ac7fe7780ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.110.208.69']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48c86987-f4c1-4545-ba1a-eb846529d7ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.142.73.114']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1797a5c5-a71c-4e95-9502-ba1e366863e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.172.249.132']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e3713bb-b99f-4e36-89cc-81fe3d7c1b42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.207.113.202']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a8ed2d6-e330-47a2-91af-95b52d1e9c50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.58.174.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eea3d8d3-cbb1-4bc1-8b1c-e68a038fc287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.96.78.32']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6d55a36-0390-41b9-b075-7e10f72794ee", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.16.210.67']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bb225bd-d929-4b0f-8222-e6c4296eae3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.188.218.35']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f13fc6fb-f11a-4b8a-ba97-37cf42e2def9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.216.41.163']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96d081bb-7e91-4d5f-854c-93f0980c149c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.29.44.32']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1b604bc-0ae1-4a2a-b08c-b00fc762f4a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.33.236.100']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9a96ce7-c1c8-4163-a3a0-1a53436637ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.40.114.44']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83aa1706-6a89-4dca-8990-b430a6c03282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.74.67.12']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd99d7c0-0e9f-4230-b145-12313b6b3b3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.101.232.161']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70533e88-32a9-42c9-8496-9e1a1e555627", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.106.202.169']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd36eb8-e7ea-47a5-a65d-813fa27929bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.145.228.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d705744-4ed4-4b0a-8047-10a6fdc539c8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.145.238.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--426aaf96-5b9a-4cc0-991f-1773bd688ec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.33.130']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d3c2bb0-5e56-46ec-8e37-1b6cff95f28e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.107']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48ff17f3-92c5-42a8-90f4-32fe588b156c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f3fc8cd-c112-4395-8249-b450621c6287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.43.141']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ef255c5-ffed-4e34-a50c-f194dcd25f9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.43.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42a810b5-71f5-4944-9676-cddbfddede66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.44.112']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9200618e-8c5b-486b-be70-493b78c38e18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.235']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--726f4059-9138-43c4-996b-ba135eb8d606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.185']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37908995-7d7e-42f2-9921-e690ff3f7663", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74b78d9c-e424-49e2-9b7c-55717f5d38bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.120']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ea72e2d-9f87-45e8-bbb3-d2895b9c7bc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.10']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03b4c099-ab48-47ae-bd9f-cc8bd163fd78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.142']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84e400a8-43e8-4c4e-b538-b5d62ecd0594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.15']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0165fb80-d301-4fa4-88db-81e779acbf9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.194']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e407527c-3175-4e44-b859-b01dd150475d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.4']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f55a97f-a431-44d9-9604-e8e9b8f85dab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.15']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c73c93e3-7a39-4550-806c-afd0ee8595d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.69.177']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c26a23d1-a68c-45c2-b022-260e526eb760", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.72.187']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f7e6282-9c60-4a7e-b341-53ea7eeb3799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.142']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12e1fbc1-5a5e-47fb-b43a-82bd3ba82fab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.238.196']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8824b39-3236-4b3c-afdc-3730a247e9f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.249.72']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9368ca51-339c-46ee-a782-f3aaf4a387c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95019b08-7e36-4183-a582-346aa826cd43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1163fdce-1b7d-4ae1-842b-abaa9e9142fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.101']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b6d5782-1797-43b0-a6cd-16841aa09629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.145']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdb19de6-e5ef-4f52-85f1-34af3092e7ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.17']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe28ef3-b3da-44c9-9a6c-696d2499c159", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.37']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--727e3eec-ef01-479c-aba4-c7b0e560474d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e301aa5e-0683-4b22-a26f-4df094e8cb0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.36.18']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c88d82c-8369-40fa-b0d0-36f62b3f3979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.37.105']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dfa0e63-deb3-41d1-9eb2-b95f7ed2761b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.69.191.219']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fee471b-e6f6-46c5-9e19-9b9e4a21377b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.100.208.121']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33da3423-3825-4acc-8180-687c154f7b6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.184.15.243']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14e036f7-6711-45cf-b2d9-70008a100e44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.184.56.231']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--798ca5c0-a122-4d77-9fcc-361beec04c0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.48.134.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--656df673-7cea-41eb-b3cf-cdfd2e4e42e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.6.232.40']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a6226d3-4222-42b1-ad1a-1ee9fdd400fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.98.195.217']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c6a7747-acc7-4cc0-98b0-a1cab5c9a46d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.99.216.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--997f449c-2849-4eda-b38c-3d2857ba6716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '12.138.125.82']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--946cdadb-6cdb-41e4-b661-04e621a774c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.221.11.7']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de69fada-2216-44dc-814f-0396e3c69a53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.50.74.11']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--755924a7-c2cc-48cd-9060-b7d99a2b93cf", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.71.144.228']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--606e5687-747d-43e8-9a1d-4b847e4b11ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.122.241.240']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0238cebc-eb79-47d3-b43a-2c681ef2e574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.137.29.114']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b51c65ba-d319-48a2-9faa-eb11b834f281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.15.140.235']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--585877a9-31c9-41dd-8f5e-26e1365a88d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.190.211.14']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e28c205-9a44-4634-ad82-9e4c7ccfea83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.29.84.146']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5506ebf-8975-43b3-aa7c-f810ee1ab3f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.29.84.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d19d3e73-be6a-4c5f-a4a4-e3888a0b84b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.29.85.141']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b97565-6091-41e8-8845-9064a03a1fea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.41.76.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c76472b-9413-4f97-a05a-30e9b8db6e22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.61.1.121']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--428518e1-3412-4420-88d4-52e0fc4f860a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.61.176.178']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e3d8b97-3d5e-4161-b5e5-9bae54f95a54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.61.191.109']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a8cc1b9-aef4-4d61-89b3-d33f34a4464e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.61.48.40']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87ce90f2-b5da-4331-939e-f25e4d916f61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.116.21.91']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91f77d83-1542-4e3e-920a-904db53abff4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.117.95.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abc9f965-492c-419c-b9c9-89e0728a27a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.121.166.147']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad2dbc0a-b02d-4abf-90c4-462756732c8c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.14.224.1']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e436fc2f-ce3d-4bf4-a3cc-8b8eb1f56116", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.14.224.6']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d30f1f7b-964c-4add-b64f-3270ab79c4d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.194.13.78']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09d5ad04-e40f-4f26-bb13-5b074a36e3c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.194.9.203']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--617b2aac-4c59-49f2-986b-6237287f2996", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.34.96.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99b6357f-c1da-4106-9f63-2b833388a5c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.44.147.106']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b838077a-c879-4bde-8139-eccff3b43de5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.28.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--278f557b-a3eb-4dd8-bda3-1bca22bf701a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.50.177']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efc55ea8-e3f5-4536-aa57-3e238f1b433f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.97.137.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d0cec30-4866-41fc-b165-fe27c617415e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.118.135.106']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e0a20b-3380-4164-8f7c-792bd35aaca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.13.76.108']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31cb2ac0-17c4-4f58-8439-6cf9dfb297d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.156.144.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d77b1217-acc5-47c8-9afc-122eb200bdaf", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.16.143.216']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f27caaa5-1b13-4d4b-ac28-21fc6f5e61ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.165.152.12']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--656865f4-a6ca-42d5-ab6b-58a05d261b69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.178.210.15']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24ceaed9-febc-4889-833e-d83252dc680c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.207.68.73']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2466efe5-64cb-4592-aec4-8da94b6ab45c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.30.106.64']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e47918db-b57d-4f79-a467-87125e6b81cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.57.62.135']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86c98c5e-ac4b-4a26-8f0c-84dc8895d2cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.200.147']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75646658-5700-4ffe-9c88-da35ebe196e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.140']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--662ef08a-7d1b-4a19-91cf-46033f9f3308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.210.106']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--217b23f7-bf47-4da6-b808-25de12a904cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.143.51.73']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28c61815-34a4-4565-b054-23517e21a379", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.156.112.249']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4807796c-cad0-48dc-8fbf-6642c90efe78", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.156.157.91']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4247517-72c0-4a8f-a198-4c115da19a31", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.156.238.88']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77f05a84-9144-4203-a07f-13bad58f32df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.194.46.204']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ab4229d-701a-480a-83f7-eed30c8d6fe9", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.228.130.47']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--096cddb3-b412-454a-96e5-a404cfa679f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.56.181.2']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd52b7fa-6d99-4d50-bec3-64971302a5b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.124.128.77']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd758e31-facf-4e32-a0c4-a168faf3ff91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.136.66.14']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32b68cd2-5592-47ff-b65f-39988bfd1180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.187.127.108']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6210b8fa-5e83-4e74-94ea-2e131e8ac29c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.229.145.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2acc1420-54d3-44aa-b797-da3deb9afc41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.40.136.229']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d5bff1c-5c7b-4601-abd9-35054c11f209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.42.27.242']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e000ca83-283a-4323-b860-c9fac6e3a057", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.91.33.72']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71f8b468-26fe-45f7-b388-bd875cc61209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '127.0.0.1']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58b03246-af87-4428-9834-13a93de30a42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.32.99']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66b2a895-490d-4125-a5b2-84beb55044f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.236.41']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46c4136c-e806-47b1-99a6-0490b8ec9190", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.239.39']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c21a18e8-e229-4b47-ae51-97a2c6e1b17a", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.137.232']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a221741f-3d47-4a91-a096-abaf7e736927", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.8.140']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9dca897-b3fc-44e0-a1c1-37d595f68221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.201.148.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c4b5999-6a28-4c7b-a909-301f55f056e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.159.8.251']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8794164e-cf73-44e4-836f-c0ee0473c605", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.204.188.64']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ee91081-0f9c-47e3-9f3e-f92f4dfa60ed", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.212.227.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3afbe55-4832-458f-8c09-90e35fb6df9e", "name": "Malicious Host", "description": "Web exploits: aws-credentials, php-backup-grab, spring-boot-actuator. CVEs: CVE-2002-1149. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '129.213.151.234']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--70843de9-698f-4751-85a7-52c0d3c6c04a", "relationship_type": "indicates", "source_ref": "indicator--c3afbe55-4832-458f-8c09-90e35fb6df9e", "target_ref": "attack-pattern--f4ef225a-7ab0-40d1-851c-51f72d2a3af1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fb9a454f-207f-4048-ad6b-ced263fb38a1", "relationship_type": "indicates", "source_ref": "indicator--c3afbe55-4832-458f-8c09-90e35fb6df9e", "target_ref": "attack-pattern--bdec63ce-006e-41ad-9ffa-e50b03aa63d1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e5ccb1d5-f8f1-4943-85be-46a4b086db23", "relationship_type": "indicates", "source_ref": "indicator--c3afbe55-4832-458f-8c09-90e35fb6df9e", "target_ref": "attack-pattern--30311f6c-f26f-47da-bff1-b2323ba8673e", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--df82f833-a14e-4c55-84aa-2b965a1a2ff3", "relationship_type": "indicates", "source_ref": "indicator--c3afbe55-4832-458f-8c09-90e35fb6df9e", "target_ref": "vulnerability--e244d6a3-dc81-4710-a38b-6edfe4916bce", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bea8ba86-04d1-46fc-898f-382f2c6e3c0c", "relationship_type": "indicates", "source_ref": "indicator--c3afbe55-4832-458f-8c09-90e35fb6df9e", "target_ref": "vulnerability--8844fc8a-e028-4e7f-8caf-909ce7a03c63", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9e3b1c1-f593-4754-b1af-f8850e1bbc6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.146.146']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67aacffe-7d38-475d-84e8-344ac485a249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.218.165.217']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a74d627-bcda-466b-a153-3254b15a8fb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.218.231.196']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e13460d-0d01-439c-a3a8-045b637191a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.218.238.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c99486b4-e374-4080-8fb0-25925f5f9c2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.219.1.233']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4577f65-8961-48e7-924a-4446f14ae8cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.219.99.134']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c84bac80-64a2-46f0-abd5-84adba7a3a02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.220.113.14']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cfa4c4a-61c7-4a98-a923-17da20e9b4de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.222.142.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e1fd3aa-9c53-454d-9786-1b6fd3a8e7a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.222.228.146']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26dd1dae-87cd-4dad-b267-e7db3e0cddd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.65.251.129']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94f3f930-b166-45b3-9b8a-1bc5a9836a91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.72.110.24']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1d90120-40b8-4643-b976-a74899518d30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.119.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--541c1468-ff47-4e57-8e90-669fdc501479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.126.16']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82862acd-0351-4104-8b98-0842e1fb3b30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.101']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--053f41d8-4450-410c-abbb-d2d14e5720eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.121']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1649ca99-4c05-4efe-b43c-0664be6351e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.174']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ce10b7a-052e-4179-815e-4391b1ff712b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.194']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df6e199b-9da2-4fca-856b-22ea0a9fc28b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.48']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c770e29d-c5c0-43a2-816b-5b1840a12e85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.57']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c05009e-ad89-4b74-8f2c-7cfb41262733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.65']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--863f13cc-4568-4873-bc22-f2312938206b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.181.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aff82527-e2b3-4e23-b71c-916ecfefaed9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.182.231']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd566370-b1d1-4f8f-9c19-c2b93c55d676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.162.192.232']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd63df3e-3a65-46ef-8d06-ded852fe7335", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.211.54.64']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44d90095-ce0d-4506-b1a4-a5cb538d9b1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.211.80.42']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--440e5bd2-2143-4cfa-9628-4ab887c73468", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.78.8.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8686ec05-a7f5-4d71-b536-f61b7ecb67b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.78.8.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be0a46a0-7e01-45c1-bbf2-30d7e6078beb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.78.8.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28d0eb11-30c0-4b7a-ba7b-01727aab8ffc", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.148.22.172']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--605febf0-e5d8-4bdb-bf17-8aba0afe5c00", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.133.82']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ebeb33e-1f44-4745-b626-06a8f05bb54b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.185.85.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f93f4b8-a814-40fd-82d5-6afbce24d74a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.147.208']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7af4aa0-73e1-4fc3-8f99-75c270c1f2ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.153.176']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be91f1ac-831e-4a8f-aeaa-e3e294e4e76e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.155.59']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ad5e61d-cd44-44e1-97b7-dfbf45e6ab2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.158.175']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--298dfe0c-2246-4e5a-9e86-f01a11184ce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.163.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54316cb8-860b-4200-8bc0-e5cfbd2cce82", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.218.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89246fa9-268a-41ae-bf19-2576665d89e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.238.38']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1822437e-e0b8-4de8-8118-ce6bd4cb06b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.95.237']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81eccb71-7363-41f1-8794-2a0034861008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.33.65.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5374bba-5496-4c21-8697-0a12debac15d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.33.66.251']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--105cfd37-2975-47c0-b629-082729120bd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.125.188.65']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdf609ec-bf55-4694-85f0-22643a9ebde0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.222.41.206']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ead45d67-341a-4d79-962e-373afc0b596c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.56']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1587aae2-ec04-4cdc-917e-4a046c790c6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.116.128']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d95792c3-b4c0-4c36-b343-b545f27ffb67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.116.98']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0184e8c9-6586-44bd-8a2a-031f68b5d1cf", "name": "Malicious Host", "description": "Web exploits: aws-credentials, php-backup-grab. CVEs: CVE-2019-5418. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '136.107.60.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bfdfd344-f2e6-4cc5-b6d7-698e2f8c9e19", "relationship_type": "indicates", "source_ref": "indicator--0184e8c9-6586-44bd-8a2a-031f68b5d1cf", "target_ref": "attack-pattern--f4ef225a-7ab0-40d1-851c-51f72d2a3af1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d8b8caa4-c2a7-4a0b-b9db-b79e0a8b48d0", "relationship_type": "indicates", "source_ref": "indicator--0184e8c9-6586-44bd-8a2a-031f68b5d1cf", "target_ref": "attack-pattern--bdec63ce-006e-41ad-9ffa-e50b03aa63d1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4f7691e3-eb78-412b-80a7-ab477ad8c76a", "relationship_type": "indicates", "source_ref": "indicator--0184e8c9-6586-44bd-8a2a-031f68b5d1cf", "target_ref": "vulnerability--d703b0cb-2349-4a45-adfd-079d8cfe4296", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a57d94-c84b-45a7-8bc5-75d4424943a9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.243.228.178']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2079c354-ca6e-4716-96d0-ac22a7933e66", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.65.75.134']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf6490ac-3cd0-4335-bf7a-8ff20fa469f3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.66.6.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d003e9ec-fbfe-492c-981b-9bc1d222cd34", "name": "Malicious Host", "description": "Observed: WEB activity. Web exploits: wordpress-wlwmanifest-scan. Sensors: cfglobal, revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '137.131.43.163']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:revproxy", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf87ce59-b129-4841-b592-47747f1ec8b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.112.103']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2757b28f-d4dc-49ac-aa7e-bc40d692f632", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.112.192']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d4a8456-cd62-4b66-9916-df61c5d609f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.13.100']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a99a426-70b4-42de-b4b4-05a0b88084f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.134.45']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10a14ba0-c6f8-492b-8890-83d0ecc52042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.190.194']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b568345-3e63-4372-9385-15d17f1a9afb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.190.205']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeb94c4b-1e1e-4a19-9e83-0cd9d82523bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.190.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--779ab482-8700-4320-942b-bd2d05418f4f", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.226.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5546954-6197-42b7-8f68-a1eec73cf08d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.230.241']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05ea47b7-6bf1-417d-b417-73aaaeed641a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.28.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56eec11c-3f9f-4062-a6bb-43a179a1c793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.32.56']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5defa222-93de-4177-a786-378a56a1ca7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.95.216']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee6e170e-fe59-4d1a-9164-afabd6673400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.124.110.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed114102-6340-4dbd-8d62-fc629a16b776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.124.31.169']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--075149af-c2b7-4f37-8d57-5538893c89b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.137.57']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89552c61-786a-4cf9-929b-30d5003e7de5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.16.14']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8ef6eea-df3e-4d65-aff6-0c349b4d55dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.2.225.106']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f49594c-4e09-4a11-9785-d80f99d73b57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.219.181.177']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3be21656-9880-46bb-861e-9d94d31d6be8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.233']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4686c28e-7e08-4b63-a801-d0bdbae70c36", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.234']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a669769-be9d-4442-964a-9f6119dd1fa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.6']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0651ca6-932c-4eff-a60b-72acf213469d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.246.253.24']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1799d4c8-2358-41c6-817a-43bb17805e9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.153.47']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d2935e6-9a4d-4ac4-bd55-fd78706d29b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.91.108.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7235f340-57d3-494f-9fea-adbcf0a4b706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.105.36.167']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83f5c6a9-ebe6-425f-a6cb-f4f7fb9d08d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.135.41.79']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c776299-6733-40f4-b655-628757f4d9c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.98']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92bf86e1-4ec7-4c0e-8713-642a72a38a83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.69.42']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b247e1a2-2494-45eb-9d17-5de64b1c5e57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.180.139.24']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5c46295-f33b-458c-b77b-80d44897e6ad", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.19.117.131']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee605b00-0661-48df-b642-20bd8284f27f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.129.234']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31e5aa56-5c61-432c-998d-903fb6f7bfbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.143.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca9a1e5e-c73a-4055-8ad0-10b0b2c7ae08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.170.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c774cb5e-e6a6-4231-a4ef-4a0f9dd484e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.173.98']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f499ef2-092e-46da-90d2-5cd0407efc8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.37.187']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--187cad9f-cf06-4016-822b-cc3320f94d1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.91.235']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8c974ff-eab7-416b-a96e-f6a7270e5cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.94.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81b3a104-2eb2-4e04-9893-32fe12c5655e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.99.82.102']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f71c5db-5d54-4bf4-ae94-ecce45f26fe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.103.211']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8c3831b-17a2-4d91-9cd8-df6c682fc481", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.136.64.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8af0f4af-3e79-40c2-99da-dddab0e5bd3c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.152.91.202']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ade36be5-d27e-4e55-bf62-0624b754c111", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.172.213.133']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8366b24d-08aa-402a-a05d-475abd2980dc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.177.234.46']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4afb95a6-21ce-4000-ba47-4e1ebf2d40a1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.182.114.231']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--455e9ffb-9f7e-4a1a-bd22-51777458677f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.205.104.200']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57c2d612-68b8-4112-af55-af74e1c880f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.225.5.67']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2196bba4-9e8d-4dcf-b9c1-c25e3ff7bfc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.241.70.248']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--698557b1-0c88-4f0d-a3c9-7c9b8db6f799", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.95.54.130']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efbebd4b-ca32-461c-a64a-c82b6257613e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.10.205']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d37852b0-248e-4839-a74c-0b67ae32fe35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.10.73']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f12e2f02-8ec2-465f-a384-94d526e6f90b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.91.102.186']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29eb0bbb-961c-4300-99a8-8217afa42813", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.91.102.187']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2406e483-0ee2-44ff-a404-eedf3cbe0154", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.115.5']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc3dd2db-35b6-4a37-9db0-0c3ee84283b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.136.140']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--041cfc7e-a42f-41a0-9785-f198a862c819", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.205.91']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82ddca5c-4a2c-46d2-86c9-c338d074ef8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.206.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7acc15f9-b968-4fe5-b268-13b21c6ada28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.224.178']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acb8f71e-12a1-4b7e-a635-f9da46913f4a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.4.105']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adf80816-9b08-4690-b6ef-bb26c332e1ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.65.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb5f0d23-6b6a-4c0b-821e-2e7d33aa8137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.83.234']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cb3f6e5-32c9-441d-86d0-659d734c9425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.0.212.193']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec171254-4d97-4850-9040-12f8c44e826a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.239.2']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--430c7edf-f8d1-4c56-b965-c75d91db9a35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.14.168.36']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64ead0dc-c473-4ca4-b85a-f9931e4478bd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.14.6.130']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a28937e9-ee13-41a7-8ee7-895d5ba20dce", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.14.6.249']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a8e9242-75c1-4d29-8208-f553abbcf8ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.115.76']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--632eff0b-aa57-444f-8f91-4fe57220df0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.150.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b84ab673-05ad-4d62-9891-d332fb62dc2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.178.120']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f158240b-abda-47a5-b092-24f21b394485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.225.197']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab0b2a3c-22c3-4f72-b61a-271a86faff9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.238.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a3fa8d4-7425-4491-8e39-4d741cbed9e3", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.45.243']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d430280c-5d55-400f-b32e-7e8dcf2b062d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.47.80']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e66688b3-8326-4897-b7bb-9147b35e244c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.255.104.135']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d208e9-6bb9-420f-8d42-aac4087c2d01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.185']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--808e378b-3a09-402c-82d3-acb9cd324fb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.123.76.65']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a3ee2b2-241a-4a86-ac24-4a0921ce52bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.172.104.147']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58611627-b917-40d6-aeea-467f1d239b94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.172.111.210']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1827f7f-44ee-4211-965f-fb615a34ece5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.172.115.90']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50951077-4889-40c0-ad04-8d628cabb5b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.24.159.248']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd222543-95c8-4f6b-a486-48815294fc86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.6.131.198']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99b56663-fb6c-43f2-a312-c60df78386d6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.76.32.236']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4ba20dc-8875-4149-992e-25da67734a68", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '145.1.227.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4368b04-dc4a-4b94-826d-77ac5086ddc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.149.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74a5d48c-14a3-4a8b-82d0-6ea3b6ef8350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.153.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e50678e8-d22a-43c8-869f-4d9cf259e7c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.31.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea1d41f8-ff41-4b30-bc3c-826f21c880d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.57.24']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c822b7e-5791-4a5d-be6b-5a901c4f2595", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.70.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7226c379-25a3-449f-8789-ede95d539abf", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.235.17.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7af1a9f1-6665-4f1d-90c7-19fdb184dafb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.56.197.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b21de238-f767-4bd7-9d78-c836f00c5a8e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.56.199.139']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f39ad907-d5fe-4f6f-a40f-d51b7b4fb167", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.36.142']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38fa551c-7f19-49e1-adc6-ee1bb48d734e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.100']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b1641e6-5c7f-4f6e-8a2c-6db869b96484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.130']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12cc076a-0cd9-4a6c-8ff1-50a5f442a3c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.170']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f5b16a4-cc06-4b78-b0ec-5b950c459bb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.71']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df39b742-f5ff-4147-8c78-0ed2b67e32b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.174.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7bde877-b42f-4953-96a9-32d12a25bb99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.202.179']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d9cdfb2-e0f8-47fe-8900-c17c306481f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.225.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0150b63b-2136-46b3-9ecd-19b3a63d6d32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.241.81']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c35c14c6-b765-4dcd-a561-425fc59c808e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.244.175']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b9986da-fa55-41d0-bd9e-b674e09ae492", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.247.10']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caa3535a-1e0d-4f42-b45e-2ce7b411e011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.101']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cdb3eae-9d7f-4a0f-8f73-010c85aa8e9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.104']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea9cb2e8-64e1-40b6-87af-bafb90a9254a", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.105']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c7d3c36-1d81-4c5e-b796-5ccb6a21b280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.106']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--022ef6da-e574-4f7c-baf8-d22dc8ca3ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.108']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6f5e283-2291-4b38-b392-e14e8c17a18f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.109']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--399ddbca-ac4e-4a35-8cc5-82f607231421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.112']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--223249d1-a68a-4406-9b30-e34016223023", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.113']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18d77b24-6940-47f7-9e17-9dc0c3850a82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.114']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be0fae16-a0f0-4fe5-9c49-7e22a408871b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.115']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be670093-5be5-43d5-8a4a-614102baa60b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9eb4653-02d6-47e3-a0d2-5ca18ed04cea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83a9579a-5eed-4a8d-995a-9b3b538495e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39540af2-e48d-4e50-8bba-e647ae9f5d7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.12']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db0efb2d-0981-4e5a-860b-61d03ba64a2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.120']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b78aeae-e736-4448-8802-472b6b96473b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.122']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--654804ce-3c29-4039-9602-08d6043cedff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a6bea1d-c6f7-43a9-858e-3ad713f0b71f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.128']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77a613fe-8cba-48a5-bfc2-d7660cbf8a6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.129']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3ce51e3-e1e8-4706-b30f-dc0d7d52bd0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.13']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03c2bc53-2e67-4552-9231-30cb6e70b17f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.130']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4cbce3c-f918-49ff-bd68-017ca97b6138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.131']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2c3ac43-82fd-4ffa-ba9c-66dfedf07d56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.134']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db561854-841a-4ef2-a28a-dd8d3fdaf90a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.136']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceb6de02-1683-4121-abcf-a27d166852c9", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.138']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c405980-dd76-4629-bfaf-de7c9592e9c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.139']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da223533-13c8-445e-813c-bd1e22113e93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.14']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4643e75e-d6aa-4192-81e1-5287b025e876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.141']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88b89d07-981e-4ee9-8552-3e4ee19ced0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.142']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--480aef1d-507d-4797-95c2-76e026c0f3f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.145']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ca16f0b-7ffe-43a5-b0ce-d1261492f311", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.146']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b3c1dcf-13da-4242-a2d9-7fdd34bd70ad", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--658b2cb7-0706-411a-8d0a-b0fd3f5aea62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.152']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc1e125-1a95-4224-89a2-69c086908968", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.154']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22f229dc-198b-41b7-8698-165e6cbb17a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e94dc9ba-428d-4762-bbed-234cac58a546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--397c375e-d358-48e1-9d10-11967ff4c05b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba198498-b706-4132-80f3-4220a5726ce3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.16']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--341f00ba-8c00-4363-a2de-aa106a396f11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.160']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47cc71ce-f955-4854-8268-b32a0814bc0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.162']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd68a763-a883-4b90-b71e-8ea42b3e5a30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.163']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e62ed265-6d5e-418d-ad99-8f6653652251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.165']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e2c19a-3c37-4cde-8b89-b0f208686f5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.166']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a21fecd1-a243-469b-b63f-95967faf3db0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.168']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--627cabe1-371c-4107-a896-f194c6f86d22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.169']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--381c8a7f-7166-4592-b55e-343d36668326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.175']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20b3263c-3aa2-4180-b9e9-01709488db5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.176']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14af0fd4-edbb-458f-8462-000baace6e8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.177']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44664314-4eae-44d5-b38e-ebb96a8ef265", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.179']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--153777d7-4868-43be-b3dc-be4d8a6d41be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57c61f68-e980-4181-890d-dfebcc7f5750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--129541ac-7af8-4e6c-b18d-a8377c22ba39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4421fac8-aae4-42c9-ad32-4d4c6b2a4590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a88773a-336f-4637-957e-cc9cc516789c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.184']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81a47af6-a872-475d-a6bb-92c8a73876dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.185']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ef9ad55-d5cf-4b02-afbd-4002d5dcee2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25262c0f-86be-4e92-836f-832ff60d4f3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--561122c7-c794-4cc0-9730-9f3cfb38a3f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b11baef-e203-4e3a-8d26-0abc5b9ea33e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.196']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dce886f6-18a9-42d0-b0eb-2742885e33c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.197']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee985466-574a-4593-893e-11ffd3d40112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.199']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22c4426c-1126-4d92-8e7b-cc266109c6fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddb18844-f45d-40a9-a328-536cf5ec0d49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.202']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d41923fb-7dca-4300-8d98-ee99f184ec8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.207']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--973ec6af-14ca-4047-b033-fd0e3e0ab677", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.208']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--304fca9d-31ec-4e5b-8610-8b5952989268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--985c85cf-1b10-4bef-8441-a267eb4af983", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.210']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd67493f-71d2-4309-bdf7-06859ce36ac3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dbcea9a-62ba-4bae-b5fb-60bac94d43ed", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2be940e9-0863-48ae-a67b-be2f59c67544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e68ea57-37c3-49a0-89ab-3d2c1131432b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.216']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1b678ab-3eca-45f0-9e5e-3cab248ecdc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.218']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62f790f2-4809-46aa-b622-60f455e647cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.219']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--243c8f0a-3835-461d-82b1-bab5fca75a69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec9628e7-eb6d-464c-807e-4f8480fdeadd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a23c8f2-3b61-4f5c-9064-b6f831fa3cc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.224']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27798b61-cb7b-44fb-977f-e8653b162f9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.225']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6053f48a-6ad6-437e-b747-dc89ff8958ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.227']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18c48e25-fece-439a-a965-3913a44d5717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.231']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba82b69-5ab1-4cf6-952f-29b36d301683", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.234']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c955a8d6-3197-41ac-ab48-668b695aa218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.236']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4206a641-731f-4ec6-984e-7db9a9715432", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.238']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca1fcbcf-0d6f-4c7c-ba9d-deb0d295aaf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.24']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8fe1a57-43ca-429e-a8e0-b1233a58d096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.240']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4562eaf9-0448-4400-8d46-4e4f5d4e249a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.241']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce6c6b6-a5c4-4b8f-a727-39d52aeae4e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.243']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1daac61-b2a0-479c-ba18-0196897be1e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baa35368-051a-41b3-ad9f-96cb7bd0887a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63aade31-63e6-425d-b19f-5117f0abeeee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a361152-d5d1-429c-94f1-8c243b7b2623", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61096449-e45c-4287-8bd5-b9c336dd6e00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a7d42a7-b920-45ae-b38a-f72ef3344bcb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.255']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5433c6d6-1552-43cd-b1a5-4e7a747889cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--740e4d39-6372-4e31-a017-f002661b2bba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39a88d0c-17bc-4382-a04d-382c4e6f7f99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.33']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d276003-d79e-4f56-9ba3-b83be13082ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.36']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30897caf-6ec4-424d-94ae-f7db769df10c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.40']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56837ceb-e5ef-483d-a08b-21d185069d49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.41']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71be2918-36db-4118-b58a-8b41f7eead2a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.42']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--837b0cb6-1f11-4fb8-8d92-dc9442eba699", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.43']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8be21160-79ad-47ff-a31a-ced61788d292", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.44']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd88c324-5a3d-4885-8690-0994a4e1cb35", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.46']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89cbd6d7-68c6-428d-9f5b-043f17bd81c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.47']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83b4e3c1-ca05-4fe8-9dbb-c4409ae5c6d3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.48']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9611150a-8830-44db-93c2-08cbd28bdeff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.49']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efb3711a-530a-4551-8e01-d387e3e03445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1750715f-789b-4681-828e-f7f26277bfb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d52b58cb-090f-4348-bed2-3f0c3874a49f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.57']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2cdc542-e1dd-456b-8947-ac7458f683ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.59']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2806330-6ebe-4f4e-a1ec-564ab3d42d74", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--774a0211-35f2-4798-8871-23df57ab72f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45f808f9-7f84-4f81-abd2-4c6aacbc3bfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07928667-9fef-404d-a5f3-84fd5db2c208", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.64']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f23f4cbd-068c-46a1-b92f-fdaa2caac64d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.68']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d76e10bf-a295-4cf4-9d04-c2be90282fd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.69']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7006ec1-777a-496b-893c-f4319dfca7c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.70']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76eb9714-3fe6-4c47-9cab-95799b6dbc7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.71']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef5e5183-48c0-4072-8ecf-cd92bc6c89e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.74']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b872d1e9-130b-43f6-8e2d-9e4f10826b9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.75']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29f9f2c7-d8c0-423d-a394-2f76782d3c3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.76']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7fa9cd1-e41c-4dd5-aa2a-d5c6d5579e16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.78']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--472b0d1c-23dc-4324-856d-48df9a68326c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.80']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4807c37-c31a-4748-a66f-db272ece45fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.81']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c4a0932-5097-463a-82ca-b051b1960abf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.82']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c89df441-e10c-42b5-aff8-fa7d9dbe221a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55efafe7-e5f4-45bd-92ab-5f7944cde9c8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.88']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01155db3-e379-4eac-aaa7-4366fd566a25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.89']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27c08501-37d2-4277-9e8e-e69d18fe3f45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.90']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--223dfada-5dbe-4dd6-a77d-bd63046fb2a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5580489b-8223-4b23-8b3c-aa6ed46d6c27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74b96f41-f608-4c5b-aa7f-a171a2fa9c03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8a1d8b9-069d-4bd4-af75-eeb9043a6554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.96']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22a21ed4-009d-4312-beb5-4044bbf6b2d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.99']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7a03b63-8725-4e13-8305-c613a063ab1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.101']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f2587bf-006a-4646-a4b4-84be864e67dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.102']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bae1f0e-0ab1-4ca8-b94b-3b4e87824024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.105']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8c58ca0-ca82-49bb-b380-bdadb2759a91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.107']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--365f1e07-b1fc-46d4-b122-03f72afa0430", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.108']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac4c4444-94f3-4fd5-a4a0-dda443b0a343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.11']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59f1d169-75c1-4464-9db0-2ac9d1cdaec1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.110']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35d98b97-2d39-40a4-8e23-769d82ce82b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.113']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96a7d55b-f364-42f3-8226-09e427d18b8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.114']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a556afa-bfb6-4631-833f-ea96a51c8ace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.115']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c368b71-1a63-4bba-acd7-9982a7e614ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab2870e1-5002-48e2-902a-9c678ee9a064", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c13b487-65fb-4fc3-8028-bb22efef0ca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.123']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73407a2b-b456-48cf-aa1f-973eafb4089d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0fbfbd4-c117-427b-8bcc-02ebdbb31584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.129']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b36d80d-b0b5-45b4-bb8d-654bf1b910f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.130']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--346c7a12-1589-46e9-8d4a-98f87b4988ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.136']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53f58be8-a7c5-44fd-8626-02ed6e8142c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.139']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac73088-72a2-4dc0-9b63-aa4b11f0a1ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.143']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--955f1983-257d-410c-970c-cf42cfa26054", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.144']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5183b16f-4587-440a-82af-bad9878a44b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.146']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--512e44ba-75e5-4bd9-a0b5-192fd45e2f32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.15']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1dd3a19-e217-4d29-a46d-8fb2cf78a9bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e146df4-4393-45d9-943e-96c581162a47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4afde212-749f-4ea0-b404-e459fcb7db44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.152']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--305ec202-0e3a-49f4-8a94-3f4f0e6f95e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.154']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd1b9a5d-a0c5-4888-8626-af1f4cfd6678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--636f5c2e-d1e4-4140-a7fe-db70df11dd63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--528b3554-3412-4cbc-8e42-54ac685c9e65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.16']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c705717c-36cf-4344-a512-7d0c10a2f4a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.161']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a670c38-a79c-436c-a606-d4d1587813da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.162']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--201e5b9d-bcfd-4051-aa99-29e2071598b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.163']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c97077b-cd42-4a2f-8f90-c78bb3251ed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.164']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e9a1328-1318-46f9-997a-88bb75e6b87b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.167']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb3aa81-0da2-44b8-9d6e-21e5a43cd40e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.168']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--796c6979-9200-48bb-aadf-f361d556ec9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.171']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45e27b08-43c2-474d-95bc-aa1d2df990b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.172']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f22b4d12-366d-41d1-9a99-d1a43e518dfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.173']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a2d0161-14c5-4e72-82dd-7e0b17748b4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.174']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cff30fbf-e1a4-4fea-9152-7682fc5a8055", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.177']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--321682be-01b0-448b-9a95-b1e4492ef6a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.187']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--843b0ff2-a07d-46a9-894f-ad1406ca3bf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2497a1f7-5304-435f-a985-4e8e97da19de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.19']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52298485-0dc3-488c-9d7f-54407af2c7f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.193']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b707fa-9adb-4830-9e39-266477e498d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.197']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b7a7b49-320e-465f-a12e-7448dcf118b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.199']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32c9f1ba-93fe-4cd6-9bf0-221feaa2a918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74fee0c8-309f-4cbb-bfe4-363d49ac5692", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.200']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e16a4c4-68f1-4738-8f39-afdeb76abb8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.203']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb1a8295-5138-447c-a561-26ee3cd5df37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.204']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0246359-9d4e-4ec5-a1bf-01f89d0a1f21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.209']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3a244ac-e72c-4ae9-825b-397dad55c2c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.210']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c37e037-91b9-464c-9e28-b9aae775a7bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c0e3a54-ad5d-4d33-a61a-c091bedf8ce4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74283c43-1880-4a11-ae15-f41ff346a6ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1fa3bca-7ca8-4abf-bc8c-bd7de1b0bb36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.216']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46afe75b-ad4d-4281-8a27-5219bde1147e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.218']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--265ce197-f134-45eb-84f9-9fd565da5896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2b01af4-446d-4c33-8fef-ed922502a2e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--202edec8-d3b7-4091-a98e-6b76993508ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af790324-6dc3-4142-be92-cf32d93be2ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.224']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--548fa63f-ef60-4691-b0af-61349528d09d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.225']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bff89579-a8bf-4f98-9f84-249fb6f3a17b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.226']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39ac3c38-8472-4d63-8426-454320102d4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a68cbd24-c715-4c7e-b19f-b185eac5cef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.231']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17fcde9e-1772-4212-be08-7b3c1fc0fd3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.232']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b920e27-301c-4ff5-9f6b-f1dddd03987c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.233']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1aae48b-82a5-4a8e-903a-7cfe7ea8b81a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.234']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98931cb2-eefe-4f09-8afa-b191b064c53a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.235']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b82863d-5b90-4650-9c5b-9d2dfdf18305", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.236']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--584b9abf-9390-41e6-9c2d-22a09d364d8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.241']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--712e1cbb-ba3d-479b-8817-898bfc82f36e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--610eed9f-d5ba-4234-9597-158d45dab17d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8db5e300-27c9-4c26-a7a6-974a01129852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13f56374-1530-4634-96dc-0ab42bbd28ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.250']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--248307ab-b708-416d-a6d2-68bde7c26303", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a38940eb-aa15-4864-ad71-f5e2a9618af8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.255']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9686686a-f3af-4630-a3d7-eff6e76865fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.26']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84bb5cdf-d8bc-4103-879b-61eb8e721210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--381bb9a4-6372-49c7-b161-40131cc023ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a781af61-a739-49e5-b05c-e904333404df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.3']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f23a0213-5da6-47b2-9860-f7ba9d160b4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.33']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02fb693b-10ac-4431-98c9-d44fbf4d91d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.34']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--880c1c82-ab56-4c7f-9076-65a6e80fd7cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.40']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70986f43-796b-4bb8-9f4a-b0fdff9126c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.41']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee0d2968-be4f-4008-8fdb-cc4b4ea3cb1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.43']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27db1709-6852-48b6-b0b0-448e0579cc40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.47']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c8f8c03-7e6a-40a7-be5a-e1864a655760", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.48']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a62df242-4c50-475d-9893-e51be2f3e5be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.49']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b99a42b4-f521-4aaa-9a0a-5b3772619e4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.51']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84734532-999a-4ad5-938a-d60ec7121871", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4e4bc22-d33d-4567-9e29-08bf73463c40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee30e54f-187e-4dc6-bdb0-96d3f3061ccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.58']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a0676ec-9990-42aa-86b5-c84958b0e1c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2df729b2-a7f6-498a-84c7-cec802904e75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84acc5de-9a87-4926-9da3-87d42c4e3a65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.66']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b309607-e40a-4b3b-b58e-9f12a4818fb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.67']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f22ad9e2-9eae-40ed-a077-05faf1ad7530", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.68']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abd49a5e-def9-4f8d-8cc4-bdfc773ae3de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.72']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff2a932d-a306-4532-848a-8eaa4f666daa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.73']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--886d431f-403c-4449-a084-b505a6d50c97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.77']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96d42889-77f7-4eba-8ffc-b3651d28783c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.83']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f86acdcc-c44a-4263-b650-6b21a4c1d408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b4e16a6-eadd-4ab3-9ae7-c2bd36918b75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.89']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de6fe152-b88f-46dd-ac66-b4ccd245ae7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.90']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e42b1395-03aa-4cbb-ae5b-b390835ca56a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.91']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0a69e5b-e5b6-4add-8573-cc73fb1b0e09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c450e98-f692-4b41-ad82-6b07ba87ff76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.97']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b39ea79a-6248-4ddc-9a3c-353cc857fe50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.99']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb96b3f-7a58-490f-b0dc-4d748b52f5c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.93.144.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33347f3a-7220-4ce2-8062-78c0730a4f20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.93.159.59']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--156f83a6-8741-4de7-9733-c81cc65b5227", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.113.50.75']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4eed19e-5f0f-4176-ba0f-d94a9c2f1bef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.188.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9c731be-9ca4-4739-bb39-9f896c619555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.170']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a827a1f5-4499-40d4-994e-1d9855182d43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.174']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbab6f48-a2aa-48bd-ba8e-5c6334d1d628", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.13.192.91']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b30e0ed-7208-4d16-9067-0fed65646030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.50.115.15']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9639d866-109a-4dbb-a0da-586b0152c170", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.71.33.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9504cbab-8454-4f1a-8705-0a0ec8b5edef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.162.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9d94cee-99e9-4042-b894-0384c84917a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.236']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c74a4a6e-c662-4178-a7cd-e572e77e9b45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.82']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60f31a56-acd2-4bfa-a39f-15f620a37e81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.251']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf860356-5827-4567-9fc1-28874b07e29f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.109.230.210']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--951d59cf-687c-4a30-90f8-246b058074ef", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.241.237.74']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d70d451-e019-48ba-a1e0-f721441b9012", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.251.158.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d2ae611-ab0f-4cf6-9b94-e050f143f908", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.131.153']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c93ed2e-c1c5-447f-a460-d08274c4bb35", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.133.70']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7235eabe-64f5-491a-90a5-32426346e13f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.145.197.35']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64e231e7-ba59-4ff6-b2f1-40bf15945ad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.101']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46229aef-54a1-4a1a-8161-b4611cfc5de6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.102']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4320aa9-52bd-42c4-b9dc-7ff0e0a05c0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.103']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--686a607b-c861-4cf1-b7dc-0d300c49712b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.108']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--718cd35e-f52a-44a0-8501-d8715fc3b949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.109']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff6e925a-acf1-4144-85a2-ba45ebe5e973", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.11']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5e51a37-821d-40b0-aefe-ecbcc24a3ea8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.12']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fba9e13-5d4d-424e-a4eb-dca46c284484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.120']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5b46dc3-4081-44b0-8b48-fc9bc734e059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.122']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e42b75d8-a272-4d71-a280-13fd4c550b0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c98200e-966e-4f5c-9c3d-cab966917f99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58dfce0c-312b-41f8-a8a3-360eb9efce83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.128']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c1eed19-351a-4d0e-bbe1-a6e5a25818f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.13']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b458e906-d618-4fba-9e85-7bd0cd0a9153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.130']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d5e15b9-284d-4fc4-aff2-8633eb44fcd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.131']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06d1aed0-d06d-4d84-8d35-ce778e1fb544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.132']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67984cb0-b287-483f-93b0-57e57a2408db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.133']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96c26d77-9f42-458b-8973-490460490299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.134']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b10e7ed1-9149-481f-8e82-63bd7cfb87de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.138']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a243b773-2688-4d47-9bc6-72452c85e564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.14']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1dde141-74e4-4a9f-951b-e6c160340071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.141']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51485912-e1be-4b36-b75b-d2da4f5176db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.142']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb5ad428-9598-4d65-a139-44416ce978a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.143']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3e3ecfe-ab01-449b-9af6-cc33ed8e483a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.145']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1291a590-fbbc-44ca-99d6-0eda8da1fbd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.146']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90f756fa-85df-4819-bb23-bf4a71e32776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29015928-e91e-485f-adcd-dd15d4c19c96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.15']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae47bc9d-012c-4801-aa83-94bed1e80333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9eb4e05-5fd4-4a16-8cb0-aa00f68091b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.152']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6a57a59-f949-4897-be7e-7edc657e6377", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.153']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a637e91-6bc8-4dc1-afc8-e3f534038e67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.155']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26bd8201-4f0a-4770-8d08-4ce01a35099e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97633d4c-5898-415e-bc6e-64515bf96d6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.16']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd51120d-0058-4c65-8fc4-3db02418d519", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.161']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1567c07-6166-4e94-a494-12b09656b2aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.162']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fcc0490-d9fe-4fb1-bc61-e557099b841b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.163']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f08d139e-0bb4-4535-bee3-4757517fb76b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.164']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4c89344-ef4c-4cf1-8b5b-8f881ead9a67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.165']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a572502-2b8e-4d62-b5bf-8de2ee6563a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.168']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--261c7c09-5187-4cc5-94a2-6da971ede7f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.173']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8ad9777-f2e3-4ece-bcfe-10f1dc51e2bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.176']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5569b4ad-42ab-484a-b202-9ae16bbcb56e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.178']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95b3af6f-1168-4d97-864d-52d2790aaae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.179']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a982c25-5a03-43f1-98c9-935a3ac278c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75a6c8a0-4e24-4b30-b008-d6d60ed26d2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf29e0bf-31ae-4e5c-923a-8ea7a91a0a6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.186']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bee802f6-e9d6-4587-91cf-057cb6602b2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a558272d-e433-490e-ae19-ec28852df0d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.192']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c5bc6d3-f35d-462a-ad62-be480b9fe49d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.193']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6cea7cc-f970-4c2b-b098-82e9307a42e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.197']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b09fb13d-9e89-48ac-a57c-707807e0e72d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.199']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2ca99ac-f80d-4259-8e7b-5c419d5dcdf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17948844-ec15-4d2a-ac43-2fd8940a57c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.201']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7c6ced4-a968-46de-998f-5aee520db8ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.202']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d81d7c8-2b58-4848-b964-da60cb486991", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.203']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbb1d4c1-21ee-4704-84d9-7d29ef2bf58c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.205']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f5fdd66-2ffa-4473-a8a8-9908b5abe3ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.206']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8fcc004-48f3-4559-a49d-050e185a4f07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.207']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc3daf25-3b33-480e-b4bc-867190fcb128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.208']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02f9b192-ceca-4445-aab9-832c6b56d543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.209']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7251d117-2b26-44b4-9f4b-5fcaf0f6d98e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--332bc612-d630-44c7-acf6-5a471c77117c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd3ba30b-b00a-4ee0-9b7f-f0947ba29059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.218']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--355b9c3d-3e92-4244-8d71-603ec64e6ae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.219']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67b1c1cb-a26e-405c-ba24-12d1c69c6bb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abdcfe21-f0e6-45c6-bf99-de3bbcca9e97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.224']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caa41c15-8e9e-402f-a273-d7ed68d8ea8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.226']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44f85da2-71d7-495f-8eed-4f8ea5582881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.230']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c44e478a-2e50-430f-ad4b-41595961e254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.231']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29dcd513-b8f4-492c-9af2-547cf8f95276", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.233']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44c81643-c262-4b31-86a8-365f845497c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.237']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bfb01b4-0664-477d-a037-a3184f316cd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.238']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccb7a2fb-79bd-448a-b8ef-775c95b87605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.24']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccaeace6-923f-430a-9dc0-72f58d046cd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.240']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00b6d914-d452-4047-a74c-76614c6f1cf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.241']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9be1c245-b9f3-46fa-b80d-3034a90d442c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7adbfcf9-ecdc-4239-8db2-71d076c87e63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c19f86b-2143-4660-a4cf-67798cf2d3ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--347aa832-ebf6-4199-a5fd-be1e3b7fa682", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.27']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c419bdd6-22c1-41a9-a02c-3bf34b503e7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb12493-2fa2-4072-ab0e-d67c2132b8c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c508739-6219-4290-ac8d-455b82bedc31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb4fad86-2997-4958-99cd-d97db5480a66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.32']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6a0bc8b-29da-4188-95d3-bd76873e9075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.34']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fcb44ce-bce6-4b88-9c1a-41d4ee96d0d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.38']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7c67686-8a59-4cc7-b6bc-59c7a29d9d59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.40']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9825b47e-332d-4bf8-abe8-15368e754c31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.42']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e73563c9-7f71-4eea-895c-eb86c0a800b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.47']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--141f8ba0-5823-4323-91f1-0f43e11a268e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--854264b8-0218-49a2-a5ff-692d6ca2a6f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0df3b2b8-d504-4c09-901e-a3b08ad23596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.56']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41e25f7d-8f13-45eb-898e-705c0afebe4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.58']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29505c2e-40be-455a-88f9-967ad316e15a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.6']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81272504-c1d7-420e-ae3d-9c7272289392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.65']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--886fcd43-a049-43e9-ab77-e83c330dd71c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.67']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf954e6-a564-49a8-b5d1-65f7f647aeeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.68']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--520c5440-d973-42d2-928c-66849d677140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.69']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0efe7e71-7e81-4fd6-a981-0b66b84d4d2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.71']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11964b2e-cc15-4d96-bce7-744c2df772c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.74']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--093aa6c2-089c-42ee-9b4f-e929760dac91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.75']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dc45a62-1675-43dd-9bee-76708ac461a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.76']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58ec3fa4-96f2-4cb6-a8ce-1d188de73e48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.79']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac29483-1e71-402b-834d-816dbc7260e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.80']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bf1fb40-bbc2-4dbd-83c7-162df5739516", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.81']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4047645-e3eb-4ffe-8e62-b7793906d44f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.82']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--019ccd7d-f002-462f-899a-a4c93e4cce95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.83']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a57d715d-2982-470a-aeb0-d7170c302872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--244105ae-6956-4498-bbbd-853349735869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3db9ef3f-6058-405a-b6a4-1ab0647e7809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78d14554-5d57-4fff-9dc0-e71b26a814f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.89']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77f5182f-23aa-4338-8e09-27f9f6d54428", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.91']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--306815e7-f629-4859-bd44-c68c3df356bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e54d10-13c8-4028-a72f-c6dd9e062d6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.96']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f323a520-d550-401e-b3d7-5ed330199d85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.98']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17dae2d8-c841-4c53-91c0-f3ac744c29dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.108.99']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dd93593-ba7d-4ff7-8772-f29ddd711118", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.51.234']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6470fc0a-184d-4f99-8664-587a7367c977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27742809-6090-4fc0-aad6-764643319723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bfe9102-3c5d-4f83-9e04-b5f02ab5c5e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.152']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7ca1fb6-0f18-4962-bda4-44bded0ee221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.153']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f206532-3cb8-471c-be47-a0ebdfe254f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.154']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce6fc657-be5e-4c80-9c3c-fc69cfce0e02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.155']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7724b059-435a-44cb-8bf1-7918dbaea3e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a382704d-82f0-4402-9a23-d51cb3c8abc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76bffa3a-64d9-4f62-ba73-bf0c752c5246", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--248615a6-c616-4e51-8370-be7a6fd2af0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79c610b8-372a-4e59-92c0-165a3288ed33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.160']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6f5d238-9cb0-4b28-92d2-809529963db7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.161']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f18af18-f31b-4873-9c35-e9d2b4fbb4f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.162']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6c96193-91f9-4b82-b12d-62388280cad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.163']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e99a620-def0-45a2-aeeb-3f2540b993fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.164']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ebb4d73-3aba-4931-b96c-18c68b1cf236", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.165']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--283d1523-f458-4d57-aaee-363bebb61f4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.166']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fc92962-11ce-4324-b8d5-c3cda8559117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.167']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43bf8a58-a414-43da-b9d4-86bca623eeee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.168']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9234b777-3b94-42f8-936c-2370a469e947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.169']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a50447c-1a71-4f98-a339-c524a2a2b3fc", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.30.104.123']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f035037-c843-459b-8bec-b21cb23b5297", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.41.179.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6b8fd87-c344-4e7b-b3d8-fedb88b068f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.80.23.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c59b30f3-79ce-4e15-bf8a-c9f7016e098b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.80.234.64']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--568a2b18-cd25-4902-95a4-13b952bd7ea0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.129.154']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ae56f65-102e-4112-bf6d-785621f5c842", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.130.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b06e8944-8437-4d1f-9424-6d60cc3b007f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.132.203']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61334f29-30ee-4339-a25b-a91a74eaea3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.133.103']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ba5eec7-4caf-4986-adf0-d1a82b851c47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.89']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3916d047-9d07-41a3-9c9f-a6c1b89ef082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.139.96']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65297a1a-0b25-41f3-a47e-1ebfa0b7d163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.218']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--947373c0-ee99-46bf-948b-d5a78e165b91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cf28ec9-4b19-4a69-9eab-3dfe7b77a698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.154']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c080efc-98fc-4146-94d6-cea058369a34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.172']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1c2e110-e19f-4f6e-8703-e109908f36bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.176']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--493d9aea-012f-4731-a77f-ef954de65a53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.217']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--babad82b-9187-4928-8632-14982e6229a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b37c2e4-c08e-4c18-a454-bce2ad8c1b6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.143.6']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58177460-efdf-425e-b412-a1488eaf9af1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.148.140']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff6d044d-61d6-40d9-bfaa-aa02bf9ceb91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.148.250']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a64176c-f6c2-42db-a013-79a3dc973f6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.35']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e9c769a-0fa6-42ec-b213-6fbd2e15442c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.47']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbb75ecb-31fb-4274-a7f2-3e5879ff040e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98a09e37-8aad-4e80-84f6-4f964957dcff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1afdea4a-e0b7-4c89-91e1-9ba7fcc92d14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.128']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7720e5ce-b665-40ea-90cd-751f912b8f01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bccc9a92-b5b3-4970-89eb-405e4b72c50c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.136']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200b6bc7-6bac-4b64-bd10-42a87e859246", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.3']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2154c17-3db8-4dd8-85c0-eefdfbedb94a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b19b6f98-ca50-4bdd-9dec-0cabb473b69f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.169.7']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13724070-411b-493c-bfb0-7a79e4f0588a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.180.138']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d94dfaf9-f14a-4267-943b-fc7efc6e6094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.182.165']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ab65fc7-d249-49e7-93d7-f328174773d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.163']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f32bc3b1-e97f-4094-b8aa-f654012c929b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.27']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ab577d9-5178-4456-85a5-250ff7178d30", "name": "Malicious Host", "description": "Web exploits: mitre-t1190. CVEs: CVE-2022-22274, CVE-2023-0656. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.191.102']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--28cdf2fe-061a-4f9f-ba97-b27001828b41", "relationship_type": "indicates", "source_ref": "indicator--5ab577d9-5178-4456-85a5-250ff7178d30", "target_ref": "vulnerability--7a369f54-0fdf-449c-bdf0-e287fc8fdc98", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--655f5d87-3f26-4884-9f3a-e364ce58af4c", "relationship_type": "indicates", "source_ref": "indicator--5ab577d9-5178-4456-85a5-250ff7178d30", "target_ref": "vulnerability--9cecf465-ce84-4269-b927-dca2ba0b43cb", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faa48ad0-dd94-469f-b0ea-006b0181cfaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.199.112']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bd61c33-e626-44cc-9945-732ed3aa9f90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.199.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c22e5a8-f841-47ca-8f88-2b1da8737229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54c387e1-361c-46d6-a92b-685438731089", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39e3db0f-a81a-4336-867d-db552e25f8ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.193']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f693019c-7422-485c-9c2d-3085f1b3428b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.228']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ef0fdb4-9552-471a-8f32-ba3213308f5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.38']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8437d4b-a12d-4afd-8e2b-a21505b18f1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.74']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41c3f54a-75c9-4666-8bab-c2270630050f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.172']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99ee1bfe-36fb-40c8-a179-2f48ef561495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.179']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da20069e-12e6-4290-8375-f2a164504185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.7']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1169d7fb-4add-4af9-99cc-bf39de626d19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.211.69']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea15953d-8a39-4e52-95a7-a26af620d658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.11']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ba8752a-0b74-4844-bed6-35848ce13d60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.39']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b0f2d90-7d1b-4ac1-81b0-f6cbd6e3a52b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.160']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52b13ce1-59fb-4704-a6b1-985dc189f510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.206']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e315f08a-5528-4a94-b073-621a08bbdd62", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.90']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3553cc56-5d79-44b3-bac4-a0f2a84b6832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.186']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c324459-f1a2-4cb4-a627-07beef9d643e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7e2612a-ba36-4ffc-80c2-3cb4e17668f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.251.44']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc02fac0-0dab-464f-8e89-1710ac9568b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.252.233']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a18c3397-1b91-475c-b99b-c08acd546eb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.252.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dadebee-5b40-4e4e-a8c3-582e2a17c459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.169.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65a4bd5f-fe25-4c36-a913-72a9d53de144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.241.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d08d4113-f9bf-4b5a-bac0-d139267977cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.59.17.56']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fc8db40-4596-4cdc-90f3-174674657564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.0.251.12']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5c11d38-8147-496e-adea-04c4ea7d5a10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.127.224']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--706162eb-1ab3-4831-95dc-d78e7c85fb9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.34.224']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a702158c-59b6-4e45-af06-78a23bbbac61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.66.2']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70ab5599-cef1-4c5f-8798-b83fdad7e43f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.75.82.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da4ac3e5-9b7e-405b-be96-25566a285830", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.198.162.234']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf4e6702-8889-44c1-836a-00d0950c2331", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.6.110.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4deedde9-4a71-46a8-abe0-40498a909201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.186.146']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7235cdd7-2589-4e76-ab73-909a73a48db1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.248.229.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be75e290-e8e3-411e-935a-122ed2918d6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.146.23.114']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd3ce855-9971-4284-b2c5-dfd015c92070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.10']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0869e7f2-0d14-44f7-ba2d-0b4980a687e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.46']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29932967-e358-46dc-b9c6-d15f84c92069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93d5ebdc-a0f5-428c-a490-7674f714b289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fce3413-d3db-4b55-9a85-e4d9d0506804", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.98']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f8de789-3320-41d1-a999-610f07d43f07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.99']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27d9ad94-c174-4599-8417-da7402e61540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.229.16.165']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3846fe2a-0b8b-470d-8e3e-3bed09d3c5bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.232.100.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00cfa334-35ad-4006-9b68-f3bb2d8f9ffb", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.239.235.169']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c815b84e-c020-4a20-bc91-988f8910fa28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.38.58.1']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--692d7902-1b90-47e9-98ec-ae051c1d3c2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.67.31.88']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a285553-bff4-4ac4-a2c0-e8ae085220f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.10.45.192']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a54672bd-8a9c-43b7-ac27-070e5665afbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.173.111.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26f187ee-eaf9-4776-b17c-cf84b0209a6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.173.207.186']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--628dc595-5d47-4856-83a2-272988734fc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.20.144.241']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25ccf1e3-2994-49db-8493-f700a3aa43c6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.20.32.171']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a5bb897-0bdc-4cb3-9b6d-2942b78e1942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.161.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1916f89-c6a1-4815-809b-ad57db0f5f22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.181.205']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ff0ffee-d13c-4a94-947f-b8e46c44a380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.217.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f66d99d-9108-4157-a654-026a47325863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.83.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d858ee84-7eb6-448d-a8d2-e39d029fd43f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.85.179']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80fa88dc-d409-4f48-aa9d-7c78102a43c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.222.108']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6492203-8a6b-4f90-9d81-8768a6e238bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.4.122']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--155a9644-272b-4c90-94a2-de0f435fb2f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.250.206.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f39ab5b-4f89-4dfd-871d-ea2ae0af38af", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.12']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4712cf12-fca6-4be7-b302-41afa863fd41", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.205']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa903f4a-0851-47d8-80c0-b0db2390a62d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cf1108c-445a-4654-988d-2d786a60d18d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59461b18-1bae-4c3c-8542-b2fef987a8f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.178.224.239']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b351c58-78da-42ac-a933-e420094698ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.220.102.236']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52263a29-06ed-4f18-8995-e7a7a35e8056", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.220.86.73']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c04d412f-1bd6-4588-b89e-eaacafc9c4ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.145']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e62f1a2-8721-4c3a-96f1-5dbf632f4eb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.33']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7d1388d-356f-483f-b14c-20cc03060a9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.45']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--065d92d9-93bf-4acb-a7b7-838ef9fb2eb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.50']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3320c82a-20fd-40a3-b5fb-67e498f48a5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.88']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7266ac0-fa0b-486b-89a2-6b07bb47671d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.209.210']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48c0a0bf-84d1-4a5b-bf75-fe655892ae39", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.99.56']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f621c93a-261d-4c6d-ac16-12675fabee08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.108.167']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4372db67-cf2c-441c-94e3-cd818ab4d6db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.150.197']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c625cf0-6d44-4730-8c1d-ff438b2b1ce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.219.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4e30c18-7c9d-4d9b-9a9b-ea3ad962bd3e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.235.19']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--421edd4e-1d8a-4eea-83d3-65b489bc0426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.124.112']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79d66219-dd40-4c17-b99b-bed2463c31cc", "name": "Malicious Host", "description": "Web exploits: vmware-vcenter-sdk. CVEs: CVE-2021-22005. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.17.75']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "initial-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21985", "external_id": "CVE-2021-21985"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22005", "external_id": "CVE-2021-22005"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fd5f2032-5626-44fe-b370-683ea3bbfa24", "relationship_type": "indicates", "source_ref": "indicator--79d66219-dd40-4c17-b99b-bed2463c31cc", "target_ref": "attack-pattern--bfe6a08a-e023-44ea-be23-fdfe6b3f5314", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e69fc0cd-ca09-4085-b597-66eca23a4aee", "relationship_type": "indicates", "source_ref": "indicator--79d66219-dd40-4c17-b99b-bed2463c31cc", "target_ref": "vulnerability--7c846a00-ec07-4cc7-9160-34835270151d", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--27b14ac5-ede7-4cbe-9ae1-48eff094b490", "relationship_type": "indicates", "source_ref": "indicator--79d66219-dd40-4c17-b99b-bed2463c31cc", "target_ref": "vulnerability--3b0d42a9-3156-4406-8848-77877543eb66", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd7bf9dd-e813-4d13-99ef-eecd422346e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.195.238']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd4deb9c-7754-45d2-9dee-fdb95db6fa28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.5.0.236']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29636f67-ca1c-43de-8570-7f63b58282f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.69.16']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37e5c6e9-3209-472e-8d96-d298d4faec66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.71.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--687dfd7b-23e6-4e29-a3ea-0e79031ffe22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.136']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a66b6473-c666-46d9-8190-8dc47b7488f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.210']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a9c3549-901c-4ed6-bcd0-e21fdbed8c71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.179.53.154']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f65de444-c666-4ffc-9f21-88c8c7aa28c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.191.244.5']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b487210-66c3-4c9c-abcf-7852b5df1c90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.250.181.123']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f46396a-3ecc-498d-b091-917c4c5f0aba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.136.36']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f922483-33a5-4b6d-b277-28cec9a3c4d3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.157.211']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3314da53-3238-447f-b6a9-8e7106021a04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.132.52.57']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--470e1ebc-e147-4f4a-a8a4-eb580201ffc8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.230.148.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60949cba-67ee-4ca7-9df6-48f3224f24f5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.102.48']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6bf8d25-799b-4f87-bab2-2331439e1422", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.14.114.97']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c28c8fc2-0c58-4f14-b40a-a5b4a4a94361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.210.245.77']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b2cdca6-74d3-48fc-9d9c-cd8179e87716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.103']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--229aae0e-b73a-4ee5-a48d-f709375fbdf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.104']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4348214-0e3a-475f-a92c-99a223813d2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.108']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcbeaf58-6ef9-431e-9be1-74c4b0f4eff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.109']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dc0e7f5-70e9-42aa-a7e8-dda24a28ff42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.110']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac6d5228-6676-495b-9ac5-eacc8ba58de0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--294edd94-a121-430b-a06f-f12f7d15df3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44e94745-91d5-459c-a383-738c3c6a1c56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.120']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5569b662-74c8-4d6f-996a-f69c464a1ddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--103d8953-42e7-4b51-a3db-00e15ba7ca08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--401b37a4-934e-4176-a2cb-413de0b80cc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.128']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--773a872d-0128-4be7-8662-71eec5cfff20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.129']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--740cd608-6d8f-4968-82fe-1ea9e5fb5772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.132']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2abcffd4-5d3e-4cf6-96d7-3e15086604dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.139']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cec0658-787f-48ee-b0bb-abaa8d8e2b48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.140']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab5d3e00-5736-4ada-8673-7c75db70c4bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.141']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79a33cfd-00de-4be8-8047-a1c65ff4e336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff6996dc-c9d6-49d5-826b-54f8c8a42990", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.15']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30eeb29e-848a-42c4-b889-2647d62ca8a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6417544-8d15-4611-acd0-94fb3f53db51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f976d419-a866-4419-8bae-15f71f7fb3b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b62d906-6062-4671-8dd1-5c7d1484e64e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fc61606-9b17-47d6-986e-b6c9f5596ca7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.16']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fceb51b-21d8-4574-9f70-1f9e309db40d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.160']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da995b51-1871-4588-b560-25e1582c9b75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.167']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa59a3d9-a00c-4ed0-bbf9-d72f78c29d7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.170']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eea6bd35-b7a4-4453-bb13-bd358edb1b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.171']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6634e8d1-7e45-47c5-beea-2b8e85434e65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.173']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dff049f9-84bd-4d4d-81c6-8999a8e11255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.174']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b2b0f1-9505-4fb5-9f20-7f581619ad3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.176']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3d326bf-0778-405e-a293-c40fe068f34d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.178']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c177f586-f115-4637-8b3e-c1bf00cd958a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.179']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbba49e0-2e80-4d98-b6a7-00987d9caf7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aca9f53-0efe-4285-8cc8-a444135038a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2c0b5d7-dde7-4bbb-85cd-ffeb94336af1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5589c174-7f8f-45a3-bf32-5bade4c420c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d29b0de0-300d-48a1-9381-89c9e41155f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.184']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7667461d-8187-48b1-ba8e-72615e1bbfdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.185']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4395795a-2686-4fdc-9cb3-714599649ff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01ca93bd-dde7-4f0a-87c8-15c422533705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.194']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28cb4ffe-aa38-4418-8a54-8825f6e450a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.198']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91741543-e917-4514-96a5-524c7bf4c607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.199']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c663e19d-5e0d-4e80-b13a-c05b581ad244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.200']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8afc5bc1-bcf9-426d-9a1e-71f2b255da72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.202']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88f14dd5-5991-437b-9b19-bd657e891d07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.203']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b927d8cd-1660-40ab-84e8-71defe627053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.206']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b240559-60de-4730-a96c-615f3d7ee860", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.207']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--598c4f49-9db0-4bfb-97d9-61b4bb3eb38b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.209']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--143d2060-6cd2-47e8-a34d-3ec957faf3e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d855ae45-dd6c-4201-b005-bce8679c4274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.210']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52f6a8f2-d7b2-4ff5-94cb-a75f8905b019", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.211']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eead67d-3977-41b1-a0f9-b949fcd64dd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98414749-375a-4477-a0f0-74904aa4a235", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49924465-c3b4-4b2a-bb39-11b8164e84c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--412f012a-eeff-40d6-8aad-67ed97eeeb2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.216']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed4dcf41-171f-4d43-9959-7a2bd68c0f32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34b0af83-e595-4500-8bad-209f2ffb44bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.225']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e655e81f-9f0a-404d-be44-4f519d859514", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.227']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc4ba0eb-c3e1-44a0-b32a-f16ea02516ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.230']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dc1153d-b0c7-4895-910b-d9e9d957eed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.231']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6590099-1ba1-4a90-a397-c2b2b01e8271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.233']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1647296c-b482-411b-a80a-3698a5fcc6c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.236']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3561cda2-0717-49f0-83d2-e328463ba013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.24']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bb1c244-2a07-406c-9208-c8ef8d0bfa8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.242']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8989a97-18c9-4f77-bcb8-2be6adf9b9d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.243']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3488a600-7821-48be-9e1f-258ad35c7683", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7da549f2-a66f-437e-833a-0d08ff127a72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecb3dde4-bdac-4bcc-abff-af230e2d9f68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.249']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0793357e-936f-457e-9a48-5ff8b57f4044", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0ddb1b1-7072-48ff-bae1-fa3eb47a397e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.26']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b34adb8d-a986-4c85-b181-1138a14cd7b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.27']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5c9763f-88b2-4a94-997c-a60f19be78b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b848fa6-b124-4396-b8b4-89d257e8a8a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--057f9645-fdb5-4b0b-aed8-a327b81c190f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.3']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22db6fb7-c064-47aa-8b5d-e2664be98b87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.32']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26ac59f3-b398-48fd-bc45-8f995f5d539f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.37']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--581cf680-ed08-486f-9fb7-1f1f9237ce0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.39']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74a2e1eb-8736-49b5-a910-f8c146b91eca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.41']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f5b887c-0044-4a18-b904-9325f0387e72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.49']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a62143a4-6fb7-4255-acc5-9e89591a6fce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.5']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5ae8017-bb78-4bd8-84d0-19635db64498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b127508-f90e-4744-91a4-02142ceac1db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.56']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6ebec3b-e529-4def-8ba9-edf13304cc66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.65']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6faafb30-0aa6-4b1d-8e99-476ff016ee99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.69']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be19be78-e975-482d-93f1-3379d03168d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.71']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e810612a-464d-4982-82c7-a6f423338fed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.72']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--167e535d-bc04-4bfd-92cc-92445f735720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.74']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b08072cb-da97-4d69-a39b-e82f3604dd08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.77']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eef78e0-9301-4030-aa1d-887e19c06869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.78']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c2ea432-bd3b-413f-a361-da1a3fa8dc4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.79']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39d7a66a-6071-4f1c-8b03-e9b567fdc2ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.8']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1a98037-3913-4810-a276-2bcd958267ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.80']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--926e9e44-e293-4532-825e-0102f1d964e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.9']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a63c54f-50c8-4361-92ae-7877d3f161ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.90']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c27fa57-3e03-4a40-99f0-0fc4591f2fef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81bea857-9bae-45e0-bfe2-a065ec93667a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b039d884-58e2-4284-8cdd-ce1cf24ef52b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.96']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb54f8f5-8f6a-4964-a466-7d23a9c96d56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.98']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c8eed3-44f9-43ad-8cbb-89f1037cb7de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.104']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84df701c-17f0-43e5-b672-d9ece0fa313f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.108']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf025e1d-0c23-4ff3-9f48-c7770a4cee30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.11']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d87ff080-ab22-4cb2-9b69-61b461dca75f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.115']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae00d89b-3bbb-477f-8c0d-aa960c810d77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d709ab6f-a7f4-4e58-a696-61b36cded9b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.120']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f001859-3e8d-4438-810b-0d9dbf8aae9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0c29d56-dbbf-4cd7-a972-e840973de88a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a81cc55-8b8e-4a4b-94de-7d619cbdd456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.128']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0522b9b-730a-4aab-9437-6951a6d51d38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.13']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9cf27a1-46cc-42f7-bbf7-a5f97ac7bb25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.130']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--773c37e9-9e0a-472b-951d-1e6bd873b8d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.132']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccbf3661-32ef-42c8-93ad-0cfc5f405248", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.134']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--137b9626-b89c-4e1a-b742-5c8af0ae9bc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.138']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2abfafdb-7e8d-4e22-801f-8374659c84a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.14']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56b3abb1-5b43-475c-9b5b-f2f2fbebddb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.140']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6329d3f0-c961-4a7b-805d-738b86032dd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.144']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--940b04b5-5688-401c-a087-f5707f7a55e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.146']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06067082-248f-43d5-bd1d-74ff56498a3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0822103-6d46-4b99-80a6-0bbd552fe38e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.15']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d8742a4-fa8a-4eb8-aa60-40993c0d0d87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.154']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e5318ce-4fcf-4ef1-a187-c2d548eb9754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df095c63-ccff-438a-a9e1-eaae16dbb149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35fc4762-17f8-47ed-b2ca-e22b374f2389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.160']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--851fb682-efc0-459e-bc37-afc09bf55ea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.163']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d993074b-fe8d-4571-866d-b23be0254f25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.164']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4974e9d2-b7d2-4eaf-9096-c4adecbb9e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.168']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2325bbb5-3517-4987-9c6f-23bf850282b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.169']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e00d8914-33b9-428a-bb88-154b73f52e88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.171']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c277c50-70dd-41ee-9b0b-1db01ccc3165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.175']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--205a1e39-c46a-4753-a8f5-442117db19ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.176']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a3dee41-8207-440e-9aa6-94d214960053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.177']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--229e5291-0fa6-4578-8b09-f0360650ff4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.179']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--993758e6-49a2-4b44-a973-0774a8d5ed83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.18']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82c470b9-2103-4aff-8e4f-931782859f04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b19d0633-5208-47b6-bbad-0744c487ec10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.184']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57068a1c-d98f-4679-a12f-53ecc330d861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.187']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff673524-522e-4559-a95f-ad52593b7a91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f88994f-73d3-48e7-a63f-8093ee3c729a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.19']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ed5efbb-814c-4098-8884-aaa9f214e626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.195']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a54dda7b-ee2a-48c1-bde3-f369196a08ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.196']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97e0236a-626b-435b-a18e-72b01f4e1503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.199']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--853d6dc3-be2d-4d04-bacc-fa7795869c28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b15500b-77d2-41dd-a7c5-2b47cc2a42ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.201']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e42bd401-ceb1-4dab-bb83-761698628cf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.204']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47fe326c-094c-4c8d-9457-1932b126fd81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.205']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22ae063e-d16a-492c-955f-37cc2908679d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.206']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c559b3c-4ff1-49e2-9241-cdb7098fb02d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.208']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4476744-0676-4eab-bda5-0b54096e1a97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.209']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d99ba5e-7a0a-4890-805b-5264e584e8d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ca27858-d676-49ea-8ef9-820c98e2cefa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.210']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25952a87-518e-40e1-99ca-a0eb8d856e64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb411ba0-ae5c-4322-bbb0-eb4052a54118", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.216']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d02e2d2-1f66-497e-91bc-ae996a4b76eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.217']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa5970be-6463-457d-960d-d78202286b64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.219']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94e18af4-6d89-4cba-9b91-06789f0c098d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32883656-b583-4faa-b639-44a041d1079e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56ed53da-3aca-43b8-819b-e93b783e63f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--735fa838-6bf7-43de-aeab-d85385962ff8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75ccd22e-f25a-48b7-a391-68521f092858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--660e505e-8d65-49e9-80f2-b6d1dc9aca6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.224']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0fdca85-3088-4644-a967-1538b0cc94c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.225']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea36f9a-22c6-442e-b58d-42a096054d62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.226']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54ab4b35-52d8-4bf2-ba48-62e77c51d3ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.227']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--775b3dc8-7891-4f21-9f40-6313aef18ada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.229']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62f9ea5a-acc9-413c-a20c-f3c94dc10eba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.230']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f68dcf39-ab7a-4227-b7db-ade8676391a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.234']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7f86081-e12b-4d1b-90bb-92bcdf1591a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.235']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04c1c110-7fa0-4366-8c47-bd3809aa5810", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--552d46f2-dcaf-43cd-821d-d6526f2c1cc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9368eecf-638a-4b4b-b751-f49b44bfc92b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe86e197-9033-44c4-8c6c-21f4298833b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21105e09-6770-4aef-8650-35dce8ffef79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.26']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9c9830e-c24e-4c46-85e1-9fcaa4c62081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a5101aa-9b25-4428-84da-f77297a81526", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b6618f2-8509-4a4d-aa50-895c66aebfbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.3']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc3ac924-f118-4e3f-a5d8-f29de658a888", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.36']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--872999e3-f77a-4607-be71-13eaf79ac01e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.37']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41aee4a5-4b60-43ca-8b27-b23c965bfca8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.38']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d31a05b7-9523-432a-ba1c-d56473208ce8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.4']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5ff2bdb-b3d4-4dc7-9c5a-32e67a4c7c67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.40']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d9c37ed-e038-4313-bdbd-6c3d0079e613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.41']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b76712e0-c7be-4233-ac01-2ceaf6a54453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.42']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce54a963-4d04-4f67-8a56-61286f1153a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.49']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dda97ea2-f335-4e26-a705-25ebd9fe8005", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8bb6d39-0e30-4511-abe8-c9272d66f362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--898a033a-5e9a-4761-b326-ee5c106b7069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88a14b07-4792-4aa7-8ed0-7ebd12be20be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.56']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61fb59cc-d45c-4558-9b58-03d533a67d0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.59']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ca4466f-1f65-4999-94ef-8f857f288407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a20e3546-ab8e-47d5-a8f1-40669e0c0d09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcbe6d68-9089-4197-a89f-faa2c6f8442d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.69']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d9ea96a-0d46-429b-985e-eeff1e02300f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.72']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c834699f-5a67-4279-885e-82f33ed2a455", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.74']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95253e48-3247-4624-98ee-552e2c6131d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.76']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3d889b9-c464-461c-90f3-3257c14f6e99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.77']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2a26358-bdae-45c9-84c8-9b3077d5c519", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.78']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b99ade68-1c42-468d-9562-507bc8026759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.80']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a541ecb2-2d9e-440e-8e87-3c1dc0744505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.82']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9ba875f-56df-42ee-ba51-2b9f1525b6a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.83']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a4129bd-c491-4d97-94ef-4c6b920f3989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50bcc1bb-df3f-428e-b659-e53837a9fc46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a079c63d-6788-4794-96f9-9f6d26cc3aae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.89']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bce1a94b-2fca-4291-8a69-20d5cca58475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.9']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dffb5a98-463c-454e-9578-00b071f15701", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a13f1ed-041b-474e-8671-415903be01f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a19c75dd-c1da-4cdb-a1d2-1306cf96b7cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33a24c5c-e738-4d4e-ae35-6a8ba0daaacb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.96']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1ff8a51-3e72-4652-a7e9-21ee3474d8bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.222.16.138']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7350fa96-e94c-4ae0-9b9f-0b89e09cb433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.222.16.249']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--923bb06b-a44d-43a2-b9a9-52205ed0b02f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.208.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cd57707-75cc-4c8d-9f9e-37ce8073e468", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.47.110']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8231e11f-b8fb-4482-8967-95af11fdd293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.55.220.65']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab14f5a4-0d41-43ca-95cf-710f5ccc032d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.1.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1761bf0-d201-40ef-b2d6-3754373ddcb9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.13.67']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d159d0d7-26d4-40a7-9b72-0502ff8b288d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.14.105']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d27202fe-5b93-4023-afe8-2ad7fedda9a9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.15.194']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8b16b24-9fcc-48b2-b5ab-e1e873919e8d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.16.115']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--929a2c4a-38b2-44b5-b84b-bfbe92d95b37", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.16.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83f5b9f7-b9b2-4731-a4b7-017110a1f497", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.16.160']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a65baaea-3fbd-4f32-aef5-d4325ab28265", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.132.195.45']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--772f7bc0-6c51-4f25-b46d-7e23b783c192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.52.24.184']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b84d000d-9fea-439d-8aec-5b157bcc9fcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.68.117.225']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dab3941-4658-4f6c-9718-b861472089bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.77.169.155']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a4f214-1608-43b2-affd-23ada67f8801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.106.15']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--015d5cab-060f-43c6-aadb-f4ca877f464e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.114.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eac38cd-69b7-43d0-b566-4730f53ff414", "name": "Malicious Host", "description": "Web exploits: apache-solr-admin. CVEs: CVE-2019-0193. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.250.58']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "initial-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0193", "external_id": "CVE-2019-0193"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f25d1082-deb9-450c-9dba-32e2619c3869", "relationship_type": "indicates", "source_ref": "indicator--3eac38cd-69b7-43d0-b566-4730f53ff414", "target_ref": "attack-pattern--bfe6a08a-e023-44ea-be23-fdfe6b3f5314", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f3a5d4a9-760b-4909-9094-0060e4ba66e4", "relationship_type": "indicates", "source_ref": "indicator--3eac38cd-69b7-43d0-b566-4730f53ff414", "target_ref": "vulnerability--d20fa7cd-c4cf-4426-9064-b6b9c8f4f7c8", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da5b36e1-7892-45a6-b979-6990feb045d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.82.91']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--246a6cc3-8194-4f07-8144-72ae5ea2769f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.187']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c47bf11-13f8-4aff-b0de-cd458100cf66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.58']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11664ebb-0510-43bc-b7a3-01eb10d49893", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.104.88']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8cf62e9-21c1-49cb-91ed-176e8ebe5763", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.140']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bc05248-9c59-43a3-8fc8-458e302bbb18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.206']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--199337cc-221c-4613-b3a9-1208411ff822", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.225']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c9d3d51-5ad9-4297-b4d1-8aec09bbff8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80cc7beb-3cda-4a61-9b01-7d59173ff0f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.139']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--458635a1-dcf7-4d66-8fd8-0004aa86c4a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.13']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--befcf3b5-2343-4aa7-af0d-0a1ddb746d3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b320896-7310-489e-a5f9-d248dadb99a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79aaf005-bc0c-4e97-8289-4f3224f412fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea2fccf9-01c8-4a47-922c-6665fdf42963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.201']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e02fc8c-390d-4f4c-ba5c-a5cca6f50569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f89e8277-e867-424e-b69f-6fbc75e9b742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.161']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5bf5215-7994-4926-8bc2-45d5d5f2bfff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3b32206-9c63-4a5e-bfe6-bd4d46772c69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.73']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a31f503-41ff-48c5-98c0-61fb826ef6e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.3']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06674637-3a0f-40cc-b459-cb5113d192c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.33']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c073b15-ed0b-481c-8211-98bb8021c0a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.10']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--977bef74-54b4-421e-8cf9-4ffe08eb7d5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.113']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20a486c1-c1f5-4f12-ae15-b5abf0c76638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.114']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d0075ad-d6b0-4882-8b71-e1554fc2251d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.111']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed7cba57-9d4a-4295-a48b-5a5644f226c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.37']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d3ae3de-255d-4e69-8f63-c93941f5b268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.141']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--006a4f42-3cce-4aa1-8b6f-1f41e7cf9466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.204']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a629b0b3-324a-442d-ac9e-b1d435393243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.211']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07aa2d1c-b9a3-404c-8cfd-e9e61b905edc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.226']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7febe577-f8b1-4f84-8cdc-46d32dfef95f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.74']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1a121ea-8633-4c51-a167-0a94bbd651f3", "name": "Malicious Host", "description": "Observed: FTP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.179.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d55eced6-f2d0-4c86-9a65-baffeb1782a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.174']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e818b2dc-41c8-42f7-bdab-385be243448c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3038c036-b33b-49cd-b409-49ef06ea9163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.139']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1814af77-43e7-4bc5-bd39-99d9b243e948", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de14affe-7512-4743-92e2-95ff68c77b5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.221.175']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91175b4b-ca2d-479e-bf45-c46ec5c6efac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.32.235']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eafb1b4d-76a3-4b51-848c-ca5b1d913f0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.33.72']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d91c24e-7f90-460b-b3d0-9700c8e79913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.105']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--975d2b23-2477-4b3d-94bb-900e867bec88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.107']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--672cb3be-b036-4b69-8031-601159a9aee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.177']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e8aace-29f4-40f6-899e-4ecbe9064337", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9e9ea92-4a70-4717-a859-53844678b96d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.10']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32d1bb34-1b96-4e05-8a0a-fdd323f63bc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.205']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--764f540b-5cd2-4672-b27a-0f1730b77e33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.13']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f833adb8-c567-42b9-9733-c5a319b6e9ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.201']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85855577-1f31-44d5-a227-314235a4077e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a77bb14-3dac-4b50-8b5c-6e435aaac34d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.232']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09c6a797-d2b8-4511-9acd-7ad9af1572e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.47']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e381746-0d09-45fa-b62e-7fcd92393dc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.56']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5e12d22-416c-4688-aa07-6eb32d526c7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.97']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6fff373-b9af-4c37-9473-652a1f086103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.42.209']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a4b0089-9931-4284-96ea-ad8c694fb8c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.43.179']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1916d85-09ed-48a8-a142-86b8df9aff08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.193']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73108af4-ac56-4b9e-9018-33839b1faed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28e10dfc-0835-4bab-9248-ed35114a604a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.225']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e682246b-809a-4a19-b655-6730da87eedc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.90']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f221ef2e-6399-4495-a87b-af4c5129b492", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.52.132']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--894565be-79e2-4d32-af4c-62e4f405b7b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.59.90']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a19c99b-1b34-4f53-b01d-c24784f4c22e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.6.224']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02224f23-54f3-4b27-8462-e046e16023ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.108.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b9bff1d-c636-4014-89c2-514b2b33c735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.151.192']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b24ab529-0922-4679-a645-3bf9285d59a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.168.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f0d1b6e-0c35-426f-b954-07ef276b5a28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.180.185']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50c2d1ae-4f5f-45f2-a70c-32196edf4bba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.206.42']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b85fa006-c921-4723-9218-af8d8ed5cc3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.212.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d308f835-6df9-4f3c-96f1-109ef9d07ac8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.57.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa1317e4-b543-41bc-9dfc-cb4159a5e68c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.110.45']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44aa642e-5737-44ad-b9dd-f982d3851cf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.172.206']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f9a94fa-a533-4d81-bd84-23533d48e7cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.188.42']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cff6b752-1c19-4b54-a72b-5697ab2c62fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.205.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d047a498-60b8-47c2-b98b-ea5283d7312f", "name": "Malicious Host", "description": "Web exploits: vmware-vcenter-sdk. CVEs: CVE-2021-22005. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.70.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "initial-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21985", "external_id": "CVE-2021-21985"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22005", "external_id": "CVE-2021-22005"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--57e7a4f7-b1d9-434f-9f79-b1032545ba6d", "relationship_type": "indicates", "source_ref": "indicator--d047a498-60b8-47c2-b98b-ea5283d7312f", "target_ref": "attack-pattern--bfe6a08a-e023-44ea-be23-fdfe6b3f5314", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--12f24ea2-b083-4d51-aecc-c23321f1a2a3", "relationship_type": "indicates", "source_ref": "indicator--d047a498-60b8-47c2-b98b-ea5283d7312f", "target_ref": "vulnerability--7c846a00-ec07-4cc7-9160-34835270151d", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5f654f6a-0697-45b0-8d0f-4ed2a00fc9ab", "relationship_type": "indicates", "source_ref": "indicator--d047a498-60b8-47c2-b98b-ea5283d7312f", "target_ref": "vulnerability--3b0d42a9-3156-4406-8848-77877543eb66", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07501707-159a-466b-830b-5dd21898151c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.93.171']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd46509d-927e-44ab-92d3-eb204f0e1cb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.0']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10813637-5ae2-4d2f-b94d-79f43bea70d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.1']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eec0ea13-0a02-4e6b-97d6-99158cdaa6e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.10']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82555cfe-6efb-482c-a4e2-7e9ed8b717cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.100']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ed86bb4-eb3b-44a1-9dca-cfc79f0231fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.101']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--661a83a4-c862-4341-909d-0f18eb6f20ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.102']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de2561e1-9913-4f0c-b6f0-7f1734423388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.103']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6d2c41b-7889-40ab-86af-584d3832feb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.104']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d927e2f6-1552-4c9b-b2e5-ff4c90e70033", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.105']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f048c94c-ddec-4d11-b09d-d5b458ca2729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.106']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60fc9190-afcc-42e7-a70e-518ffa00671c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.108']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--686cbc53-f323-4400-8e6f-12db4ea82513", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.109']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b28515fd-7c6b-4e5e-baab-dc4b4a9b83da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.11']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6721f4a-ebf7-40c6-962a-b62ea1dc8e57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.110']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c7ea9c-170d-416d-a840-52544b88bad2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.111']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2ef5f81-8c95-4ad2-a1ed-c9d89f24c890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.112']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3f69332-3dbd-4a24-94eb-9a4c8b8a6eb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.113']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90a809c4-a926-4ab2-95d7-5bb2a8bf7a5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.114']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e40a9f69-38a0-457f-b0dc-4d904071df87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.115']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f5e6687-8861-4134-8984-18d33b1ab6f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb3f8971-c3e7-422c-8b38-8c057e3d4b49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8014673-df72-4019-b1f2-0fa58f646196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1c9cf29-a585-4628-8af0-f5bd10ebbe1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89678228-6d78-4cde-bec6-fd13dc23a4ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.12']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5be72c6-3aa1-4b51-9cb6-f6eaffe71642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.120']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f4c31d-03f2-41be-8ba7-4da29d6ddb9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.121']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ef85c6-45cf-4c97-82d5-347811337026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.122']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8475517e-be81-4931-826a-53d4e16f098f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.123']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6e09f6e-b4b2-4451-8fc6-10eac7b24dcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48b27a81-b9b9-483c-9a20-f063932675c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1bef858-caac-4b6d-b302-f9e0b103abf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c37b2995-6821-46f4-8b3f-20f6213b287e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.128']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a34de8b-ca35-4636-a26e-d84c91d8be88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.129']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ef2ce6b-6fde-4d90-b69c-f1a2a09da1a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.13']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--771f4050-99c9-4cd8-804a-0c22c2839310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.130']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38c44e61-770e-43db-aae5-ad48932b04be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.133']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e75f5087-d76b-4ae6-bf6e-e391f842f12c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.134']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efb068e2-26fc-4cb8-b293-7175266bbf19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.135']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc92731c-5112-4af3-984a-deafc3ad6d2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.136']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a4944f2-1f6c-4446-9906-1e3563ed4b4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.137']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54d4ce1a-7c87-4011-86a4-6ef8e3cdf000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.138']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebc1402c-8360-493b-b02e-45e1c7ec5325", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.139']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17e69219-3542-4520-bd2f-f59e9460c393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.14']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff9384f9-9a51-4231-9945-9d0d3703a7d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.140']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9003306c-b9ea-4188-b950-a7bf9439559c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.141']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--430f608f-54aa-4e35-902e-0faa6ec2993b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.142']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8141ef87-4d79-4828-89fa-6cc27190ccef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.143']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48204b32-03c2-4604-8f31-8db7ca3457cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.144']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f19dd30-c0ba-4bb5-bdc8-d46af6321019", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.145']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6dd449c-f2c7-4815-b4a5-27cb1fa413ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.146']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11bdfd62-e8d1-4a1f-bd6a-ccf398679e86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.147']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b815261b-e9c7-4702-93f3-e6ff5d886b3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0157fe9f-645b-47f2-9310-8e18adade220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.15']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2041e7c2-733a-49cb-896c-fd6c09eb153f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d1481fa-0a50-4c5f-bc2c-6dfb1d5804bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5874173-702d-4d0a-b2cb-5f1cc92490f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.152']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--940a77f8-861f-4b48-9806-c3056c29c604", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.153']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce80b406-e577-4d44-b514-810c25b5e318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.154']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--354a24f4-5a08-4b62-984f-e56d9634f3da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.155']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f019f2a-0980-47d0-b094-bd362146fefb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--252da317-ef11-4457-8178-3016d648fea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b53d1dd4-540c-4a89-b487-5015562b229c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e943405-7cae-4181-a001-a948f910d0f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84a076ed-e6bb-4dea-897b-4737ffc145e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.16']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--149a354b-565e-49dc-b117-7a3f6b94809c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.160']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89311373-7888-49b7-a652-a6a07cb4587f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.161']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32df36e4-55fe-4a3a-a3d9-0fa55a38c69c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.163']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6c8f37c-df20-453e-bcc4-a3561c0f4b4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.164']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1593555c-aa84-4ad1-8bd9-559c47f9d30f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.165']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c2d9021-994b-4515-875f-48237ea5cf0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.166']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bc919a0-5d3f-4020-9c57-8eb20fafa8cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.167']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0fc9531-3592-44f6-bbea-52dba8a74955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.168']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c6b27dd-3c42-4430-86ef-ad0f7879a938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.169']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a417fc6-7c31-4a17-b05b-dd35a77353c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.17']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--392fd3a4-4d36-4d2b-a639-9a6cb62b44bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.170']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97d747d0-0410-424f-9bde-0e2ecd466d5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.171']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93de6aa3-8310-4b16-9049-87880dd1bcb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.172']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03d6b112-f1fa-4957-9e51-f24be46b751f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.173']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c45550d-58ab-442e-aae9-f3e8de8db501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.174']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5490839-1c58-4d4e-a742-56e5d3fde7f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.175']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--329142c5-2950-4fd5-9d45-2631f70b7a94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.176']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfa0609b-db46-4429-a869-88aaa12ac44a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.177']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13b93e0a-6967-47cc-963d-1767ec31f678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.178']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5c072ec-5e9f-439f-832e-ba7dc9e4984a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.179']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--874dfaba-ee7f-4224-8e3a-b09389972a67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.18']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c268c58-cf14-4eac-aa26-5e9b4f0c3b82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dbb38cd-d9a5-4271-bf76-ce65022fd1c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60ce6b13-4bd8-445f-8dd2-af241af198e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5e5ba00-3a21-49be-b144-190db7903cad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--697d7637-1cf0-4e47-859e-f65afa6fac70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.184']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38c13048-48c2-493f-a3c6-cf91403ebe30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.185']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--402d2786-a93c-434b-ab7a-c65bbce083c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.187']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f534fa9d-b696-4b8b-991a-f04eac290a16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf41333e-0fb4-4ae6-83e9-0e0058a0f259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.19']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28ee003a-2927-4071-a9b8-dd11202edb3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5001701-434b-43bb-9c75-b2525783fb5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5410259-5550-4636-993d-07d37e95e4f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.192']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0338e22e-3302-4602-ae7c-fa7862ce34a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.193']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64c38624-ad04-43d3-a4b7-f17489efada3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.194']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--542f0dce-9e33-4960-ab12-2bbb5169a2c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.195']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--750ed2e7-be10-4333-a897-f4bfe5b3e4f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.196']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27216e64-3f15-484c-950b-78464aa9909c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.197']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d14967c0-5ea1-4371-979e-7881a0c81401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.198']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4278c00a-35fc-4f0b-a9d7-df125e9bc4bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.199']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6795f4d7-9c29-4e16-a0b9-dfa2333e945b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.2']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e608b338-63e3-49b8-b9b2-6017294cadc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30c4db0a-b7ce-403f-b6b2-8b1c0f00187c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.200']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcb00966-a1fc-41a0-8df3-b04c0e571cf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.202']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd49808e-ea9d-4e96-a92b-dc678202765e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.203']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e34ce7f-dbb2-47da-9900-19ba66e44296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.204']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2218066-d8b0-47e1-8e89-3de117933625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.205']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96f07644-130b-4f7b-9f2f-87ad46de90b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.207']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b4e5bda-5c39-4002-ae3d-f6a3b4912a65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.208']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--995b1f97-4adc-41fc-a31a-1bac64dddccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.209']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71550c6d-720c-418d-a63a-1b4d5c9670ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58af030d-82af-4210-8bb6-849b018a0cdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.210']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b87b518a-1110-45f9-a130-62b83104b68c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.211']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56f8659b-5677-480c-9989-8ac5fc53544e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0d842aa-a5bb-4022-930f-52bdd2e4e15e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--425b8574-4d43-4497-8604-d67ef30f9eed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83a9a47a-242b-4d24-9a05-53a4a8daef12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f72e780-0adc-4d07-9d63-d875168af0dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.216']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65e49fa7-67dd-4ad1-a1ff-1be410963389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.217']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22a004cb-e758-490d-8066-9402831d64b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.218']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5122666b-4251-404e-b641-f96ba2d2c469", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.219']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c18aa26-56e8-4a11-821a-d73b651b9a92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acec0476-0120-40cd-9d6b-ba0f57dcde46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c983ee4a-567b-402f-a806-2db23f4ed090", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbb32d0f-1087-4d95-ae61-d72362564748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e4f6a0f-0808-4767-b933-d3c548ceb469", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--845392c8-0153-4434-a26b-a6d056daba93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.224']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6236624-57df-40eb-bd0d-44cba9f3e3fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.225']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef2a1bd-850e-49db-970d-6daa3d40961e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.226']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56aac5df-f710-4fd0-ab6c-96e74c79d09d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.227']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--344834ca-0def-44fb-a0b7-0467d2aa61b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.228']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c3a06d7-55bc-4650-a514-a3f9c9bfb28a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.229']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b60c343-c205-49b3-b3f3-fbecf39d35ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--207c3d18-713e-426e-875b-8d6d5a553b9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.230']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac39fae-d741-4512-8e0a-6c6d2a72afd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.231']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9173a5a-70ec-4ca2-8ad1-d9e64b607f53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.232']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c2940a1-22ed-4163-81a1-0acc17085d21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.233']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c382b34-ff19-4cab-8ceb-e8ca940b1a9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.234']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d65e7849-b4fe-47eb-b9f8-44540b780a4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.235']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbf56836-fb3c-4916-b22e-1e837c9d496a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.236']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce8184ed-c77b-4273-8df8-12bd21df88dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.237']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09b0decc-b0f8-4f31-b114-a68f43ae12b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.238']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd99e77e-bcea-4291-b111-ef8596f9d7ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.239']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94ded28b-490e-4137-a8db-4641bf36fa95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.24']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99adf93f-e052-454e-b855-3f0591355966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.240']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4443ba1-b397-4783-a23c-7aa63a15937a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.241']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--193f3cbc-f408-49f0-8d2c-c9ba18aef000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.242']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07018270-954b-4c57-8f48-0a59d3048d9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.243']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--439b520e-0aa0-40da-a024-2d687920f42a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8960058e-fe71-482b-b252-1b1a4561230f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8664412c-7e1a-4190-94cc-5a082c2c6f8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbfe2d91-8569-4849-b208-830961534c46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.248']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23c45bf0-500a-4d87-9b15-dd379bbb1a45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.249']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa9343f3-ac50-4768-a4ef-c72dce212633", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.25']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be0d320b-58c0-44a5-a400-adb0fa9d3470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.250']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea817790-b587-4941-a663-8ed9da9556ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.251']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dfff324-8af3-4ebe-8aa6-4bc2ada1d412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eaa7819-0815-4314-b288-9629a76bd8e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63a5fc1e-c8a0-42b8-9518-2af924485ef1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c5bf195-89f2-4a54-9737-794ed68f51b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.255']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acf1cf46-c5e0-44bd-a59c-348a709f4cfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.26']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98a15a36-10ab-4d6e-8e58-1db2240e40fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.27']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a3c5cb2-f1ac-4068-813f-bb98c5b1b255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ca30afc-e3e3-470b-96fc-f06e57c2c308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc1bac83-630c-45d9-ab6c-3d377da13550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.3']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0401d80b-d07f-4712-a381-6086b0c2b51c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6964455d-2f86-4697-8af2-882d2701753f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca8f24ea-a9b9-4435-a9dc-b54d1aeafee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.32']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb2e0166-e470-4894-977f-78e0a8e25061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.33']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89b30a61-6e57-4ebf-9112-5b35a01b24ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.34']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd9e195-9a22-4f74-ad7d-48e0167b7846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.35']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--820df589-eb9f-42ca-8d20-971b0cffa42a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.36']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04b5acf7-b4f6-402c-8311-97ca06f14769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.37']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a7cae1-fadf-4002-89d7-4b9841b4ec72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.38']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f9897ad-81e3-437e-8d95-579a4d9fbcf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.39']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7c97351-e052-4c48-88ae-bc98a1222c6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.4']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4c2b5a9-47e3-4ec7-9dce-9070bdc176e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.40']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a69647d6-5707-417a-afe8-8173508fbb65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.41']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99470506-20f8-4180-a29c-e510b75e1efd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.42']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f5370a7-93cd-44d1-904c-84f23ea74a31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.43']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b08f12d-25e5-41be-9447-0fc80571ff33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.44']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0ddd6c6-9104-4599-bc36-c537a0c9b9df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.45']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4460ea51-ca9b-4268-99e9-f84b87c67d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.46']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--614c8e10-869f-46b7-9641-26e7afb9111f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.47']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--219f1078-a8b0-473e-a21a-4aecce123b1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.49']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd1eaf2c-cabb-4b34-bf52-342f56195610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.50']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94c63dc3-04cc-4873-a41d-b90f34db01f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.51']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21824417-9b6a-4788-b4c6-97f30237f743", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--780bfb84-4425-4841-897b-2c6fb499b1f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--792324a8-f469-4660-ac0c-cce8f28301c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ed24073-7dea-49bf-94b1-b32f89cf48f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f43d4d79-a403-4ffb-842d-9317045ee729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.56']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--839de833-a754-4fae-a448-19397558ba37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.57']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b4d3825-1d29-427b-9e92-c11cd64e63f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.58']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed5c3a2-449d-43df-980e-8c014ff56ced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.59']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--831d5b3b-3e3e-4577-864a-a6244c8b2ed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.6']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d66a9399-af4d-4fe9-8218-1b87ec60bf87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a64dfd43-d50c-4c1c-8895-615f6e09dae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d13a52e1-f4fc-4918-95ee-401bb2bbdcd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e73b65a-f290-4934-8f83-301a9f087d6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b25ec0fe-1417-426e-b903-ef0ab6ced1b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.64']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f60211b-a6e7-406b-81c6-7bd6ba6a112b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.65']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6751456-bc45-4be1-91e8-bd2d9e58a1c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.67']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--509549ea-3eb0-46c8-8b01-c26caed1f1ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.68']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d6a096-efcb-4655-b4b6-c49e507cfdaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.69']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efbed071-cf09-4a01-8f5d-2fff8236cc26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.7']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccd5f124-5f1e-4aba-bb61-052c38be1899", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.70']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87b1fa9e-1e55-4df7-9908-9d1e06d588cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.71']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68cf7283-9eee-40ce-9fc6-b99d939765e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.72']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0133e9c-6dc4-468e-8717-893568ed3e70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.73']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da789ecb-ab04-4658-b5cd-12d17154922f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.74']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15f86c44-91b2-4fa3-adbb-2ea844e0d6f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.75']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7012ab10-59b8-4440-b27f-a59935e83be7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.76']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77bed559-fe8d-443c-9575-148147ab1fd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.77']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b25c6e9c-5b47-47b0-8a0c-a915c5865d08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.78']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c39d2d7-f33c-41ce-88dd-f34ce35c43d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.79']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--865c46a1-aa7a-49e7-a83e-5a2a7bf0fbe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.8']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b5679da-2649-407a-8cf4-277044c03220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.80']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8d0dcaa-5e35-436d-8f23-08f7f3cfd698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.81']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4078f59-76b4-41ac-a489-6b19802ea613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.82']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43ef4372-1038-4451-b59a-f9b8a4fe88b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.83']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d8d2d0f-c6d1-438f-b31c-60a0aab88f57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--154cfcc9-3c11-45e4-a3a5-87ad7971b6da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e5086ee-71c8-4555-a212-caba3db99454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eb8e9b8-f1a8-448e-86ec-a0a7b28f2b15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d805d760-157b-400d-92d6-9f13673459be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.88']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b7cf65d-21c1-45d8-9623-3b0ca586cd29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.89']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba89ae9c-8365-478b-b843-6d4f50765d04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.9']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5690b915-5b6c-4066-8b76-a827929ad146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.91']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--113c4431-62e1-4bf6-bf45-0179e9898219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--804ae68e-fbb1-4f8c-940c-63d0d137b1a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--907b9b73-e145-4794-a27c-b0e8f9ea25af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.96']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6f8d879-bf6b-4537-a62a-195a487ecf40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.97']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8032329-1854-4120-b5ce-23eea00ac278", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.98']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd38f81e-0db2-48ef-88a4-fadf68f7f8a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.99']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99bd3d81-82ad-405a-a32c-9421b9634e3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.0']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ce7ec28-0537-470d-9191-a54071947795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.1']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f7be040-ac6f-4bae-b482-0ea936a0d75e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.10']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e1ee822-4bac-47ee-b32d-81e90ba275c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.100']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86acdec0-7c16-41bb-baae-3f96e63eb885", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.101']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f28459f2-ac12-4060-aea4-23b7a0125b9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.102']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3024c03-1ab9-4ffe-99c1-8cf334bc2036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.103']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8d1eaec-9e6d-4bc4-bd19-695c924e0816", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.104']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19f07aaa-6f88-4161-a211-a58aabfe030e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.105']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1b8acd1-0682-4827-8287-11cd302ec288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.106']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21b889bb-9a33-4564-8c20-2cda79c56a4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.107']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bb2de39-70d8-466b-a98f-95533cf0aeb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.11']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dbe9439-d8dc-4757-a5f4-c88cdebaf490", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.110']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e73f5a-c694-49c7-93bc-5d3b7cb04b49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.111']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba194e8d-e69d-40d8-8b39-52e9bd01303c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.112']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f086cb-ec2e-410b-a369-760510f9d02d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.113']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81691ea8-38de-423a-9645-1175aebe391b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.114']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5563972-f178-4371-8261-030a3fc35738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.115']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--750641d7-754f-497b-a0de-0e94b3f66a8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98174938-dc09-49bf-a93c-037781e5a080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db3b70ae-9fd7-4e92-bbc5-db215583dd6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18d500ed-bcae-46bd-bc90-b661987ed03f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.12']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9aed4d4-8c71-4377-b2a2-dda0ab1200c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.120']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9822172a-22f2-47de-b1d6-c8a289019fa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.121']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8612ba22-99e8-4587-ae70-9113dfb827d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.122']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e50752ff-0d6f-49b1-98df-81ef25369bbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.123']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--115d5428-4e92-4c1b-9a14-6195cc1dc893", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b184292f-9a9e-4fec-a432-1804ad066687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3034baa9-5276-4b5a-9011-4a52bbc524d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97fc74ed-9246-4601-b71d-8582c87145db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6f88358-1336-4bf9-8753-f0a6fbf69c19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.128']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8abdd5a9-027f-4b8c-a839-37693de4afd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.130']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9974f372-4304-43af-86e9-528d4fc0f71b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.131']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dac25ba-f966-4ba3-b4ff-914031374c96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.132']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--045e4ca3-8ae2-4cda-8ec7-59bafc9f6b35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.133']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df885a0d-a237-48c2-8937-318796ce27a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.134']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--629f9c26-2c15-4dc3-a1f7-25fcd88193cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.136']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0555031-354e-468c-b8c8-5bc2e48702aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.137']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--754edb45-7f04-4e0f-b885-26da59f6b63e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.138']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fab7f11d-52d7-412f-8461-086fb9cb6d8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.139']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d27bbbd2-75b5-4565-ad3e-a358d1a43f64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.14']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e1a7e7-1f61-4112-a3ae-f5440d4ecfea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.140']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab8b0fcb-83e7-43cc-a41b-d5acb989a559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.141']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9893310a-081a-4589-9a88-89068c7a2769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.143']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ff5da1d-a695-4f79-8a5f-890372bdce3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.144']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1df8b774-54b2-4d32-921e-1e6f9b583726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.146']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8a99c5a-b3e8-4085-9b71-c8f519ccb516", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.147']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee22c637-8773-437a-9eb2-a5a294020a10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2bc8012-fcb0-48b4-9c03-43dde8b646ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a0fa442-f5f9-411f-bb6c-1e4a13099c99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.15']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20357055-04e3-4153-95cd-0408dfe03ece", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--065dba15-64ba-406c-a1ff-a0813a74c869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b68a15f-e049-4c26-95ef-b07539185794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.152']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55fe0a16-4a26-490a-bb0a-5da561ceb1a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.153']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9504a37f-0662-4f6e-9afb-b80a0f6dbd4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.154']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e9b356c-edd0-4748-b7a8-0af036db35ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12402d45-e50e-4145-8add-7994280ab4b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--960dbddf-5e16-4da5-8d18-9f028ba05295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.16']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35cba2fc-e7d2-48fd-9da7-ae13a65afc23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.160']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--073141f1-2177-4ecc-b953-f50e7eebcefc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.161']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--733c9404-6f89-4ba5-935d-5f156fd03ab9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.162']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c6ed013-df44-4ab4-8ef8-c645812de58e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.163']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d03eae3-fef2-457b-bfbe-5308c69f2cf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.164']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90973e3d-e0cb-4a1d-93e3-3c2b288c5656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.165']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dff31be-990f-49cc-b9b1-dad0bbbce55c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.166']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ed41333-ca95-40b6-aba1-542d2bd8dcdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.167']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52dc025f-963a-46e8-8ba8-2d5cdfc32673", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.168']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beefbb4e-d9eb-4525-929b-87feed781260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.169']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b68642b-f69d-4bab-b7e5-a47d78730d65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.17']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33c9045a-bc94-42a0-8c53-a48350c8a8be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.170']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9a650a6-ee95-4636-a6b8-90c2804b164c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.171']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8612e7aa-bfa1-4681-a3a2-895eebb78d75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.172']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96128b30-def3-484a-b254-bbb4dda90c27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.173']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e482e96-9f10-492e-aee4-7a9eb63f1e9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.174']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26c64486-58df-4d26-8571-e86900801a68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.175']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb9eb89e-6b4e-47d2-8786-90201e7f7607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.176']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a56261d-2f9f-4563-8add-ae293d8bb70e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.177']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24460072-a472-4890-ab48-9a56ea3ef80a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.178']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--317f1218-b23e-4ac1-93a8-0244d368819d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.179']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f8cbee3-98d5-4a95-931a-98b17fb89233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.18']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd7f16e1-b206-4f9e-958b-e54c7de8d6ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0edb35e-ca6a-49f6-8ea3-d59902ec4538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff7e32c7-5474-4ade-937e-fbc8d0bcc19c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.184']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6bd1d18-85e9-4fef-bfa0-9a76e5f43d9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.186']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d01c1af-edae-4fcf-ad17-f4ce73edb68b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ac41aaf-17b2-4ab9-a812-89849a10bbc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.19']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abc8d1c8-7f20-4fcb-940e-91f2783e833a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dacc8762-d2e7-41c9-93eb-1ecdc4691e3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--925ee95e-8a89-49ef-a95b-a74f0630d3d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.192']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b16ec2f9-27fb-45b8-85ed-55498dfd2848", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.193']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1669a5f8-aed7-40c8-bd7c-e5ffb840d943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.194']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b891f35d-23dc-4508-951b-fa32cab90101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.195']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10bf873c-576d-41ea-8616-9f3927b53673", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.197']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e51025c6-4d4a-4bb8-b2eb-ae24d1ccc249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.198']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96b73e7a-bd43-42f2-82ff-88c53a17ff6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.199']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f057d5e-0351-4d3d-a182-7f1dab59031b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.2']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f429623-7254-4612-a95d-3b107238de59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24543b0d-2e42-4175-adf3-178d1f62549d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.200']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb1c6660-bfe2-4958-bb51-652b37f44b56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.201']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7b39bb7-ea77-4c28-b476-40f7687ccd70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.202']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dabe9c5-9558-4f1b-a4fb-8c2aa0c9265e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.203']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--082de571-1453-4b45-9586-0d217b9a7eef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.204']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50cb5136-f1a2-481e-aeb3-251edbb36355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.205']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4273466c-7881-4137-8521-6480f8ffc243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.206']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f03c7c9f-e080-4b03-b2eb-fbd1c653c66f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.207']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4f5907b-1729-4133-8c96-ea2d7257b5ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.208']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db37aabd-6bc9-41d9-b4d7-b2172463f583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.209']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fc54fec-1a08-439b-b946-03acf1f641de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6d6c19d-770c-4102-b3f1-c7ef0abc4fdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.211']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35ede99b-59cb-4475-bb73-81b9e43ffdac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e157a2a1-da90-4d2b-bf99-4e1b9ce13675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15606299-f552-4912-a550-9b7bcbf50808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58387dda-2b99-4151-98f6-e0b11a96500b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bb4a778-b4ac-417d-8aa1-7ea478e75115", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.216']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41af2378-005f-4d3b-b89c-ca097a9f1c3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.217']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d72dfa7-531d-4202-a810-8f2a3ac87e5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.218']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98d30dfb-24e2-4ac2-b555-00f6c685321c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.219']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6692c69-37bb-426b-8817-bba905b75413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--389c208c-f267-460b-9026-1fe42513b72d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a968856c-598c-4e5f-ba15-4b0200fe25c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe39f2ff-a369-4eff-a891-868cd486bd75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a82dfe7-e786-4044-90f8-736615d26f39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.224']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--792acc50-f72f-4490-9f1c-f7647d428107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.225']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e64d637-d977-4d90-b6c5-dc9738e88b02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.226']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--768d898a-6c14-4df9-8a2a-865a290656e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.227']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4784c8c9-b679-440d-ace6-1526309618e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.228']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--483da845-3e4d-4ad9-8ce3-8eebf01c3676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.229']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0139fcc7-ff81-43a1-a9ab-7014fc7b1a14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.230']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deb3d389-869f-4bfd-abaf-5ac90dddaa08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.231']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--455133e8-599c-4f1e-9c09-b12f67e31b9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.232']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49849ccc-1a8a-4e9e-9f44-18bf129f8ba6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.233']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1beba56a-56f3-49c0-8c42-14b25e6863b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.235']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d9dc89-2c79-415d-9190-a44c3f9ffda2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.236']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd97e03-94af-40b6-9686-2da17b666d51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.237']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3730da7c-2ded-49f3-a6e2-b774296f6b45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.238']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01eedb50-0aeb-4208-bf6f-00fcec4a6e57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.239']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d544d22-0d77-48c0-9f94-cd58dd407037", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.24']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7a1eb36-6e2d-40f4-9d45-2bc1d06f224e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.240']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--153505c3-c476-4847-8ad1-0b1b3f0694fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.241']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81442127-0f23-4cee-acea-20ba67baaf49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.242']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df4c09b0-ae29-47af-8a3b-f26f7819d379", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.243']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--925d143f-6e58-4285-aa56-1984e512fc16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37ee08d2-ea3a-47db-a8fc-bbcd76ba5a54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43008c32-b1f1-42f9-b632-f1e6b1829af8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41604dc9-1efc-452b-9a11-eb238015a19c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8272059b-80ff-4095-b376-c2f58524fed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.248']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d60283-1f43-4adc-a213-662ca8278d78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.249']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61c43dbc-7344-42fb-a5f2-efd0315b2ffc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.250']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55541ec8-f318-4062-96e3-a4e76b68094c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--701d02c3-c3f6-43be-b37c-8895885b04a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6fcfe12-4bfb-4990-ae17-d3bbc421ee5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bb60ee3-6785-43e7-925b-b6c6ab5ee3e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.255']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8670c47-e266-4477-8652-451f36b4e078", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.26']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f05a38ad-526a-4365-a403-192f9e43c769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.27']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59936a25-fa47-488d-9363-2053df262b8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74d45aec-762b-4174-88d5-751d67bd06b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d230aa15-4e18-4e03-b6c9-b6ac1cf43f41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.3']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fec91f43-d252-4444-93d2-95639198368d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cdfa8e7-23b7-48ab-963f-cbcaa3f169c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23a609ec-160b-4dca-8ce8-96e3cc4c8355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.32']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6dbe36d-a071-4b0d-a0cd-f0c14ed5ab41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.33']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1e6b1b1-0fc5-47b9-89bc-d4669c063f72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.34']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42bcfd6a-60c9-4fed-a19f-5c0d4ce7ce70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.35']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b46088b-d57e-476f-9a45-5e2958083fc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.36']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1954f9ba-803e-447e-bd98-0e70d15adf15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.37']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0521975-4d0d-427b-a070-c5c546dd917f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.38']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bed6105f-9a2d-4c78-b10b-eb61f1cbe497", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.39']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dc09bf2-119e-4f13-87da-40ec0cf2b203", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.4']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a1ae105-2100-4457-a4d5-49f4f263e9e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.40']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6596528f-35fd-460b-824f-32bff7814fc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.41']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28c112ba-4597-465e-8746-139b7202fbf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.42']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd060d1-ca34-42f7-8059-523303bfe656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.43']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2be1e9dc-1bf7-4aea-8930-2902ea4ac788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.44']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69b1e2ae-a19b-42f7-a684-0fb10c55cb1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.46']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e351d3d1-a10f-4a2c-b454-58f22a0264e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.47']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78480ba5-0c59-41b3-a5dc-a505b76595b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.48']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33317384-1986-4be1-8b8d-91dde4a0008d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.49']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caecbaeb-6ce2-470d-9458-e4f15aa89b02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.5']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cb91203-0cef-4128-b0c6-0520b6901666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.50']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4440f80-50e5-458e-a382-07683b707d22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.51']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--994689f9-ea4a-4651-ad05-64ad8ba41403", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--219f3ce3-d478-443c-884d-d7088e628aee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a00205b6-82d3-4d38-9577-7d079362317b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f08ab4ca-4bfe-482b-88c9-d202a6cadc50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.56']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad138ac6-3da2-420f-8bda-6b0e09dea6f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.57']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--841d76c7-6245-4537-a26b-51a7027d9cce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.59']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b45d350-d357-406a-9713-f79d6e1dd6a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.6']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cc796f6-6585-4460-b2e5-713e8bdab1de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00f2533c-dfc8-464d-bd68-551818f51f63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dfce59f-7dfe-45ac-b801-c93a2b889058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1236c8ac-b7f4-444b-b0e5-bdd74ae0e289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc583c6a-920d-47be-83d4-45f2261cd6a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.64']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--769f3e2a-801a-474c-9f15-385b152fc6a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.65']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eee0c70-69f9-4524-bcd2-e1d75a343205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.66']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35db78b7-6b29-4bb8-98b3-94ef4568c765", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.67']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dad194ab-daa0-442e-8a1f-c5024612b8c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.68']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e6d4291-0344-4fdc-91c7-29fd4d31cc29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.69']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7bfa16e-cbd7-41e4-8e13-64bf0bd313bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.7']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcdd18ef-020f-43e1-b147-7980efdfdc32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.70']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b565048-9405-47b8-93b8-53c67ea1c395", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.71']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d824a719-1b90-4708-8f49-bc1df9b5625a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.72']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34175b75-2d4a-41c9-b90a-dd84b2fa42cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.73']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92d7ff04-b9c3-4f95-a0a8-4e10ff00d4f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.74']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aacead5a-cf80-4616-b6d5-2f482543fa4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.75']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3509a943-f543-40cd-b514-acf4c5e89e8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.77']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d876fe7-01d5-4f02-9e8e-cd8f04ad6fba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.78']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1acbfc1-de86-4734-a9c0-19dbcc84cc86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.79']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e5df21-99d5-4e51-b4f0-c11de84d1228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.8']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8ff21e7-c0d3-4396-8904-4c81806dd3d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.80']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--190e40d0-1bfd-4a50-b001-2baf289cee3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.81']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2ff14c0-0b0a-40a4-94b1-e697ce7c0a6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.82']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--300aee96-eca5-4aa3-9b45-e9198a76be76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.83']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6f64c78-08ba-4ae8-bdbc-3bc01f0f93a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2284222-d17c-4bdc-bd30-e2d2c8311289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4d1fd21-8538-4171-8623-2715db00406f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.88']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f716909f-fe13-4d2c-beed-952c81b97ad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.89']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9193c799-cbe1-4326-af72-558d6a093537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.9']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddeada20-cc9f-4cd5-86ff-affa520cfa47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--592ec58b-b24d-423c-8fc9-82fa6a8c5bfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9312d6c2-49f5-4e3a-9082-07e710c3db65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1dc84ce-3eab-4b6a-954d-b3bf99ca7b29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c9ccae5-d211-43ce-be07-0a5cd3305ce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.96']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b34c8d2-b9d4-4048-b661-7728a078723b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.97']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ef1a41f-df20-4123-a958-de80c6afdf4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.98']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f6f39a2-0ff0-439b-b960-d47258a4d285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.148.33.235']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--361fbf93-9f45-4049-887b-d3a3f94d144a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.65.109']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3a21d09-ac8e-42f2-804d-2f86f72c7c0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.173.4']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7836ce17-2abf-468f-a74f-af78fe6c0cc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.65.122']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--507e1856-339e-4e9d-8bb5-30ddfcc0421b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.16']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d4a8ea6-901f-4dd0-b39b-a88b20ad54cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.17']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1420838f-7de7-48e3-899f-3fc9b411f83d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.18']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be13840c-b74d-46fa-8144-8207e90d1cf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.19']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a00b665-eb27-402c-9372-5a4c38c46691", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bb56e81-0d90-4ead-abd2-05a3024fe0de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccee4387-ca66-47d1-ae86-7cbaacecbe96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fab9e89c-b987-460d-bf01-200de3b68bb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.24']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a091e047-b250-4a41-8144-3eb69770fb06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.25']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0607bb9c-8a66-462f-8ab4-a55da1e24a33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.26']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87e0be9a-72de-4fad-9f20-6f062bc90b90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.27']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef58795e-3d19-4b26-b618-b93e51b7676b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f84630d3-0617-4c85-8e52-cb1f7af2180f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1b23ef9-bd64-44d2-b620-a3d150ec1ac2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74bd9a18-ba42-4077-8aa7-fcbd0776e440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09958db7-9479-4f34-86f2-be592fa41ffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.48']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aece6671-8457-4b4c-9e84-3f87a00573ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.49']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f358e43-6a22-47c6-a4a3-c1aeff4d5743", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.51']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--616a4bf4-7b61-47e7-baab-e0b8dc08d7bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c263b768-a27c-42fa-8cf2-79548a34f726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.58']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--976a4cac-bc15-4751-8305-d8f8d67d62b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c32e9e0-4981-4e1a-bdf8-93775f9732c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.65']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--478ef0b5-ce3e-4d9f-ae8d-5519d2782183", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.68']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7b36ee7-3eff-4142-a73f-c0fe43ab82ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.69']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d84af54f-53fb-47c7-b56b-557e5c366dea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.71']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e0236ea-1d6e-4a9e-b591-6349bbed4997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.72']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d61cb03b-3806-4fea-ab97-3ffcac07c1b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.73']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de688594-64be-46d2-a158-c4a2554f207b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.74']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--847d108d-4ca0-446a-b17a-6cc3f72e4e48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.75']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac34866c-d854-45e6-9c32-8bc302fbde43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.77']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd09c157-60d6-42d9-98d6-7a0e9966564f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.193.153']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--198cbef3-c42d-46eb-bb1c-ac89751c3d5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.244.46']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2483e5a-1dad-4240-885a-0a6ba986dcc5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.107.89.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b941a289-400a-44bc-ad3c-2f7e88f9f6ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.110.195.99']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb6e033d-bc68-4d47-8a6e-30081cd05661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.161.103']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8bc75f6-a851-4807-ada6-28cbf38f56cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.167.83']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5658b90-b7ac-414d-b143-a147a2562bf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.169.217']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98091f14-c0ad-45af-9a76-99d0f9de4998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.171.206']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2a6b656-2f07-47ae-b658-45d8aaaff0c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.45.217']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9437afd2-4975-40fb-adff-894d33dc8664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.196.206.14']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--626c4916-660f-46ee-b09a-c140a1661eca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.227.224.197']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20c76693-68da-4e14-9bba-754d43f18987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.76.20.229']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ead27ad-9307-423d-8091-2e843069f50b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.90.211.24']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f03a985-c43b-4114-88e6-8bf42de76373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.211.128.234']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dea6228-e834-43c5-bada-97ee3218931b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.58.124.39']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ad3beb0-415c-44a2-ba78-94fb756b06d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.58.16.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--641f9012-efb5-42c5-9e1f-ec5bb107e10d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.58.190.37']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--122702ac-5a7c-4e44-9289-76dcbad2c557", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.58.30.170']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3938984-1d30-481a-8064-eca67bf619f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.58.72.105']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3385773-1851-4c38-9195-d8136cf994b7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.152.218']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2877773e-c6ba-428c-be98-b42149544e90", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.165.76']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5dbd4f0-5081-4276-8c40-30fffc70bc43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.187.106']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28db9f69-976e-4c44-b6f0-3a515bb3dfbf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.72.178']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--074a147b-1702-4761-8698-305dcbfd8ce2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.81.242']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5bb1a34-2be9-456b-b82a-51ca9e35b63c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.144.207']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b2954ce-e6d8-4498-a536-c37f8281de5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d56fce-0fbb-46d9-a588-2b4294c5348b", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.231.132.243']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1552e6bc-1728-4a70-906b-f56a8bf1c82b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.233.57.178']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41d88101-ff07-49ce-83ec-4125c38f3453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.39.184.167']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb080594-1229-40db-8481-9f7a3f0afc99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.139.153']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79fe66df-2a75-4efe-91b5-200091ec4310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.143.96']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1dfc7be-3704-4fd6-b6b4-8439396d2707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.179.26']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d07c45e6-1090-49c8-aab1-4826f41f1925", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.187.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03dfa82e-ad16-4152-bc3d-efce919a3cec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.232.186']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b72a4afd-8cdc-4d15-b8ba-3653262c16bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.234.39']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c70d1b0-0bf4-4386-94fa-d08433c461c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.237.194']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23aee70c-0fd0-4377-be6d-6ee1b2aec12f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.9.21.169']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c245149a-aeba-4d8f-8554-76a6394c37cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.101.5.74']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cd26291-6b6d-4ec8-bab4-81189c43901a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.104.83.173']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dd00e66-062e-485b-9eea-32591464ba36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.113.215.24']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d52a344b-1e89-42a5-847c-19644b11e504", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.114.226.133']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21e5af8a-1701-4832-b7fd-ddb92d44464e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.232.188.130']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dffdb1a1-0502-4f41-b6b6-e6846a612fac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.244.14.216']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2510be9-b8d6-4923-ae7d-50d8f96aa417", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.244.201.102']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f63499f-284c-436f-93ec-25ee358a5b80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.249.227.250']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb97cc96-11f6-49ae-8588-8b83fb178a07", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.25.158.68']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40cf192c-7932-410d-9033-dc300767d9ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.38.147.66']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c66e32d1-6278-4817-ad14-478c04af5470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.83.29.58']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2d4dc8c-f689-4a05-bfa5-0972b675eefc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.100.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a50e4527-0b76-4511-9e34-69ac5ca28b19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.19.160']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--555407ab-cf5d-4c75-bbc7-eb3cffff3328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.190.164']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b07be4c4-3da5-45c9-98ab-89c974b4358c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.128.11']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47b3e547-28fb-4eae-b957-234d245d9602", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.128.12']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7400d609-a5fd-4a2e-9045-654b74ff65dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.128.13']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4660284-4ec5-4cd9-bf1f-a44e4e4e4b8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.16.139']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a525135-bcdc-487d-810a-b67a16d9d448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.199.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57112d8f-d857-4356-ae0b-9fc5ff957ea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.208.132']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93363991-3cb8-4b3d-85cd-6b413ab727a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.173']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--012b7b65-64ac-4f56-a3e7-9543f1c74894", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e235149d-8c2d-4686-9501-404893892704", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.169.234.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--898a4347-ea27-4980-98aa-b803bd03cd3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.169.235.72']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93550fc6-2e4a-4077-853c-c5c98f08815e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.169.249.66']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11828cec-c23d-4954-a762-2016d5505380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.172.164.173']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b8f8636-98f4-4c3b-8ef2-2aa153a85216", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.172.164.74']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9de3eb5c-ddc1-448f-9c5c-adcdd02e746f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.172.232.78']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6143dcc4-c369-4d9f-a5f8-76c230e6ec68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.130.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72a13f27-4ec6-47ad-8a9b-1bdf1af87ba3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.201.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a50b6ba7-e49a-4e11-8328-b327de3e17aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.116.4']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45fdd4bf-8a27-4cdd-84e2-cd6ddf5846b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.180.64.79']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b66c667c-b654-4aab-ad7b-fb1702efc993", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.180.64.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b966079-a1e3-4af9-9042-ba982c42a045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.180.64.90']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a1ca29-1d71-427f-81ae-fc4ef3130117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.180.64.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ee74937-a85c-492b-a090-f2b75d05bbc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.190.108.82']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70fef7a6-65c7-48cf-943c-b94bf2f7de23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.121.66']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc968414-46e4-4309-806f-e01b10bffb83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.133.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd69121b-7ba3-4630-8428-4fc4d0de6b23", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.211.171']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--960ec84f-b072-42f7-bdf4-1e162fb39599", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.218.10']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b265a707-f94b-4254-a2ff-c0ae46abaf5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.208.64.76']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94dba5b4-b773-4565-bea4-4251e6f2f645", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.203.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--062bdaaf-96e6-450a-a8cc-33b3fa57c3b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.228.32']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8350278-bbcd-42d7-b83b-95bdbe4a44e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.108.36']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19f956f9-d730-4777-adda-6b707a5769c6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.160.83']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fa4a11a-f755-4333-a1cf-0da4e2ad625e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.187']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36770b89-b002-4682-a7f6-9ac54e28f121", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.235.142.152']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb58bb75-96ef-428a-bd1b-10cbb0e1b222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.142.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efc2ef36-acdd-4a62-bdd8-85938b2543b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.197']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7708cff8-05d0-47e1-8a33-98ac280bae43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.167.164']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffcac891-7aa1-45e6-97fc-649f20999f63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.171.10']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7a7533c-75d1-405d-bcc7-10ebf31bf0c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.112.205']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cbc4a5e-beac-476f-aba0-6e2ee0a247a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.16.13']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f07e4968-a807-47bf-bffe-ede5b9f5baa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.56.179.140']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5ba5613-9600-41f3-96d0-80afcc2d2250", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.82.67.187']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3d2fc95-58d7-4377-95ac-519388e95634", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.83.252.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73322695-c010-452c-957f-b61f80032def", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.83.252.185']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62a5c382-3fa7-4119-b6a5-3129f11e844d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.83.252.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ac295d9-cb2e-495c-b057-c78ca13c2e17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.83.252.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3267c3c4-e482-4b2d-a944-c8dbe24fe99c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.83.253.251']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c505a3c6-b078-4709-b322-463a45c72f85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.83.253.32']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43d13392-79c8-4b39-9de5-52bed479a853", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.83.254.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--610cf1e5-50c3-43e6-92b3-a0c73b93d6ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.83.254.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aff3011-cd31-4a9a-bafd-02be465eada2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.86.81.45']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de805147-1010-493b-8348-f6e5b57ffa94", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.86.81.51']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e4b3629-b915-4630-a814-729dd2965533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.93.111.199']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--090b5676-220f-4e19-9097-95d9f85949d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.199.117.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cae00fd6-e765-4e16-82b9-c8047a79d8ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.212.217.75']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e77569cf-51d5-41a3-b1b4-5bc4b903a899", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.230.145.106']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5eed0d0-bae0-4d9c-8dc5-e9dda7d39f14", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.239.211.80']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--956aa005-21e8-46b5-8252-e84036208f32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.192.234']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3990413b-581d-417b-9aaa-1fcd724a430c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.192.58']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fc95bf2-789f-4536-b927-60669fac958f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.103']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cb0c303-1a86-44e3-b3dc-9c03b72a18a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.227.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5fca88b-3bce-4e01-9e50-0b68a8c629d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.227.90']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73b83b3f-aef4-429d-a364-58b243fad79a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.243.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9758828b-fe76-4523-abdd-dc9a0b7f5b67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.129.56.240']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91f5c970-fc5a-4219-8377-1d4fe83dcc5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.24.129']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbf0505d-6cc7-47b4-b364-cec2cb8245ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.42.196']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b36440b-98ef-4ef2-ab07-af8b672d81ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.87.36']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3be01d84-6686-4b38-9630-11f4b2d3beec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.5.48.88']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23b06a19-a671-48d3-beaf-1514e8d97cf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.10.220.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f12b217-6e29-4442-bd9c-779b937a73d6", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.107.1.103']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87e8a9e4-b316-42b0-8e77-f953a20e8aa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.11.134.176']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fda30c4-c559-4877-995f-1d1f35da8e5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.150.29.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f492f843-88e1-4a49-b1e9-edb383ee2b7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.158.61.133']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ed7c5f6-b0a8-46c4-bdc7-74b1cfb99123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.208.192.186']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0a3c18b-63d3-46c4-bbdb-9739fe0cd3c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.30.48.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e79ec1e5-d240-4765-8bfd-306dfd73f50f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.8.93.39']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ac74d8-6659-4e20-b5b2-1f93f1e580a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.105.208.205']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--770ab6e6-5d6d-4ad8-85c2-d18039c99f16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4dc1d16-2c19-45ea-ae13-b12c4842e580", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.211.30.69']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d991303-3dce-4597-bd8d-ae966646ecfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.32.193.16']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2112103-2b2c-4da6-bb66-7c1711d8ccdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.36.161.9']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b52ce75d-1286-430d-a489-a88438ce715a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.36.51.77']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--203699cc-1ff1-4155-84bf-19d28db71a8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.39']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62eb4767-de1b-48ac-ab8d-f9456a3d7a58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.134.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c675792-1b1a-4519-8f2a-032dad17c05a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.139']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--812bbfa1-5ee9-4cc9-a050-816971d175de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.208']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d96e379-bcd7-44d3-bb5c-0c8deceef527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.219']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b11d1c97-1d69-49eb-b25f-f2fe7ae82228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.226']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10c5dc34-4eab-4bcc-9dd0-c8bfe4c8782b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.144.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7de1cbaf-330a-429a-a272-28c57bf4a2a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.216']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce4df5e2-8926-43a0-a9b8-0cd9ba6e8c96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--099d758e-50ae-44dd-987f-427688072722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.71']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--697001d0-b633-4db8-867f-0983509c5188", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.78']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a44cac1-312e-4a07-bb33-56182f9dd95d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--916d6011-96aa-4256-b8ac-f7ec1f80c013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c577466b-7d5d-4f84-9d94-370df5edb951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.96']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fa68332-e01b-42d1-89c2-a97e21a40ccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0a53605-b760-47b0-9d18-b994d0f730e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.193']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ce69fa6-3179-49ea-abb7-852d00f8e19b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34883b86-8e1e-48eb-87c7-89fa6297297b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24279d17-4583-480b-8129-146fc6709401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.224']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1c08848-fb7f-45b8-9755-94e00663ea0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.230']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f865f32-e46b-4303-ac45-e78926ae7390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.233']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a599fb35-0df5-4f24-b604-d3724861de66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.236']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48811a66-a700-4550-8331-4a83828a4d94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.27']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37f785fd-200f-4874-b9a6-d89a59cc6e12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f129919-7053-4746-ae65-1602335af1a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78e9e906-cfa0-4ca5-bab3-d0b737e1ef0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa3558d2-7172-428b-bd06-0ea658201be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.64']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d44eac8e-a68d-4966-a5e2-b14d64fe2285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.67']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ca0ce6a-0d70-4618-a0eb-1fe2cb7377c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.0']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--219e4233-099e-4cb5-83e9-9bbec94341b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.10']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f8aec77-8e17-4446-912a-b5a5883fe965", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.100']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c83e7e7-1249-49c3-9f32-cc3a7141aac3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.104']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41df6344-78c7-4679-ba7d-23eb87bc4682", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.105']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2df482a-dba3-44d7-9736-664d00b78768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.106']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b00bc72-fbd8-43dd-a634-85b689849e4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.107']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cbe6999-01e0-40ad-abd1-3678cee1e251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.108']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf11074c-3da6-4780-9772-71665da8fc73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.11']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1edd019-5080-4336-be50-7240a1fe5924", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.113']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea65e9ce-02f4-42d1-a757-8200e6bc50b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.114']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53dbd75b-3d78-4832-9e18-70b833635648", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--357ccae5-dfcd-4f36-83f6-66fc87da3dee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f2a09bb-4254-4df8-9298-fed0a228f168", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6a3a9f5-548b-43a2-be80-444d933e72ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.121']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe917ee3-e851-4122-a9b2-0624e26e9fe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.123']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--046c2511-1599-4d5a-bcb0-e5bef77a0d0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22f9cce3-d936-4b18-9028-783098632954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec7ee24a-1e81-428c-9a18-74c0213ffd2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.129']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f610ba27-a91e-4790-85e5-bf0816ceaa8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.13']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07d26540-3179-442e-abc4-8edfc1ee9a72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.131']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--877c61ec-923f-4fde-9b72-8de55bb14f38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.132']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22a7dfeb-26df-47cb-96e8-793b78ffc6f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.133']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d79aeced-1d8e-4cee-9454-9ddb8fc92274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.135']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86d833c9-23a2-4aaa-9e0a-dc082336a88b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.137']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83689411-5924-4f39-bea0-0cf2ccf5974a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.138']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7660783f-01f6-4e04-8ed5-a3030c78781b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.139']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2efbf8d-37a2-4690-b9ba-2920df9ec5e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.14']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51c7c772-f9c3-4056-938d-0e4d2680d51e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.140']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d8a150e-9c88-444c-a32b-36731f2b1e13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.144']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c37ef7cb-1254-4e2a-a790-a3de26b5a9e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.145']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b389bf6f-bd9f-4ff7-b9c8-522285b14b9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.146']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6787d1be-8b20-4cea-8836-b2d396dcd148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab17ae9-8ac2-48f2-93ce-4b52ad9f07f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad82bf66-cdbb-4037-b698-d92cc578b258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.152']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb939865-1d13-47b8-a134-8ebd823f6ca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.153']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--339e85d6-690b-40ab-8e68-5c41ae117931", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.154']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90300594-f360-4b88-8e80-3ab126ccdf0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57a09917-b35c-4ee3-837d-d0f7fd5fc402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c02a7655-fdc8-4023-81ba-481d009b18c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.16']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66045270-8eaf-4fd9-8adb-c74d6dc97499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.160']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17159dcf-3793-4f08-833c-64e2788722f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.161']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d43af1b4-d544-4723-ba03-593e65c6b913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.162']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d95248a-2ceb-4910-9dd6-0606704e56c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.163']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff734c59-26e1-4a26-b3e8-5fd3f12252ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.170']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85a226da-609f-4b6c-b7cc-6ce148b4e45e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.171']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--212bd041-1a47-4f2b-990d-47436e2913f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.173']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93fa33b9-5149-41af-a52e-0cedffcf1243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.175']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d764b1a2-62d6-4406-a887-ef76f22d502e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.177']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd86162d-8631-4bda-9912-7afff2fdf2c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.179']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4351f044-1a93-466e-9f54-58ba5ad550ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.18']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9099fe9-590a-48e1-bff2-270ff5540028", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc3ba3c8-0c0c-4260-a02e-63cc248f9276", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cae97e50-3a83-4e7d-8ecf-77a6de5a155f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e516447-9188-4d13-9455-8f1a4b5a3424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.187']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d9d7e6-6168-41be-a563-315c4710b41e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74b721a2-256c-4eb3-965e-cb7374156e5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bf63da0-706d-43d9-83c0-20ac7657006c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b5e23df-ceb7-4aad-88dc-c0490a0bbb9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.192']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40051c39-53bd-483e-a321-47331b36c5a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.193']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fe49732-5d90-4e85-b8bf-6abfd255a41c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.196']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f32aefa-f0f0-48ff-961e-269934a038a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.197']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--239f6cd8-f2fc-4194-9999-9ef18ecc3b39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.198']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae0315b4-d916-4f4e-877f-477a6b28f953", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.199']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a8ce948-6584-46d4-91e6-a44ae553f1a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.200']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf4b30bf-29fd-45b5-8f30-f521eefa12ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.201']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79c438ef-aaaa-446c-b82c-f0e9e711f80a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.203']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--887067b2-9ec3-4d96-b5f1-aa6b0c6332eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.204']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b8b5b7b-d33c-4737-b22c-f5e8e673c2b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.205']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d2c4b71-ac31-43af-81ad-213f9796184f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.206']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--add5988f-fb9a-4eba-a3b1-d29234144e1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.208']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3e1a73c-3b62-4e0a-b2bc-ebf3087ff8bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--620b9b4b-89af-456c-8daa-fb69a17a4d3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.210']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1c528af-3ea1-4529-b514-f035806601f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c286bc01-7aab-4a3b-901d-629a5c3c7dd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36f5c768-ae3f-4663-9670-90b9659edfe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.216']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b98d703-a3fb-4b9c-87e9-86d4b9b95c45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.218']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84acde7d-ad16-418f-80e1-b00888c4e375", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.219']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edc2b110-d446-478d-b4f9-eb11fc69d048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b414a13e-7ea7-49cb-9fb2-eb91688f61b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81d66ae7-22f9-4871-a338-8948243a6539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.224']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6467fdc2-5d17-4206-a9f4-7a05d0a27e88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.225']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7155620-f8b7-4f62-97f6-b695a1431891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.229']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0509b4e5-50e0-48de-8e4d-da2c6fcc206b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1c8fef8-be7d-4fe4-bb9c-fb79d511bca8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.230']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4604bd07-998d-44ca-a9b1-776fb50c05db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.231']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49b39a82-0b95-44df-b4b7-9e4bcc9832f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.233']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a74322cb-5d29-4f27-b282-c8617d81d2fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.236']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c5d6f23-2509-4fd4-bfee-9be263e2fd95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.237']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec07b389-a948-40a1-a5a9-ef4230cea01b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.238']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--255b9f8a-f802-42c1-87c6-c9911d109b79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.242']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--866fb869-8950-437c-bbec-755884e3020b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21c9cd64-93f8-473e-ac29-8a429f179f68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad5f94a8-708d-401e-a5d2-1d0d2217aa79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.248']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--338c90cc-ddab-4685-9e31-f1e1e80c1fdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.25']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1471749-310b-4b98-9a24-57ca98689b0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.251']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca6612f4-7dcd-484c-9b0f-3d398a5c80ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26530e7c-4174-4913-acb5-4498056a4926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b57390e7-2a63-4639-a884-dd6561a0f0ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4bc8115-4342-453e-9065-11b3e348a44e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.27']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e38beea-f469-4572-b80f-900a20802f48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aabcc583-8a61-43b4-8bd2-827c02e106c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.32']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2761a9db-81dc-4ab4-a5a0-2ca5f96959f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.34']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f015be50-4b32-433d-9c0b-230d6e99d9f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.35']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3224c675-29e6-40b9-8772-d9e95a0b2133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.38']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d981798a-db7e-4f30-bbb7-7d5fec9d8740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.39']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e83afc7-b30a-4e2f-ba8f-b95533d5ab57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.4']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--908828a9-6deb-47e6-a016-68d600139b9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.41']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b51265f-8215-40ba-864e-3c90060c97af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.43']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d8ed744-0c13-4fea-8eee-ac983aa455c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.44']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51c9b4e9-0c26-41fa-90f1-79fc029885db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.47']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--780991ca-298a-49f5-a9fd-3671d1eb264a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.48']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--809a655b-8576-4de9-82fb-538f1549177d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.49']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e849e087-9f31-45b9-a641-fc7ee53de996", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.50']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce6b760-58f5-426d-8f22-cfd002734508", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.51']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2181893a-c7fc-45cf-b833-a97c0143e4c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f72229-3106-4384-bad4-fe5763e01f35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0554c0e-8c48-413e-9101-79572161f594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.56']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25b9690b-bcf5-47dc-bbf8-9b0ac678f1b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.58']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8404c274-350e-4b08-9422-3d35c51c86e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.59']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acc0d653-bc89-4090-8874-6bb101a5c868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.6']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bafc5a86-90d9-4648-ac33-efc76dc9173a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c84fdd9-4456-4c07-aee8-acd7a8aa89d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dddb1eb2-ccc6-4c6c-8477-2f11cd7816a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.65']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1aaaffa-539c-4e8c-8425-bd46eed987f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.69']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cba30e7b-ee30-4d3c-b570-e303706362d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.7']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a555e487-40db-4b5f-a6e2-fdde46661c4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.70']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d74b1579-7e50-4734-94e2-9c5c630a40b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.71']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e5426c8-99a3-4d3d-a5e4-18972a9a2290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.72']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6164e34-ee4d-4099-8bfb-8f95b15805b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.75']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b71fd003-8e37-42c0-9433-969c8361776b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.76']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a89d81d4-7944-4841-babc-4521a17ec637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.78']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7094ffa4-0061-48ba-b09e-ed673f004dba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.8']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac38a4e5-5dbc-4962-96be-a71208d1ad36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.81']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cb964a1-da02-4cfa-b473-e38a3c28d8c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--682f04fb-6257-41a6-8583-b959c8719ed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.88']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d93592ee-b167-4646-a869-c2cc08157e63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.89']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9adebe31-55b7-4d93-919d-0d5f119698f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.9']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1cac365-9540-4ccb-84e2-431518ba472c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.90']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae390d6d-cb6d-4672-a426-9241ca8c6704", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.91']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee10615e-fd57-49dc-82a1-cd00fb5d1ee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84f50693-3e39-41b9-9c3d-07cea7401117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ed39eda-68cf-4ae9-8704-bc5b33d77bd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a72db2da-0412-4e7c-b933-10cf4e751201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--505f01fc-1645-46b3-91cf-84027383b2f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.98']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69dc1299-df77-426e-a6ff-5171d5a4213e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.99']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15be110e-6f78-4918-925a-fa199047186c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.227.45.154']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98dbf205-91b9-4b22-b1bd-b3bb8fe83a89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.105.200.202']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e82f3a9c-9c05-475c-b097-1a2ea61d8df2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.105.255.208']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4735393f-c155-40ce-b2c3-ac694c5fd567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.101.234']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11e5f6ce-60a9-4d71-b3ca-b5d0615ff6b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.32.203']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ee357bb-efeb-4cc7-b55f-65c5860a4d31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.84.112']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3b96217-29dc-4462-9075-11b3131da337", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.141.243.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--790fb370-bdd4-4922-ba4d-8f604246b4e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.54.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33af6399-9cef-4f3f-b2c2-9bd5c0ebf5ba", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.165.31.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--373be59a-11fa-4a09-995f-5f82a54426b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.17.3.251']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62503ad1-b09d-44f9-b363-f94633826d64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.174.135.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3480e4c5-144c-43eb-96c4-a1f64ecfcdd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.175.167.144']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b6c90f7-b747-43c3-8422-cfe97248eed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--133a274c-a230-4a24-922a-e4d92508be81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.152']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--953d73a8-dc42-4370-bdc8-6eaefc2091eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.40.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07e4a989-a90f-4d85-b2b6-c2b9edfb5478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.40.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f11cfa90-4d96-4f7a-ad90-4ed4634356a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.40.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--860619f3-a6ea-494c-8b5f-776305294336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.40.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04b94fc1-7c58-4ebb-a78c-9b11ac232b64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.40.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53775225-852b-4ec4-9a95-f526af3ffee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.40.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5b70dc9-2e59-4076-8a65-e39422a31576", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.40.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b4be39a-fe35-49e9-bc34-4c46fa3371d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.40.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aad3675d-1da7-4102-bf54-395ed523b4ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.40.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8948603-fec4-4313-adb9-ae99f9cf2c9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.40.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d40347e-2f02-42b6-8238-849d55775963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.40.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb90a017-7e74-4547-ae7c-9b25ff5b793d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.40.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1cc81e5-e93f-4523-b7fe-2e1d5379aa49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.40.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43e8e263-bb92-4329-8088-338ef5a745f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.41.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9394f766-1b08-4a91-98a3-0ec4b8247333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.41.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44cfb11e-4ce1-47f9-a1c9-9fe438796c5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.41.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce43ee3-aa6c-4cca-b0e9-bfdc4dcf7e2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.41.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78406f08-cfc6-4652-b79c-2d951262cf11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.41.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a82baf9b-971d-4943-9893-b272405be025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.41.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69fd091a-5510-406c-b670-1b072e28da6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.41.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29ff4a67-34d3-4b83-a858-136c51a090c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.41.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9fd60eb-b452-4b43-92fc-bc1d6e71bec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.41.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5ff3b65-383e-4207-8882-ff894d6ad337", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.41.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38586c90-6f2c-4374-924d-f01f87a93273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.41.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8509191c-da3c-4910-a84c-f0d0045b1c55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.42.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f7aaf7c-19cb-4dd4-b6bb-1946f8368f9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.42.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c5da825-b724-4c11-b72a-14f04c9ba77d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.42.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9669f934-5c00-4062-b62e-c4cc470311fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.42.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa900dd-cf31-488d-8a8f-1d53c8631ae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.42.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e085a9c0-ce1e-4862-934f-836f726854ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.42.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47ecdaff-f6ca-4d34-bbe7-9d37e20ee0a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.42.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2002c48f-8c7a-4ce3-90cf-bbdce7fe23c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.42.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f9fd1b7-a534-4f5f-9be1-14c1370a64bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.42.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5adaba22-9bc5-4289-b304-a6887595e82b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.42.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bedf1e94-87c2-4725-8e87-58a40a5b3068", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.42.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e946e70-1960-41d8-8118-e02e5c24f316", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.42.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4cdfc15-441c-4e8e-982f-712e11871f06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.42.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0827783e-4cc5-4c19-a1c4-c8ffdd31a578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.42.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00ccef70-5486-4fa4-9824-dbf165e3e4c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.43.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c91aff2-2b92-4f6b-b588-a99b9ee4bb93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.43.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58e9039e-9b5f-45c5-865e-f1dbf870027f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.43.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7b99d6a-2a59-449d-81c0-0f554165d4cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.43.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b494769d-cfef-4113-b7e9-f7bbd59b9909", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.43.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a60df3a4-7e75-4572-9d67-801584bfac10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.43.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64c9e1b0-ac3e-4923-9bef-7c612691b32c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.43.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--978f9fd1-3f76-4a24-93f3-61192e06ac28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.43.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32845782-1f05-4b08-b17c-49b43242996a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.43.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a859df3-8e92-4491-b6d2-4666ce93f5c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.43.255']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e396ca44-1c79-47e9-b355-722e98c450dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.43.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cf7add0-8275-4059-a301-0283d1811229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.43.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7ba4611-41d7-4737-8406-1121752ccef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.43.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a99b11dc-637c-4237-bcc3-0af91ba19010", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.44.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b3b70ec-0f1d-4ee1-961b-42449562c315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.44.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9a48b82-2dad-4d22-ae60-4ee022d57288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.44.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c7e9e2f-ab3b-4281-affe-2a2a86ddb322", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.44.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f8b5c5f-13b9-4cbf-8051-f6231bdda96a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.44.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d1334d8-a465-44e4-9a90-c6d5efbed1f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.44.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--479518b3-04a2-47b0-aa67-745ec5471ccb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.44.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--267ca85e-9840-4c57-b6df-121a12dc55fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.44.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d572bf73-fca9-4a61-ae3e-a1e9d3e7e613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.44.255']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6725983f-2c3d-4f42-a1ad-9ae33b41ea36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.44.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab805d51-f582-4978-8788-7c37f01732d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.44.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--286caed3-06fa-484c-86bc-b21cfe860ede", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.44.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cd5b5fb-a5a5-48f2-a287-31cbe7a8d9d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.44.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae6c7aa-9431-494f-a890-2d487f46dbb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.44.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d03e5c-f9bc-409c-9858-a71f9ec8fc4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.45.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b395af29-423a-4b05-9291-3ab664ad3c8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.45.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5588ab3a-c372-4296-bb78-43fb0c537924", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.45.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deeade3c-c78e-43ae-980b-ab135cb2065e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.45.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a39d68e-56b7-4721-bb33-113a1bce3f34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.45.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7944cbb9-98d5-494f-937c-026d8b338d4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.45.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d7a62f9-5e29-4c78-bcab-64c06bab490c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.45.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--899c6ddc-65de-46ce-8a45-44c9cd042f52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.45.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eefd10bb-29e4-49d1-90d4-52e50ac23fd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.45.255']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f89441f-a6ff-4d01-bbbb-dbbeee86ed64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.45.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--850dbae5-fe7e-4f11-8c90-1cda11b368dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.45.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fc91859-35b1-42b2-9ce7-e92cf187aa1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.45.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d384f3-83b1-45c8-b10d-21392d401c3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.45.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38c9a502-6e6a-435f-a34c-19ef088c08a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.46.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8297eedd-0dec-4386-97c3-0ca1b66ff2af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.46.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--569ac02e-93ee-483a-accc-5a776cbbf8d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.46.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec6c7157-99ba-461a-806a-9dc97975e6bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.46.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8cdc1ce-ab3c-432f-bbde-640b59e0bf28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.46.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5485641f-fb6c-410e-a059-303f2af91186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.46.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfdc41f4-c47e-4598-8ae1-8b52bd7ed150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.46.255']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--951d3b78-2e61-45ff-963c-41b8fa16a8d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.46.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90e18c7b-bd51-4fab-bfb7-fb4cec875846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.46.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50c4ec86-6958-4bc9-ab3c-2cd6257ffa86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.46.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3beb73a-fab0-4be1-b843-d74c3ff0d4b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.46.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f3c4eac-1690-47a2-ac6e-8686a9d6f4f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.47.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a923e38e-210f-4932-a928-cda10b20716d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.47.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0030702b-44e3-4730-b1e5-eb34441e9b68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.47.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22f59941-9958-47c8-b178-1cae1367492d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.47.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4b4a78e-f041-46d2-af03-a67743617c91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.47.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25111066-b3e9-4446-bb7e-db5c81ff0749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.47.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe1a94cb-3a9a-4d59-9543-8a3823cad51b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.47.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa7c53cb-2924-4a73-86ed-7fe7d7fcdc16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.47.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26e8da21-31c4-4d7c-8b26-6f4b5ca923e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.47.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45fedfad-4fd6-4386-b355-7d6461f3b2e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.47.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--895fcb7e-70fc-46b2-984a-bc17dd1828fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.47.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12eb1661-fb9f-4c62-94f8-f3b7eca27922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.47.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e840b4d0-18ea-44ee-8b98-4c14da906a4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.47.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9adf3212-38c9-4f6b-8380-b5be71f9600d", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.34.161.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d48b720-5755-4bb0-96ab-c34c3520e5b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.49.14.104']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6b6b96f-5cd8-4090-8258-fe87ec857586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.223.82']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fd7b71f-15b9-4daa-a4aa-5cd205af641d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.0.118.113']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a951f4c2-b3c3-4abe-ba47-c24a2c19b2ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.116.101.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48ec7e94-9d54-4510-99f6-44f30e066146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.119.209.50']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e10a5eb1-1f02-4524-a5b8-f8e9ea63716d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.133.199.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abbcff73-1750-4d4f-b0b8-d62bdce41338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.140.44.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bc00ea7-2e7e-468b-9938-085d38fa8ac0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.143.235.216']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37f4d1f5-9f9f-4b7e-936f-1f487fda5517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.190.15.50']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05f6221f-adfc-4b5c-bcda-46000155b5b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.217.208.51']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cbe3fa8-d57d-4df6-89f2-1d5b18f1c446", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.218.118.203']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed0e18aa-2e1f-4789-946a-d8f47e1fe274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.221.179.104']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d8abb25-533c-4dea-8a28-f90aab9f4890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.46.166']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c1676a1-1b0b-476d-befe-9c158286e588", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.178.37.186']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d6d143-f93c-494a-9b9d-47804895f107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.210.128.83']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bdad292-247c-4d29-9c03-b1fbcee29499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.233.240.74']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60faf2a9-6a28-4beb-93b2-c7dde52bec5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.66.173.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--106dfc55-acff-4de0-bf64-46436edbbbc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.75.248.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a6f1484-7208-4f59-a55c-5dbba8d80611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.134.19']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efab2b15-3e37-4ac9-ae00-91e27f06f5f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.176.49']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbde9052-7c09-4cf4-9bd3-46b1d3859add", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.115.192.10']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e4f92c-9f48-417f-98f9-bc39a7f87db0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.174.211.42']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65904aa6-c323-43af-b6b5-030329f73571", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.188.176.242']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b93f985-c1f7-4ac0-b967-21ef7d5a87de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.24.1.71']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a8871a0-bc82-4cd7-a9c7-8d4e5a4fc3b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.47.124.59']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--375bbfa3-1bdb-4ff3-bf5f-976c022384ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.113.116.105']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec05d98d-a742-4cf8-b91d-ee40cf5423e2", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.117.27.203']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05885d38-b86f-4675-ae5c-4939a6f658c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.126.255.193']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc366de5-0815-46ff-9496-957716405fd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.103']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be6a8417-02b1-4811-a55f-585de141d166", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.150.140.49']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14427250-d8da-47ce-ae95-b5f27e8b1079", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.190.217.5']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd5c00b1-177d-4ac0-ac4f-4fbb005bd268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.222.42.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33182a3f-a864-4dbe-8110-7e307afd7967", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.52.77.112']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d109266d-606c-472b-bd6a-f9a41d226128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.88.232.142']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6857e232-9e23-4e4b-9d5f-ca47a6c617ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.88.253.219']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4529ed41-8051-4a19-98ec-255b5095be58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.171.242.140']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecc061cf-c5cf-47cd-94bb-de5eb13ea06e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.194.208.176']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c71cfb-1680-4b7d-91d0-d0499c765fd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.226.214.224']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dfc09a1-9236-4a92-8725-3302690bb836", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.232.212.207']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ec1a698-98c4-4774-9677-646fbba64507", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.76.87.168']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50f5e844-df4c-46bb-9f04-a57c326d4dc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.104']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feb69ec1-a312-4bc7-ae36-8a58e5dc72d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.105']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7948a94b-52c9-4d77-b1b1-365256af3513", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.112']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36ddd715-7c6f-42b2-ad38-f827fb7d1ccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--742eba39-7497-4304-a243-bd28d662633a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.122']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4d240e7-7ae8-4e3a-90d5-866df60fddca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.123']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0a0dbfc-4104-440a-972d-5e2aa3ff2b79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66f029d0-042a-4e5b-9459-0f1fcc6badd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.67']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a5f87d0-f3f1-4a88-8c1a-06a5a9c43705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.70']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12bb94c6-c187-4a90-8872-a9371e64e961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.75']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1cc9df1-e12f-4b2d-b69c-af560d1fa55d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.91']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39690311-a907-4ec5-9804-402c8c4851c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e281449a-41ee-4751-9c6f-5db50da81db3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cc448f0-df16-4cfa-aeec-31ab0fc68deb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.204']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ee5880e-70e8-45a9-ad92-c0ff28525abe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.206']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e18ba06c-d3c1-4ac4-aded-814d1d3cb759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.207']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb9ea043-a50c-426d-a2ac-416a62939561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.230']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be7de187-1674-40ab-83f1-b9f88279edb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.232']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5920482a-3c8f-4b75-a585-e37c053536f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.234']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a7bc1a1-cab1-4595-a79a-a79b83884ec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.238']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93be5bcb-002b-434a-9d3b-e9de2d14c80d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.243']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8e05dc4-c488-43a4-8cfa-2a5e1e9b049b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4c3004f-62a0-45bc-9f98-533d69cd201d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b56f0515-de45-4d07-be0c-47d9aca97b7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.251']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d94fd0e8-f03d-46e1-848a-55496e27433c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3c5ca39-2ac3-4672-ad76-a0a699ce57f4", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcf7ffe1-abf4-4bc7-afe9-eb777ce8f6b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.176.35.145']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--770fd026-91e8-4af6-af5a-b89ff038444a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.32.16.105']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04d91550-f4f3-4075-ada2-5221f926d4f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.100.87.136']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--222f51a8-278c-468a-8cef-077d7a5037e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.107.80.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89cc188d-3190-4117-a1f6-4319b7313383", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.11.145.5']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--938ac525-34ce-4782-bbe5-9d0619590d39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.116.237.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83d5931f-7865-4c25-9b67-48f0592b5b79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.116.238.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19d6b486-14f6-411d-af18-da41d8f13402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.118.79.103']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faa259a9-3a33-47e5-aa4b-1baecd32a88f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.12.59.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f03e3f88-4ec7-4091-ac4a-636884d56566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.12.59.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8034ec59-642f-4358-92d1-f03344a2db48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.18.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2801c20-0a38-480d-a812-e0ff1529f397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.18.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f08c44bf-31b0-4f50-9ff4-3f76b6b7c171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.18.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b86043d-0724-4025-afd1-6802b1b97619", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.18.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad79a2d2-cd3b-4b32-854a-da2649696a3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.18.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b30da2b-7fda-4193-a513-de3bdd92f856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.18.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--807d1526-a998-4f21-94fd-954678a1078c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.18.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--786ee3ce-7a21-497e-a544-53a5db3da657", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.18.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dff765b-fb7d-4022-bf37-8aaeae32c037", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.18.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e703e8f0-5482-46d6-ab58-e98e7af4b785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.18.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85e5739e-7b1b-466a-8cbd-1d234366ebda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.18.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--683aaa53-70c1-4378-a3b6-b79030c6e18b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.18.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ef5be5f-1a73-4420-b222-5864b41969c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.18.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9a2846e-8a90-47b2-86b8-af8e395a6e70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.18.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e1e4b08-ad73-435d-b0c0-c822120700bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.18.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44b9463a-aae2-4183-8822-cb7ff7f8780a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.18.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91d796b1-b7b1-44d6-93d7-4a183ad41254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.18.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a113f066-c2f5-4379-82e5-7d6ab5d261bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.18.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0685df4a-f595-4ae1-ba0d-48b25f96944f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.18.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bbf0051-c9f9-46c4-81c0-50b0b8bd9b5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.18.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73f797f3-1376-4bd7-a543-b93a67d38454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.18.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f1eb23b-e886-4974-bc9d-0a29762fff70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.18.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e73eccad-646d-45e8-84a7-0f259ea910f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.18.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a3c49e-8d0b-4ae5-9367-8b111659bceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.18.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2647db7e-383f-46b5-88ce-b2f884953fdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.18.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fb94098-709c-4906-9d1c-9bd280fc661d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.18.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--385171ec-41e4-4d35-bbc0-f8600f5158f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.18.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cf8ca86-289e-4975-82b7-fd41dc400ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.18.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fb01cab-1fd3-4b88-b8a0-3b7841538f7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.18.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7e47acf-6031-4814-a086-429e7804f147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.18.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c97d96f-cd33-4b6c-b7e4-43279bd957b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.18.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f837b4be-7303-429a-9239-9a3214b7b0db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.18.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa822ac2-fdde-4b47-9413-a41f5bd3f3b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.18.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5938a9ba-c1c0-41fa-8f5a-a944b8315a27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.18.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaa5e0b6-2924-4c8f-9a41-10b23441b75e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.18.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9f86f18-33fc-49c9-bf79-5777c1900503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.18.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f827fc3-d597-4661-9e5a-ca729a610b3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.18.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96ab1537-0782-428a-b243-20b354a2a79f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.18.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c7f8d89-8311-4d91-ab26-e8e6bdf59d14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.18.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89fbe8ef-54c6-4f5d-9748-74f2fbe8fb97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.18.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e7903a7-ead4-4e2b-9dcc-4b786ca51dcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.18.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ad0d9df-0462-4e68-b567-93bf0dde324d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.18.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3d6544c-72ae-4d12-8505-bb267f6b3651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf223bbf-6e11-4586-bdb9-211e7e786198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e212d78b-b769-49b1-9702-dd7c1776421e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d11a562-2d2c-46bb-8cf1-cf9d21ceb116", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04c98a0d-64cc-4441-a76e-24bca6569823", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc336923-35eb-451d-a3e4-cc372d5a9c36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc4055cc-557a-4df4-838e-c384cd7c253b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4762119-271e-4758-b1a2-a9c7a18c78cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8743ce17-52de-416d-88e9-b6f01a441ade", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--952731bb-c941-46c2-a869-62f2d0c3f794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6d13711-6424-4182-a48f-c55854bb0ad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49716454-b1d2-447d-a322-b55ba94df87a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a707dfbb-4277-48da-b5f5-21466c998a4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3689ecb7-dd9a-4507-b463-e6b5341c0496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5530c01-2991-4f8b-9691-657e2eed2f1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16dc23fa-9e8c-4922-bd84-a4755ac57771", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a57e67ba-1ec9-472e-a872-b632b27b30c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f10b91e4-b1ac-452c-a642-13714332d253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aae3c13-9c2f-44ac-a0cd-eb82eac446da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac3ed08e-571a-425b-b5b6-0deed41266d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d45974c-6edd-46ef-b404-acd058227e5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db9a9093-d50b-4653-98ef-9c0f2469f4f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f10edc6-b855-45fd-8d0a-3bf33a2d70c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c6369ec-7448-4b0a-bf26-64e565c11802", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daf6c733-2704-493e-912d-6bf3314e006b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--180b99e1-bc42-4a48-8b4e-84981e32836d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--858287bb-b611-4b0b-b03b-8b761d160b96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--302c8a67-68e8-4884-abd9-6f3d227c6368", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67cffcd5-4445-4df8-b3f9-3ebb2b6b5794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82b9133a-55ed-4fdf-9dc6-8ae6d79ffef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08e18682-ca6c-44f6-85b6-e297ebbaf45b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfc499b7-b83f-4446-b62c-d136df1a46f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.255']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1db124ed-a2c9-4abd-b9b5-1cf9381b8e38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e71da58a-299d-41be-88fc-9068137f4c6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cb6cde1-4dc0-41c1-bb4b-bcf5a7569fe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28e9a5fc-7d5f-4ade-b14f-8b7994f7f4e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d65675b-5070-4670-ad5f-c2d5acb35e5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fcef0ff-6093-4435-823f-0cc950f1085c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00cfc65e-dbfc-4a67-834d-6834ecc5c31b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7037d52-35d6-45dc-a19a-a6b1e08c1f3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e5cdc41-b54d-4322-9252-1edc945ff7c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bcbbe92-35b3-445a-ba1a-f0c634ee5e5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6d4295c-26d0-4e3a-a1e4-af13e83133a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1adc2504-dc64-4713-b36f-37159c0f404e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3eebd66-1773-449e-a2f5-9e61c671c458", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50a2a0b4-9b5e-4417-a57d-9f4f8c5133ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2224391b-f884-4127-a827-e7bc936a4dea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a5f80eb-ae4b-4784-8ca8-62859c4b7477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.129.19.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bf59737-1917-4df5-970c-a5652839fc7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.90']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c58765ce-5734-4378-8585-9d2bda673a41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.0']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a402075a-47a7-466f-89ae-02abfb3d17de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.1']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3773812e-f88d-4458-9370-1c209a4b6f0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.10']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dd27646-e412-4cd9-9ec6-cc0f72a3dd73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.100']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f34ce8d8-e375-4f51-8854-1870d5cb477e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.101']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3f14af0-83ef-4ee7-86f0-811498e2fb02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.102']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14526277-3107-4791-9b2d-c227bd493319", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.103']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89253891-f326-45b6-a030-1ea9566da7d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.104']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf3a9d4-ad0c-4a4b-9db3-c8f66253b372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.105']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55f34f90-798c-4cbc-ad08-13d9f90af9da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.106']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e57b320-21b0-487c-86e5-fcb2f91a4b0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.108']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a69578bf-5e4a-400c-bcf3-d80ec987d703", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.109']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe9ced13-446f-4f12-a8c1-58fe3fd6b600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.11']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8965715-885d-4932-a07c-1e91ed3d1ce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.110']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1ae1328-76b5-4758-af4a-aff220a3facf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.111']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74bc4c3c-1bac-484b-80ba-e25618d1a741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.112']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19925a9d-eaac-4ed1-b6ab-2a87720da32d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.113']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2fbe086-cdf3-408a-9f8c-8e5cc9b1bcb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.115']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b83b3a3-2e76-4905-aa29-b2ae7cd50ddb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c48b8fb-3ad7-4b0f-9300-201303354918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9342b2c-1930-4115-933e-c63ccb3b6865", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87909c0a-5e83-43eb-a8e3-39a2fb39dfe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a2b087f-5a29-4979-9b3c-4d8da2eca8e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.12']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53904fe1-0813-476a-a0b9-b06ca55820d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.120']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96a52326-2a21-4b78-ac38-e6fb85b26131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.121']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--349e6b7b-83dc-4b47-915c-9a02504e0321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.122']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd4445bc-cb75-4e9d-b50f-9d33bf1545dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.123']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3afa3f05-1679-433f-a9b4-ee5fb9f2145d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36bac67e-131b-4865-8df6-8d1dbf07de28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fed34257-b1c4-43fd-ae4e-32c429e5c72f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de8a3aef-9c97-4d8a-a258-0928c120f151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8db5121-b27a-423f-841a-dc31550d6b32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.128']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98027c1d-3fed-47a2-bc04-3671727196e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.129']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca47a5df-cb7d-4c8a-896d-70be4a880718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.13']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f19eca41-9303-4428-8ad7-db0c647165a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.131']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4ae7130-57e3-42cb-8b0e-0f9c2099946e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.132']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--833a0cf9-3b22-4f9e-aafe-77602e40b55f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.133']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd5098e1-d218-45fa-b911-db5ce764777b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.134']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--875fc936-5bb4-4e1a-bb73-05ada4093e7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.135']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c1d12c7-ec79-4d1a-8d18-bcc7119e9c8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.136']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75a70ee7-a383-4cda-8895-30f802e02232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.137']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bfd4b63-8e58-451f-8a9d-97607b017923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.138']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5395d407-664b-4870-8b7b-c500636ea1ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.139']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0acf01cb-c093-4dfb-9324-a986e06ebaa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.14']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ef0e02d-755e-496c-951b-78f18cb131b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.140']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48a1bc9a-f764-4e4b-9304-8b9cb40a44ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.141']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9df582b-bc88-4579-a98f-d9fe76beeef3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.142']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d06fc6-1074-4941-b11f-31aa05da3039", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.143']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f77244a-37da-4872-9872-5481ee6ca713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.144']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77f05b7e-130d-41f1-ad73-adef6a788eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.145']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb1af239-862a-4173-a83b-08692c69bd14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.146']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f29f6098-690b-41a5-9648-55b8b0b69809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.147']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75bfcf4a-b863-4ea5-9f9b-3ccd975c5a02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67174d80-7408-4231-956b-f3dcb26ae281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f157f9a0-916d-4ab5-b8b1-3098c6aeaf7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b658990a-2782-4f9a-90f6-002cd1cababf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.152']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b488a82-9c59-452f-8d23-76c20b8d2423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.153']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca92d05f-e16b-4dc4-89a4-654daff943e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.154']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a567a0bf-0995-46c0-afca-6758f0c28344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.155']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ace1013a-f6dd-492b-95a2-39ca1ca7095d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98511010-3128-4ce4-9fcf-af30899539f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cc1b7be-ed64-4031-87ab-f0dc3258d516", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b66c7a7-e40f-4ee1-9b8f-f6ac5ff22636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50b6bf12-e355-4367-b157-47e484ae68ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.16']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e1475c1-9ccb-436e-a5de-c16aa93ef477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.160']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06ad5137-2e02-469a-9acd-1cba3de81a8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.161']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc5145c3-a0db-4d92-bf43-cf464671ca2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.163']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cff37e3-66a4-4dda-b1f4-9860b0c413a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.164']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8643b6ed-8bbf-45b2-9cc7-0469e560e3f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.165']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf83cf69-85f5-4a95-97f2-0a70a6790733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.166']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1177535-240b-42ac-885f-f2cc62895a6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.167']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e486f06e-e816-4a09-9700-4e7f8f9e1a33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.168']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a91f86a4-6360-4a30-bf1d-50f47307011e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.169']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33872dd0-b9a1-411f-ad28-680618df1467", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.170']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06dcc5ed-fabe-48a4-bacb-42a3b01033f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.171']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f33a8041-5f52-4b2c-aabd-97bb3c46edfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.172']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--219c5259-8db6-454f-a77f-942309bf21fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.173']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3423ebe8-303f-4ab3-98ff-f6e77c473b9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.175']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e81ff6de-6124-4495-8caf-93ff374584e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.178']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--657a0815-6555-479c-93f7-7ce589323850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.179']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9335c712-0d32-4fa9-a71f-623dea23824c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.18']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d9b33fb-bdb1-45cc-b83d-3fe18f13f1df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c451cd3a-4edc-4309-88d5-980bc27a5679", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40789757-873b-4fc1-beef-ea245e285b5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f7759cd-c38a-4502-96d4-4a133eda8c1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8a1f5c2-7dd8-4d4c-868f-62a9bc7de5dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.184']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--049093e5-564e-4579-b4bb-cde641a97819", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.185']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2301c076-e4fb-4227-ae25-ea710f346fb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.186']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--232e5aaf-afae-474b-bf49-939998b7b335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.187']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b1e0a2e-3418-4925-91be-5598021d66fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e869ba01-234e-4e84-9ef7-80d4a938b932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b24816a-4550-483b-b352-37c9b55925f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d77fe2ca-073c-419b-8612-3856e77c2b12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7321718f-5a1d-4677-a72b-0cb7f8ccb045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.192']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d06a1955-493a-43cc-8d0e-2ad269f5d40e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.193']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1af3e2b3-e417-4a21-8d7b-d2289c842aee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.194']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c786240-56e4-46fe-9637-331304871dc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.195']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f02a2cf9-617d-4b97-a836-f55c4d79619a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.196']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de5acb8e-9e67-48c4-bc43-f15e305b151c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.197']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01c5d900-6740-449b-bed8-81d5287fed0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.198']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bcb449b-263b-41d4-973c-cb137fd74f90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.199']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--238d7e2c-e280-4fd8-95f0-c52105cf67b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.2']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bfaca57-dc17-44c0-a5f9-28ef44e9f366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26eb25a5-9e1d-4631-8c4a-8a9b693add08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.200']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc49a85e-9fb4-4d5d-a795-f88a2cf1d3e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.201']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--618ae325-5d53-40a6-83f2-5599a8a16423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.202']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cfad612-2f64-4e8a-be43-eef6a1287e4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.203']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23734cdb-1a51-435e-9f6e-382078ac831d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.204']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60e6de3a-b404-4ae6-91c2-2fdfa29d082b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.205']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66cd3214-6ebd-4280-abac-bb0fae5509bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.206']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c766f52-623e-4859-b580-83e6c20bc49e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.207']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d79dc0d3-ebbd-472b-b680-b796f7a91de5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.208']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e35c96a1-52b1-404a-b472-86b47c3d7d44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.209']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75cba1d6-bf79-403f-8869-770d7925cce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66186d9e-966c-4de4-b42a-17250b7d525d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.210']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cd8db29-1675-4f6f-9a05-c0c0b3d5a2df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.211']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--602b7e1e-7354-4446-a06e-9fb7aaf48c38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c823910f-6a41-4b65-b5f3-7602cfcc18f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21680ec8-8501-487a-9010-b6e6753101a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.216']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d771fca7-f73e-4a41-abc9-11830821ace5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.217']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17de9e9c-6739-4e61-a38d-c092f2b72ca8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.218']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e996eeaa-6558-461d-a005-b56e322a1cc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0cbd334-337c-408b-9774-577c2e26a251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08c91e1f-6a4e-43a8-b29c-39277b37200b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1148ba61-9470-4133-81d7-d631909de109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f14fb77-3c6a-46e2-80d1-9bbf01c593a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.224']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6707c6f-7ab7-469e-884d-6964c321ca5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.225']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02355c59-b2f3-4e75-8cd7-113693f2685b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.226']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d24120b-45ec-4170-814f-970127c10aa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.229']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cc78735-8767-4c81-8337-74485a183a9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30634d1f-1caa-4ed7-a012-6b2a1cb631f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.230']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44fe3510-a96d-4100-a7e9-f76a2d1982fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.231']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da680b98-5ebb-441b-a354-f7c7e81b1a98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.233']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd6933de-b038-49c4-a066-b9ea284a3007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.234']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bbe710f-534d-4a5c-b143-2a1916b0c5cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.235']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a19b0eb9-bb10-42fe-9b67-e6160c8c3d08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.236']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ada97ef-6e9d-4f8a-ba91-4e7d86597341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.237']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7466f276-66e0-4bb5-aeb6-5a406e5ebae5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.238']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50ab8a5c-5de4-4727-8749-c17022387e66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.24']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b17adb9-adfb-4518-aa6a-9b891c02fa2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.241']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9676530-03f3-4b9e-9135-c701115f582b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.243']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53588566-8d01-4fa1-bc4a-75dcf9f00d62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b58da060-79be-48e2-8de9-4ad33c1d0b95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed65abc5-0c0e-4bfb-a89b-e9649a3cdc6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0d4cae5-4c41-45a2-9f76-b5cea039f106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.248']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff4ae58e-3f3d-4aa6-a770-24d488b4c439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.249']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c24f6412-81bd-4b23-8175-fd1098bf906c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.25']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e0eb99f-312f-41bf-81f2-b2ac0536f526", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.250']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50190d7f-c280-4658-9483-f992b033daaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.251']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb3b6082-8a91-4406-9e62-ed7e7c33b1e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4febd2db-9536-4fdb-be0d-8147da2757ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16ed8dfd-3ec7-46cf-9b1d-846fe5e07d5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.255']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa114ab4-4530-48ea-a3a7-64bb66621562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.26']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67073ab1-8ee5-47a2-aea6-267df8645967", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.27']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77bf4fd6-4a1d-44f9-a902-9809b46484a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e46a6780-1082-47ba-9a6a-f98fa2fec191", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b99bc24f-2a2a-4de3-bf52-05c40b499f0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.32']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a969c881-a5ff-4dbb-9534-82597b187cf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.33']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edb814a6-934f-45b6-895e-0247c73a4065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.34']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83148a82-612b-4797-b6e8-6c3141efd1cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.35']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b923df12-2f95-4faa-92d9-37985c7d7422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.36']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00168e68-c074-4be9-9ccf-e8b43b004f7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.37']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8a28aba-1608-4a8a-a264-eb61bf991f52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.38']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f27c4f2-2e77-4394-b195-25204e543d8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.39']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b990166e-fcbd-4db7-9f4b-1cb9fc138336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.4']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc0a00dc-8895-437e-b8fd-27f546a6e9e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.40']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c73a376d-0b8d-4973-a503-cc9ca6ce7ced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.41']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30e5f18f-e3f1-4fc2-9e3f-81620d5c9310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.42']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1842252-917e-43d9-8429-fc94ac90f835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.43']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69227575-d664-4c01-af77-37135cfc1dac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.44']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a1c9a7e-8bfd-4e46-829c-db38db370e06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.45']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--727fa862-0ff9-45a5-aad0-8f5bfd168417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.46']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73946654-ee28-44a5-9b15-23212cb87e9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.47']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab42575a-aff9-4832-80e3-4a25353a9a61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.48']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d4354d7-7cc9-4db3-afbe-6c6273d5375e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.49']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3424afc4-7050-4d5f-9f52-f05662952862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.50']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a7395bd-4e79-44f0-a55f-08eb05e5f755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.51']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--065e3dcb-203e-4ea4-b918-d54fa9271e4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec48614a-e0ec-45a2-842d-ae1742d683d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6048e439-98b2-42f3-bf81-f5bcdcfd0688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2806d2fb-91da-4310-be40-0594f9f1e840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.56']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87d45093-52fa-4340-875c-9802f4d3c529", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.58']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3adfdbf5-d872-4ff9-9837-439a0cb93720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.6']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b7eb5bd-1ee6-452d-964a-c66028bda4fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2e4d732-c724-4a21-bf57-e4b57955e857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6a3ace2-56f7-4f06-b8ca-198b9fad4492", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad9d17ca-99ff-42ab-994a-67f501aad7fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b9cbe0c-2d23-4d96-8d15-74b8a26afb7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.64']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf435805-ae1e-4431-986e-fdcec271995f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.65']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--231c7af6-f850-4b2d-a964-0dcd40e0e3f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.66']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1843c5a1-5912-4c1c-a7db-11f4a4514249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.67']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8803daf7-1a4b-4ce1-8ea3-5de2015d04b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.68']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--493ff95b-feac-43d9-b68e-a59b57d6356b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.69']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88ec8365-afd1-4d9b-af84-b6322634494b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.7']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5bc1429-5e91-4737-b7b3-0a668f2e5114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.70']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d1a9b23-b55d-4100-a0c8-300258fe7c39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.71']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4e6ddf4-d355-4509-b340-c73e8964dcd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.72']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b438baa-309e-4efd-9886-3f6840695f06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.73']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d3d5099-e3d9-4087-a563-5eb6e64f61aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.74']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea102b84-75d3-4763-a151-3d1b8342df52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.75']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e2b5999-baa6-4999-9ba3-85883f63c0db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.76']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7babc61-d367-47c4-847f-f44efea2c858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.77']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e4de3c-037d-424b-8273-f48314d21ded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.78']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bd099ad-5878-4d8f-aa59-0819f852529e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.79']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab2a22a3-dce8-47c9-9440-0548781beb97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.8']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b929938b-2157-4e96-9f7e-5eded5ca3825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.80']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4794b7fe-61f5-4b4b-ae6d-34c090677153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.81']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e12a0bee-3c44-42ed-9f6b-b63c925825bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.82']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3180e22a-b13e-4153-8829-1debe86b7b82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.83']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b21400a7-675e-43e2-b56a-95a7a81fceb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5ef170d-0917-441e-a250-5d9e4168f011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--882d160c-7411-40ee-8957-b2c1c8a4e5c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0342d6ec-a5af-4824-803e-a0a93d52a6d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.88']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ab29ce0-4678-40bc-acb9-63aec89ecb7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.9']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c361720-6076-4ede-bf91-ab9eb7c21d84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.90']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58972b55-e7cf-4a3b-8d24-dc488c71ae8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.91']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--322ad84a-d960-45f4-a137-369ff6ffdc9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e304d30e-85c9-4e2e-a161-663f74e715d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47cace5c-1211-4820-b188-f64f74bdc456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa1307f2-fa03-44cd-ab59-0407adc054d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eefc48e-6005-4efc-a1c4-42d6291caeef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.96']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81afd630-dc57-44d2-8988-85fc659fbe18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.97']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e6f19f0-b2db-4d1d-821a-cc99f3cfe16e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.98']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ef40609-a666-4b99-82e2-d1b106b6d99d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.99']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f85edae-af4d-4357-aca4-4f3e135861bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.141.76.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c071ae1-ed8d-41db-9903-d407024794d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.147.27.88']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7e23175-14c2-44d0-99e9-c6e1fb861ece", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.170.59']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d487075d-dc23-4b3c-8785-978798ab2d0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03b0301c-b6df-4fcb-be6a-aae954ada485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--109dc76b-dfd8-47ec-996b-379879889315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1524098a-f88e-429d-aae3-5eb5fd9c38c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6348c951-0a6f-4f70-a469-658b11212c0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14803cfd-bae6-40f0-a476-a2d78c712a29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e39cd601-411f-4044-a1ce-673ee8470fb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--996b4569-a6f5-4980-a828-3a848251def3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8867501-e285-4fa4-986b-53f70ead3f59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60e39fde-6e43-4fe6-9fea-b8e4bb40eea8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69b273c3-6260-4288-b569-b62b53f6bd67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--678bbcbc-3030-48d6-a202-f9cb5934cf7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0090707-8776-44e1-9f71-9c2bbd92867c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1aa87d3-5753-48b7-aa41-727f7a30b49b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bb789e1-521c-4d9d-aa7b-d23165a92753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b979de65-daca-464d-af62-5d330d5ab131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2b6ae63-c6e1-4ed2-a80a-2890ff11f534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c54558-0d56-4f38-8687-57c0ec4f0fe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ec9c4d-5058-4c39-b2f2-6625001d394b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f701cdbb-31ac-4385-8bfe-e73875cb4062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de7a6df4-3093-4b30-a40d-d96f46c37028", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab45e3c-10ac-4d24-8a01-aed65855e0dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e287f9ca-e654-4b69-99f6-93ad9009ac78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03709287-cae3-4067-886f-5863dcaf9ab1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--658b0760-c835-4736-941a-707f4a561fff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00eeb298-9f5b-47e4-84c8-927e64922adf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--745ea425-3e4e-4fd6-bdb9-46ca4cb5482b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aca2826-cc7a-4cba-befa-3db69c6067fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c46982c-4e87-48d3-80f0-6f4513ee8e5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41abab6a-a52d-4e79-b246-72cbe9211c9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1050603c-571f-47fb-aaef-b59a36c5db4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40d41e0b-6c04-420e-8575-79ee6afa3074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cf8220b-699a-4ca1-8f47-07085cae31fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e41f64a-bcfd-4b03-80ab-fdff3cc4d45b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef0b1dd-a896-4ed0-a612-83c184c0763c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c915fdd-43b1-410e-80e9-53618ff0f450", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d5955fc-aa09-45b8-b443-b0312908f396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf9cc08f-3e42-4305-a8e7-568773e08b3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b32c2cf5-7c66-48bc-b4b4-f635c0fd3845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79e3233d-7503-460a-85d7-9edc4bc5e163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57fe72a5-c520-4767-a445-b2a8260c1314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2abb1556-b89a-4a1a-b8b2-1a374aaa9616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--289b4b0a-8153-48ed-ab50-c30c0151fa82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6d300a6-bbc2-4bd9-a428-d2fc66ef0af6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e763e49-195e-475c-93d5-618286e1ef9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--491309a5-513a-4560-a14c-09bfad2bb0fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b3f9ccd-9b1a-4a2a-8cf2-4e1f8bb3b9f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f85505ab-b68a-40eb-a4ae-022d79f9b8c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3c508e6-b0f7-45af-9829-ef11cf34e6e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1e3aad7-4080-482b-ac4b-9e486d694e39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15920abe-93eb-4fad-a367-c712509c5462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e71fc3-139d-4c72-8fbe-006687745366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec89a46f-17ef-403a-bb00-60443c23084b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.76.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--279be7ba-b1b9-48eb-82ae-32d5337dcfe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.169.4.177']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c345d6d3-6767-4602-a147-b0830b4b5f1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.112.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--190358ed-a6f5-46bb-a231-c24e2f80ca56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.112.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--320809b9-a3fe-4335-adbd-c7f789d93054", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.112.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0be14da3-fcbf-409e-bf36-587d4ae2df0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.112.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4deaba5f-60d2-4085-83a8-3ee015db522c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.112.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6d6c3ac-0bb0-48f7-b469-bd81417499fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.112.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96cf55ac-80b3-4bf0-be42-2e07904c467b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.112.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61468131-9841-465e-baec-e423127b3ec9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.112.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f1cee21-484f-4626-b7d7-7ea7caab11db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.112.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a358568d-aea3-4283-bc05-eb8b1ef8b414", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.112.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9f55124-94e2-4420-ba27-16bec9d0862d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.112.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--013d2f91-df94-4731-89b3-6a7157df2fbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.112.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95fcbbbd-12c5-4379-9904-98581e28bf4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.112.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e6c14c8-6ac0-41f9-94ec-97c8975e60c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.112.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e53f15f-25dd-471c-b9e4-935dbccd885a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.112.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78c6ac86-15f3-4b22-b206-fa2a96a39c47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.112.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--081cd0b8-f02f-4a81-a202-356d4892c91e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.112.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--151856af-47fb-4c89-b35b-7eedcd909440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.112.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca7c671d-1e26-43a1-a101-5257154ac2ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.112.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b829bd21-afcc-4cc2-806a-6759f9b4b7c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.112.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23651547-9027-4990-91d8-00b74cd347b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.112.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2917d22a-34fc-48ac-b7e6-702e65eabcc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.112.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ade6d26b-9adc-49ad-90ae-91c3b37aef6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.112.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44cb2e22-b67d-4b94-8f65-a09487885e8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.112.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad134b78-c983-44a0-bd0f-eff809967ac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.112.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d4b356a-95e7-43ca-a439-3c259c7f5b09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.112.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61ad79e8-16aa-459e-8a18-8e2a3614cb83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.112.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68d69f08-5cf4-465c-beb0-af30113b4612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.112.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b1ef2c4-6afa-4b18-bf43-5f5137f80c6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.112.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1c5ac23-51c9-4ab5-9e1c-efa90dc53006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.112.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--888ee9b2-1890-4413-911a-eba3a458bf65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.112.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fa1efd5-1a84-462b-b6f0-edd6a51afd29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.112.255']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--336f1401-5913-4f44-8891-f9c9f8ea0667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.112.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35e9a4fa-b8a5-4e27-beb8-02cd2cc5aad0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.112.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2704abb-1a4e-43df-9618-2071631f9717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.112.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f35eb663-8e6c-496c-a290-053be9ded3bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.112.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3c2a416-698b-4baa-b1ad-9fe695421552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.112.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebde2c86-f6da-47b7-8f51-867333a91b77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.112.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a012382-fe87-4d10-a4a4-cb58093a6463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.112.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32ea9cbd-64a1-45cb-84ae-6af3f9f87342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.112.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db2b4876-a5b5-47dc-91d1-72728b4c32b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.112.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6652840-8380-416b-a9b2-ce16f09a6e95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.112.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cda9d19-ec37-41d8-ae01-b0841f0bf95c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.112.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd2abe37-d947-4a34-a8d2-47ea9be3969d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.113.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dcc1f57-2f32-4008-a0ef-4fb9bbbcc3bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.113.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cba1d81-0271-4e01-836f-f269a6f2be58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.113.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--108beddb-a6fe-4755-923a-adf0ed289438", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.113.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36242bda-0e0b-44a7-a298-4ae6bc79c94a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.113.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91df7626-4a6a-4f68-99c9-1e02151748b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.113.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be9dcc04-987b-41c6-95ea-aff61c22c727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.113.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--897d5c6c-6b8b-4744-8e98-7119a9f5a433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.113.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb48ee2a-70c9-45d0-b429-5b690d3d93bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.113.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a259653a-7efc-423e-9a6c-e08ffe6651a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.113.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd4e1532-11ff-4ef0-acaf-b17671f95ca3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.113.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0c4d51b-07df-4959-b083-b3094a1714fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.113.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1822c646-cac9-4b3a-a617-b164f9cce5ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.113.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--640d26c5-6c52-4880-9d96-dddd5aa12ec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.113.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b48b3b7-a0fb-446b-adf5-0369cae3e7c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.113.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4be1bd6f-2d5d-496f-925e-af6e3717e452", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.113.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b53dca8-3d91-49b1-a906-20eb24166c32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.113.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28e65191-2448-44d1-b9bc-a0b8fd82d258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.113.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f775b9a0-9330-4d70-b228-3127de588e51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.113.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4088eb39-3e70-42c2-a23a-3258f315792d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.113.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--095278b4-7cb5-4441-8315-30f8b75bbd7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.113.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ce0523f-9d80-4438-8ce5-6a54f6a887d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.113.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--263803e9-70ef-4fba-a44a-e925850c9374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.113.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a45e251b-c84d-42f6-a491-f380ecbd9b71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.113.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efa5ded0-e460-4d4c-9287-70532676abf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.113.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12ff4609-8dc8-40a8-b2d3-12e9cd550c88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.113.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--537a59ba-ebe8-4d5d-9803-1b8c03089afd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.113.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66b47e74-1ddd-4a6c-9d97-b9d1b8cdbf6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.113.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bf1e209-850e-47fe-862c-6df4b46e234b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.113.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfa4367a-0080-4285-af16-1c3ff7de41cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.113.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a45466e9-c622-4ecd-bc73-eb7289786981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.113.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70386952-4e18-496f-b320-958f4a018f2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.113.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d20f724b-d4a6-4884-9226-b5989c6de968", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.113.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b9b792c-e32c-4df4-84e8-3c8a9d133197", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.113.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2771b1da-e4df-4af9-bdba-b0b4b077e12d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.113.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad0671f6-618d-4e67-ad3f-865b0dcb7e12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.113.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0f646c0-051b-4ffc-8836-e293368eecd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.113.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--685ed66b-c928-4419-bfea-ca07b1625fe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.113.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fdf4bfa-7b04-49f3-9ed6-ff7a9045bbdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.113.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--170eae93-5598-420b-9074-dcdf454bbf0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.113.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72442efb-db3a-45d1-baff-4ba908c9187e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.113.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4a70611-c516-40f5-8ff4-8f8789a0401a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.113.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--969b012d-0635-4501-b901-b0a56754c34e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.114.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--007d151d-bf08-4411-a3a7-9e3920cdb822", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.114.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e020adb0-7515-4b1e-b5ff-c5e063a47002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.114.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee4f9e5c-f1d3-47ca-a56e-ba211e2adb45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.114.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a441cb0-04ed-4322-a835-964a0acbf7ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.114.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a015f28-2895-4d4f-9578-70673bc865b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.114.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a4a3864-4016-4132-a908-110b49965ef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.114.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--442c4c1a-ee46-4a34-bf0d-331c406a0547", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.114.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77443d6d-5910-4fb1-ba98-23e6ab49d18b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.114.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1f6abda-febe-49c0-a643-b21d913c0fdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.114.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a4ae032-8c7a-442c-91cf-f90e55328bd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.114.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--407c3116-0ce8-4863-a55b-90c4350fab07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.114.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--660daeb9-b97b-4acb-82ed-6877fb7ded0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.114.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24103ead-2c8a-46ab-9b7e-ade09ada6b28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.114.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33c6c91e-cb44-4fce-9c6d-c8ad092ff1d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.114.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52f13bad-af39-4384-9291-baffc59b55c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.114.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33cc5a1a-1670-4628-b866-6c13dbca8188", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.114.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a92d758-1178-4067-a6c0-61194a6ff64b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.114.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79c63deb-e941-4497-9f6d-64812dd6a86d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.114.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c56adad8-eefe-4984-905e-70de608caa69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.114.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a73e39f-63a0-4f00-b39d-f9afb7ac2771", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.114.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7e40107-c68b-4020-bfa4-b0b65eca79bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.114.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34280a51-f3a8-4325-a706-6869323dbd7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.114.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48b07b44-ac90-4616-b2a6-65bfc1d1b266", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.114.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21a5d7c3-f78a-4b46-87b9-53a27ebf0b53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.114.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43df22cb-0503-4438-ab12-8a8938b6dc01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.114.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4f2ba34-3957-47c2-bfb3-eb09726ad5d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.114.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a38101df-361d-4edf-9683-3448eee51d9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.114.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e703c587-8a9a-4f71-a325-0710afcd9d6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.114.255']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6e9926f-3bfe-4d51-8506-eb264120768b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.114.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c95e528-1062-47a1-bf42-0255f384060a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.114.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0473741-73cf-4244-a711-700261c4f49f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.114.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffc40d41-ed7b-4e71-bc46-2dd63ec120b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.114.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc09f36e-f955-44b1-b7ed-d28be777ca00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.114.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b7505a6-d993-4de1-b1e2-75f13e12271f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.114.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb7d2bb2-33db-4193-b218-cc9d40a1c5f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.114.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dfec439-5354-4bbb-ba5b-81c47cb96ee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.114.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1b4c458-d6e5-4d74-9bac-43434f96f08a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.114.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd23617e-5a0f-4ab6-a899-7decbeef27bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.114.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--064c8e6c-3f09-4a54-9e98-f424bae4d667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.114.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8cf1b91-fbd7-4533-8ff3-627c86997240", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.114.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--584305c3-e2e0-45ec-939d-2ae52107d80a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.114.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23151d85-91d6-4c05-be9d-811e868badff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.114.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63fb3bbb-61f2-40c0-a38e-d2eb8ed79ae5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.114.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a202deaa-a1a9-4317-9cd0-169fe1f25dd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.115.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb3ff7c8-0da1-41c8-9f81-d1aaf4ed8e8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.115.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c9cb156-d6ab-49b1-b146-244f823762e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.115.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42de523e-56f4-4873-ad96-7dc09dbbdc67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.115.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57119476-6a41-475b-994e-0b01a983777b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.115.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff6fed53-6eaa-496d-8df4-f5b634fee848", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.115.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1a5e0f0-9b57-4f8b-9840-45d34fcaee3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.115.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc34cad3-ade1-4221-9180-08b39e3f504f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.115.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5e71200-9800-4973-8199-495b4cf82537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.115.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac93c469-ae23-4c5d-9246-fe65d17509f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.115.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eadfa5e-a833-49fb-b389-3a0c4e1bb71e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.115.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b090bd3f-a6c6-4feb-89c9-79e48668fe3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.115.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e32eea76-8773-4861-b094-3e6af913358a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.115.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2f731b3-5863-47df-a07d-15afefd3704f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.115.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88b1e4ac-e9e2-4324-b17e-3b46858bf59c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.115.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0edae72-4137-429f-abc0-e52a540581d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.115.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7814be4f-a4bd-407b-a537-b41dc7bc8f94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.115.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df5e7a97-7d34-4eb7-a4dc-92fee9e6202f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.115.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0594c86a-1097-4bde-83ff-44eaba3fd4fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.115.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0928015f-497e-4e91-b290-2c0444f56a05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.115.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d321e43-e432-4e19-a611-9405a328199e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.115.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--055828e0-29c6-4d31-8485-97d7390ca774", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.115.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11683871-75dc-4dfe-9540-ab809e0eb86b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.115.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0d2e3cb-e062-4612-ae2c-d7b929d167a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.115.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9194d8a6-930c-48ff-950e-b691ab8ac5d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.115.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d3c5bad-a286-4864-a94e-06cead7f20f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.115.255']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c45aecb5-07cc-4c8f-a50f-8a9e156ee85e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.115.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04514721-d188-4a74-ac97-e4c95b19b1d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.115.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--133d78e5-8502-482f-b54b-92a4804a019e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.115.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a949dff-e60d-49b3-8f38-6694ccbb4d74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.115.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02e3480b-5755-42e7-9d23-238bcc20abc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.115.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--103eb0bf-4555-48c6-8a3a-55bbd68ffd90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.115.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95e4746c-0d97-4304-88dc-4dd89064dd8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.115.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22035b69-a87d-4d05-8dae-a472a03258e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.115.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02d7901a-8cc3-4705-83c9-61ed41aca55b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.115.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f809276d-b010-49da-99c7-fc3bec9fb2ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.115.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dc02f3f-b4f6-41f3-9c60-580b3ee476dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.115.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36992486-07a8-4b7d-8287-c8a4594160fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.115.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da267406-87be-43b8-84c6-f46fb9860a73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.115.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e56660c-1deb-41ab-8fd9-ffed81cd6081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.115.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a62e20a-a51c-4357-8f90-ac611b89d0b3", "name": "Malicious Host", "description": "Web exploits: aws-credentials, mitre-t1190, php-backup-grab. CVEs: CVE-2000-0868, CVE-2002-1149, CVE-2022-22274, CVE-2023-0656. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '185.177.72.49']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2000-0868", "external_id": "CVE-2000-0868"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4b9e4969-1d63-4ba3-a91e-9fbae2eff2cb", "relationship_type": "indicates", "source_ref": "indicator--2a62e20a-a51c-4357-8f90-ac611b89d0b3", "target_ref": "attack-pattern--f4ef225a-7ab0-40d1-851c-51f72d2a3af1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--05e986f5-0233-4fce-93c9-725b6cc38ab1", "relationship_type": "indicates", "source_ref": "indicator--2a62e20a-a51c-4357-8f90-ac611b89d0b3", "target_ref": "attack-pattern--bdec63ce-006e-41ad-9ffa-e50b03aa63d1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--239d730c-a90f-41cd-a5ab-ec51393013f8", "relationship_type": "indicates", "source_ref": "indicator--2a62e20a-a51c-4357-8f90-ac611b89d0b3", "target_ref": "vulnerability--f409d74a-c834-4732-8fe0-37db64648729", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--71973586-054c-475e-8687-fec7f50c463c", "relationship_type": "indicates", "source_ref": "indicator--2a62e20a-a51c-4357-8f90-ac611b89d0b3", "target_ref": "vulnerability--e244d6a3-dc81-4710-a38b-6edfe4916bce", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9690e07c-2ecf-4e38-9d20-f7130b42e701", "relationship_type": "indicates", "source_ref": "indicator--2a62e20a-a51c-4357-8f90-ac611b89d0b3", "target_ref": "vulnerability--7a369f54-0fdf-449c-bdf0-e287fc8fdc98", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dadc2f48-5c0b-4218-afc0-c6599a9f044f", "relationship_type": "indicates", "source_ref": "indicator--2a62e20a-a51c-4357-8f90-ac611b89d0b3", "target_ref": "vulnerability--9cecf465-ce84-4269-b927-dca2ba0b43cb", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87641af7-8007-4ca8-9129-2cd0a0f77eda", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.109.243']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--264eaa96-9b98-468a-8c70-e4231c0dc3d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.10']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26e15bb7-8fbc-47a5-becd-bdc4196e95b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.17']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10899300-9d34-469f-ba25-7a1b020576a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--495ed0f1-622c-474c-a395-b6480e0bfd60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab903cdc-6f72-4a29-aa03-1c8103edd805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f7d6874-ce25-450a-81f7-806b07804121", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.24']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f04165c3-900e-4d5a-b023-c416e172581c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.49']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--823528f9-a070-4d32-9b19-acdc0a78abe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.8']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4ca630c-40f6-4320-b8db-f193ebd4ec88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.184.68.24']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--915b9303-8795-4806-bdf1-c30b71e99fdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.184.71.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa287359-bfbf-42c9-97e9-59451fac0735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.187.169.232']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a3e49ea-2b4e-4e7b-929a-941857ba901e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.189.182.234']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70fdff92-6362-444a-9090-ce5350ec613c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.1']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b43bc9f4-5aef-4b41-ac71-36db7682063e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.10']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6422a64d-92db-4d98-8d72-fb2807336043", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.11']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7c473e3-e0dc-4804-a6a8-64f6099e2437", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.12']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5155d973-57e9-44c6-94e7-d961261d1c86", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.13']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eace7585-4a48-4180-8720-83d99b52c29a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.14']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60e1a009-31b7-4889-8ab9-08e9f24df085", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.15']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99468dee-c755-4b6f-990d-b283b9875115", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.16']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fc62bc3-b3b9-4aed-b764-6762adefd42f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.17']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b0a830c-ece0-4799-bbc0-2ae605b23e75", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.18']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82dbdfa2-6996-42d0-bcc0-eddfb6a9def4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.19']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41e48c69-d126-4a37-8b46-3371d6261149", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.2']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81327027-0cbe-4529-ac52-67dd3a94e5b5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.3']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a25f57d4-8812-43a5-a54d-79fa93f3fbe7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.4']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2889368-29c3-485a-b51e-cd6a7b911de5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.5']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e38ec8e-4e68-44ba-9139-e6fd28737297", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.6']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa40d39a-53db-4082-83c4-c8d3e959063a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.7']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f30394bd-9deb-486b-a924-22eaa149e123", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.8']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6834bf66-e900-4ae0-8f3f-608e2c8a4fdd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.9']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab75ba37-a61e-472a-bbb0-2ad49f0cfe73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.230.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--503fb2ab-6df8-40e9-98fd-63b42326685b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.230.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d647a8b-a808-4aad-b540-f9f55fc09f01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.230.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbc93dc4-3712-4f4a-a7c1-f8cea1d2b55b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.230.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--857d726b-3510-4234-a2ab-e126269a8e12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.230.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e9921f3-29b6-4d0e-a76e-8843dcab9f3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.230.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff94284-2078-4349-b180-9511c1a6ffb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.230.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3384370-194f-4923-96a1-eb0a602cdc22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.230.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af10a367-8104-43fc-8f6f-6e96a453069c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.230.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa27c3be-5250-4332-941a-a0e07f088b5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.230.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac00dc90-b01b-4a47-9fa6-3582ac3442ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.230.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4932e392-cdd3-494c-9686-8b42145a9249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.230.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d655739-4ec9-4aa4-bfbb-cc155515ba99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.230.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d85b594-03b1-4662-a258-f333d940c395", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.230.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faab9ccf-9931-4376-b2ea-37a6d6cf8a08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.230.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9457ee97-5355-47d0-8b2a-ca23f37e85b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.230.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71a423f6-062a-4a54-bb01-b8fdb332923a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.230.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3484ebb6-0021-4b59-9492-bf37883ed853", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.230.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bc2cccb-a477-49b8-9a6a-27738c1e42ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.230.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcb9b0de-7aa5-428f-9d9a-2b4b25a1ccaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.230.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bdfd4c1-36ff-4731-b0fa-2a2340da84e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.230.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e6e324a-96a7-4ce0-9dc9-e68435cd0d4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.230.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--174fb6d3-2723-428f-afe3-04cc369c4b65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.230.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a15fba99-1143-4352-874b-6fb651624e5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.230.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9636df54-a74f-4299-bf35-1f20ee0f4ac0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.230.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e17e61bc-0c0a-4ff8-a319-6338983e8a1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.230.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ba71f3c-3978-4136-ab8a-1f09432df0f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.230.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99948963-2887-4a70-bcf0-8945cc8c8b6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.230.255']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b582a6bb-ac29-445b-862a-183dd9a3eb57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.230.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16ce0da7-4b4d-49a8-b1b0-ec80015313f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.230.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84fd8b5a-50f0-4ac1-8d03-ed685791c482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.230.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98f0d703-726f-43b2-bf16-23784b914a0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.230.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd928294-6685-4b11-a6e9-70dd7e03449c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.230.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--052a5128-e426-4588-8b13-da70722579b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.230.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96d4f28b-e8f4-4eb5-9056-969f325557f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.230.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33516fd8-ce85-4014-9ffa-6a7b746ad3d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.230.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c8b3159-44cc-44f1-9f65-c9012e7c0f9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.230.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beba5f30-de7c-405d-a489-a44ade07f368", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.230.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9003ff96-f52a-4e55-bc9c-ba30f301a1f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.230.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bef9d59d-e6f6-49d1-b60c-569feb2858f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.230.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fa7ee0f-d33f-44a8-b81d-a69470d76a91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.230.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d89b697b-a156-4ba1-ad18-5d5300c79a8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.230.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44c89f04-90a7-4e0b-9177-6cb32d0cd017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.230.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0335a7fc-1c32-41e3-ab30-221153eee4ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.2.80.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd4645f-1f9b-40b8-8705-0f91ef15766f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.2.80.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4901951-8220-4a66-80d3-4365a803b61f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.35']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5f89ef1-9c81-4bf8-ad13-9ebb81fb67c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.42']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f81b8178-de02-4872-a9cf-be9cae7ba697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6ae110b-d0b1-4f58-9ef4-b7b7fdd58ced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.67']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74ffe2cf-30c3-49dd-b676-823f10a4f9f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.70']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d8441fe-4e5d-4609-8767-82ccbedf8b1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.75']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b72e507e-bd65-4a2a-b4dd-f87a8317e81d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.79']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b23c62d-985e-442f-b6f2-6ef5bbbd09d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.203.4.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1369faef-62b3-4be5-85a3-8f234bcf5f9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.208.231.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a87991f-794e-4642-bbaf-b7e4a225d032", "name": "Malicious Host", "description": "Web exploits: aws-credentials, spring-boot-actuator. CVEs: CVE-2002-1149. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '185.218.86.2']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--adfd4477-2cfd-4171-9942-ea1551e70aa6", "relationship_type": "indicates", "source_ref": "indicator--6a87991f-794e-4642-bbaf-b7e4a225d032", "target_ref": "attack-pattern--f4ef225a-7ab0-40d1-851c-51f72d2a3af1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--84747dad-f09b-4194-af94-8eff7169144b", "relationship_type": "indicates", "source_ref": "indicator--6a87991f-794e-4642-bbaf-b7e4a225d032", "target_ref": "attack-pattern--30311f6c-f26f-47da-bff1-b2323ba8673e", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f338392f-f45f-4e7b-b048-c39302ad973b", "relationship_type": "indicates", "source_ref": "indicator--6a87991f-794e-4642-bbaf-b7e4a225d032", "target_ref": "vulnerability--e244d6a3-dc81-4710-a38b-6edfe4916bce", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ce864b2f-a8ea-4ab1-9abb-b67280f35be0", "relationship_type": "indicates", "source_ref": "indicator--6a87991f-794e-4642-bbaf-b7e4a225d032", "target_ref": "vulnerability--8844fc8a-e028-4e7f-8caf-909ce7a03c63", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0c4f30d-750a-484a-adfe-2a94eda8ebf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.218.86.25']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f33c377f-4e4f-489f-9812-0a2039722a0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.221.237.98']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a055ed2-8245-403e-adad-5f52ab305a6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.224.128.16']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3335b09-5143-4f74-815e-1385e686eef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.14']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecccb582-a6f3-45f2-ae80-ddf986e44b24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c8c7c27-2c7b-430f-8657-b872978c013d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.33']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2140f4bd-eb85-4a2f-b5e0-e62d013cf49f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.35']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d0963e7-c3bc-4139-a151-0c88711f62b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.42']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c937349c-2e4a-499c-bcaa-a7a5df475678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.43']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a61523f0-8572-40f5-95ab-2565375e9223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.45']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ecd2a7e-1b3d-4dde-b549-0e8f33417230", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.48']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fc3463b-f20e-41b5-8571-a42073f8a16f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.98']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d49c3749-3853-481a-8ec1-10e772b8cc64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.92.153']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5538e5df-d7f7-4a03-8fff-4d95b9236b22", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.240.215.110']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df048e99-39b6-440a-98b2-385af81ddd20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.104']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e017c807-197c-4830-9b55-07a0b961db78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.108']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f4ff4e3-f131-4a86-a0fe-b2535dc04980", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.11']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc32b103-f4aa-4829-8bcc-9d0481e90979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.17']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90498f46-5355-402e-b66b-21eab28e8769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.18']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48685047-90fc-4ecf-ac1f-4da9f2dd1760", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.19']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd121fa3-5b2a-4e4e-a027-18277243963c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.33']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ab7e3ff-8c39-493e-bb14-3890534e203b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.36']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79fd0a8a-b32c-4cc4-b825-0ce99c4d6f71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.58']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e791db8-b075-4cf7-bcfc-6a3f15f9c42c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.59']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27f5af0f-5001-4008-9e0d-1a6386419c22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.71']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--195ccba8-65cc-4325-becb-a0e46fb0504e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.74']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44dbea92-25d6-4f7c-8015-ac4a1618c77e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d726ab67-d247-4494-b7f0-b175e554daa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.9']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f45dc868-f83e-4854-9cbd-66287c5ce7e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.90']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a6ea402-58cb-439e-b0c0-a836cfcffa82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05f84321-c8a4-494f-a583-ad10cf69904a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--266603c8-42f5-4e0f-ba88-07e575de37fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.210']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f56fa8f-58dc-4946-94e6-a60e15b8f9a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.226']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a420ae10-21c5-4b75-a5a9-5e27e3d32845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.229']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a766c01-3e1f-4465-873e-d1effa11e424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.128']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33f1e1f9-1aad-49bd-a5d8-0c7d2d9aad80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4b1ad87-2d17-4557-a790-9ff812901369", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.250.240.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--501d91e4-1d44-4506-96d6-0f59483481f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.250.240.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36a8a6d9-cb27-41a5-af3f-03624e0d0062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.250.240.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--837735ad-bf08-462b-b505-9ad7e6328222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.250.240.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5794ed00-e81a-43dd-a056-5be44ba78569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.250.240.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7197b4f0-9486-4b5f-8bf0-0d3acfbac0f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.250.240.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fb10882-7429-4e10-a942-bf9b99d6dd69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.250.242.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73197c5a-a62a-47fc-8c6b-198ffb687062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.250.242.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e63357e1-32c8-447f-a939-4aa0a1d0fd24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.250.242.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f54bff3-1c9a-4a2e-9bb1-f365984002fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.250.242.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8579a878-d657-4820-9602-8e14dec5be3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.250.243.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c3aefef-3ea3-480f-b828-284038547b0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.250.243.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04e502ff-7440-416c-b686-daa1d5314277", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.250.243.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdd7d746-4d01-48c7-a892-0ee8c4cbc901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.250.243.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24bc0325-8718-4187-84f5-03d9c764cc68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.100']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a6ebf4d-970b-4c8d-ba41-01a1e9a7f75a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.101']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a9cc0a0-680c-4c46-b945-2738e5c32c58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.107']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44577d10-238d-4c9c-a4dd-79d73ab52c6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.115']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--178764ac-1b25-471f-a5d6-7e7765b5bdbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed0363bc-f23e-4802-8adb-ccac19cea808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c1153f4-3527-4222-aa49-493c05ebb14d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.12']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--add12a24-8afe-4edc-81e2-ded13406a18f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.129']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d58f2fb6-97cc-4cbb-b48e-7521e7f94670", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.131']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f6f1976-0eca-4ff9-a0f3-18c86bc9c7ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.133']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e5d2dc3-3850-429e-8b2f-5950d8b0f9da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.134']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da7ada57-4700-49ec-90eb-dd8c6a33b234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.135']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc7e883a-029a-4d3d-9f1c-0034081d324d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.138']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bb2eb54-c008-447d-b628-c60880b65ba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.141']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79e95df5-3a81-420a-8abd-7eafb81b29c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.143']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a360a00-ec0f-435f-b2bf-f0dc94dc7e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.144']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3b4584d-96b2-4ef4-8fd0-e312887fe07c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.145']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2385e3d1-4236-4461-8172-ba714d716f9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--552c9dcf-7ed1-4a95-8d74-cc187cc418ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a22bc00a-a8c3-4e5e-948d-6581a04c6945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.152']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a11a6c0-4fd6-4bc9-827d-6b8ea437eee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.154']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38a66343-bf49-47d5-b2ca-37bd3c070b93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b645cd2-0061-4c7b-9695-910f196a3a31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.16']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17f6aeb1-0abc-40a6-a79c-b2a329345acc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.161']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--981246d1-407e-45bb-97c2-f7c03e7c0215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.163']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f97fd375-6553-4e08-8ae7-38c14a35a63f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.166']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c67bd82-fce3-4dc6-8e9d-8f3305f2ea14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.170']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--943071fd-2d1a-46aa-800b-7f2b2e86f843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.173']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ad20431-d0eb-4afe-afed-f49e600d8b9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.178']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e02c60-2ba6-45e1-bb46-7db07f28a075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--641d1f5d-ebb8-41ee-9222-a0eee474337e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eba34d72-e211-4279-8b12-e5b1212423a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.186']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--639e154f-1897-4ebc-969a-2115bb842869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd9b05ea-f55a-4e62-846c-7a9893bdc967", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--889dd985-43f7-427a-b480-3c5a2d75e46d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24870ae8-d598-460f-8010-9d795596abca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dafbd0b-f571-486a-8f03-3baf4911a8a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.197']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98f33a9c-7aed-4f3f-bb21-e6359617342a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.199']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--326037b4-11fb-4827-8bd3-c67662a3d788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.2']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac1240b-fcec-47dd-86e6-85ae4a9fa877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.200']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--330ada46-1496-4ef2-a251-9f3b5e10c7f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.201']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dfe2ec3-42d1-4762-912b-fc00b907c4c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.204']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d28fd6b2-6d8c-4cae-8877-cf38bcf90a58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.209']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54b32c3f-7f9a-48bc-b76f-5fa4b1b15696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.216']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8561f8d-40db-4371-8cd4-2b4a15143535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.217']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0315dd8b-5b96-49d6-bb5f-3a9a74ec2a34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.219']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfec6454-6e15-47ae-9072-67a8eeb5ca74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a888748d-d8ce-401f-9010-8aebfa7ac27f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.229']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89e13058-2471-484e-9090-c9a83ff7d078", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.231']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bc431ff-86ac-450f-90d8-3c2ec5c7fc8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.232']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3c5e00f-ce03-4db5-8a98-dad3221b038f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.236']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--352b114f-ba10-432e-90db-52e7cc84d1ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3bdfd12-8218-4741-be83-6345467fea71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.249']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc2bf09c-d3da-466b-a4f5-e884744e0376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.250']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f5e52b-e58a-4086-8701-4dca96411ed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.251']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30fd3745-6970-4f8a-93a6-4d3430d30b60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfe50c48-c8ff-4ddc-b586-9d521ce94db9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38f3cf43-0824-4fd7-9cac-5fc6310b2af7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.26']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2644b97f-c21a-44a0-9f7c-de0fe28ab60f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c5c7d8c-ae1b-49c9-bfaa-6eb1051d956a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.34']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc672345-5d42-493a-a6e1-b02f82399d4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.36']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4def9808-ac96-4d84-9b72-a374cc43ac68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.37']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90099f8a-9418-47c2-8e92-b2da71c6727f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.38']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f4fdcb1-b2c3-4f02-b831-ca62eac9b8a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.39']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e68c4cd-c08a-4c38-9e89-1d792b8dc7b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.41']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b8d1f6-8958-4b12-b201-b4f3a63793dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.44']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb9ed80c-5f6e-4c26-993a-717af6699a8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86371877-14a0-4317-944d-2ba705759829", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15b28c02-008f-46d1-bcab-fb76561f1ee3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.57']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75bb19ad-adfd-4b2e-ad22-dcaf3aa2a112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.58']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e709d9f2-d012-4a17-bd90-3e050fbd65d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.59']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d38892d6-f304-42b3-90eb-3107190eed8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.6']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3efc23ab-ffce-4b38-a92c-f853db154439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcec0f78-4d53-41b9-801f-58b002440c58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.64']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd300dc9-9dfe-479f-962e-56bc6982c72e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.65']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caf27b73-1642-46ef-b102-7b2b7b41c7fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.68']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c8a916d-97c8-43b3-b3db-1dde78f3e89b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.7']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bb6685b-2117-431c-8d72-3d21db8f2785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.70']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ada12bed-1566-4980-8b0b-b2175877e6c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.73']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f267d87-20e3-4414-9b4c-402b64a0cc06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.76']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83d6cf65-9f44-4423-8f00-07bd88cf4fd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.77']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c0c2d7a-9e66-46be-92f7-9da34cb10fc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.8']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3177aa5d-1ee6-490e-b83d-08bb46b03b5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.82']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--906ccf95-6ec5-4dec-880a-c460c8d4a242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8f8bf0f-ba24-46ba-aded-26a07ef71c5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.88']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99751c7a-1821-4411-9f0d-c1a9e7934e38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.9']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dab80d45-1c41-4a8d-8b98-5a9c9eb54d92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.90']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40068cfc-a02c-4534-b41e-f100df360390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.91']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--291edfa6-e219-471f-a42c-c001ef89a8ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43fc9844-043f-4183-947e-f37088017590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0393319f-c395-44ea-aa98-756ad341f736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.96']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1856b063-d557-4a73-8e4c-13585c7756a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.97']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59396f21-66bd-4b66-82fa-4c95964999ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.32.48.98']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7038495-7d38-4b93-ab20-d5acb2248c28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.44.64.174']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4082b4fd-f2f1-4a1b-8c3c-cd703414f6a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.44.66.153']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17569b33-64d1-4d98-b710-a5fb80a54bc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.200.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1794dcaa-4176-41c1-89af-90ac42e46cc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.200.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67e48852-82f6-490a-8599-dca9f329ad6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.200.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b50cf724-3917-45cf-85c4-50313cfa645e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.200.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53790313-e154-494a-97bf-55b6661e8c94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.200.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--404a55e2-7abd-48b4-b648-e72323f61a8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.200.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65322cff-01fa-46aa-b721-1f053e72f1ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.200.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a667535-b2d9-470c-bb2a-0f9d8d22b9fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.200.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a211641-135b-4b78-ac49-4dec8e47453f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.200.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c31b247-e983-4f90-8d68-43168e01c652", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.200.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff7bb23d-3e1e-46dd-a455-f452e1f681fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.200.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c704d6a-e175-493b-baba-8a378dbcc1d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.200.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3368da5-f0d2-4654-9797-560a4d8c5f60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.200.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa280628-edc4-4f90-96df-d001a2fc5d18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.200.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa82dbc0-29c4-4c5e-9429-c60a67c6b70b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.200.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea016070-1a3c-4bc0-92c3-7b75d35569d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.200.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a205d3fb-e6b6-4aeb-9358-81272e92574b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.200.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac20947f-f8d1-49e2-afa9-a808d86cf54d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.200.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ad55b9b-284b-4214-ad9f-01b8783b632e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.200.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--380ab746-630c-45f5-afad-80bf4f022131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.200.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceb4551a-0c76-4fad-852f-934c04d548cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.200.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ca7cc92-9447-4201-9e84-1242633ac7f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.200.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e529b25-71b3-4083-8e0b-54ca8a85a3b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.200.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c834ee6-bd8e-424c-8f82-fa0810a4bacc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.200.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--931a7115-4449-40bf-86c0-f31a5c74b927", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.200.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93f46a6e-bff0-4abc-b225-84db241b8131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.200.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4552ba7c-43be-4ed8-b4cb-3cff96274673", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.200.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da7352fe-da35-4293-8677-e4c802f54bb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.200.255']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeeb5226-324a-4782-a5c2-b3465ef92821", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.200.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7d1c09f-2074-4895-a046-f5364564b304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.200.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a020adfb-660d-4b6e-87a2-752879285cd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.200.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--776e9f5a-3087-4518-ac41-2d43e5956374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.200.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e27c6dfe-0fc9-4e22-9179-9c0080606bb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.200.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1062cdb-8960-4be0-ba9f-1347bdde43d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.200.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acb67645-bf7b-4c29-b473-ffcf3718b58c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.200.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26e2fde6-0fd7-42e8-9dbb-ab7929eb88e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.200.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7025456-db12-423a-8e4c-2ecc2b05f533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.200.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1ce66ed-3f6c-419f-b5c4-05b67159d9a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.200.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ade63e45-ecff-4217-9bd3-0869dc6a00a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.200.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--518f233c-bb58-4699-855f-6a0f60484d2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.200.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e3196f1-979e-4c58-9827-a6b17f14e2aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.200.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c33b8a33-47c7-4fc7-92f4-e74e7308dbff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c91f7fe-e831-442c-b1c8-efb16733b8d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56869f4a-6b3f-4944-b3ef-83e8f8662188", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d76b2f0d-9080-40f8-b27a-dd2b0e44248e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c78c840-f4dd-41db-b025-089f40802b11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--034aa563-4aec-4545-a06f-d5d0439c81fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--721a30fd-6206-48fe-ab3c-7d234436f9a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6e3b83b-1e8e-4696-8849-6df82732d1b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86f6d7c0-3c83-409e-90b6-27a9adecfef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe88da26-65d2-4c49-af6b-9a654fe95c0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc683c24-ea09-45f2-b641-884c0039d888", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e2e5a40-9eff-4e3b-861e-cc548016af42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--107fda91-0944-477d-91ff-3d1d11e343b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--163768dd-051c-40b4-81da-6d98f7383477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79b1c639-42f5-4e9c-8d68-b7498a89cbcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c1d47f2-41b4-4505-9f6f-142f41d9b200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f39ca83c-853b-48bc-bf25-36b5e3b22733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18ad0870-7ea4-49f7-8f50-82924f61afc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6c79688-acbf-4b9f-b2ba-3604f9429e4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dc61cb3-b861-4465-845d-1173244b25c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e07b393f-c043-4883-8472-d795cc86ef22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6e51bc2-1b24-469d-931f-35c09b0555d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b8cca01-8225-4eaa-8bb5-6740819c9955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff089aea-083b-43d5-b4db-c335d10f63b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae15f83a-c617-4838-976e-2534a6d0237b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86af9769-d6c9-4453-999c-ff0d18888933", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f540d9b9-7ac7-45e8-9f09-6a4e0e1e56fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b6fc1c6-7c66-4909-ab23-8f47ae25dba1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c663f7a0-98ef-4e98-be61-b3aea9704607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9ad44d1-b7df-4bf4-bac6-34e6b77bf12b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f19fe3bc-bcb4-4d9f-a8fc-734212046e9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eed31f4b-ba4f-4fa4-ab0a-6e96f1fa1c67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a1d7315-c8cb-457b-9768-b0b39096a625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d671a70c-b923-404d-97c3-bfed0e8a980a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2a938b7-06b0-4c56-adcf-b10a5ccfb036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2160acd6-6bf7-4d85-9719-ead98189e039", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--523be2eb-7227-4f22-b3df-7f2f7f7beebc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e3811c2-badc-4f26-a36b-caf139ea842f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1e60124-d901-4a5d-818e-82ea387f3678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48934287-48b1-4c4e-be04-ed9473abcd74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3e3f729-d9df-47d0-b80b-2de6ca2e969f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--504ba599-0ad2-4c38-bbc1-a91cbaabe6dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08d678ab-6161-415b-a525-31508285c658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a0321ee-98e4-4418-98aa-c9ffdb478651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4023f4e-beca-4ce6-986b-812adb0da60e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcb2e188-da53-4ea2-b3bf-2323f3b15747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d85a3795-9d87-4b3d-9033-b6ef42e6c163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.201.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e84fe0a-3fca-42ac-9d55-e0eff1115831", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e08f784f-47d0-4884-b25e-a33a2c3e553b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b214e205-a9f3-4a05-bf39-c2ae22ba2f0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af204326-944e-4d8f-b68b-03fe05bebcc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7be4fa9f-6738-4b8b-acf9-d3b80a9f13f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca63930a-c507-4f8d-b680-3ced1f74ecb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d65d7ae-5b19-48e3-9ce1-3edc653bb7ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baaf7e69-af5b-491f-975d-5f160a96f2b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--868957c8-7826-4934-8e20-0ee1d9523943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28293cd3-4541-4130-96a1-c757b5e5b1b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--018e209e-b8a4-449e-a9fc-80c03844c9cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92f28c5c-eef6-42f4-a593-3e8c62f75295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--742a6c3e-b614-4541-9c69-a01370e79fd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a8ad5a2-0097-48ed-84c4-3d50bfdea157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ae595ca-8740-461c-8ebb-ee91a4d73bdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7453b0c1-53ea-4aac-aa98-3596b43e4fb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34059bb2-7414-49f0-ab9e-c9d62d0f62c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e8969fd-8288-4435-a9dd-1c2823a4c6cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41836ce8-b653-468d-a996-268dac9899dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e95f242-2b75-4d52-a744-6f28135eb6d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6633bb1c-e49b-49b5-8332-0dea584c1469", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b055b75-c973-45bf-8686-fb56df8dad3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4083763-5645-493e-a224-c8aa4515b574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1649846-3a55-40b4-bf60-4100a966eca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daf75e75-b35e-47db-a0bf-4f1286358c2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--231715f7-d2c4-406c-a4fb-ea67f633373f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70dff808-1055-45bb-9752-7be2c28d36e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c75c18f-d7a3-4484-8f78-ed3793dcf995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68e6e436-e6c9-4971-b757-141b3860271b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8acff8e-f2e8-4768-b4e8-bb50fee571e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5769c524-025c-41c8-a64e-eaf1236f4b23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.255']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--170fe939-e792-429e-99cc-652e48862cbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38cd00bc-a057-415e-bc6a-e85f437dd0ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--280cc643-d102-455b-bf6b-b330dc35844d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abf3afe6-43b3-467b-b8c7-cabe1506392b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f29bd187-ab96-4411-abb9-b90c458b6368", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79dd10d1-cba1-450c-8ee1-f558785e3ab2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--979409d3-d209-42d3-a5d8-2dec81c7ba72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d407806-f894-43e0-a9b0-cbfe41578268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--853fe346-3c1f-4710-bf71-252a2ded621f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--250e5c0a-f479-4899-b55c-23ce17251603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e264e64-8585-4f59-9f6b-661ed3d77a8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08fa3866-d5cd-4d2c-a52b-0a1ce264dc46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce8484d-d4ea-4736-a7dd-52fc4fcaa958", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3724219-27d1-4acb-8e3c-d6b31d3ccfa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.202.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--996c217e-b000-4f18-88d9-b03f4f201bed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.203.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13d18959-c2d7-4ea0-bbff-261b02137258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.203.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6906bf3d-09c5-4dd3-8a7f-7a7ad192f0d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.203.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0de438a-c965-4bdd-a1a4-6b7a216af85c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.203.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f898739b-e846-47ee-9e47-8ee20b3ad4ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.203.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--897093bb-76ed-4895-b7f1-5b4a7aee730a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.203.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6918de85-866b-46b7-9243-a88b04a20423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.203.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cc1e80d-a827-4a9f-a046-2a8ddb9c2473", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.203.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecc022bd-1a51-41db-a443-468384b725ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.203.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d450a345-7dd3-4431-8826-63354aad94e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.203.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c04358a-9e9b-4a78-aed1-3a763c9e9988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.203.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f174d83-bf82-460b-9418-9dc339ac869e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.203.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92a91ef5-8ddc-4ba1-9750-2c30e02f33ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.203.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54b7215e-f74f-4a27-9276-97b41a76ed97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.203.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1e912aa-0b29-414a-8120-b8a40c23328a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.203.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd2d723d-dfbf-410f-aaef-3d1eae2d6a31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.203.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c43a214f-23d1-4842-bf44-886eb5b11aa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.203.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f48ead07-fb21-46d6-ab4a-ee45f1b08da3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.203.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9038629a-a06a-48fa-8bc6-dce5ad048af0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.203.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83a70f45-0a34-44dc-af9d-92f9a959cfda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.203.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9051ed3-853a-480f-9870-a8a58516cfea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.203.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ab7218d-1458-4e76-b244-889ab539e215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.203.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--439f7fc5-b7eb-4a7d-b7f5-ca3bf86d4bc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.203.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bac2a54a-cc76-4e79-b1b0-fd6f6e1ec98a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.203.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df19ccac-6b42-4f64-b85e-dd7bde3dcd07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.203.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8f2c1bf-1eb7-48a9-8fe7-1bc576d6158d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.203.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3ae078f-1faf-4165-98f8-40293045018d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.203.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ac66381-066e-4158-8b77-34520c616710", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.203.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--895bc284-77da-463c-935a-3604d0b8242b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.203.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50583266-8575-4e8f-b5a0-d9734aa19665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.203.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f56432e-2b07-48a8-9a5c-ba91dee76179", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.203.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--780b0210-b319-4efa-8b3c-1f2a5f6b186d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.203.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88c037fd-89df-4858-9287-9dcc839bbb39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.203.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9353c25b-f254-4c63-a541-2d39a06acc6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.203.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f60d0913-94dd-4aa1-9b31-c3f7efc85cd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.203.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93bdd1e9-f19f-4e89-9605-970181a26299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.203.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dd1f037-26c4-419c-8f5a-222079a8d0a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.203.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c40b90a-cc99-4576-8c2f-d7bd04118e3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.203.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4356ae5d-b944-47ba-9cdf-6e0a99d8ff43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.203.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86cdb19b-4156-48dc-98a1-1608870f0ca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.203.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea3ba893-7001-4984-9f7f-efc82f9bc209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.203.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7343ab40-dee2-4485-bff3-0700b29183fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.203.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cedb5185-b517-4bed-9046-71e7c61c96b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.203.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76f81a3d-ef79-4e24-91ac-c56cb3de7c59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.23.133']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--780414b3-9c29-4a12-89c1-85140ac2d417", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.75.238.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--880b87da-715b-4b82-b5c1-c950b24d6202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.9.139.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8bedba8-c1f5-4f1b-86f3-1f94bb892e23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.10']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4049543b-2621-46d8-b928-e17e5691a3f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe4b4b0b-2173-4184-9cac-41718affa238", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.130']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--281ad78f-b241-4903-81c3-3c91db59e58f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.142']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97182802-8e4d-41b8-a7a2-af4cdaff782d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.37']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bf64050-84e5-4562-a22a-7e301863d259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88f849e1-7ea8-4da6-ae97-c5c308bd4a75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.66']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7801909-6467-47ff-b5de-d6d3ed6c227e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.79']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9618c4cf-28de-4623-a8da-042e1bd032f9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.95.156.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b1c143c-f0aa-4634-b38d-a0693d352846", "name": "Malicious Host", "description": "Web exploits: aws-credentials, spring-boot-actuator. CVEs: CVE-2002-1149, CVE-2019-5418, CVE-2020-5902. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '185.99.255.196']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-5902", "external_id": "CVE-2020-5902"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--76d97849-1de6-4960-aee9-6811e1a45924", "relationship_type": "indicates", "source_ref": "indicator--5b1c143c-f0aa-4634-b38d-a0693d352846", "target_ref": "attack-pattern--f4ef225a-7ab0-40d1-851c-51f72d2a3af1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--49d77890-313c-457e-a337-e99f0f32a7c6", "relationship_type": "indicates", "source_ref": "indicator--5b1c143c-f0aa-4634-b38d-a0693d352846", "target_ref": "attack-pattern--30311f6c-f26f-47da-bff1-b2323ba8673e", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e77ac3eb-633f-4aed-a144-a6b265c8aacd", "relationship_type": "indicates", "source_ref": "indicator--5b1c143c-f0aa-4634-b38d-a0693d352846", "target_ref": "vulnerability--e244d6a3-dc81-4710-a38b-6edfe4916bce", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fff16bce-4213-4b2b-b1a2-2b8a2969eb78", "relationship_type": "indicates", "source_ref": "indicator--5b1c143c-f0aa-4634-b38d-a0693d352846", "target_ref": "vulnerability--d703b0cb-2349-4a45-adfd-079d8cfe4296", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0571a572-db75-47fb-917f-b1e29b380ebb", "relationship_type": "indicates", "source_ref": "indicator--5b1c143c-f0aa-4634-b38d-a0693d352846", "target_ref": "vulnerability--de361e24-96c0-4a5c-aa33-63a63cf40f2e", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e5647d9d-912e-4236-8f78-febaf0c7f800", "relationship_type": "indicates", "source_ref": "indicator--5b1c143c-f0aa-4634-b38d-a0693d352846", "target_ref": "vulnerability--8844fc8a-e028-4e7f-8caf-909ce7a03c63", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c52c7e6-b725-410c-8d55-a4091c49ccc1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.122.104.11']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed59b450-57c4-427e-b3ec-2539bb99b477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.194.43.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38028dd7-8f4b-4c95-93da-9c22ab888006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.22.87.248']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200fee4a-c802-402b-8d10-2729b571973c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.249.27.154']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7423caa6-ed10-40c6-8756-28f808ff257c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.60.226.2']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5da310a5-1ae5-47d3-9b58-96e285b21b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.86.110.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0c33940-d80f-4000-9245-435b62bcd1b0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.94.229.64']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90634457-0a99-4c09-aeee-ec22c7109daa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.17.228.218']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45f2129e-1256-457e-a674-5d5b5b4273ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.180.215.51']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc20a39a-6f34-4641-92cd-945c7be5490b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.188.241.121']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef8ae1c-7332-4a02-ae1e-b29f5a2c3fde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.188.32.72']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--152b1c6a-2a34-4764-a062-889a6c21bd06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.189.164.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acfe23b6-9620-499c-8b7a-e1d154293efd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.191.2.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f299afaa-c0ee-49b7-8a2d-cd54494d231d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.198.106.72']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a377cf1-76db-45d5-81da-5e6e81a50e7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.49.144.147']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6d2d419-bc55-47b9-bf46-17afd07e8b26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.94.182.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1720c397-979d-45d5-8c85-299b3a0f865c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.120.52.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7cf85aa-7b81-4c2e-80dc-882eeb6d4b63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.129.211.113']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b246d4f2-1328-4496-885f-633994999e80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.130.177.24']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a116ee84-45c3-4a1a-876d-23dfbe4b1270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.71.161']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65db650e-26d5-4f57-a27a-364559821402", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.255.140.249']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c3075b0-b398-415d-a8ca-6531249280ce", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.26.193.232']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e83b83cc-ca54-41d1-9f6f-15ccdee828dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.66.26.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deb8a4c4-5887-4629-b424-6aefb3cf191b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.93.91.198']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--914d88f9-0475-4318-85fb-c83c55a7e3f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.115.59.32']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e75ee492-41d6-4372-913e-a318b1bf2c62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.131.135.69']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b26d16b-7ca7-419a-aee7-8ce7aebcdb43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.148.211.203']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c912a48-3475-4250-96fc-aab9d86cf879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.18.97.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f8eb60b-c07f-409c-8a43-3f83fcd2d65e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.194.140.170']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7610c222-9036-4a76-8c05-9c9880577f4b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.36.128.71']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f08b69f2-498b-4754-b804-791243e0092d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.84.251.120']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--438ff447-8c7d-432a-898c-edf99d5d9ac0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.115.189.194']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe916cd5-1250-4cf2-bdb3-204b90bb9ebe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.161.41.233']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9da79e7-ae30-49d4-aad3-f2610af560b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.177.151.14']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70b9fcf5-68ee-4396-b8d6-15eb72bf912b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.213.109.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb4dca8a-9a1e-46ba-a560-afca6afcb039", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.4.214.234']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38c98110-38fe-4674-83e8-01e5c122b1e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.96.152.186']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f7344a0-46f3-4766-a0f2-35035dff6c70", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.141.148.102']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10bcee9f-f4f8-49e8-a5d9-30c0b261dccb", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '192.145.125.70']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43dc5a57-5f69-43b4-bf2a-2d70f24c07f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.90.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47d9b49a-21de-4fb8-84c1-898d626ad5d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.90.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1e464c3-3f3c-41e7-9952-2cea1e4062b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.95.101']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80332119-d367-4c4f-a4d4-bce928f0dde9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.161.49.2']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--296f5030-b5fa-4c6c-80ca-5e3a5d0f0aa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.169.226.3']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90631a90-1d85-4791-99bc-db3af9a3ffd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.169.233.115']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30e10874-a2d6-45b4-8e5a-54a84d30bfc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.227.128.168']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84c60371-dd37-4b79-9f92-368c46adb609", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.241.156.75']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eaadc8e-43c7-41f3-ba27-1f8716d875ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.142']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0de1a71-e748-4dd9-856d-b257b6a04f11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9abee19f-1718-4fc7-8a97-2fa968d1045b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.26.189.4']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--649ce841-78ba-4a28-b21e-0a8b444878b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.81.131.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f727cd05-026f-4cb0-9168-bd170178d3f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.107.177.40']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48b34759-5415-44c5-a98a-57545dcaa5b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.111.117.187']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b65fb7b-75ad-44c1-9a7f-50ee7bbbac0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.118.52.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c9c8e79-8732-4d88-8c98-a312415c9d32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.138.195.140']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16cd32bb-463b-42b6-a814-362bfb0dff6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.100']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--131b24b2-d339-4076-9bb8-fbae612a8f54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.101']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5561b9a1-d607-419d-929d-389add84ed30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.102']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc97348e-df12-439b-a6d4-049cc36bf478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.103']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d3e1742-beac-4219-ad95-8d1d27119ee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.104']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9c4a248-fa23-438d-bef9-77a746d4c2dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.105']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f423b94c-4696-4545-b42a-5efa497960e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.106']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99e55484-43b1-4040-b524-42b919f17327", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.107']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcb5b388-58c6-4d84-9dfa-b6b68cb2b003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.108']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ff14568-117c-4616-9fe9-2aa47886ae63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.109']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46aaea64-efa1-4d61-8c74-3bdd9f98e664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f58a6a9e-a2a1-481f-b696-7489ae9fb8d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.74']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c5c9202-7819-4936-a58d-b675cc6338af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.75']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c0c2146-690f-4420-9383-d2802922ee04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.76']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15c6540d-fbe4-40fb-a712-1143ae2188a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.77']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e99a3bd8-d3b8-435a-8516-9dd8595e741b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.78']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--212087b9-0cde-485a-907f-d121a824da32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.79']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc20c342-e284-4c2b-bdaf-e58f35570ca6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.80']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68613353-be8b-4ed9-8260-2faf3f8063f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.81']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--177da7f1-d40f-4324-b0c1-8f664ced7716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.82']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d928618a-eacf-49ed-b49e-90346161bbec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--007a2582-45d8-4f1d-ac7e-1077a6b29052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9d94a06-b6c7-4d57-b572-55464eb30867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59539cd1-079a-4d9b-bb49-4501eda5616b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63ea95dc-a805-43eb-938f-647f5b2073cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.89']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e654b1c8-b8a2-42c7-8ad9-55b241aff54e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.90']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c097a4f-1d71-401a-9ee3-f12f296ff264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.91']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1398c5d5-83b9-4205-bda2-313e39973892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89c583c5-6b0b-4036-b451-0051ef40d63e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--761bdba1-ef08-436f-9a38-b3b9804dd5c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--206658d2-30dd-4f10-9cfd-0b144adf6567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a480b49-4f9f-4a32-9e3c-c6d9d8528bb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.96']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e73f558b-cc4e-4460-a0b7-4e845f78ecf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.97']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8053e8db-3aa0-4b71-9358-0f42ee652a3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.98']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2d0fa8b-48b0-414e-9f53-a25d1220db88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.99']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--704d93aa-d6b0-4817-888e-0dffb4e58b96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.19.253.41']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e3a82b-9342-4629-9255-0156dbd2bece", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.233.210.50']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bad49aef-d522-4637-8a27-d621aec6971f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.218']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da6f23f0-32cd-49e6-8709-7e690fcc2d01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.246.149.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d8da886-6fc1-404b-a05a-c030513e97f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.25.218.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--960f29b6-6011-4eae-9284-3b883b7cbad1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.25.218.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e87cc3-6117-4634-9f4d-94a909204911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.25.218.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a0e9462-9cb8-415d-aa33-3450728da131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.25.218.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--410ad01a-f21b-4b0d-ac26-8b3a9e8a6a83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.252.169.88']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a263876-52ad-4731-8a75-66caeecac389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.10']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74f1eabb-7a41-4451-948f-80954a4e88b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.11']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7e8f362-8ce4-4a05-827b-d8fa6145b61a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.3']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cee5f33f-cfa6-4b93-9d88-f14a836ea808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.5']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7101251-273a-4362-b1ca-844b341fd75f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.6']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e461003b-691f-48f9-9b6b-b6e9ccae9319", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.7']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b1f0faa-cf8f-4a06-ad7a-dcbc27edf9de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.8']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0a999a7-91da-4c54-a39a-28041a9119a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.162.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d99d409-98c0-46e5-a738-522d770a15f2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.162.155']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e354541-b575-48f9-97d1-afc79c02c085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.43.145.179']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e823d18b-9c3e-4872-a060-6f2130f5759c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.255.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--825ad83f-2a05-4814-b01a-2c7bef116d99", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.47.62.69']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f303514-1211-46f7-8abb-1cc5dbb57bc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.90.12.122']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3862fa67-2466-4aff-a0b5-0a52d4b7311b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.4']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ececd4f-f04e-4998-98df-2af495365923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.5']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4b7cd13-1cb9-4781-9fdc-92ae81752e55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.6']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c489ae21-1387-47eb-885a-7909102ceeaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.48.134']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--157697d5-4745-414a-a2f1-0adc0f12f48c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.48.45']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac514bb2-c4e0-45a8-b0f5-05518ad3bd98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.1']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c605d7c3-8a58-47d8-9964-c49a8ac88e16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.103']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83a745ef-5458-46e3-9223-14150f95088f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.104']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ae168fe-9f63-465e-b7e9-9bd9a543e4da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.164']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63c5fd68-f34a-44b3-8cbe-6b44c2e61b91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--706396b9-c0d9-43d5-b2fd-a65f0bf53bd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b601f244-13ae-491c-86da-b98a908da680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.207']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f0fe92d-a917-461a-bd59-4ea82565aa94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.232']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--292612fd-3728-458f-a9a7-47ccfd4dcb89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.43']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0f41a97-2531-4d62-85bb-dab99cc0e457", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b9d8549-8f43-4fed-9848-3b5c2000651c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.80']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b3636f2-16f3-47f3-9586-48ef28c567f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.146']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13295295-5470-4c56-b5e4-e6bce68dc8fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.194']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--699c233f-de2c-4853-9999-3e5fb453d706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5894b60b-5cf2-4f6a-b8aa-8bbeadf86e30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5be246c1-3fe3-4649-a336-20a713dfae1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.41']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e0619c7-c433-4281-be4c-2db9d0c625fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.24.161.104']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35bb891e-1e6e-474d-b71b-02bed0b1f759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.24.161.172']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad9aadfb-d85f-4fbe-b726-e61532a0c178", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.39.227.64']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d92e4fa-c3cb-45be-b79c-042b95604af5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.16.73']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e90fc492-0d39-4573-a817-73121a3fa1fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.62.118.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bfde503-61e1-4936-b990-c1198b74db0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.62.118.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c324463-3434-4198-915f-41b134c6bdd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.62.118.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c2fff00-616a-435c-9ef2-06695d1a67cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.62.118.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e17e9986-70bc-4b53-bfa2-c8c21b24d79b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59d04db5-c2ba-4ad2-aac1-17605d8db9b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cde5029d-7576-4b96-b378-42c0edd5f5b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f33562f-ac4c-424c-854d-4ba9c8a0e383", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1236ce0a-b2f6-4b9b-877e-3c13072b818a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c027b37-5a60-4507-b4fc-afd93dd07e3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c89eb67-77bf-4edf-a180-90c7505a3f82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0ba0665-cebc-44b4-8bcd-f43eec8406d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6120a8c-c9f7-4ee2-84d5-17de9f346ee3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d9ad93b-8011-44a2-be93-c7ce5b7b0ce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9282c249-006b-40d5-b9e4-0c650a74b9ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e0cac78-38a2-45dd-86be-df70393ebcc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--250218f1-8b6e-45cd-8e6f-deee7f3f1e94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c9e4ec0-30f5-42bb-b975-864119e7c856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5788a31a-e65d-49be-af76-15acf6e1a879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f351efa3-8863-4357-a1d7-56d1344268f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5eb5817-38ab-44f3-ac2a-7f4f236cb23a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c469f8de-e4a2-4b64-ab83-50a9226c5302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96b2e721-dbaf-4f15-b989-6aef135ba18c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f85f767f-a1d6-4322-b569-d535849b8056", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22f4689b-9d2b-43b0-b112-c7fdd6a98d77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e86920b5-7029-4d19-bdfd-a4436c266e7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d31def7-9670-43cf-8f21-a0801dc7b678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f039b10-368e-4a9b-9c36-5207a2fb91ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96b8bf45-d8ca-4f4f-9c5f-b00223fe9161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8152e6f-e7f0-425f-ba88-5bef690aab2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--448eec92-928a-41a2-88de-4b12c31e2d5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff36a502-d455-4171-9356-9698b7d5e50f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e82c902d-1420-4b9e-80c1-5b31b7a2ba5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6e8904f-9011-4535-a347-6887901c6c01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f95f5f30-4420-4ebd-ab4a-a6c7ddce2c81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04890475-88ae-4a2e-b66e-bcb06bad93bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.255']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99792a5b-383c-48d0-9bd9-4b286d09a4a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54c9a1d0-6139-4497-ae1f-37f0a334db05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86c58a52-7e43-4a25-a46a-b62c1ea452df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f55fcfc5-edae-445d-8a65-80fee67aa040", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aca8857-c689-41af-bc5d-79c71a03c55e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a801c1d-1495-4f8f-aeef-c5999c56e95a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e9228a3-6bb0-47f8-9b74-8cb4366fc290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78571af5-7d80-4c03-8a0b-35f62efa47c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acb0e58d-d933-48c1-be54-ee6fdf1bd85a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c450d376-61dd-4ae3-8a2c-1229d4230c78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74e62b9f-7ab5-4c2a-9652-c0f11e4a82a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaffdb03-ac8e-4350-b3a2-ed0d61978ec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--374bf25a-0dae-4e12-a314-1d2036066586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e69673ed-c893-4706-bc0e-2aab8c5bb2aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14db0953-24ea-4c2a-8048-1a49f1c3ff5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5336e6cc-f4a8-430f-ba76-0227fb8ab836", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ed4bc35-4748-4421-95e2-767cb375f1df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.99.74.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8608c79-298d-4618-968b-0de1873add53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.158.16.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cae3ebee-a6a4-4d1d-a13f-2919b9706d3f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.177.94.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c607a7-a46d-4822-834d-5b5793dd765f", "name": "Malicious Host", "description": "Observed: OPENCLAW, WEB activity. Sensors: cfglobal, openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:openclawglobal", "protocol:openclaw", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b8036b1-c9cf-4d19-888a-b2a07652017a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.227']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aac23fd0-9277-44ad-92d8-7a8cedcb2f8f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.228']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--160e3d09-8c2b-4764-8bfb-187782732eae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.64']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ca94ea6-f55b-420e-82e8-bf72fd7be3c4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba137d8e-81e1-47a5-8130-e0cd19d511ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.182.16.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b9afd71-7cfd-4d82-8a5e-a40dee15dd1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.102']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b8ec159-b724-409d-a055-7ca6108889c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.112']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d319f195-1a65-40b9-859b-89927243231e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.114']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96fa14fd-e429-4585-af59-e746bc63c136", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d93020-8b91-4259-96d0-798c6351f7ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51a9b7f8-816f-4eab-9ea7-a70bc30a68aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.128']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d830a3f-7233-4ad2-b8d3-664afe468116", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.130']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cba68437-f9c9-463a-86cc-81167eee61c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.132']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00f60bd4-5474-4d0a-87ce-253e385330bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.134']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--184f6ef2-0e7d-4ebd-9715-fd39c1871335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.136']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03442d48-4517-4617-b16d-c9b870b184a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.138']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9068a01e-5dee-43d4-ab18-d8eabb7acfc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.14']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20ba726d-7233-4c97-b566-b4f4308cd9a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.140']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb4615a-a67c-493c-989e-8610ba94021a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.142']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e84b3c1-e68d-4206-8d0b-8eb2c823571c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.16']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8ca1699-fd46-4131-aa9b-147833061fcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.160']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec2bf24b-1d27-4ec2-aa2c-4122c7ca09fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.162']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18afdb08-5086-401e-9b55-c0a5a31aff38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.164']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8acc62a6-77f5-49a8-92a0-96fd95d97ff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.166']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51fe05ee-7768-428b-ac92-8522f74b2bb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.168']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47fc4eed-4add-473e-bef1-674b90e56140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.170']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dd33e1f-0375-40ff-a870-31b8fc89f647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.172']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2ca086d-b60c-4ae7-8269-3ee8a2f0b8cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.174']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66b170b6-9c22-40a3-b7c1-f4c0857f765d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.176']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f50124c-88c8-46b2-a6cc-5677495e57c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.178']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10851658-344a-4cf9-899b-feed924bf194", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.18']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f52f54d8-fdae-4201-a959-804909c97295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27a10d39-fca0-4e17-9037-58df45ed574b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f334efb-ab1d-4515-9491-ad44511d7fa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.184']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e0b3df1-80f1-46d2-8647-67efc6cab33c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.186']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3df45467-0969-49ee-aa17-7cb2f4afa797", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22eee4a-f35f-4d34-82f8-e88f9812840b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--525e0145-a167-4978-86c0-5ea87e89b098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.192']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbf3cfa0-1544-4453-9624-a2721c10f8d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.194']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7360bc5f-796f-4140-a1b1-69bd63bea5f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.196']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1d81534-dea1-4d04-9713-298030734862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.198']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc03bd0a-51ac-4e37-b187-5a377b6956a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bdfa603-eaad-445b-979d-05c933adf65b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.200']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df562efc-5317-4ddf-9170-bac992f3f302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.202']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66e34ca8-3c0b-4164-ba48-fc5d4421c54d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.204']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--334b91ff-6337-4b93-95ac-2ed16f72659f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.206']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6848ee5c-1110-46c7-8227-6903e31f63bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.208']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--750747ef-bedd-4ceb-a3bc-76b526ded91a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.210']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d461ad17-e969-4b29-a39a-0890aa29ff3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3c86559-eca4-4da5-a23d-358910ccce6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--988911f9-d1d9-4a97-a773-1e4ab61f072b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.216']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--243b0e15-9dfe-4ef5-8037-b0f5674e711c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.218']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83b028ff-e19f-495f-a2c2-7567ccfd7cbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83ed5185-7152-42ec-9bca-3e1a18e01d3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b1e83a1-29a6-4ef5-9dc6-03daff5cb6bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba618bed-4974-447d-a1d5-0f0fd6b785a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.240']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7240931-d2e7-45a8-b950-27dd1a2e0526", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.242']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27319b6c-579f-4f26-91b0-157d84e065d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c68b3f0f-3e7a-4e9b-bfc0-4ebd42e3abff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1b69fea-b5a0-4378-a8a5-57f4dba83250", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df36396f-dd54-42de-a8a9-d7c527cd27d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.32']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--120cdc89-056f-4c9d-9b5a-d365bc971d01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.34']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fe3cc65-d981-4b40-8f58-ee299112dfe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.36']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1204d631-2be7-41c6-a816-a7dd9a9ac3fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.38']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e45f06dc-78e9-4946-ada8-94c6d9518f1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.48']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e7031f-7413-4fea-bdaf-3eccce4cda47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.50']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f76435f-9796-4b07-a6f7-3f75a42f2f2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e69a9236-94c7-4ea0-b90a-214bdf86967c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad7f2230-ab94-4457-b0eb-d71863bf6279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.56']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a4e28be-9e60-40b6-8054-e116c273437e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.58']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bc9f581-4a12-410e-a04b-3573ac403fdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.6']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac7366ef-838a-40d1-9bdd-dfad4a5a46ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74077866-0a2f-4a6e-bf1b-5f43f66cec2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac74a406-306d-43f9-b9c8-52b81a77830a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.64']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1477640-7c02-467a-973e-54e047418847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.66']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df8bc42e-2d4d-4a91-85a8-fd42dc772b77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.68']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f826e2b0-68bb-43a4-97b8-574be79889ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.70']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d8412dc-7729-4912-9f01-516ac6cbeac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.88']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57c352fc-f29a-47cf-819d-976fa45b2786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.90']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6802fc5b-71d6-4f2f-98b0-4c908fa755ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6aa15f6-2a48-43e9-9ebc-d053426a752b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57a5e175-dc18-40e6-bee9-85a43ab31bf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.189.123.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beba46c2-f8ad-4594-8471-9bf2396cafc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.19.124.24']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f34ee09c-a364-4b77-8160-87549bd8ff06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.222.59.154']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5975ddd6-1a40-4f8c-a0b1-4fdf683e4e7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f290e84-b168-4094-985f-4719f324357a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.249']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1891ba1c-6553-4389-8047-642ac4b0e3c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.250']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a57ef41b-9bf1-48aa-a4a8-d0c501c856b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.250.79.2']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe2eca2d-e419-484b-8223-e904d4406baa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.3.220.7']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d34b2e55-4bb0-443f-ad6a-0ac7ce06b9a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.3.223.123']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9963d2d-a223-4812-af2f-626e83f73768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.37.190.88']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98c2b0c8-6c82-4b21-a254-2c178731374b", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.64.233.167']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a57c266-c5ea-4940-a7ec-544665a40e65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.138.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15c93064-4ef0-4732-ae12-74a547fc1d89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e38ddbeb-b29d-40f7-98bc-a9ec38ca7599", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.117.38.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a8ad20f-ae46-49b8-b042-29e3911d4bc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.189.200.66']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a56d5f2d-eb88-4031-b668-94a73c4bc8ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.219.166.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f84d5c47-84ee-45bf-ac90-90520f48e186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.251.121.132']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--616f4f2a-2268-494e-9c10-3638694bf0ab", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.199.224.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5b14422-cd37-422f-ae2c-437aa7ff3553", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.210.143.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01216005-b365-45e1-9c71-963bcdab6a6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.25.13.129']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62605fb8-6b0e-475a-8dba-739e9b2010d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.11.181.143']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d97ab18-6df0-441a-9ca9-90ffff9e8a1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.12.89.152']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8db327bb-f087-448d-8e39-10bc5c4ad267", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.123.131']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cc2cda1-3778-45c6-990a-0dea1f80915e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.211.116.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--331d8bc5-d010-4c2b-9882-1126989185f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.23.242.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--729d51cd-b69e-4ff1-89b1-159baa784143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.10']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fa39cb9-19b6-4ad1-816d-314bb5a6b232", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.101']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01179bc1-685d-4d15-b7d3-81fbdc784a1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.102']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e342bfa-2739-437b-b14a-f65aec4b625f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.103']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bddd5b1b-5b0c-4c81-861b-cf15efb70d9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.104']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11bc5ffa-5d6d-4461-b40f-05e89ebede5e", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.105']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6762187-80ea-4d69-b70f-b1559ed086b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.106']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0785c885-b20e-48f0-9d58-d9124de9b00e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.107']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f339e40-0722-4f50-8f6e-f9a931dfcf26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.108']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3583df4-4cb6-4399-b049-d41c02eedb8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.112']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--567cd0a2-e307-4e9a-b26d-49f172a7d515", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c172c417-9ed6-45e3-944f-7777943143aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fdc520b-49af-4caf-ae7d-d8a345f497cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a48cc294-3ac3-4ce9-9ca6-cccbadb5eb35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b0dfec3-8d77-47a8-81a7-9d492b03cb6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.12']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--098fd7cd-76d3-4041-932d-07769aa303c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.120']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--591c8070-33bb-452d-a10a-65a85ddb26ef", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.121']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5d49d6a-de74-4bcb-80d9-aa33fbef07ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.122']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d05e82cc-204e-4526-b804-bb3b47e096f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.123']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--064c7d0f-4b61-422f-bbca-f9a0eb26fb52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30b93098-58f6-4cf5-9b28-fce364a664cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f6bf525-817f-46ee-8091-16fc5cee7e21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.128']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1ecb735-50b6-403f-8a46-7ad7c3086e60", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.129']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b9ff01d-97ba-4290-896f-d148fcc4d2c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.131']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--783add8d-e3d2-43c2-a1d3-c5e8d57667c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.133']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--275e59f1-5de6-463b-bb22-5656b1ab923b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.134']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53c656f1-6c54-4fa4-8304-28e04ef21340", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.142']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea50d2ba-2ce0-40a5-9a91-4a7015fd46a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.146']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c9eb70f-ca27-40c6-8578-bf2057a42f47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3442e26-d8dc-4d1d-8681-ffcf03697c7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2543e3e3-3d97-4dee-ab58-7dd3ae026bbe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.153']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02d1efe3-4024-44a9-9236-4ddfe3a8766a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.154']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89d7cbf0-bc27-4874-873e-5ac8bc28e0a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac652ac4-76c9-4002-bf84-1d0c1e2d7e56", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.161']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcb552b2-4970-4e76-b66c-28578ce8610e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.162']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9993d601-69e1-4a2e-91d9-6d078ce6bbd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.163']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fefbc329-9b2c-4ecb-98f7-9279609c7fa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.165']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b290af94-130c-4fe1-9f04-aa9a94aef848", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.166']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--835a3b85-8a56-4177-a40e-dfbe12100a87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.167']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41e33fd8-cd1b-4339-b880-90b21c89869b", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.168']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30bc120a-6de2-4717-af1f-3e07c33ea42e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.17']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe694276-c7b2-4ad2-b198-37a72f5ec00f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.170']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--672bd468-f10e-4916-a04f-6baf21d908c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.171']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f94e9b77-8788-415a-99cb-d0eec59088dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.172']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82008f49-4fa0-4611-a54c-6b6af407da18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.173']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae1afcf2-c748-43cc-8ef7-dd69a3530049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.174']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fa79472-3d22-4a68-accd-0cd4f74f971a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.176']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94b4b9eb-4a98-4712-aad3-ce1367384265", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2f279a5-c6f4-48d4-a2ac-90b3b660b3fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6be943a6-3958-433a-90c4-c62b548f395a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.192']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96b91650-43d3-47cc-afcd-720a2a52ec47", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.194']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--401a60f7-0c63-4722-aa32-695d166bf43a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.196']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a734f3f0-76bd-46ec-9003-ccf213ca7328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.201']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb8aa81e-8cd5-4ff5-974b-475abff14a08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.202']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66c9e389-7b0e-4afe-853a-75c841e35966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.203']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a083c315-4ac1-4d40-ab2b-173306bcede0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.204']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eca02ea-4543-4691-a66f-0833ef2083c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.205']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70b01e87-348f-43fa-baf0-15b1d17735ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.206']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aa8833a-4565-4889-9983-c09fa547587c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.207']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea876720-1e5a-42c5-b13b-c99ff6300c6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.208']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c484ab92-2266-4486-8c3c-3e92e2e2ccb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.209']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c397b793-33cc-4ed6-b575-94b59533f494", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.211']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53747447-0ba1-492d-94ee-83b99e6710f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--728162df-22f2-422f-bf13-a04e6340a39d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c3c5287-ff88-459b-95ca-c609f9f87191", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.216']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17826ef9-b936-412a-b915-f09692abe7b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.218']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f44bb63-5ded-47c5-ae91-09cc16eefe77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c21222a-c5f6-42e8-97b0-4a11e25b876c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f644a803-7fca-4e3d-b82e-6c98669a2661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28e1ff93-5f89-4e17-a8d4-97cba0d4e437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.227']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4995cca4-2b96-44b6-b939-cef93a824cdf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.228']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85621be5-c12e-4dc8-869c-c248f9f04763", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bab94bbd-758d-4829-bc6c-3871d6857984", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.231']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a3b8fe9-d237-495c-87c4-f976c844b811", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.232']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20ebec9a-62c5-49f6-a950-9ed8694d672c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.235']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ab6209f-e9c1-4e05-a39c-dd191b660e99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.236']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6599b7aa-9472-4097-b8e3-44bd7870e6f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.239']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eab72f0e-519b-47e6-bda2-2e4bd3e71a48", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.243']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--070b2a2f-6d24-44ee-98d8-3e9dd04671ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--510e5c34-c7cc-412b-a9e4-627e4388fc63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67a6b9f7-acb0-4290-9788-d1c3aff3b98a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--146beaa0-ea59-48e7-97e0-afeaf1943ea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.248']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2ad0d8d-72b0-4706-8bd5-56bd42f5c46b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.249']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4765ef69-c87d-4750-8df6-59e4d7ed25fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.25']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36621f6a-859f-4ad6-905f-d4cfb797302d", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0176f7ef-3637-467e-ad77-b4943b83dfbf", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.36']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8a84e8b-1ce2-4cbd-b840-205ee5f76b2a", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.38']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--762f8104-89f5-4e82-b78a-0f9481f0cef6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.39']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66be540a-8025-4061-a51c-eecce2e1f4c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.40']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e77b499-8af2-4b87-aa8d-9cafe70d01e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.48']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16a71b61-dee0-497e-9abc-323b740b848d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.49']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e328ca1e-58cc-453c-9f92-45b077228f16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3adc9a24-a432-4185-b6f8-08e4492623c3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eac165e9-9369-436b-b66c-9613527ca3ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.56']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cbe5d23-bb13-430a-85ba-a665d31e93e6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.58']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21037b77-351d-4c37-8ab4-2473689087e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.59']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9be32b08-21f4-490c-aff1-d426bfcbe8b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5db5f4d1-9a90-42a5-ad48-c7c7f8c19a17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.65']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50c4678d-75d7-4db8-8986-55ce6a305ad1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.69']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12005cea-ede4-4b4d-b2d5-f6efc3e42071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.70']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--721cb633-fa0d-43f5-aabe-85e2907783da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.71']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ea94855-1a19-4408-b3c7-cb912507b2f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.72']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3fdeacc-0896-4309-9f8e-5d4ca4d46113", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.73']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0791d92c-0290-42ce-8633-75b47d2d4343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.77']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--963d5862-d877-43ca-91e3-d6c93cc69339", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.78']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e5dc035-2fc3-45bd-98aa-7faf1fda0f98", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.80']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10eac651-da9d-4b8f-98bc-25e08cf66bbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.81']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51e854a2-50b5-4b35-9415-c5ca50e41cfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.83']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64ec4912-7594-4739-9ca7-b3a7dde97bbf", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--993f043b-d5e0-4105-91d1-20aff84e25d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68b96598-d5d8-4126-8fa4-fd8b721f9568", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0218bcb3-e9ee-4edf-90c5-925be51c252b", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27a800a5-3704-4832-a70c-abad8cbe37e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.96']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b1a6f04-a9aa-410b-b903-7fcb410fd7b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.97']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e7727e-d2af-4bf2-9482-94a39a650fa4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.99']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba31451-7999-43fa-b6f3-22223f787b37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.251.85.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22ab68d5-e68b-48b0-941e-c9adc0d400c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.46.177.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e93d167-3ea5-4949-9df2-e12d03bc1226", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.98.58.27']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c07f4b72-70c2-4e89-a93b-7002479bce49", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.241.120.131']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c2bc0c4-2e7d-4458-8a9c-a35d462dc1ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.30.231.6']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e17b05ca-5b06-45d8-b5b3-26d9bd0d6ef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.115']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d81e938-5e93-450c-a8c7-dea327bdfa0a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c39fc41e-e4b3-4ca0-a2d7-a21daaa930d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.123']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb902274-231f-43d5-8405-0ef5782aeb6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f59c4ed-fccb-41ec-a055-f4f5fc60f379", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.176']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2897444-9972-427c-9ca5-230cbdb1fdcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.177']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07b7eb21-caee-4374-8a6c-26dff6bd05ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.178']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe0d691c-8bae-4bb2-a4eb-3ac2082df763", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.179']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1b3e9f0-2523-4b6c-b735-fb31470bd77b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--396327e5-e25f-4a3e-9ac5-57dad8cd41ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0bea392-a8ac-4f3d-8fe2-19d1e6b02508", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5de99077-5be0-4c4b-9719-4634601ed21d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d57215e-91c4-4635-ae22-1f98a6360d94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.184']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc1f02ae-9247-4d86-9dca-fe29027d1566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.185']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a77a0a8-a910-4fe5-ba0d-1173e85c8a19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.186']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--478ddbe4-361e-4589-850b-05274516c0b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.187']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85c8f5b0-cd28-4b38-bc13-0aa4b913976e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c421dfc-2fd6-41a9-b510-f9320bb508cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8341e6ce-4b05-4ac8-bc8d-65d7d1fd2c70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dde0edaa-eb8b-4259-90e8-c7d73c0949da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f49aeb1-a440-4fa9-a846-374848ce9ea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.51']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c6ec887-3cce-45d4-86c0-2c81eaf0178c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.66']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90263aba-eaa4-4da0-b2b3-aba34b6fcc7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.69']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56b251ef-bad5-4670-86df-729885321995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.73']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39702784-083b-4d1d-9396-00ac115d6ffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.17']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f45c9cfd-81d8-44c7-90d4-d344616cc088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8734d20d-6885-4451-bce3-7904020edb3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.41']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e76f66e7-4aee-4081-b540-4921d96781a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.46']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8115549a-54ab-4f1e-98be-eb60553f70d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.48']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94a63d9c-8d59-40ba-8ee6-da68938d4ec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8db0dde8-5705-4a2e-a8ea-0854da955a1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.26.140.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73422589-24f8-436f-9a30-392f09ac5cde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.26.140.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78e0716d-e088-4917-a0bf-39853059a517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.26.140.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2153ee98-5438-43ec-bcdb-74ff738fa673", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.26.140.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d6821e-cbdd-4edb-84db-b8cc27b3bf59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.27.248.209']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27f12eae-a5d3-4626-9f54-238849b7fb49", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.25']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3765646-5b19-456f-b82c-ef34b3c00fc2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa476a4d-be71-468b-b527-3d8e1df61144", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.209']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d42f5d26-9907-494c-8f21-242c5b4dda8a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.238']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c855cf7-889d-494d-b1ef-29f6e5317b0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.63.234.9']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61f21a45-272b-4d3f-ab3b-251adafea7f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.44.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97231346-7d90-45b5-8eaa-bed3b1ac9697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.45.133']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c417256a-a5cb-4208-a8cb-35432128ae83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.181.46']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2991fc6-4cad-4efa-8e77-b5c4c912cc1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.19.228']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0bd2a6f-d783-4d50-a244-13f9f8bdc23f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.195.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72308882-3474-4c7b-8a11-b0dec8386ddc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.206.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--573054dd-685b-4e63-abbd-7bad130fd8fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.39.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13acf0e4-b061-4e77-bb62-2c2ca1452c53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.59.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf9e61d9-ed23-4dca-8bec-70fccfa3f031", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.59.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18627f02-5037-4071-bbd0-8d6ef5414277", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.115.100.78']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4901af3-5cc4-484c-b039-b7c83c19473d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.115.64.50']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edb7b301-ea69-498a-97ae-291a141df5b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.115.64.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--334dc855-ac77-45e8-ad5b-32e2a72e60b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.204.135']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5202a9d-815a-4d96-a788-ed56d74fcc5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.204.161']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6304a8a-621c-40d2-b79b-b214f1355d2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.209.185']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57c7ef75-3ac5-4ea5-b244-c621fec64f75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.219.178']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--608dcf09-ac74-4967-a8fd-2c1194f932e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.235.169']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--425fdece-aa38-4e77-a2b3-25a17004356c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.243.33']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4bbb3a0-9706-4425-bf61-83f60177f184", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.243.43']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b675aea0-8b97-4adc-b2d8-49fec426fb3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.249.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d19f865b-d393-4237-b2f8-f4446e01181b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.249.228']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ca6a62f-2c8d-490b-b0da-e01ff976179e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.9.167']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bbd3ebd-711e-4ed5-878a-35ed059514e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.84.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2d79fc4-9a88-44e2-8047-264f7acd4361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.12.242.1']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a33d3177-f15f-4e55-887f-eecfa25e24fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.117.209']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbfc4b58-6bcb-40b5-8782-4e92d6e05f70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.68.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a4750a1-035b-4982-bef7-49e8f7fe4f40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.149.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f663b17b-d284-48a5-a95c-f01c2e25585d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.168.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f251b100-a248-44a1-b21b-cc8f47a8fce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.197.97']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ebada35-83ec-4bab-98a5-f0cc471654b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.207.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e539958-a205-4f84-8b77-b0055c08e43d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.208.161']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--202620d6-77f0-45f2-8519-fed99c1129a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.241.231']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baa26a98-8ac2-43ac-8929-9f33f743deaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.72.210']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86a2ba03-733e-4b08-9cbd-da65a1519f51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.93.168']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--582588e2-1261-422d-85b0-3770dd7c15fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.93.171']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43afb2fa-0654-43d9-9aa1-1d9af15befe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.93.49']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9695766a-d442-4080-b65c-5cb68b62fc4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.203.192']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3c27601-fd58-4d7d-901b-d52bfdb54598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.203.229']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ffeef33-2393-417e-add9-7347975a722d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.203.71']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88c1db54-6c89-4f82-ac2d-90909ad8dfca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.194.96']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8836f7b0-eefa-463e-a27b-7cc88be59133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.197.11']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f42a3468-d0e7-4581-a27e-8fc3eba90ac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.197.113']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ccbb2f-4000-4818-9b50-54a7baabbae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.197.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bf999b8-6862-45c2-b568-ced4d986d59b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.197.199']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3116263-c7a0-4122-90cd-9abcb9f39ed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.197.47']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad1bae39-a276-4de6-9303-2ece77cab2db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.210.130']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3bd75fc-08c2-4333-888f-4ac22e21799a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.211.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df48047d-0d85-447e-a0e6-f77ea1a2232c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.211.91']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a565266-0f4c-4fd5-a14a-74028ad4fafb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.11.192']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a611d2e6-f81f-44a5-91ec-74f077bade72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.11.231']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e94735e-db2b-4073-a315-a89aeed3e978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.12.0']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--349baf41-872a-4ae0-9b74-7fc1d41c6929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.3.71']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9822eb7-b7ae-420f-ab6c-df2bdedf8d1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.38.110']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3a1cef9-bb05-4ec1-8642-69197a94d055", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.38.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a7a3c26-643d-4968-89ce-319927fb6109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.39.68']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7a9b1c5-af69-4061-9f68-0df23c6bb819", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.10.73']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f833b071-9f6b-49cd-9f0b-edb1a87ceaa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.11.35']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54e61551-bef5-48ba-b446-83768d8ea864", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.116.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92446410-cbd3-4902-bd41-13010c53dc02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.117.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96465421-e6eb-4ab8-a77d-ed88b960a28a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.123.228']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ffe6504-7e32-4745-920e-2fdec66f4b72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.88.161']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45a4de1c-4d93-4ffd-9d48-1e37fc86c09f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.10.121']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6e4927e-4c60-42da-80b6-3ed3194c96d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.11.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bd5bf7a-1340-478f-8a81-ca4f8007f515", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.11.36']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b72769b-3f74-4601-8592-7fd0d747af4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.11.46']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d9d1f06-363d-4c97-ac34-f99a344e9271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.172.67.202']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--497f182c-5cf9-42f5-a7fb-ae4c780ec3fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.172.67.210']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1345739d-1a50-460d-b744-b69f9cf57deb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.172.68.0']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d30e979a-ca53-4c03-882d-669b91e63ed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.172.68.7']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d993ce4-aa25-4801-9b21-4292322099e2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.205.45.36']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b91e8ce8-49d9-4f61-bb6c-a119e2583da2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.57.164']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--252d3a47-3cae-4d2c-b740-fcc93881cafb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.74.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eee0f6e-f5f0-4374-a19c-dd8832b63007", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.24.86.237']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d28a0e2-b41b-4bd0-a506-ec2d0cccc949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.43.153']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--489983c2-6d73-40d5-b52d-15088c9038d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.44.39']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--183f3cc7-39ce-4aeb-9cdd-177d8104c083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.59.130']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a93be335-7fbe-4ad8-ba1f-076378a1f4fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.32.175']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8bc8c67-5752-4bef-84e3-0943a53c2fdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.34.96']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56b2ae6f-9ff8-44a8-8b65-d612bf15e328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.213.46']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecd64245-75ab-4b4e-99b2-d2d653a82b95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.233.56']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c93e0c9-f587-4ccd-ba2f-746d5d1ce7d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.233.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d37fb47e-f141-4007-a7ab-d776d94f1e2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.105.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be10b3d6-3a34-4d52-8a4d-5c93a06e0df7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.98.41']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a76b270-3b69-41e1-9921-1409f55a4660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.234.167']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfa7a4aa-1fc3-4883-b80d-82ebf4d22af3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.235.72']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ee42916-fe43-4006-8ce9-31a98ad925b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.48.238.59']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faefe686-61fd-4daf-81ef-9b382b3df580", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.187.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cec21650-59d3-46cd-8a8c-4713657c5ec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.29.243']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03e7687e-65a6-4229-9675-82209bba6fa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.92.240']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd99c11f-8a88-49d1-a73c-fdf7093cbfb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.98.142']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab630ee0-5b88-4e71-abe3-e86c937c615f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.98.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2eb98c0-f247-4e3c-83ff-68c122862173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.146.115']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd696e0d-5712-4176-a8db-0f370e0e6807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.146.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a08b67c-ca2e-483c-804a-0b7996b50433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.146.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc4a285c-94f3-41c5-80c4-01988427467c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.146.200']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5b88967-0030-4a11-b11d-df78f60958ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.146.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f079124-3d84-4d9f-9b6b-dcadbdbc2608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.177.114']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37be142f-ba4a-4608-94db-a97d21fe8725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.177.69']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dae15fc0-6b67-45b5-b4ab-a7bbcef083f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.178.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60719887-c878-4ccb-951d-d6e70839b654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.178.235']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d442f51e-dab6-4f02-b20f-df14d26fee17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.178.4']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0090020-d7e3-4622-a276-aa870eb0b571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.201.232']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d83d9793-c701-443e-be66-7a4c5e7d3207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.201.59']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71fbff3b-1d73-4298-bb81-8aec8a9f01f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.202.101']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--380342d6-46e0-4609-8987-8fdf2338ccf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.103']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b01fb61-041c-4fa3-8cd2-b7a7c91e7304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.131']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--909ab6b6-f3ee-4742-b702-477b86fce0ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.26']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b75c192b-6608-458d-ab65-acbfe9a85813", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.98']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4045e281-7c71-45b7-8326-f924b23facdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.101.218']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--437f3fad-1f7c-4e1b-82f7-6d710f76d39b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.102.0']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df695742-2240-43af-8b5c-d12af5b17a3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.110.204']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31e6fb5e-f3a5-48e5-8fd2-76ae53e82733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.111.70']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f598122-bef5-4a36-a912-1bde0e8b60bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.82.121']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13cb912d-faa7-4cd0-942f-06244bf4d029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.89.90']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c186832-e625-409e-920e-da11fb1bc4ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.173.49']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c62a6e7-93a3-437c-ae64-da67b3cbe3b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.179.143']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85453793-43a5-4d06-9879-5e87e125dadc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.36.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb705837-039c-43a7-9069-c36069a64a8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.41.184']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0741e08-501e-4cfb-9f88-dfc19de5c98d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.50.186']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0dd679b-288b-44b6-a679-ae35f62d6b1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.52.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f975dffa-30a3-4012-ac6f-0075c8428d78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.147.249']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98bb4fdd-fb3c-4b86-a58f-a768ed6c2b51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.163.78']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56918151-4406-495f-88a5-f2b307e00e55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.165.201']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03900194-e87e-4305-95e0-8f0019c80828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.166.217']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0a7d469-c18f-4831-8d3a-8bd30caf1771", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.77.113']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8665d4eb-0a96-440b-bc60-b4fb5cbca655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.77.130']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5c35a66-5242-4d36-9d04-2174af41352f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.90.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d99a8df-e37a-44b7-9b53-6884f862bfeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.131.243']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67cedb4e-4b67-4dec-bba0-7b311c2b37ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.138.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a17e366c-ea10-4480-93e0-97a76e586688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.155.202']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc5eecaf-9db6-40ae-bf36-fa2ad3b6b0e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.163.96']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cd780bd-1dcf-46f8-baa9-54da5012bc48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.112.142.169']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--058d6994-2ed5-41fa-8528-af178d4c5c6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.112.142.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d48a9aef-7f43-46a0-a4e9-029594a1ce6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.112.142.90']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efdc5a32-4af0-4159-a056-563f780a9cf7", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.181.253.123']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b695ef18-40f2-4bb3-9159-dc617a253341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.219.11.144']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ddeb954-36bb-4966-ab4c-d59077ef630e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.25.16.78']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbf738db-56fb-45b8-93f5-631e432dbd46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.54.212.162']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bf63247-0026-4a94-a042-33429158aa8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.59.104.194']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b732aaef-2b86-43af-a9c8-a726139b5754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.59.127.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6bb3826-8c1e-407f-9782-3a0643545232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.59.72.64']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed5e7bf1-f394-477f-b57d-f6814aa6e6fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.59.88.238']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--befb56a8-bb14-4385-8f41-c53200b1ab97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.59.88.73']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1168aed7-ba40-4c2e-af9f-1feb35454c94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.59.93.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e34089cb-6b6e-465b-b7e1-f990ef5f847e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.59.96.111']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42880d4b-932f-4339-84ef-e264dae64e9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.69.35.114']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--940ff804-5bdf-443f-b921-111bcd44efc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.69.43.82']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa460836-400f-4f9d-836d-fdd0c61929ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.69.61.217']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67830dd6-e754-4e6e-ad9f-8f0207637bc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.81.170.142']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1ca636e-1ecb-4ab5-aaac-70fd4a90920b", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.22.42.132']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--899eb6be-1b36-4304-a71f-ce260f8522c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.253.250.195']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd068d21-b8cd-4f68-99f2-f2aa96d3e680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.54.235.178']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67e4afbb-653a-46b1-a51a-2c649e951315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.79.5.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61c46d15-b915-428e-a6ff-c0c2d4f45500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.112.47.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--487c00b0-f9ad-4dfa-8b64-e9da6c0514bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.189.21.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e630bae0-fb60-4d60-901d-9eb6d0d1947c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.53.164.90']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a6fae1a-0c3e-41dc-9f03-4338b7a29f4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.70.139.141']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11d7cf7a-707a-4dbe-a0c8-0547921e571f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.93.133.49']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef1b1508-2089-4422-a5fe-bdc25ba11f64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.128.10.33']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb04048-17c8-4340-9bb8-98b8c1159575", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.30.221.70']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82038eb9-0061-4620-9de8-74f102f32739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.3']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3d3b68b-e0c3-43c5-98a3-d371766965e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.96.240.243']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b06bcf82-6c54-4e80-9939-47498f36981b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.116.34.34']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0a8f522-3b64-4193-b7d6-f5387e290de1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1948e16e-daaf-40ad-89eb-a26ee591b00a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bdc50aa-aa64-4ba2-b003-28e1e328d8b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7edabb7-72db-4f5b-8767-ff669e125d95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39a69f86-91c2-4b14-b976-88806e56e267", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6c53a47-049f-4a87-b00d-3a7213fa9129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.231']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25901813-7fcc-4efd-916f-2a817e5cfc74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.4']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d992f55-ec44-4614-9637-569cfdb5a52f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.49']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a210f89-a004-48ee-9e07-57f1474b871c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.185.119.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--663af7d2-4975-4865-ae0a-12715619a546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.102']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--684e3bb5-cc49-4014-a487-c7b6a4b2a954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.103']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f654cdc7-3e4c-49b5-82ad-7692014f3d4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.105']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6947c878-0585-428c-8c74-a6519b850b6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.106']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98e99caa-7a85-4024-bcd5-9cf196a5973c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.107']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4616318a-6a97-4b7b-bfcd-60e185536557", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.109']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19a96b61-a027-4c20-bcac-11e98e5dccb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.110']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60afe33a-c2c8-42fc-b94a-82da8ebf3c7f", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.111']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--912a74a3-8d82-47b2-9bdb-8fc964f007cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.130']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--318a059b-2365-4c6c-9473-5d71624c7660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.139']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc6bfd7-8e29-4e78-b14b-24490815641c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.140']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--153c29a9-935e-40b3-b64d-bee7298e34cd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.147']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64dcb84f-5cfc-4cce-84d2-70586590205f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b370318-b092-4751-9604-02e885011b49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f5a5752-b095-4647-b1cc-8a71b1d69285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.162']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ff44e9b-5767-47fa-9958-b2ba624d514b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.163']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72498d33-422c-4de0-b619-909570495998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.164']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2021412e-2de3-4250-887e-dc80b62cdf87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.166']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9cc2001-d098-4303-8920-17dffcbb3cbc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.167']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9688d9a2-52f0-4d53-898c-25c34cb19683", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.170']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--158ffeca-3b4d-4cb6-8c44-f48f78af78a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.171']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f2f3a53-1bfe-4286-af55-73618535342b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.173']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f59311-0e19-4eeb-98ba-46f58b9ec9e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.174']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25d7d2a1-8dfe-4e06-9652-09ed39772ce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.175']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2884df00-e7ba-4d22-8d11-f99d659144d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.176']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d3a636f-0239-462b-82f8-07d22ef57a9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.178']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60758788-0c0d-436f-b341-ac1ed5cdc8f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca900489-0dbb-4562-8a9a-93d5036aedb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71faff47-e1bc-4464-aa13-8289bcaf311a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b2d9c8f-538e-4be1-9bcd-8bb6e10cb9e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.185']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52236418-bbe5-4416-b800-834c8fa1e686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.192']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ab292e3-fd9f-43d5-880a-09aa132578e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.193']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46f30f55-684b-4c40-ba56-42450812d935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.194']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--188fd45e-9291-462c-a64f-2a7125cb447e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.195']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38b75cd9-98c6-475c-8787-4ac194361f27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.196']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e34aee27-d02b-41bf-9342-bee323be295e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.198']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df3e740d-1718-4400-8daa-3a844a63142f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.199']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d56508d0-451b-4da0-9224-c2cbc5d23c37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9ce12d1-c9c9-4808-b4eb-bd2285246f4b", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.201']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f90e4a21-1f7b-4f4b-80c8-15c149495759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.202']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47281104-7178-4ba8-b1df-f21710c78d49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.204']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d71c66c-2dd2-4b11-80ae-dd6a44aa2796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.206']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70b9625b-2399-40e5-8d4f-486277f1b586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.208']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec9200ad-e186-467b-8f05-a9730366c80b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.209']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f171d57e-24a4-47ad-a6be-69b865513da3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.211']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31c54809-a1c3-420b-9c7c-298d08e17f14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16b738ff-ad98-40cb-9f09-8f242639a381", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.216']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac853f0-6b2e-4ee5-8afa-72bfe5526825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.219']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e80124b5-15ef-4e57-ae4f-4b45dfa9c7ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dcf4d55-96c0-4e1f-ba1a-5653088ce29d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.225']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9ce683b-6fba-4d2b-a721-7dc828f3222b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.228']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--497c848f-a7f2-4d1a-9c34-d065963f8641", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.231']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cb88264-3981-48bc-a823-b6cd1d98bdee", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.232']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--979a2c4a-af8a-4cbb-9272-65b7bea3f21c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.234']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e988184f-c336-4adc-b72a-afb8ac65418c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.238']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--502a72a7-02ad-4138-8ab3-fc995a6d1291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.239']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae878950-06de-4359-b51e-879a9edb5548", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.24']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76af431b-192b-4e0c-9deb-95caa14d8d4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.240']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94051280-746b-4c1f-94f8-4a321c21b8f5", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.241']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--261cd78f-be08-407f-9fd9-1c1a202f3d13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.242']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf575dbb-7045-42e3-8918-357a8efdf9d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53f76c35-df54-439c-8a98-c9f6aafc38dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.248']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd7b76bb-5237-4d08-918d-c2bab6c82c89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.250']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7399b83a-79c1-42cb-8bcf-215375a8c08a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d796411-ad32-4da6-9a96-3542db0b5fea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bee5c78-676f-484b-86e3-b3eeb1cabc28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.255']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--427ac501-7b14-4bc1-a622-a888795af6c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.27']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a96f527-168a-4801-b60f-b9c3a2e65370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aefc778-c446-4d6e-97ff-9beb1403a2b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65494d97-a7f6-4920-8446-3eecee9b5e16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.32']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a98dd196-0031-4178-9ccb-0e7884a0bd7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.36']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5289be2a-58f5-430f-98d3-b89db3874350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.37']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddcbaf20-5373-4a00-a957-0b826ff5995e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.39']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4296727-61b2-481d-8683-bdfa223e74e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.40']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60b4cc12-d20d-401f-aa96-d2e88094d835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.41']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69008cfa-fb40-4259-8589-74380a308d2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.42']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a01f34-ae7a-406b-b55f-c92ddc9d58a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.43']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b92c94f-380d-431a-80ea-e65692e6b483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.44']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2abe5623-47fb-4392-bbfe-8f9cb1ba0e95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.48']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c4f16b0-8d48-47b2-99b8-c74f078cb9d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.49']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16412145-31a5-4be6-830d-0f4835a6aa5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.5']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e718e3ea-bb3b-4697-854a-7e47d63c78eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.50']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd383bf3-a4c5-4640-892c-8a3f09a3c8b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.51']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4119269d-5e65-4fbb-afaf-79a527e17718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a13f341d-5554-431a-bae9-b368fca62b34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2a10993-8a75-4922-b40f-e62d43d9d476", "name": "Malicious Host", "description": "Observed: OPENCLAW, PORTSCAN activity. Sensors: openclawglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "sensor:vultrtokyo", "protocol:openclaw", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d85126c1-02a2-45e9-b3d9-e3c73343cd1d", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.57']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d47d933-8c16-4efd-9ee3-17d0d9c3f01c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.58']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aeaa176-197e-4f24-9bae-aeda6635e01f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e10e8d9-5819-4e97-aa80-20aba564ce46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.64']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7411f1d2-7591-4294-8fa1-0c05bd0aa06e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.65']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1361d80-070d-4ded-a7f9-f25f900b00bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.66']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3188faee-5ca4-4280-a83b-24bdcca5c897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.67']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d71c5328-8b62-4092-9e8a-b3e19959962a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.70']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b5c075b-d853-43a9-83d5-f207ba8e823e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.71']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb3b3970-6419-4f52-8663-93e58570b75c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.74']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8506c53-baed-4213-b8b4-b691df6edbdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.75']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea0618c5-8639-4485-aca8-84be882e426b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.76']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6795bccd-7dbb-4a97-9aae-ba090cb2667d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.80']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee9d22dc-aee3-492d-9027-0ecfd27e8e7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.81']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39644b6f-33e2-4d80-937f-023a42242136", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.82']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec16ccba-c800-43d0-b4c6-140b3e995db1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.83']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59a4571b-5d36-4634-a499-16b3cdf94c61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9437f97-6672-41ae-8468-6ce102f390ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f72cd864-3b3e-402a-9700-2623863925e6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb7735de-2c25-4488-8451-3379f40d0160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.89']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac33afd6-0b6c-4102-abc2-10e98011dd9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.90']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c54b890d-92f6-48cc-bd49-47906494529f", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b4acf6d-5952-48c4-88dd-04b28c6bce95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.96']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a8f1f66-d271-4c99-a83e-8edd61f0af54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.190.240']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0be4e565-ec83-4138-80c1-885579152984", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.233.43']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b246360c-ee10-4edc-90a1-3ac27de76f27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.62.160.98']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae614bcb-4f64-4789-80a8-bdbe652e7f78", "name": "Malicious Host", "description": "Web exploits: apache-solr-admin. CVEs: CVE-2019-0193. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.208.88']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "initial-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0193", "external_id": "CVE-2019-0193"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--57d548b0-3837-48e1-8fe8-0899f873b5a6", "relationship_type": "indicates", "source_ref": "indicator--ae614bcb-4f64-4789-80a8-bdbe652e7f78", "target_ref": "attack-pattern--bfe6a08a-e023-44ea-be23-fdfe6b3f5314", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ca76a481-9f3e-494e-81e5-45ec61c95a38", "relationship_type": "indicates", "source_ref": "indicator--ae614bcb-4f64-4789-80a8-bdbe652e7f78", "target_ref": "vulnerability--d20fa7cd-c4cf-4426-9064-b6b9c8f4f7c8", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfa6c848-5134-4291-bd4e-8b05c85f7f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.174.43.109']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f85f4da-f087-4383-aa3c-19b91fafd303", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.13.248']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bef6a446-3a31-44c3-8a9e-27bf474a2459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.154.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--347d32d5-a73a-4e21-ab3a-e0d79f33e2cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.29.236']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ab3eb86-580f-4af5-bbcf-54ff955a415d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.75.37']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d2daf24-14e3-4d7b-a234-71703d813d5a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--694e9a0f-f040-46f2-9626-4f1982c1cef7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.6']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45539930-6781-423c-b7b1-b39932c4538c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.64']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--332c6902-9019-41da-94c3-8e5ac9c1ca99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.10']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dfd35c1-caca-4ff3-8b38-5221ead79044", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.11']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e56c318e-4527-4d65-a022-4681d21ff450", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.12']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94dfc2bf-83ad-4a57-bd2c-c45bc2db677b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.13']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4371864c-1b90-4f61-a126-fce9a6120a41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.17']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7cd8691-1a3c-4b87-8fad-f902328ad52a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.18']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b008a3f-c37d-4318-967c-2c934cb453f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.19']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e02149c-7de6-4aee-94cd-29ed99faad3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.2']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb688de0-e3db-44cc-8749-491abe9029c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ea0b906-8cd5-4037-87d7-2247f2257ba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d3eb55e-6b91-4b5b-a6c7-a061890e563c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cdf6492-d4f8-4487-972e-f85a7afdf876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.25']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--595e3689-1596-4be6-92f9-17319258d5c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.26']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dff365e5-a973-4288-be3e-5dc28951132e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.27']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98d2ba07-dfa4-413b-b37f-a4640431922c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fc6bea5-4818-4f1d-bfdd-a398c5b9afdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.3']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2df33b6-07c4-409a-9aa8-898a8163f48f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.4']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7826c722-970f-40dd-a1d5-df52a7281439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.5']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39e343c9-39c0-44cc-b132-504b3d2586f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.6']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a06dece-9ba5-4030-b185-eb96223f0ec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.46.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11137346-b0cf-48e9-9fc9-465dd0c79b6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.51.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0805a7fd-4eeb-40d7-aa92-4ee764db8dc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.131.131']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1e6d88a-2acb-4379-9884-408e9205ec32", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.140.176']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a656919-6e0d-4ac9-9b08-c338ea01223b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.238.9']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57b56e48-2e25-4cbb-8bcf-975dcaa98b98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.244.51']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc2551c2-d6e0-43e1-8e25-2626b8c45d8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.70.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0397220-fb7b-4c88-9aff-9dff879893c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.75.231']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e0293e9-dcdc-45ca-8e16-09ba84fef966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.83.75']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6262231-f6c1-4d5c-8d41-727af2a52031", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.84.141']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa7adfd7-7489-4c5a-a3b9-2ea75f0c71b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.84.2']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4262b082-e9c1-4b61-9d17-c77595f69fd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.86.1']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8cc9d69-b9e1-4eae-9f14-a5de41739f6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.91.101']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21180d5e-c0fe-43dc-bf69-ae6da5107bae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.87.167.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8672b017-2cd0-47ba-93f4-67baa734d0fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.97.129.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4b58a45-b765-4a23-b30a-09a0672d21a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.188.168']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eddb6853-a56d-4adf-bdea-f45e7d5ace1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.188.229']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07ab7728-6441-49c1-a9a2-82ec2e7fa500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.188.233']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d583a93e-11ec-4edf-9bc1-013bc4879b9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.188.43']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8054f75-3134-43f5-829a-62d4c4b4eb10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.208.110.4']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--056c8c50-2bc4-4b23-a4ae-20ded72462f3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.79.142.201']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4038fac5-c5aa-4a62-b7de-c43796b9433b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.87.93.41']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--681f50e1-e3f8-4e2e-b41e-1b82a48eb454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.145.38.32']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c07f079f-6a1c-470c-a4c6-6f9ef61243c1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.254.212.59']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e88c19f-a078-49b6-832a-40a13f01ab84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.90.189.6']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41f40960-cce0-47bc-84d3-3f418c55ec96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.102.40.218']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b020505-0513-4f52-ae6f-0b737bc1aa5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.132.111.47']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cc3f093-d1ba-4b37-8841-b6a9fb9fbb37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.192.252.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92967d5e-f13b-4fcd-9384-203a61e1b45b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.192.252.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c420b6-d314-49e5-a41c-148d8c31da6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.192.252.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfa1d8c9-f9e5-4ec4-a93b-6008ac7231ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.192.252.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b929d1b-2b68-442d-a6c9-4a24cb103258", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.252.82.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e7b9ca1-1f50-460d-ad1a-255b8b8e2c47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.64.222.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df755c85-ab85-4058-9cdd-81711980ccb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.64.222.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a87fca08-1588-467e-a5e6-320c8c1d5011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.64.222.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd064de1-72cf-4aca-ad15-ea61b135a79e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.64.222.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2720495a-0bcf-4211-a96f-004bab4c2132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.64.222.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--303e2818-32fd-4824-ae8f-a81681bada71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.64.222.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c90eb04-fa27-47f3-8464-98d834a1d40a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.64.222.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--640133c7-c267-43f4-8117-93659d5f4fe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.64.222.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--415dacea-b219-4a76-9c3d-74ef3a71826b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.64.222.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f39a014-96d8-433a-8063-6a43b5f05ea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.64.222.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a18c693-0787-44a8-b20a-4b2d9907ac8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.64.222.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abac88d7-fa40-43b9-9a83-47228e4690cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.64.222.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8bfa87c-16ca-4b52-a7e2-25d97ae722b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.64.222.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5a38388-26f1-4e09-b0f9-931307830d42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.64.222.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3b8dd21-e938-4444-b0d5-5effbb90a551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.64.222.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cf88248-e640-409f-8634-30cb8d4da03c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.64.222.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac850387-bbfa-44a8-bfee-7c4795e64fed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.64.222.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02d20cca-8bc6-4667-a113-9471b95c960b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.64.222.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ecd37e2-ff5d-403a-9b00-6b3666466c47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.64.222.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e54e326-dd26-4cf0-97b9-f023a3c3f666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.64.222.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbb75035-952f-4871-93ed-88be03237d2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.64.222.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7465c87-77a3-4062-8e35-174282103016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.64.222.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01285780-a183-4517-ab49-1b0d6725efaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.64.222.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f90e5663-e7f9-4a13-9cc5-207989ab1ea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.64.222.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b0977c0-ac0f-4cc7-8367-efd2da3a5a9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.64.222.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--975e425c-db37-4209-8e34-3e01f05e33fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.64.222.255']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6293ee34-da43-4d76-9450-10514da3a5b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.64.222.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea9af96-ef5d-4bef-8afc-24036add0fc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.64.222.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--218060ee-7762-4838-8bed-c4161a38a812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.64.222.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e20684d6-5094-4078-921a-bf1acf67cb38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.64.222.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83010cc7-3775-4f8a-88f3-14cd9242efae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.64.222.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4481597b-2d71-410a-bcc8-99374227fa0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.64.222.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c01b3b5-05a7-4b46-8169-6c4c7291582f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.64.222.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8910fbe9-976f-47ef-af9e-d78856e61eef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.64.222.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ef6fd69-3b28-4ed5-9d3a-418b4a96610f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.64.222.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0ce61eb-f47a-48be-a6f9-f5945db5e338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.64.222.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f6f091-679d-4b1d-b633-965fdf4db1bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.64.222.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7b65824-94ea-4ad6-9344-8066e23cd50b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.64.222.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05ff85a5-7f2b-4df8-8711-ecce92563846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.64.222.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6533721-2824-4f56-954a-148d08e16e36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.64.222.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--188685a6-95bc-44d8-94f9-d5ce2befc6ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.0']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c17adb94-896d-400b-afe7-03b34dadc3f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.1']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c4bd1dc-9185-48a7-9cd7-cfb36bc05913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.10']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49ca736e-048e-42cb-858c-2d565a85e738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.11']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--891b8e9c-3c2c-432f-8cb4-2eac4eff8d91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.12']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea6a2d1b-c7c9-41c6-acdc-a433ae3a5de9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.13']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abee4cc4-ee9c-471e-b09b-79c8cb36798f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.14']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f05e9e79-4365-4df2-8ce6-49170ef612ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.15']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d843e38-b98e-4f3e-b631-698f8b186d1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.16']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--802d8a77-1e53-4f08-9815-158bf710cd39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.17']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a7a2dfd-5886-4ed9-8068-fccee76d29bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.18']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c7e32f-647a-4a8f-9a18-3ad41ecdd979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.19']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b494039b-e89d-4876-b332-bd0a2ae0c256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.2']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a42c21f-4518-4c86-974b-b66926c42e01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c61597c3-d8e2-4151-9f6a-3fa6547b2505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e3e32a5-85fc-4254-a6af-b1574658c094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b49b891-56ef-4d2c-beb1-788961257858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19910a91-9e4d-42c7-96f7-50bef16d55ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.24']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c91c25c6-22ad-4118-8998-2e35a3d4b93c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.25']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10d0246d-e665-4c57-b2f1-b967e70f8460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.26']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c355ea98-d6cc-48c6-9c21-690523c6efb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.27']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9262eb03-6ea0-4157-b3b5-276cc58bf84e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--378a03ad-bef6-47a7-ad01-d093781aa4f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85dba42b-47c3-440e-a8de-13014574fd99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.3']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a950328-0f26-4f85-a365-3e8e4e4b054f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c83553b-70e6-4d4b-b07b-5d5e42ffc42c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7380eaa3-f007-497e-b618-37ae36cbb108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.32']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01e792c6-b674-4313-a62c-32754ac092b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.33']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95816363-b948-4ddb-9026-fc7ac9aa6afb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.34']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11d2857c-21e7-46cf-8126-2e675fa5f0b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.35']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0a1aca8-7aef-4f2e-b1e6-b1efcfb78add", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.36']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f305513e-d751-4c6d-9ded-67bc8faeb451", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.37']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff910e46-0bee-45b5-8e10-0e927385a376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.38']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d9a7236-f719-4d7f-8778-b14ecfa53adc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.39']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dc42975-dc42-464b-be18-ec519e60baef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.4']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99dfac12-cb6a-4dbd-b4fd-8c1d533534ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.40']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd84857a-0b93-464e-bf09-7ad300fa51e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.41']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--417f95da-e5a6-41fd-89e7-bbe93e08f8c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.42']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2d22ed5-c6e2-42e6-a7fc-2551e256fe2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.5']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1388748-8d96-42ee-9aeb-28f8e46ab724", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.6']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb154f68-d7ed-4426-a1e6-86c8840639b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.7']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9552f8b-99fb-4358-a768-a89613e9d0ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.8']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37653c7b-43b2-459a-8a24-7d3d5f4cbed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.9']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4de760d7-0ed7-4b8d-b11a-fe40b7e627ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.136.68.185']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89692e5c-2555-4f63-a6af-cd35c9bf817b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.146.190.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21ae6796-58b1-473d-bb00-cc4188af4147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.146.190.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5220ef44-556d-4036-82d6-8bb38673702a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.146.190.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67f830b9-9463-4f78-8b81-42c73e4480ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.146.190.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed762403-2468-4b55-a306-34f519fd82c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.146.190.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82495bc5-88fa-4b12-aaea-4d73b6090a52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.146.190.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb3d7b90-4f77-4fd1-8e27-2a5f181bc4a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.146.190.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edc18707-af14-4e57-a638-bec12752462a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.146.190.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a67819b0-c1a3-4bea-b7f7-e6e6dbf15011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.146.190.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cbfd9fb-33b6-419b-b466-53ef1c0f0d05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.146.190.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04e6da3b-c014-4abd-a33f-2f1e3e0a76a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.146.190.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a74b441-55ff-4690-b719-a36363c0ed0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.146.190.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffb80e6c-d9fe-4aaa-bc28-041863395f70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.146.190.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--808685c3-fad2-430f-a612-903c814273ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.146.190.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d025814-f502-41d3-acf6-0de28434a844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.172.73.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85a5f116-24e0-450b-a2ed-8bceb03d741d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.154']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb654df-40c3-42f0-ade0-17e5f3eeda2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.16']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b32cec1-d582-413b-87d3-5ec4357ea62f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.17']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61be5991-509f-4b3d-8495-134775a7c36f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Web exploits: php-backup-grab. CVEs: CVE-2002-1149. Sensors: revproxy, vultrtokyo", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.175']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}], "labels": ["sensor:revproxy", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--94b6d94d-f1fe-4055-8f25-e2a86e10ce59", "relationship_type": "indicates", "source_ref": "indicator--61be5991-509f-4b3d-8495-134775a7c36f", "target_ref": "attack-pattern--bdec63ce-006e-41ad-9ffa-e50b03aa63d1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--223c3bf0-f314-40c1-a108-ce1e5ecc002b", "relationship_type": "indicates", "source_ref": "indicator--61be5991-509f-4b3d-8495-134775a7c36f", "target_ref": "vulnerability--e244d6a3-dc81-4710-a38b-6edfe4916bce", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--470b800f-a6cf-456c-bd98-6e705b7f34d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.177']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bbb49b8-5d1b-4101-87eb-e12f271d193c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.19']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84b99bde-b1cb-46db-9343-431841af14dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4f157c7-7e08-4c18-b3e9-5d785fefc899", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98b67115-997c-4bed-bf8a-659e3e973c3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.25']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa81bc74-bf3e-40d7-9f8c-d7b2aae58776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.26']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24400c31-72a8-4168-aeb1-93620e672775", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.230.87.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d45e04e-6e2b-4979-b4f8-9d9751402737", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.230.90.238']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a6708f3-7481-4b25-9696-e978f1fce20a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e75fc163-d73b-4249-8b2b-41f5eee4c46e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--455ca927-6aee-4b99-baf3-a0cb2244229d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfe7bbbc-cbcf-480a-804b-022b95255331", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b99ede71-172c-4d92-ad06-e5643dc1e67d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b11f459-d126-4b56-90e0-295a3c56bc0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7b765a9-2298-4cfa-af09-811171666ea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40c46829-20b1-4b57-8b28-5138c17bfae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06c48097-2e3f-4eb6-bdcc-d965279e8f56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4986b11-40c5-47c3-826e-fe0ccb91fa58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--916a18ff-6c25-4e2e-b996-9bd6fb92a8af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6583bb3b-a457-444f-8297-f41767a76237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c0d9ce5-83c5-49fc-9c92-d1e08860e514", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--344ac68e-2954-4e1d-bc1c-6a3841c3b387", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--859be15f-46fb-408e-9757-370d9ff2ee7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bcf598a-d84e-438e-9fcb-0816f3478a60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a4ac5f9-944a-4168-acfb-e29b07954a67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ff7709a-a259-4f6c-a101-ed48ac127609", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2544a945-1985-4332-ab56-0c6001a74c72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d71b646-fb8e-4def-beae-b18e1da855a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed684fec-31dd-4b70-bfe5-ed762c4732cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4e95e8c-f23b-42b5-9c5e-a0ed1015bf78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c7a60f8-2d94-4507-9c96-31e7e1519fbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98028aaf-7cf2-4b75-a8b6-ac717eda702a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3aa5e22-af15-4021-9aa9-3a1fc1f7abe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a01a8a6b-de15-4543-b66d-57cfbdefa819", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9786f513-1b60-40f1-8dbf-ee6d398044b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25aefa5a-cf7d-48e1-9912-7ec84912b52c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4ffe710-6a30-49bb-a59f-f4508767e141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be86fde9-c5ba-4a7a-b10d-2db23c50c2e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d1cf9ba-a212-4af0-a224-d87ae11ed7ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7855c034-03ca-4875-9369-3bab52040573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be627c29-5118-4e46-a15a-ee3830f1b78d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9115b12c-e0f4-4e55-9deb-af03af4ebbc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f20dd0f1-93a6-46be-bb68-74ed7b29ded4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--392ddeee-f041-465d-a905-06a504bf1835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d6da401-348f-4a20-a118-b5c46f7cb480", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68d29f6c-cbb9-448e-945e-813c4dd60eed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f385e41d-131c-4536-a1e3-0e7e7d81f6ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--523383de-04e3-4924-9ceb-e356b8ff5bf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--062c2b45-71df-4421-af9a-d4b57fce0b48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f2ce0e6-cf0e-49b7-86f0-5c9f3932ee51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e820dd97-775a-48e4-a255-07515cdb1838", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--327858bc-97ac-447e-96d2-4b5de58245e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.255']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c710968c-068b-465f-9cae-a9fdc302147b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66198227-13db-4920-bc18-d4d1cd5652d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4733ee20-eddf-4bbd-844e-78d0a2c16dcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e96dcd36-6ecc-4126-b573-12457c3d30ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a454dedb-d719-42af-95cb-10a55afee610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4caeea4e-e4ee-48b2-ad36-31a16d027a29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--448b4034-458c-4520-b95f-0e5d4918e536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73b437ed-8ea6-4933-bc7f-e00d53fe77b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e6ee658-9570-4a32-abc9-10c261c7480d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a808003-20fc-4e06-8feb-44a10dd5a849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f42188d7-2ac4-48a4-9def-c2e65a5016e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--120ff497-1cf0-4468-bf3d-4a17dcb62206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df1e55a3-67e0-41a7-a0d6-5efc77cb818d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b1ad3bc-da8e-47d5-a343-80a23fd4b03c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9335c1ca-1de2-473e-bc88-a9bfc155cadb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd909e4e-d54f-47e8-8079-a2808b91b878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b720e370-3d67-4b16-92d2-468dd40b82f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beb35125-ba14-467d-95bd-2b061257b85e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c81e743-d530-4dd7-b5c9-ce2b1cc506f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f68db7d9-1e44-48cf-9769-3ede2a6d6354", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.183.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f6ad01b-ec2e-4220-8cfc-2d272c7492c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.5.26.208']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--771fb8eb-f6c6-4cab-9d5d-c11259e19ea2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.131.104.40']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4f1e1a5-4110-4347-9163-169a0b3dd198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.146.31.136']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48fe6a95-6a6d-4211-98e9-ed098afd2ede", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa85c694-9223-4d3b-a6f5-dfdd552d089b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.206']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7012dd41-837c-48f5-a612-301b22e6aa9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--910d6232-7da9-4535-86b3-8df5e1abbd1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.104']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b0f53c6-5092-4755-bcdf-5a51fa1e891d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.106']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a05a7e00-b51f-4cbe-9794-ec9cd1f19c55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.113']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15746ca8-87a5-4e52-a6ea-b38e67239711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.120']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f90d8ca-b28d-480d-b583-4e2634778851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.123']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef47d17-abd7-4e69-ae52-a3fcda44f38e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.67']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24247ebe-4f1a-43fc-bdf8-ad9bee7aed65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.73']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acc32728-8765-46c4-bd09-65b38f11310e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.74']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af4443b5-a90f-4cdc-bd84-704f09cd74d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.77']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a40bc3a7-d875-4bff-aa49-b9c32952f8ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.78']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2640bf5-d6ac-4c23-8024-9e6945f23518", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.79']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee0c7eab-8319-4286-890c-fdbee49f30bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.83']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c30fb01f-e49c-49b7-80bf-00659014c078", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c0fd05d-a773-48c2-96a5-574e2a32f55b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.90']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d87b8501-1047-443a-bd31-0af705637c94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8966ed9d-8890-402a-a012-127bad2a190d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8a474e5-f70c-4823-81df-0e91732f95ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.10']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c16b0bb-507a-4b75-a501-4dc5dc410393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77ed4ad4-3d59-459a-8d41-48882197ca9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb356bcb-1368-44bf-8be9-254e4cf05599", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.77.10']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9752b336-4be5-4abf-a84d-e6d421c1ad52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.77.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a18c567-af62-48e6-aa21-ca8db212980a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.24.219.65']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf153e66-d137-4a2e-9709-e3d84039bd3f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.24.219.69']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--674fbe0a-1ee8-4a4b-bfd9-ad72516ec830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.244.214.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e91a0205-74a3-4e74-96ee-0923b312ce24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.244.218.227']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03294e24-f5bf-42f1-9e68-8d872f8ec05f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.244.233.43']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--744b60b7-5a35-4ce9-ae74-b9e3646c829c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.244.244.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ed5e1b2-002a-46a0-9b56-a0676ef55ccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.100']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53f321df-1532-4194-b0eb-bd8249024b8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.106']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f742cdb-9ab4-4b5f-9cfe-fe68480a8436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.107']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dc0a2ec-4ab5-4847-b0da-47296e96baf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.108']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0590ec39-ad6a-4be0-9e0d-c4fd68f38ec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.112']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3dc69a9-2a99-4124-8a9d-6a97f5c25a18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.114']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b33043a1-5417-4dc7-9dd2-5e0209961c40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e0fafaf-f1e1-487e-9f48-75b0850b03b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--befb0011-f68a-4ab3-b2aa-9a1f11596fdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.120']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5da61f3-3fd5-482d-9264-bdf26184074a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.122']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6575904-9f43-4574-b1e1-e707919911a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db46d36a-c5c8-43d4-bf27-ac6ebc6b3ee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a388315e-ff59-4d0d-8905-f457cecb92b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.128']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65320688-0fd8-4541-a8d6-f9beb411d21a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.132']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--988c8b1e-8ef6-4ebc-a025-ef448098a732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.134']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3383b236-b63e-49b4-a30c-ed0c7b672804", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.135']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbf974b7-d31e-4e2f-9a5d-b15f1ceb5e50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.136']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84eaac16-e510-4e5e-809d-8f880e070e98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.140']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba8b184b-3b25-4305-a1ae-67c318d44609", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.141']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8347df99-2b74-4c70-935e-4331cfa79eda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.143']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5ae417d-5aa1-4177-8b79-e81f6840d969", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.145']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f3f1533-a9b6-476a-bd95-a28e03e58b3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.146']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9e06530-14ed-40b9-939f-19c13dfbfeb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f185b33e-e925-4620-8f10-2ce5d17d9b30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.152']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4036176e-2596-4fec-9b09-2a0f29a8c621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.153']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f5a2b89-0ac3-432c-8d76-ce7b8b3cdf95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.154']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fb7e71b-365d-4878-b380-ac48183ac1e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05d2d08c-3803-4526-8f62-3338f3c2a0fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.64']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9644ac2b-a6e8-4553-8297-364425ba20e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.66']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--713c0019-8983-480d-ac07-9309878ae007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.69']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e79b8e-e144-4053-b464-af7755e3c2a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.71']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f875b9e0-8c0b-411d-b1ea-64366d754f68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.73']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7fa4d97-df54-4db0-9417-0a7c18a63856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.74']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c214f54-244a-40ec-99e0-885a374457ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.77']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--573c0911-50ce-4bfa-bd0f-5b0b81b5b733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.79']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15892ff6-5eaf-4e31-95cd-9f50f7924d91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.80']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1a07e45-a869-4766-aa28-81d69faff986", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.81']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efa40708-e556-4585-89fc-d3449216aca7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e31f12c8-0192-45c9-b9f1-fbaf3fddf940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c59e96a-f320-4819-82cf-e90c88d00855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.90']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16cea2df-677b-4873-a55d-f39ea50010a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.91']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e69601e7-c2c8-4bbf-80bf-661be581c253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a645e3a-fb38-4600-9ab8-5229ecec1903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cfe62e5-f15a-45a0-a983-497b8d14e201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.96']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90d3a049-1a45-44ad-a077-e038c7588808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.97']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--906caede-f42b-4fcc-9277-20cbadaa01d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.98']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddbfdbbe-9d1b-4a5a-b8c9-acb750ca0bc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.99']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89548225-9daf-41a7-bf99-a8011c5e222f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.255.2.219']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a0eeacf-5599-4e81-8527-4e3997b1569a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.70.97.74']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d66b0731-c105-4aa1-830c-7a3cbf8aaab8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.161.193']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--208616fa-569a-4480-a1cd-ff73863afd22", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.41']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--574708f4-9692-440f-b72f-dec5a6414a61", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e38a706e-5344-431c-9215-41ec8497707a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.217.167']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94fc67bb-6d46-4f2f-b17a-ab308bad6663", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d05f745-d6e1-46e3-b37a-4aba3b92ad46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f59bf3ef-4032-4a04-8696-ee811ba73c2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf3d9ea5-69c7-44a0-8a7f-c9a93b0f13be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d3bc2e4-0662-423d-9a35-2d4c061be72f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce7ec9f7-d394-47bc-a909-1b547379c6d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c5b71a-8424-4af8-ad66-f285d1bad858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.60.195.57']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7302aec-c717-4b0d-8ae5-e176cf568e7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.11.124.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64c677fe-486a-4227-ba63-79b23f233365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.146.128.238']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d697f1aa-47ee-4446-8d2c-f454e132f0b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.16.164.89']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38e01ad6-71c4-4b6f-909e-589b9d02e23f", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.76.106.8']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a5de49f-e81b-4478-acd4-68a73d9ef8ae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.136.244.91']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a366702-279c-4e2a-b122-490a1b5bb5cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.157.134.207']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--964b0448-45db-45c4-98ef-c7d5854d81fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.132.197.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9ba4897-f613-4c48-befd-2509f5cd308c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.132.42.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b6765e3-a578-4b0b-a3ab-09996db86636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.134.73.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e90fddbf-7ce3-4867-b826-cb07ce4bab7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.135.36.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--468f83aa-9583-488e-a454-822994378828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.172.226.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3241428-7d4c-4d7b-a9ef-906087a53e00", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.147']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5318cd45-b581-4691-b25f-9b204973b680", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.155']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3839b24a-6d11-4203-a916-89f4dde531a7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb0523cb-a426-43f2-929f-e4a78feb48bb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7239832e-a0ae-4a4a-8dbc-35b9e85de391", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.82']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba59ef4e-ca0e-4241-ad01-c94e1f78279c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88a501ee-c06d-4990-bbf4-c4fa8bced9da", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.197.15.251']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d696710-891d-4985-9f2a-7e8850bd8c05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.200.125.19']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebbee5ea-fe24-4698-885a-0a5f6e0f49c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.11.4.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6699b98-6fe7-40e4-839a-3fef31c4afdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.156.66.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70f35024-a1b4-44a9-943f-9d86a8c5dacc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.163.45.10']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09994008-c3eb-4814-b4e4-089f8d26a6a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.168.139.14']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--740addf9-e550-4f5d-ab97-905afb1b6836", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.108.100.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76b7f434-03a6-4d67-b952-c8660f178c84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.125.54.209']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17443839-f789-4eb3-a9bb-93db875c3d0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.176.200.102']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec43a2a9-8cd8-428d-8b05-e66084d9b952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.176.201.24']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--226319b7-cec8-4dd1-8b48-3f987351966e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.109.252.238']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f70b6e8-1f7a-4ba6-8ab1-ab824aa5f174", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.73.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfa618c9-7868-4eb6-90f8-f05310cac142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.255.177.204']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f1e9573-b06d-456b-af35-5f0259ec1e0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.70.251.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db5d96fa-b946-4e21-b5d5-d1cfd38b4715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ce3067b-10d1-4814-b3d5-c60dbd8eb54b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.184']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9799ca1-cd3a-44ad-9273-c39265ee7a84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.185']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3729aecf-ad31-403e-a695-eb1ccc0e87e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.186']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cfd6dc6-305e-4c10-ad54-9b229a85d714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.187']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccb30ea1-cd34-4266-b6d8-c163765f8afd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38b60ed0-8eeb-4fdb-bcab-26bcad17ae79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88e80ab3-7f3c-4a67-9e58-0dce7ac3916b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--119cd28f-31f7-44c7-872f-0fbee7e6d992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6a3f79b-591e-4f7e-ab8b-c4d9211d9f74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.192']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5436413a-2f65-4ef9-8475-0841f3a4dcd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.171.177.250']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ec2bfb2-6f16-4eb6-8466-c8e672f060c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.237.47.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06ce2da3-812f-4258-b7bc-8b331178944c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.247.136.239']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6536d8ef-a656-4259-bac4-a5c59dfa462f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.26.121.58']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b5f0ea0-4270-47e9-917f-5893e73f0319", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.88.108.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40cc2a57-aaad-436c-9e8e-29fec47cec6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.88.4.105']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29c5f954-b4d0-4589-9115-a624d0d57b2b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.155.11']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aff8a84a-8980-4f28-9e4a-c3a27e3bee6c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.155.129']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53d63c44-7297-4423-a0ba-6a4a5994e358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.37.69']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd316bd3-d8b3-487b-855a-eb25a6e1d199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.69.14']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d0419ba-206d-40fc-a2de-1e62ff08e994", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.126.10']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeb075a1-01f8-4b3b-9419-3afccd75913e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.126.56']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89dfe511-0f13-4555-8f60-2ce43938aefe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.211.69.129']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b263b50-e5e2-4b2e-8c7f-2644996120ec", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.130.35.141']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c9586f9-4195-4850-b807-ef0cdcc9f30d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.206.77.72']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5dec7c8-09ed-440b-9efd-e6c39f1664e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.21.158.112']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fe5c8a0-f680-411c-9c74-274c76f2a918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.23.120.32']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c20fa9b0-d5c7-4664-9cac-f30d73f2775b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.43.205.99']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dd68fa9-61ff-43da-9064-d7c50425d947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.47.230.103']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a762c79-4b5d-4d2f-95a2-a29a4a5fc346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.75.134.18']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--796fcd7c-9317-443a-83e3-2cf54d93dc3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.78.84.174']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bdca56b-8a22-43df-bfe6-cab22d712fcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.129.187.38']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9751477-82e7-4ce2-81f5-181864ea505f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.130.168.2']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5b33662-ab26-4e52-ac74-648be7489769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.131.24.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--535640e7-4f9c-4d43-971c-8321c8f0f2ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.138.147.242']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32b43124-d236-4415-812d-24f0714b3492", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.147.122.184']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de3ecbe9-b252-4a7d-ae5d-171aae3176ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.151.116.231']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63e066c8-d09a-4a88-8c85-912116a02cb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.213.226.45']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a1af7df-4408-4403-96ff-451a7702706f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.225.222.203']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22278e11-8172-44bd-a8fc-0eea925c95e7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.226.202.248']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db6a94c2-af12-4b9e-ac59-fd3e1f557481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.227.192.235']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87eae58d-c403-41b4-b079-9112b4fcbb7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.254.52.133']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c164da80-7f66-45f8-921d-37ab884c4392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.74.234.166']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20bfe07b-18f1-4dac-85a2-3ee00b15f805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.77.221.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b48ae6d6-0f32-47de-86e0-2d89105b2e78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.77.24.41']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--696e629e-bc52-43ab-80a6-334a281d5a29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.80.225.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24c59b74-d650-4b05-b881-bb5f5153a7b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.83.245.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f3f6c14-fc51-4512-8386-bcc5d4ab61cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.85.30.112']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--409bd010-bb6d-428d-a57e-73107504bf23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.94.186.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04af682f-6ea5-480d-9290-dca363736a62", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.128.179.195']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d7ec274-257f-46b5-add6-a1a7911968c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.129.235.230']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4841c5c-a08f-4ad5-9e46-af9a6c8332aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.132.90.3']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c9a7b77-ee7e-4995-8bbd-393852140a5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.6']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69ee8f88-fca2-4e42-9593-acf70ca9c90d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.7']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--137fdd5d-7143-48f0-9f05-d5299acb628e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.8']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8ad8b17-b235-4208-ae79-1af5bc16382e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.148.149.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d505480f-030b-4e7c-848f-42d8b8d34bcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.148.20.243']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74b7d033-3d92-4db1-af33-8a04702a4294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.184.195.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b292ef52-0917-434b-9d86-549e3d4f5131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.210.55.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34c06268-99b1-4480-bae2-aa698a86d187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.210.55.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0267e3c-e54a-4c29-908d-4929add51d44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.210.55.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd69cca4-09cd-4fe2-bdf8-7c0231623bb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.210.55.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14b5252f-a4b7-48fb-922e-4dd65046f856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.25.235.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40d52388-46e2-4798-be55-dba72dcb2a93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.25.236.108']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec6bde54-90a4-4586-a05e-5640f77fb9b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.25.236.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61ad0d15-28c3-4b1b-b99f-a6ab04c616d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.25.237.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29a68d95-4f7e-490a-9d17-7a5d5fe89362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.25.238.114']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78422100-cfef-45fb-93e9-b19f4b22bf1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.25.238.16']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c705321e-4cef-4959-9614-5278037d01c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.25.238.195']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0a707d8-a208-45f8-a6f7-5cba95baecf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.25.239.91']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1293cfdd-b9dc-4e32-bf2d-c4357e2741f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.43.62.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23362962-6d05-467c-b4bc-66c5b83c72b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.47.28.147']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f07d28a9-efe5-4849-90aa-f18755fd8216", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.179.100']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2917863-4f88-4609-b199-588c4983e577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.24.50']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfe8ae05-114f-473a-a6bb-a564eb3a7bc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.105']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50676239-9868-4aa0-ab38-a807fc8329ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.38']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d57456ed-feb2-440e-98cf-61e395cf845c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.58']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--184bd2cc-18de-4ca2-92ce-9f54954b1506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '32.193.241.45']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--040379f7-a6eb-41fa-b52b-dad6782be8a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.10.155.106']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf255fc6-50e8-49f1-a0a6-d6bf80165f3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.101.191.234']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69c7f4f4-c009-48b0-852b-c634b2cb1102", "name": "Malicious Host", "description": "Web exploits: aws-credentials. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.106.177.152']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4a156618-588d-4fab-ac09-cd5aff707623", "relationship_type": "indicates", "source_ref": "indicator--69c7f4f4-c009-48b0-852b-c634b2cb1102", "target_ref": "attack-pattern--f4ef225a-7ab0-40d1-851c-51f72d2a3af1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41941b20-bd6b-40d0-b1e9-40afdbade358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.106.242.172']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81c16ff8-45c5-4714-93ee-8a7c6fd1144a", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.11.43.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--528d3f5e-583f-4385-b23b-5e4fe0696dba", "name": "Malicious Host", "description": "Web exploits: aws-credentials. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.11.46.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--abaed623-979f-4306-9d2b-ef27fbf06d90", "relationship_type": "indicates", "source_ref": "indicator--528d3f5e-583f-4385-b23b-5e4fe0696dba", "target_ref": "attack-pattern--f4ef225a-7ab0-40d1-851c-51f72d2a3af1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--650fe6eb-6a60-4efe-8dbe-2c2a98036a0e", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.138.69.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--576da97e-8032-45c8-ad5f-65d3a1d9a8a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.154.204']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d40e569-236c-4cd5-8d7f-dedebe8d3f46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.179.8']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ee4133f-543a-4f4a-b61e-c8f1db93a49e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.2.13']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6af1cc7-258b-42cf-a355-f0735cc13ee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.146.184.56']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--231431c5-7dfa-4dc1-9efe-8d29ddd14aaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.164.175']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ced6206-4635-40a4-a167-4dcab473cf96", "name": "Malicious Host", "description": "Web exploits: aws-credentials. CVEs: CVE-2019-5418. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.197.242']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--59b204e6-b1d0-411e-a791-0363b111ad3b", "relationship_type": "indicates", "source_ref": "indicator--1ced6206-4635-40a4-a167-4dcab473cf96", "target_ref": "attack-pattern--f4ef225a-7ab0-40d1-851c-51f72d2a3af1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--202d750d-fee3-408d-a5b9-e18b2d88c3cc", "relationship_type": "indicates", "source_ref": "indicator--1ced6206-4635-40a4-a167-4dcab473cf96", "target_ref": "vulnerability--d703b0cb-2349-4a45-adfd-079d8cfe4296", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d813d5f-5534-40be-a965-017a7313f0dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.46.14']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--689e18dc-6df0-4e00-b0b5-12ae992c9d55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.47.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27373aed-a300-43da-9a89-0b598cf662e7", "name": "Malicious Host", "description": "Web exploits: aws-credentials. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.16.133.115']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--edcc25e4-1a7c-44e9-94f4-59c22b28a07a", "relationship_type": "indicates", "source_ref": "indicator--27373aed-a300-43da-9a89-0b598cf662e7", "target_ref": "attack-pattern--f4ef225a-7ab0-40d1-851c-51f72d2a3af1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88166770-b4a8-4955-a556-dbf39bb56611", "name": "Malicious Host", "description": "Web exploits: mitre-t1190, php-backup-grab. CVEs: CVE-2002-1149, CVE-2022-22274, CVE-2023-0656. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.16.133.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6ea4e941-8a08-480e-a9b4-0af9a05e5061", "relationship_type": "indicates", "source_ref": "indicator--88166770-b4a8-4955-a556-dbf39bb56611", "target_ref": "attack-pattern--bdec63ce-006e-41ad-9ffa-e50b03aa63d1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ff5d7ea2-571b-4829-995f-ca932452965e", "relationship_type": "indicates", "source_ref": "indicator--88166770-b4a8-4955-a556-dbf39bb56611", "target_ref": "vulnerability--e244d6a3-dc81-4710-a38b-6edfe4916bce", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--501e6049-d8cd-4c6d-bcc9-eaa4f85296da", "relationship_type": "indicates", "source_ref": "indicator--88166770-b4a8-4955-a556-dbf39bb56611", "target_ref": "vulnerability--7a369f54-0fdf-449c-bdf0-e287fc8fdc98", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4c22cdab-3ebb-4b0f-aaad-60f0b7708d12", "relationship_type": "indicates", "source_ref": "indicator--88166770-b4a8-4955-a556-dbf39bb56611", "target_ref": "vulnerability--9cecf465-ce84-4269-b927-dca2ba0b43cb", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18dbaf66-5132-441b-a99c-9ba8539bdefa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.169.147.80']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b8d9ad4-1145-4e62-8a8e-1c33032be872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.171.200.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d8d8507-6fc7-4db2-b16d-a9a541743296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.178.197.240']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3157193-a47c-4cad-a3ef-27263848c525", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.18.222.26']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ff82c66-8f7f-4cf7-bc7a-86ba75beda04", "name": "Malicious Host", "description": "Web exploits: aws-credentials, mitre-t1190. CVEs: CVE-2019-5418. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.181.240.147']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9a92eb2a-8b5c-48c2-b4c8-f27ee5273782", "relationship_type": "indicates", "source_ref": "indicator--3ff82c66-8f7f-4cf7-bc7a-86ba75beda04", "target_ref": "attack-pattern--f4ef225a-7ab0-40d1-851c-51f72d2a3af1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6c52a0d0-6568-49a3-a128-3f04942c9b13", "relationship_type": "indicates", "source_ref": "indicator--3ff82c66-8f7f-4cf7-bc7a-86ba75beda04", "target_ref": "vulnerability--d703b0cb-2349-4a45-adfd-079d8cfe4296", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7392583-4318-45ea-bde5-24f27a59a933", "name": "Malicious Host", "description": "Web exploits: aws-credentials. CVEs: CVE-2019-5418. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.185.170.43']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--14f8bc20-2071-4fda-b6d7-dc05ada2a6e2", "relationship_type": "indicates", "source_ref": "indicator--a7392583-4318-45ea-bde5-24f27a59a933", "target_ref": "attack-pattern--f4ef225a-7ab0-40d1-851c-51f72d2a3af1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9330fa64-3870-49ce-a505-8180646e53b1", "relationship_type": "indicates", "source_ref": "indicator--a7392583-4318-45ea-bde5-24f27a59a933", "target_ref": "vulnerability--d703b0cb-2349-4a45-adfd-079d8cfe4296", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e935704f-061b-45f6-8125-0e3913628478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.186.196.64']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6a6c1d3-d590-47a3-a164-f2b6a4472763", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.193.119.44']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c866840-b890-4072-a9a2-79e6894b55f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.197.70.90']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cf8479f-4603-4052-887e-0253ad9fd727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.205.139.179']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6735bd8f-2968-4161-b7a4-0490f062ba84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.205.18.102']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97e939d8-dd28-40da-9629-cf607b457d76", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.149.108']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b017e3e7-47d9-47d4-ad87-1db9d461203a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.228.104.231']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a0838bc-6ec4-4922-9992-45d5dbadda4f", "name": "Malicious Host", "description": "Web exploits: aws-credentials. CVEs: CVE-2019-5418. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.23.38.184']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9c92680e-fb7d-43ed-9553-e1482b693142", "relationship_type": "indicates", "source_ref": "indicator--7a0838bc-6ec4-4922-9992-45d5dbadda4f", "target_ref": "attack-pattern--f4ef225a-7ab0-40d1-851c-51f72d2a3af1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--faf1f6b8-d0a3-4c50-aa82-d0a6342d84aa", "relationship_type": "indicates", "source_ref": "indicator--7a0838bc-6ec4-4922-9992-45d5dbadda4f", "target_ref": "vulnerability--d703b0cb-2349-4a45-adfd-079d8cfe4296", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a36023b-ff66-4aab-935c-4dc1976267df", "name": "Malicious Host", "description": "Web exploits: aws-credentials. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.23.44.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f826e980-7526-4f63-8aeb-3be54fd764dd", "relationship_type": "indicates", "source_ref": "indicator--9a36023b-ff66-4aab-935c-4dc1976267df", "target_ref": "attack-pattern--f4ef225a-7ab0-40d1-851c-51f72d2a3af1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e5573c7-166b-4937-b895-dc8950d40485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.23.80.107']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1358e55b-efb2-4c52-8436-6c35ccc028a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.230.221.101']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01cb2f83-c3dc-4d2b-bcc0-d9b15a7b6c1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.234.82.70']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48aa9f42-39b3-4596-bd23-163dd8a6c679", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.239.130.59']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f623d1b-33d5-4d0c-818d-fcdaf37a2409", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Web exploits: aws-credentials, php-backup-grab, spring-boot-actuator. CVEs: CVE-2002-1149, CVE-2019-5418. Sensors: openclawglobal, revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.24.220.34']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:openclawglobal", "sensor:revproxy", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d6597a94-9fea-4247-8108-98b3ab3d87e6", "relationship_type": "indicates", "source_ref": "indicator--6f623d1b-33d5-4d0c-818d-fcdaf37a2409", "target_ref": "attack-pattern--f4ef225a-7ab0-40d1-851c-51f72d2a3af1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e34a4643-b080-4079-b56c-22464fc74041", "relationship_type": "indicates", "source_ref": "indicator--6f623d1b-33d5-4d0c-818d-fcdaf37a2409", "target_ref": "attack-pattern--bdec63ce-006e-41ad-9ffa-e50b03aa63d1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--16eb26a4-c3d6-467d-a516-21824d02a7fc", "relationship_type": "indicates", "source_ref": "indicator--6f623d1b-33d5-4d0c-818d-fcdaf37a2409", "target_ref": "attack-pattern--30311f6c-f26f-47da-bff1-b2323ba8673e", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8ad61e69-04e8-4aa9-bd5c-5f83348b7739", "relationship_type": "indicates", "source_ref": "indicator--6f623d1b-33d5-4d0c-818d-fcdaf37a2409", "target_ref": "vulnerability--e244d6a3-dc81-4710-a38b-6edfe4916bce", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d87c37fb-94e1-4dad-9eec-85d5e560e73e", "relationship_type": "indicates", "source_ref": "indicator--6f623d1b-33d5-4d0c-818d-fcdaf37a2409", "target_ref": "vulnerability--d703b0cb-2349-4a45-adfd-079d8cfe4296", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--79cae864-11b2-47df-9697-2c4e2ce8c10b", "relationship_type": "indicates", "source_ref": "indicator--6f623d1b-33d5-4d0c-818d-fcdaf37a2409", "target_ref": "vulnerability--8844fc8a-e028-4e7f-8caf-909ce7a03c63", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94f322d8-245c-42f0-a6b4-131257b0baeb", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.26.103.143']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cfefa6d-5118-4346-8328-262861833ef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.34.139.224']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fd3f2a0-67b1-421e-ad04-de8cbc52a738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.34.139.225']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41de66f0-522c-4ba8-bea1-835133f618d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.34.148.121']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c280f406-597e-4926-a9bb-930860150b10", "name": "Malicious Host", "description": "Web exploits: mitre-t1190, php-backup-grab. CVEs: CVE-2002-1149, CVE-2022-22274, CVE-2023-0656. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.35.29.66']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f60909d3-ebc3-4836-b5ca-f23071dd73f6", "relationship_type": "indicates", "source_ref": "indicator--c280f406-597e-4926-a9bb-930860150b10", "target_ref": "attack-pattern--bdec63ce-006e-41ad-9ffa-e50b03aa63d1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a888792e-5e48-4a8f-8df4-0c6b8dfe8f9d", "relationship_type": "indicates", "source_ref": "indicator--c280f406-597e-4926-a9bb-930860150b10", "target_ref": "vulnerability--e244d6a3-dc81-4710-a38b-6edfe4916bce", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fca2fda5-7d31-476f-9a8b-d477ccb493fb", "relationship_type": "indicates", "source_ref": "indicator--c280f406-597e-4926-a9bb-930860150b10", "target_ref": "vulnerability--7a369f54-0fdf-449c-bdf0-e287fc8fdc98", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--326f7e9a-1707-4926-8230-5cb8b0051755", "relationship_type": "indicates", "source_ref": "indicator--c280f406-597e-4926-a9bb-930860150b10", "target_ref": "vulnerability--9cecf465-ce84-4269-b927-dca2ba0b43cb", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56c1affc-7ceb-42cf-8d84-5d60f5016b09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.243.112']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ad0543a-9511-468d-bab0-3d57365d6937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.254.144']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03a4145c-9f4d-4c0e-839e-5b966d524dc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.68.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b8282d4-1288-48b6-94e2-29889d520978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.40.147.152']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f970c137-12af-4fcd-a3a4-0bfd385cd025", "name": "Malicious Host", "description": "Web exploits: mitre-t1190, php-backup-grab. CVEs: CVE-2002-1149, CVE-2022-22274, CVE-2023-0656. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.40.187.90']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--487c3c14-3e93-4497-b7fe-d4adde4b3f96", "relationship_type": "indicates", "source_ref": "indicator--f970c137-12af-4fcd-a3a4-0bfd385cd025", "target_ref": "attack-pattern--bdec63ce-006e-41ad-9ffa-e50b03aa63d1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d1193150-2101-45db-afe8-45fb0c987b87", "relationship_type": "indicates", "source_ref": "indicator--f970c137-12af-4fcd-a3a4-0bfd385cd025", "target_ref": "vulnerability--e244d6a3-dc81-4710-a38b-6edfe4916bce", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e16f7d28-3a5f-4697-8f61-235468519be7", "relationship_type": "indicates", "source_ref": "indicator--f970c137-12af-4fcd-a3a4-0bfd385cd025", "target_ref": "vulnerability--7a369f54-0fdf-449c-bdf0-e287fc8fdc98", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--15596f62-daf4-4409-8672-2861f1d78935", "relationship_type": "indicates", "source_ref": "indicator--f970c137-12af-4fcd-a3a4-0bfd385cd025", "target_ref": "vulnerability--9cecf465-ce84-4269-b927-dca2ba0b43cb", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a99158d9-718a-4e33-9053-4f7f862be2df", "name": "Malicious Host", "description": "Web exploits: mitre-t1190, php-backup-grab. CVEs: CVE-2002-1149, CVE-2022-22274, CVE-2023-0656. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.40.220.43']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--67f0cbb2-523a-4c53-befd-155634955528", "relationship_type": "indicates", "source_ref": "indicator--a99158d9-718a-4e33-9053-4f7f862be2df", "target_ref": "attack-pattern--bdec63ce-006e-41ad-9ffa-e50b03aa63d1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f4c0273b-fdcd-4920-a961-ad3b53f19ce6", "relationship_type": "indicates", "source_ref": "indicator--a99158d9-718a-4e33-9053-4f7f862be2df", "target_ref": "vulnerability--e244d6a3-dc81-4710-a38b-6edfe4916bce", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--99ecb9dc-e5c8-4a54-94dc-6eed6a306f13", "relationship_type": "indicates", "source_ref": "indicator--a99158d9-718a-4e33-9053-4f7f862be2df", "target_ref": "vulnerability--7a369f54-0fdf-449c-bdf0-e287fc8fdc98", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--852323b1-593f-4fe0-bca5-cf7b98fdbc69", "relationship_type": "indicates", "source_ref": "indicator--a99158d9-718a-4e33-9053-4f7f862be2df", "target_ref": "vulnerability--9cecf465-ce84-4269-b927-dca2ba0b43cb", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0538282f-38b7-4a17-9b14-fb786d1581dd", "name": "Malicious Host", "description": "Web exploits: aws-credentials. CVEs: CVE-2019-5418. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.45.27.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d77223a2-d225-4f1d-ad94-1dcee753c8a4", "relationship_type": "indicates", "source_ref": "indicator--0538282f-38b7-4a17-9b14-fb786d1581dd", "target_ref": "attack-pattern--f4ef225a-7ab0-40d1-851c-51f72d2a3af1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e237e117-a2a9-4f8a-b78d-80945b0e078c", "relationship_type": "indicates", "source_ref": "indicator--0538282f-38b7-4a17-9b14-fb786d1581dd", "target_ref": "vulnerability--d703b0cb-2349-4a45-adfd-079d8cfe4296", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9668fc42-b0f2-4a12-aca1-055a0591c836", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.192.203']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7ba8fd7-b0e8-4177-a7eb-ae76bef0c5dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.148.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84e781a0-c31e-4d85-98b0-cb9e54e2911f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.164.96']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7c69558-f1ca-4db0-804b-1f35ca389d04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.23.38']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c4f1001-e683-4964-9f3c-02722bc718dc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.63.118.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd874c5f-ff51-450c-aeb4-c527169f9572", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.64.68.243']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46efe40e-f164-4728-829f-5d0f70f50ef9", "name": "Malicious Host", "description": "Web exploits: mitre-t1190, php-backup-grab. CVEs: CVE-2002-1149, CVE-2022-22274, CVE-2023-0656. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.65.22.192']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--72a10c2e-bb1d-48b6-830b-fa953dd7d9a8", "relationship_type": "indicates", "source_ref": "indicator--46efe40e-f164-4728-829f-5d0f70f50ef9", "target_ref": "attack-pattern--bdec63ce-006e-41ad-9ffa-e50b03aa63d1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--211ad433-2386-4cdb-b8ec-07d4aadc4292", "relationship_type": "indicates", "source_ref": "indicator--46efe40e-f164-4728-829f-5d0f70f50ef9", "target_ref": "vulnerability--e244d6a3-dc81-4710-a38b-6edfe4916bce", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--59b194af-a6a5-43e7-90d6-43bb1c78e648", "relationship_type": "indicates", "source_ref": "indicator--46efe40e-f164-4728-829f-5d0f70f50ef9", "target_ref": "vulnerability--7a369f54-0fdf-449c-bdf0-e287fc8fdc98", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4295db9c-9d26-451c-9282-3c521b586c62", "relationship_type": "indicates", "source_ref": "indicator--46efe40e-f164-4728-829f-5d0f70f50ef9", "target_ref": "vulnerability--9cecf465-ce84-4269-b927-dca2ba0b43cb", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26496bab-affb-4ae1-baf5-88ce0cfd5742", "name": "Malicious Host", "description": "Web exploits: mitre-t1190, php-backup-grab. CVEs: CVE-2002-1149, CVE-2022-22274, CVE-2023-0656. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.65.31.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--44ff3dc4-9d4f-4918-b72a-b5745ce61c8b", "relationship_type": "indicates", "source_ref": "indicator--26496bab-affb-4ae1-baf5-88ce0cfd5742", "target_ref": "attack-pattern--bdec63ce-006e-41ad-9ffa-e50b03aa63d1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c39e8da6-5152-4dfe-a89f-e18b12f49e4b", "relationship_type": "indicates", "source_ref": "indicator--26496bab-affb-4ae1-baf5-88ce0cfd5742", "target_ref": "vulnerability--e244d6a3-dc81-4710-a38b-6edfe4916bce", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--85941995-aa04-48c2-87c6-a7ac6a83c780", "relationship_type": "indicates", "source_ref": "indicator--26496bab-affb-4ae1-baf5-88ce0cfd5742", "target_ref": "vulnerability--7a369f54-0fdf-449c-bdf0-e287fc8fdc98", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5a3da629-848a-45dd-a6e3-57bcb9e6d49f", "relationship_type": "indicates", "source_ref": "indicator--26496bab-affb-4ae1-baf5-88ce0cfd5742", "target_ref": "vulnerability--9cecf465-ce84-4269-b927-dca2ba0b43cb", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6230bbe0-12c9-4046-92b1-40cbdb29e9d4", "name": "Malicious Host", "description": "Web exploits: mitre-t1190, php-backup-grab. CVEs: CVE-2002-1149, CVE-2022-22274, CVE-2023-0656. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.65.50.17']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eeb094ee-3571-42e6-b851-a9dfdd13488f", "relationship_type": "indicates", "source_ref": "indicator--6230bbe0-12c9-4046-92b1-40cbdb29e9d4", "target_ref": "attack-pattern--bdec63ce-006e-41ad-9ffa-e50b03aa63d1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1ede6cfe-8582-45c8-80c8-e1e909fbf1af", "relationship_type": "indicates", "source_ref": "indicator--6230bbe0-12c9-4046-92b1-40cbdb29e9d4", "target_ref": "vulnerability--e244d6a3-dc81-4710-a38b-6edfe4916bce", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5af8d16d-b9b4-4b1d-96c4-8af627979ca6", "relationship_type": "indicates", "source_ref": "indicator--6230bbe0-12c9-4046-92b1-40cbdb29e9d4", "target_ref": "vulnerability--7a369f54-0fdf-449c-bdf0-e287fc8fdc98", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--10bff3ae-6389-4db7-980f-438c44f06614", "relationship_type": "indicates", "source_ref": "indicator--6230bbe0-12c9-4046-92b1-40cbdb29e9d4", "target_ref": "vulnerability--9cecf465-ce84-4269-b927-dca2ba0b43cb", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07df97d2-5a92-46c9-8866-f5baa0906e38", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.73.108.0']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a18a8a1a-8242-4e2b-8b82-651191a18669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.193.194']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e07cc29-826e-40d9-b370-7ab1e1462f61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.208.155']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e53ffb7b-db0b-4a20-9d18-2dc7cb251559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.166.77']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07edcda7-9ef2-457f-9860-b560e2a534f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.20.113']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b98551a1-3ed1-4b68-8239-8dc270f33efd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.126.174']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f62e715-384e-4ae0-99dc-c1b01ecf632e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.132.132']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--405d7480-4ac7-4fb7-a1ce-b9a187fa3d38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.189.104']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9f5d43f-f968-4007-ba69-952fcc18d39d", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.81.100.241']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb05de2f-41fe-4b63-86f8-8acc6b0dae3c", "name": "Malicious Host", "description": "Web exploits: mitre-t1190, php-backup-grab. CVEs: CVE-2002-1149, CVE-2022-22274, CVE-2023-0656. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.81.164.113']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b5b955e1-3a15-41a4-a5b2-c403cf4ac8c7", "relationship_type": "indicates", "source_ref": "indicator--fb05de2f-41fe-4b63-86f8-8acc6b0dae3c", "target_ref": "attack-pattern--bdec63ce-006e-41ad-9ffa-e50b03aa63d1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9b774193-0ad9-4e5e-9493-77f28bb9aeef", "relationship_type": "indicates", "source_ref": "indicator--fb05de2f-41fe-4b63-86f8-8acc6b0dae3c", "target_ref": "vulnerability--e244d6a3-dc81-4710-a38b-6edfe4916bce", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e0342d50-bdb9-4c6a-911f-72ed62595187", "relationship_type": "indicates", "source_ref": "indicator--fb05de2f-41fe-4b63-86f8-8acc6b0dae3c", "target_ref": "vulnerability--7a369f54-0fdf-449c-bdf0-e287fc8fdc98", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4188d42f-597c-47e2-a67d-d0d78fd7b545", "relationship_type": "indicates", "source_ref": "indicator--fb05de2f-41fe-4b63-86f8-8acc6b0dae3c", "target_ref": "vulnerability--9cecf465-ce84-4269-b927-dca2ba0b43cb", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfadcff5-21d6-4773-94de-81ea189211f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.81.182.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a013b692-0976-4cd5-a689-d820b0136be6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.87.208.185']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a7eb812-0ada-4799-bd58-1354504159f9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.88.104.154']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--790be167-f7a3-4fd5-af87-fd2794238e70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.90.99.2']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f654ad2b-16a0-415b-a846-a6dc0f5b56bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.94.140.195']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--981fc9a7-418b-4579-9b17-4edab10cd21d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.94.27.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c957856-aa5f-44e9-9083-79a2336c2fe2", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Web exploits: aws-credentials, mitre-t1190, php-backup-grab, spring-boot-actuator. CVEs: CVE-2019-5418. Sensors: openclawglobal, revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.94.89.163']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:openclawglobal", "sensor:revproxy", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6f59ccec-a0fe-47a8-9729-10cedcc47dae", "relationship_type": "indicates", "source_ref": "indicator--7c957856-aa5f-44e9-9083-79a2336c2fe2", "target_ref": "attack-pattern--f4ef225a-7ab0-40d1-851c-51f72d2a3af1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--46849ceb-17bc-4ff6-a040-db8f9fc042ae", "relationship_type": "indicates", "source_ref": "indicator--7c957856-aa5f-44e9-9083-79a2336c2fe2", "target_ref": "attack-pattern--bdec63ce-006e-41ad-9ffa-e50b03aa63d1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4f36cc3b-7ab9-4655-9eb6-04a9db7c48cc", "relationship_type": "indicates", "source_ref": "indicator--7c957856-aa5f-44e9-9083-79a2336c2fe2", "target_ref": "attack-pattern--30311f6c-f26f-47da-bff1-b2323ba8673e", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f96574db-0bdb-4c30-a728-605a675667a8", "relationship_type": "indicates", "source_ref": "indicator--7c957856-aa5f-44e9-9083-79a2336c2fe2", "target_ref": "vulnerability--d703b0cb-2349-4a45-adfd-079d8cfe4296", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5d62aab4-9af6-4fc3-983a-5a3e06c8f087", "relationship_type": "indicates", "source_ref": "indicator--7c957856-aa5f-44e9-9083-79a2336c2fe2", "target_ref": "vulnerability--8844fc8a-e028-4e7f-8caf-909ce7a03c63", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9ae1f0b-4422-4ac4-b47f-5aefcfbf1a7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.96.45.120']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bfe2735-5012-4bcf-af44-e68d51e2d01d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.97.184.137']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9f21027-8723-4994-b368-d055f6c5c911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.145.124.172']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5d5fc9f-269e-488b-8adf-a8ec0ee8f747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.169.206.177']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75015f51-2d11-4e9a-99ed-ceffa89c0294", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.177.0.75']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7489736-a5b2-4329-86cf-ed2a26a73b96", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.185.49.250']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc874d9e-34ed-4298-9d0d-663a28492d97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.107.243']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbf6ca29-e3b4-42db-9b6e-156a9953c5ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.17.208']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38893ee7-412a-4b30-a6be-916e0a953d32", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.190.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3ec4162-0ab4-4e35-9da6-60519074b5db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.21.48']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fdf8084-3a25-456a-9a5a-f94f4fb5fcde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.65.187']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09fca2f7-aa56-4ab4-8f53-d9683d348888", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '35.190.156.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a146968-c6d9-4287-9873-db4adc44cd11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.11.198']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc575269-b6d8-4185-8874-8322ef602a76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.18.195']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67fc6983-7242-4cd0-a543-6a3131e52ab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.102']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ed028b7-660a-4daa-940f-b4d446d9723a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.11']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--854fdb60-51bd-4080-a1fd-4595567943b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.110']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07f2ec22-54d0-4dfa-9e5f-aaf9ef5926ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.115']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60016df4-f778-4af0-8410-0d5067f7ba48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7d59824-a8fb-49e4-98cd-61d00b75af57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.12']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b49ed16-528d-4fc5-bf08-0110409f26bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.121']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f556e1b3-52e1-4bd1-a09a-e14b8eeba3c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.122']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec65c40c-24c1-4009-9e4b-94a6fd2218ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89ebaf4a-e1be-4811-bf48-79ad621b29f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccdf7a01-a8ed-484f-9012-62b8079baf44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88bbf05d-869f-4b50-a338-91f165296332", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.129']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--147f0d83-e329-4566-aba6-4022e567a56f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.13']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f90d41ed-0094-490b-979e-1cdf9662b05f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.132']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0d8ea4a-82c2-4bba-93e0-0582917ba76f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.133']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d40facaa-d76d-4726-acaa-e6a7189998f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.134']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00bfd03c-5235-4e59-bcb3-f217d45cbda9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.135']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7582527b-7b7c-4b5a-9ce4-68afa8ffe24e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.136']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5380364-8285-4c9e-96c4-89260f065b1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.137']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39d1bc85-09ae-4c4f-9d86-2439d066eeaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.139']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbcbe1f0-e287-4973-8dfe-af5d375c3974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.14']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4acc4882-9ef1-4474-9da8-751a99583d56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.140']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6013bf1a-9e47-4727-b7a9-04a6e2b03cc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.145']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac72530c-c8a7-4d50-a378-74f5b9c3543c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.146']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e535df0c-19d8-483d-99dd-2072c2fce34a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.147']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aef3b00-fd6a-4620-ab53-27a9f22fffa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6356b591-b199-4899-8fb7-7c7a2b6b42e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7f2a379-4373-44ce-ad0d-83f06ba8d7b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.152']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--180c1495-02e0-4a9e-ad60-72c05fe12792", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.153']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30e20592-0e83-4e5d-9c6c-e6e05306eda3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.154']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--838cd65c-ba1e-4a6a-9311-25deda47c76f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.155']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40831bc5-0872-4ae4-b4d7-9c11af944126", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.160']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41d37138-382f-4dfd-955c-1f39dd125946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.161']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfe6942a-5ba6-4431-9e89-a723032b5e96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.167']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b502cdb-505f-4f94-905e-ed27ee5f015b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.17']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4dbd871-ce48-4fd1-8322-c80c6c7a0323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.170']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b616d529-9c92-461b-bdb8-cbc04388f5e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.172']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--756e9cb7-fab8-401c-86d0-e1fd42c72339", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.174']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f7f6c7c-bfc5-4a54-acb3-aa9af6990eb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.177']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a24b150-b375-47a8-a3c9-4e6396935160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.179']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5710ec63-208a-498f-b878-2fdec8679db1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.185']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a09635c-2b37-4944-84c7-051b67ae866a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.187']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a16f8141-879f-4ab7-beab-7385194558c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.19']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30ea995c-7885-4814-81fb-3ff3eddd6611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.193']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f0a1c76-ef94-4ffb-bbde-1ac71ebbdb6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.194']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b38fae4f-d489-4290-83af-de2dc30987b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.195']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff98fa37-7d7c-499e-90bd-6a4482249ca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.199']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69b7d6c0-298b-4f72-8e89-5c8049a859ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.204']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9165c42a-7188-409e-b7c8-06dddbcb4580", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.208']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ae1dccd-7d5d-499b-862b-99eec1194479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.209']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb50e454-7f3a-40a3-92e5-64127ea0dad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.211']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d2107d-3b16-4c2a-9143-59fa8361a217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--001a4a34-91a6-4de1-99ef-b11b7814c8a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69dc4cbd-91a9-4dbf-a5ea-6269ca978982", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e91bfb5c-6f2c-443d-87e2-7b14d61ef203", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f0b6f08-5363-42cb-a42f-67382bb9e459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b396f90f-2911-41db-89f2-440553c8ca83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.224']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--504d3288-c1c1-4273-8426-b07851c9ef4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.225']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9488b163-83b2-4706-a44d-3daba11fa4d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.230']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ce0ea07-00eb-4bde-8153-e532bcec23c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.233']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c93fe6e-099f-41d5-a224-96e20b3d3b8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.234']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04d9f9f8-546a-44dc-a2c1-32b8675ec0ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.239']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d38d4dc-2796-41d6-8823-6d20d5e61592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.240']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bea5a3a-0b1c-40c6-adc6-f9b9b393eb69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.241']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ee7241a-3de2-4303-a450-4df1ebe4fe8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d9cadbd-1a8b-489b-ba2d-7508795f83e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.250']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22092f4-f3d9-47ed-96bb-929f4054ab2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--960959ba-1339-4de7-917e-03449fc26548", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f2eccb4-f268-4099-bddc-3fae73f2bbb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.26']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2180651-377c-4e01-aaeb-5c1eb278dbf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.27']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03ac238d-318a-4c7c-a798-b289f8aa01f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da666ac7-e7d3-45c5-8dd3-03eda00ed71f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.33']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eafe74fe-bd0b-4798-bc8b-2210fc7637b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.35']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3073a4a-ee29-4831-b95b-513de8345be9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.36']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e65e0c-4ffe-444d-a3bd-3c423bc9769f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.37']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad29b1a7-7101-44ec-9df4-ef1cccde4de7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.40']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6854208-784c-4c5b-9b80-3c1cbd3d6e23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.45']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eee35b9a-cc9b-4f04-abd8-bf8cb73cc1e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.47']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25883470-c774-43a3-a7b3-e16148b813da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.48']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c43ddd9a-9a7b-4511-bb88-505ec661c5d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.49']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91edc07d-1285-4a34-b55b-14bda1d115c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae8ca64d-bf00-49d9-9096-2f17111ae80c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.57']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf6d0d3-9a09-4e89-ad3f-e31c25eb3a9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.59']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0b34231-7e21-4d34-b453-a8e1713eba8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b09b16a9-8572-482c-b761-0d248b2f0995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7e908a1-fcdf-4c3b-8584-71d7b6f92e6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.67']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5573b892-d067-488e-80b8-a0cf3441ba5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.68']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30e8f008-c996-4b86-8f8f-499d9b56c982", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.69']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2db19150-69fd-40d8-b554-37f5f6723fc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.71']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdca84cb-aae3-44ef-91cf-7d57495b77df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.72']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faefdb1b-fa6d-459b-a7c8-f6815fca3135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.73']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77631ed7-4e0f-45c1-ae6e-70e2b1f74ec6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.75']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--100ff346-9cd7-4420-a2f8-05758d3bac07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.76']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8db0d03-e353-4d7d-bd0f-fad42fc2df67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.8']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f71082b2-ac9f-4cde-a0c4-6ce91e9b616a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20f4887b-abee-4d78-8bd0-13f91d4bb74d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.89']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be9d79ac-24d6-4020-af80-48d614ac0163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.9']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b701ced-d83b-40da-b972-868d7f3d2ec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.90']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f350cb5a-f3f3-4958-ae93-c6067f56c3b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.91']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c038a24-6afa-443e-866c-52218b97469b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa310bba-193c-4f7e-a28e-69d2f1827c92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71a28822-5a98-4a95-ba64-a09c0884dc68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.97']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b78de6ba-388b-4a5b-a08c-5ea111cd1521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.98']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38a1d544-b2e9-40a0-8e8a-637406ba3ecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.99']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f02e030-6207-443c-aa84-8bde3dc29f45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.10']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0605f310-9e20-4957-88e0-1ccb9cc72de5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.100']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16f6e8cb-798c-4c1c-803d-b1cb2dcd141b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.101']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab29f8e1-e5ff-4a0c-bee1-eea6e20f4ed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.104']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f8e4abf-5566-4624-93d3-f19f7bd3dd0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.105']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f33c511f-d435-4436-abc9-4913ca4c1bd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.106']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bb51753-472e-4f90-8971-3724812029a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.107']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30af3253-be1d-41d7-be1f-c5c74f655f25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.108']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e76ca47-7ba9-4698-9393-a6cc5be3b494", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.109']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea4e3aa7-3413-4b28-9743-9379bda35bf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.110']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e4da502-929f-4f1e-8c91-3fe476c511a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.111']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57ccd310-f359-4e5d-ab06-a975d7f49c57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.113']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e970985b-ce3e-4446-8742-3934405d8232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e9fc631-9d06-45f2-80a7-7748535270fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fd6382b-7841-485f-b7ca-99767bdff9ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.12']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e9c8b2b-0dc0-4da7-9c2d-83eb2defcd80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.121']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48f5d9c4-7175-4079-9cb6-d8198f933e70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85f5426a-b547-419f-a6c9-814c5cf31029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4325b1be-82e7-4335-9045-c839e3a7f504", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb37e7b-b68d-44b1-b0a0-09c6032e84ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.13']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34f0fc83-833f-461a-8bd0-6fe843b195fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.132']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b49283cb-634d-4bc2-b44b-bf82ca27c48e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.134']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--641f2c56-6a78-43a5-aa7e-42dd8a1fd636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.135']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9101c86-ca34-47ba-bf86-ba78b128825e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.138']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5017b061-2b74-47ce-8e11-f2474a516691", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.143']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffc2e59d-4f65-4855-bf16-3add7e60a96c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.146']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b6b73f-87fc-4241-afc9-b3f9d3f3bd61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79fb1a19-862b-4feb-98e6-be61d1ad9eac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70629bec-17ff-4cb2-a095-0be47029e494", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.153']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d6d500d-7c23-4839-a52c-376b973e3000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fbdf6d7-3451-48b4-a2ed-47b19fd0ea75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.16']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b94bcaf4-94ad-4b2a-810c-83d58671bdc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.161']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5416ad4b-72b0-47c2-af6a-f1b1b658d9b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.162']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e90c4ee-4808-408b-9fd1-b95d54bb405c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.163']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ff4568-7582-4029-b5f4-dd040eb5bfc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.170']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cece63bc-e005-4a8f-be3a-fd5c284d5f16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.171']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17c092d7-37a2-4c56-8381-91d83f1f6ca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.172']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbe771d6-01b6-4c8b-84e1-1f790e3b6bc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.173']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22c42df5-e307-4d34-a2d8-dda2abfc2fc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.174']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30cd1501-9c5b-4d70-95c6-c4c58cf4fb5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.175']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bbccab4-3791-4671-a372-38d9ba655b6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98345e45-7489-4c66-91f3-68f49791fea7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--808e37ff-970e-43d3-b2ff-957e92c747ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.184']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc9a06cc-20cc-4ae8-8c96-ebf747b2a312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.185']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03c664b0-e0fc-49c9-bba3-1fe7c9b84597", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.186']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1ec9318-3083-4436-9da6-43ee99c35b21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32ca91ce-9249-433a-b7b6-fb0b45d5593b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20a67b38-a5ce-442b-9531-9b7e0c64f1c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.193']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a6f15ee-db1b-4d48-a527-11019fd27bb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.194']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4838fedd-3a4b-49af-932e-d9cb317e0975", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.195']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28f1b60c-b202-46a6-958d-ad9cb9fd9629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.197']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a594ba04-efe2-459d-b01c-98d915a2b231", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.198']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f9764d3-690e-49ba-b95f-a863d426badf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.199']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--847e5e28-8388-484d-a0a4-8a14b4f9126c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.200']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e6b52aa-1a6d-4859-8cae-9bb1a79bb8f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.201']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a921e31-e5bd-4cb2-9656-9be2b1a937ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.202']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2b81202-be82-4161-84dd-d923af4dc4f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.207']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ba5555d-a466-4944-9053-f834c07cfa71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.208']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27c9cd83-9661-45f5-8065-8c159df64bbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.211']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43216858-7dea-4539-b88b-fae228881471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2c0b07b-8721-4fff-9e08-5f3963d8eb70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.216']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef791596-ca14-4c15-9309-dc4058e5e09a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.217']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--915b9922-c14f-4d9a-a018-69f4af75c82d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9a248e8-395b-49b0-a064-28228f596424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d4a90e6-afcf-49fa-a735-1278e9d1933f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.228']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2f03d47-cff4-4102-938c-fe07be81b64b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.232']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81c36858-f8ac-4f75-9eb1-9179c67cc45c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.235']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--847809b5-8489-47b1-85cf-8f4e31dcd053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.24']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c5a0d94-a010-4a1a-b004-c5940d597f59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.242']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--329fa3ce-7f11-42f4-ba24-0865c0640046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8affce5e-c66a-4fc4-867a-01b142483fcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceb0453a-cc88-4605-9fe0-2ce02eda704e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6798b51d-d8df-484a-8659-477c4a9f50b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--974ad2da-9d52-4c8c-8c14-36953dfa34c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.26']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f7d817d-268b-4454-9f9a-2fe5b8b3f796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.27']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c01a063-25ae-49f1-833a-e3347d08f333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.3']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3276502-0395-46dd-a930-809d9a61932e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd5cfc6-6dec-4005-8e9a-d654dc13676a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.39']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2db9ea3d-0480-4fdb-b609-dff0f630c0e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.43']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--079f13de-650c-4363-a4ce-f00be1029cd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.44']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--006dc597-e9b1-42db-8618-1f3bed3f3a98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.46']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5360cf87-2e85-467b-a7fb-131a0b6edb17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.48']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd643fdd-d64d-4fc7-b979-c891120ed7e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.50']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4df26660-fd5a-4caa-9664-34112ff64eaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.51']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfd375e8-16f1-4c91-8dd1-92b5a8bc96c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f61f700b-b90a-4284-940c-88108ec721dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd33112d-be27-4335-8f0b-e0eb86d44cb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.56']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f0f377f-4b8c-4ccf-93bc-6066ce6adc26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.66']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8c49e5d-bb43-4541-9fe2-0f418077e791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.69']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c43da68-9c76-4d83-9408-bc5be0d70945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.71']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--574cf473-c429-4846-ad6a-ad9cfb80299a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.75']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--157ec47b-e90f-4220-83ef-d81e5415ac96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.76']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d43f1c4-b9b7-43d5-beeb-f9df56560b4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.79']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d649c70-03e0-404c-a04e-cb6a0e6b4607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.8']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e57bc28-fe5c-4119-89cb-1d11ebd0a4ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a250caa9-3791-4fd3-abf7-228dc04c2acf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e3078f-4027-45b5-ae5b-ef5b49747e8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.89']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8af26f09-9d36-4b69-b4e5-a4d3caf71fb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.91']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb98985a-3ae7-4e2f-9593-45a79039ebae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f57b410-cbac-49d8-8d48-23cedff8568e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.99']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac6693c1-3e14-4665-af32-8a872e8618c6", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.109.208']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d6d0507-a023-479f-a779-c337d631900e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.125.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fae5d330-25cb-4116-a547-86fa460f8a48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.170.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56431a58-43f0-4fb7-bed3-01fc9b4d1a3c", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.223.20.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e775ef8-41c1-4149-a16f-7eda0a9f2af3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.230.125.166']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d74e78b-53c3-4ee9-9082-2cc7258a6eb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.3.47']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87ede879-b56d-443c-8807-665752b29386", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.59.134']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25775e6d-9739-4d9f-86b0-1f39cf4f830f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.185.102']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0e7fe32-8f0c-4068-a5a3-b3274ae5da95", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '35.243.177.108']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f485814e-eb2d-4aee-a813-67a70bf119bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.106.167.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d026aea9-8778-470f-b527-dc8c2d1a7718", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.133.45.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c364f8-38a5-4bab-8d51-fb7ee98341c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.137.49.71']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cb22830-4ba4-483a-9dff-3ae547c7bce3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.139.138.72']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d41943f0-cfb6-4167-b3b4-4d1d9731c869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.142.68.103']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2664611a-e62e-484f-b90d-4466b1ec6408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.157.80.250']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d538179b-92c9-4361-9a67-908b09b3bb3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.230']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c59830a7-1f3a-442b-950b-0040b3616b0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.234']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c3de53-f9f1-4045-ad11-2e5463eb0096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.72']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e31ba406-a503-4f74-9a3c-ba864f84a901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.32.3.16']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c378dbb-7114-4b87-891d-ef2801adc107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.50.11.224']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--166045fc-c986-421e-b0f9-b28811ad8214", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.50.54.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd84b1f-0286-456b-8df3-7953d73081c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.70.105.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--603be068-30d0-4d22-8ade-c8e703ebc5ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.93.71.99']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f962f403-6565-4300-834b-6e6fad23250b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.49.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--655dd266-d621-414b-989f-dad294eac1b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.49.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70a5a0c8-3102-4b81-9a39-7f6d966172c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.49.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8897bd07-5f93-41db-a637-d808c9cd1092", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.49.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0563c9cf-7057-498d-b46f-8a3f30908785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.49.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61f79e61-ae57-4008-ba6e-c9323a3bd15b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.49.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c24b2a60-b278-40d9-be4e-ddcc43c5a574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.49.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a049b9a6-c392-41da-93ca-d0f77dc25a2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.49.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--957fd419-8d63-4152-a040-b2d77e1f5f04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.49.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f7fde48-52f4-48a5-801f-b54a7598af42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.49.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd552cb1-d78f-4049-9bd1-eb8bdcfe306d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.49.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ac21d5d-1712-4024-8ed3-77f8ffef070a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.50.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76bfb3c8-3759-4ffa-9fad-b0ecdee011e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.50.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a342d53-dfe3-4df4-b1cf-960147e51220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.50.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1df6c6f3-1be4-4f5f-9326-1298e354921b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.50.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02584b90-50b2-4ac5-9161-244a8163bb00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.50.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54f37b4c-7c21-448b-8dc1-78f47d91dfb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.50.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f81ef9a3-7a8d-4c3f-b8da-3cfe3b28e9ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.50.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25bd6a93-1d97-41c6-b903-ecfb6de626c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.50.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fdfefa2-3f54-47d9-b562-5e4c57d5f451", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.50.255']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea145aab-9797-4782-a5f4-14ee53978a3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.50.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53d02345-49a4-41a6-a782-a2cd6e5ebaa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.50.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdfd3479-1733-4eb3-ac9a-af8f9710a64b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.50.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c1ea2fb-1b17-427f-9bc9-649e8a9748e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.50.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ffcb49a-33ea-49cf-8835-81658f9980ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.51.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87feb2c4-1350-4e94-b392-8076ab0b4098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.51.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc6b9fe3-783a-4ddf-9553-8ac6e08090fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.51.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2b29e0c-c672-4ee7-8977-25fd6d4ff444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.51.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--656139ae-d1ea-4eb2-a885-ee9a2e13d926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.51.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96e14ef2-0647-4e82-a3e1-61e980f878ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.51.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4450d400-67a7-4a59-80a4-8e6b9dde4d65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.51.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97f329b5-24f6-4775-afc4-d74f40a788fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.51.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cebc274a-2c63-4fca-92c7-abf279d9dd99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.51.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a33a074a-9cd7-4969-a98e-42c5e66a4989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.51.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b0e329e-bb32-49a0-9106-fa16e02b2242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.51.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41b8a84b-e20c-4daf-9d05-685d82eb5998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.51.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17a44d33-0462-4642-adf3-2bbdc0d2bcd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.51.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2cc2e67-8c7c-49fd-ac64-d65b8105cd75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.52.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15ba00d3-d00c-4700-b15a-6489a8097a88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.52.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--836f48db-7a81-4472-a476-f0e1f6b2e9d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.52.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b774f53-a375-40eb-9d0d-511c5ae31253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.52.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b5fbd5f-ac86-45fc-a75c-32c1b22a0efa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.52.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--077ddd91-1d4e-448d-b9bb-6e3d70ac8364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.52.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--358be385-80b3-479e-8dc3-a090a1ff9bed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.52.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d51f4b6-5397-413b-98b8-5bbe76c5f125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.52.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6116e9f-a588-4644-b380-4fe3753eba82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.52.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7867a6ee-45f3-4468-97a1-babca2371de0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.52.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f129a3ce-bde8-49dd-a582-cfd208180e59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.52.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6028d75-d982-48cb-a44b-ff5012dce977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.52.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--834c5c5c-1b8a-432a-aa7f-ffb104b2ed24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.52.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49ccdc61-9324-4659-8da2-8648f41c0298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.53.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2d750ef-f623-4348-85e1-aee0a8333595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.53.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c0f3eae-9373-43ab-a000-6ed68d93a521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.53.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acf7c47f-c32c-4015-bc15-1a5990df12cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.53.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69743beb-ac0c-496f-b2f7-897c1f683c2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.53.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5675ce2b-c527-427f-86ea-66ca332cf00e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.53.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f6e93ae-fbcc-405e-b554-84ddfcd2a40a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.53.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04cc7cb3-3c71-4f0d-89d8-7b5f5f88ba43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.53.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2215fbca-0d89-43f3-9e63-cdd2afa36fe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.53.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fcce271-4f6f-4e9a-a1cc-082cd4ba2efb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.53.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b239c240-216e-4c00-a27a-17ea75385198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.53.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f80cb446-1247-476e-b8a2-b1bf9df8a81a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.53.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ff29633-f03b-43ab-90ac-e1c4b5acbdde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.53.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43b79cdd-83f1-44d3-b74b-6140affbf799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.53.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4da3061-c7ab-4681-adb1-c956611475b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.54.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ced0ec6c-97e4-482a-8ef0-ee2a29633353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.54.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f1a1937-3d1f-453a-aa7f-5e740d626b15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.54.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52bc400e-7d3d-40c1-8d99-8e51c965dbdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.54.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52a91ea6-f9f6-4796-946a-23804aef58c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.54.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a5bcc28-ea55-4ad4-959c-2ceb7e0ee566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.54.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--611210b0-e1c1-478b-b0b6-3636ea79a830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.54.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d966788-4b7f-4410-93e8-d8369c02feab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.54.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45af4cda-33f2-4308-ab61-7b760788a954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.54.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42bcbb30-7913-4ef9-aedd-6c3fa3fe5a87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.54.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5004d177-ebb3-4e0d-b266-4c517f6da6c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.54.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e84fce4b-fc44-4177-a0a0-033f76ac9aec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.54.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84c62a30-bdaf-45b7-adac-02936ce93dbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.54.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ab2b608-8ef6-465a-a45d-0f38714feecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.54.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f494d14-75d6-4173-8ec9-1aec02812d00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.55.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7330328e-e65c-493c-bd6f-8ab4fdf7e8ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.55.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3be4957b-7f8d-48e3-b4e1-bd42d578f957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.55.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4946867-ab25-438c-a45e-799189988e1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.55.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--726456d1-69ff-48f1-8d6f-9e4d2bce5856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.55.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95d47ed9-0bda-47df-b770-90a0d304ccaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.55.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64ef7b50-9b41-42d0-894c-b466d51848fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.55.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d8cfe0f-3a04-4489-b679-f9f740c0e400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.55.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1380b52-0c88-4cc9-87b1-4092a1f2d51c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.55.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ec6a386-5935-41be-adb6-b814ba631506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.55.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f566920-f496-45f9-9cbd-b29a07c9c2e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.55.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8367204-19dd-4551-8acc-e36facf181fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.202.55.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92ea673e-7832-41a4-99a3-33e77595c19e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.111.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45f39259-c230-480d-9471-5b58b65d7e56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.111.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f27c47e0-9b53-439f-a59b-5958ccf9c56c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.111.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeb3a849-bf39-426d-8f03-f9fff8491bb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.111.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7971af31-40da-4b26-818e-452fdea253db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.111.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f03ad11d-7efd-458d-bdcb-694010537633", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.111.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab8ecd22-6af8-4b90-bedc-b4f132e50c84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.111.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a48bc11-0ac0-468c-9b66-a95f3bec4c6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.111.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84473d26-55dc-4d7f-a8b4-4a018d500a4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.111.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5b86d80-955b-45b9-84a3-613a8f25a236", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.111.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--298bbbda-0413-4257-b467-65821673dcba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.111.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31328681-dcd4-480b-8acf-094fa492947f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.111.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fddcf279-51c1-422d-b066-62c3f81538e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.111.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c23e1790-425a-4f76-aab8-62e86f1afcc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.111.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0be6bac1-980e-4264-95a9-e2e377c997a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.111.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad254563-11a7-465e-84e7-09975bd36ea5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.111.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e82b6b56-33de-4f61-afd8-132acf00cba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.111.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35584c17-10be-40c0-a477-9e3f683eb148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.111.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7c9aa46-febb-47bc-ad6c-cd0780a6d99f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.111.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--556f6984-fb9c-413f-8cd9-5f7e8e3fe6b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.111.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d9b8961-86b3-41e5-9898-94b2df0a9561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.111.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f11b5bc5-bebd-4875-9f17-0a765ae93302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.111.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1f40ca3-56f6-4e08-9c74-9788da28a731", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.111.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4133dc96-3a15-4239-9a57-2f121d2301dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.111.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de4c20b1-ffc5-4359-b289-85f1cc9c3e51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.111.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffb95707-b2c3-4b08-8bc6-6f50dc13545d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.111.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce9fb9de-bd4f-4ee4-ab0b-d301c0efe63a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.111.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17ed4099-f5ea-4a5f-8955-d2f14a47d4de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.111.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--959dfc8e-c6d2-4af3-b89f-60259d457c91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.111.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d15eb7d-9714-4c7f-a92b-9c028d1d1b4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.111.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9868b174-b458-485e-a9a5-0764eb94bd44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.111.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f4a294-6787-4fa2-9ddf-38183e9922b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.111.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54688193-ce02-4fa1-b8b1-aa0608ed90e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.111.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a00408a-3c17-4b63-999e-d284791a7a69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.111.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dd1c8e7-c4a0-401d-9e79-c3acbb752992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.111.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--512cd3a5-16a2-4137-be1a-d87632f3df5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.111.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--057429c1-67d3-4c9a-a5f0-3e78c15c7809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.111.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ed624f4-70f3-4688-8c5c-e8df396071c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.111.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de4af172-c8de-41fd-af96-b65f6677e88d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.111.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e86bae84-41a1-4423-8ee1-367e6d7d7dce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.111.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa63335a-53ab-4409-a852-c8f2a9244160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.111.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f6eaa75-5f5d-45e7-8769-a52f01669a08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.111.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f9ffb4b-5d95-45bd-b1b0-e10950881779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.111.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91c960bf-fb55-4ed8-b1fe-b0131d6af1f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.111.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--668a1eea-c647-415a-9415-1a9ad36fbd18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.27.52.100']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf32ff18-fffe-48e5-8782-cc64d3a31f78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.150.26']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6484fb87-a4a5-44c8-b7b5-1e93d95680d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.150.71']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7efbce9-3623-4b2f-9e9b-f643ed18f119", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4d2977b-a5e3-4217-b674-90fb5a1612f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--444ea460-a492-452c-a123-41b805039c5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb8ef838-5f19-429b-a46b-2c3c27b1412a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6addb226-de20-42e2-8e0a-7c6d6b789654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebb527ee-23ef-4098-bcfc-d727c5892b55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffdea50c-d63d-478e-a276-ecc45d55de66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41edec2c-b44e-4a5b-82db-99b42eff55ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56928340-e5b9-4697-9599-f949d3b581ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--102a4527-fe01-4817-9732-3e2f4717c466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63f12bfe-0434-4056-a036-a47a678525b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b763006-21ea-4455-988c-8d3caf4f91e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5ac796c-3919-4095-bf3c-71221314bab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--493c32b4-5960-4f3d-a5c9-8946130954dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd865838-9274-4afe-a47a-1debe09e0633", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad7b2415-9ad0-4d9c-a558-c917199177b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27729c0d-8d19-4242-b9e3-21e8f8070bbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4d9bc5f-dc27-412f-8c55-d1bd6fc3a7c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b20b931c-a1b4-4390-8d5e-15171deb6d1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05e4a2e9-11e6-472b-a9c3-339e0fc2fcb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc04d5c8-a642-42bf-baa3-df229d6973c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b3eef96-44cf-49a8-bf62-d381991cfad2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36e7f334-c394-4d05-9d19-0cc9ea7c9428", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e089b04d-4da9-4e9f-8df1-eb2b3d957d18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcb6eeb9-66d8-4e4b-9a44-52d47b70c5bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5b2b365-1daa-4aa8-b465-ed62409d7548", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c59d9a0-783c-48df-8fff-514f8c950ab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e449bc7e-4f6e-458f-8d7a-590a72c96c4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--944df2f7-bb18-4505-b4a7-8ba9e5353536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf47781e-f74e-4b58-a461-8bf5a3106821", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f352cdd2-dda6-4507-9427-5d45952a2b00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c66c8dc-b8ed-4da4-97ab-f4b40ccdff0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c253604a-0463-416c-8936-e8340a35ba28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6daac873-44ad-4c05-9560-76d6f78650c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ac14e1-18a6-4dbf-93fd-8061c03aca31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cdede9d-c0b5-490a-bb83-e7c95a45356a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c387f795-7e15-4835-aa2a-0c534da338ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.255']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83e34a3e-f7eb-4b27-b112-b22b28aaf9f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39bcb679-44da-4ef6-8bea-12a9da91c34a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--813106e2-dff1-4003-9e5a-fb2b76a75e2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69ce7495-368d-4c76-af6a-0897a8392352", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d7b1ecb-ddb9-492c-8374-ad0112cde9fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e579a4b4-4be9-41e3-a490-508627080167", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ebf74ce-5cb3-4a2c-8e0f-a189cac10c86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df89257a-19fc-4786-8080-9f11f0ab69ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db03856e-a14c-456f-be4a-689fcd5a542c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71ebe986-bfb0-4f35-866d-27950b4fc67b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dba66b8-3579-466d-86fb-a7cb72244df1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fac78af4-8fd5-422f-abab-94b591ada921", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6481bcb-cc74-4b89-88d9-da2bf394372e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0af75bab-f6e0-4372-882b-1776aabbf10c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.25.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff141304-b5b1-4a5a-9e18-3805d2e603af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51ef87f7-1cb0-40f2-bcbc-5fc0f84ce991", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e34079a-d38f-418c-bada-198f993ccd4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68017a58-4112-435d-9752-4842457f0ade", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--991e1c8b-dcd3-49a4-be58-848ac7ad60b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72a385c9-372d-414e-bafb-cfec871f183e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf83bef-51fd-4415-96a9-326792b3b35f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f93318b-ead7-4263-ab74-050cdf491c3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2053ca51-57a8-4d41-a46f-765c7b1b9d57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84e0534b-7139-4de8-9b48-a6f48d8ee09b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce5151be-5129-4697-98c8-f174bc2b7c79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed595b1e-e303-422c-9b0e-a53edd3029d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f03af3-6c98-4ae5-b613-f44d648f5556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc7e24b8-9cb1-44b0-8263-57f7ebece338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0e424b0-0f59-4f5d-bc87-defe34d1087e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52d1a4a9-522c-4e22-bf5c-7f075f876c3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7203e86-0b9e-41b9-b989-73320a012414", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63b0d469-f42e-45d0-924e-ac4efe55d0d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--522028a5-9d05-4105-9dd1-a5521984c1a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--913c005d-9911-414b-8444-6b18fd0af75d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0982be5a-690a-4370-97e0-0e4f96171ccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90b9c00b-be01-4c7f-98c6-e7554a614802", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64542475-3e49-4705-88e2-a8085257314e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09573583-2bcb-4758-a7a1-693bf2732cc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c15d9ee7-eade-4a7c-8193-2b5af609cd14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bdbb6ef-81bc-42d7-851b-2e4686b68b4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2223342-6063-4650-9daa-1940be36f55f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a573666-22b7-4bcf-90c7-158642547273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--647e0062-1217-4d1d-86e0-4ceac7689857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1b3e8ec-998d-42db-bd09-b7eaedc0dc12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--213282e1-2941-4b25-ae10-be025d4513b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--736c65fd-585d-4bd2-a71a-e5ee04222c50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bf4d1e9-78b5-4097-8043-ea5b17e11509", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6852590-e3a2-49d7-8efb-f0a17aa68fb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3353bde-367e-406d-b03e-9c5ffc622185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--774e9982-e63a-43b1-82f3-43ff8f763002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ddf9ea6-b7d7-4f32-b5ac-bd3638852cdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ce448cf-cc75-4375-973c-442244620a0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.255']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ed781cc-5ebd-41a7-b39d-9f1a9786be44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b920ba99-39df-4d74-ac57-4d1d1bfdf485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5199083f-f74e-4539-8377-238b69cce557", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26026515-be67-44b2-b4ab-1db1f5dc4347", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c948626-24e0-4b59-83c4-dafd13c535a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98a76151-3888-461f-a4ff-06f117daca18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--326f8075-ce7c-4a70-b6a0-5f1977204df5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc74fb26-e5af-476f-a3ae-d924c0f125c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac9f9369-5f23-4fc1-b153-a5425f5d49e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc66043e-2e27-4061-839f-d97441d98e48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36598607-26bd-4944-9a12-51decec46817", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f45b604-9757-41f9-a785-8a1558a2138e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--735a4e3b-2535-4409-bf9b-2dd2f6051d1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4e9f12a-af11-4e89-83d5-1e3e98a4c126", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b9f30cc-03ae-4fe7-b43f-ec1767721797", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc0d3b6c-aaf5-4776-a92e-675ca3f38105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bfdff89-6af8-4503-a31a-0f101248173c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d459db6-74b1-4396-be64-554e4b81479b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f09648e-498e-4df1-9bfd-ba69badf6559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.27.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c41e8a93-a09a-48a0-b966-ed24a63cc52c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.132.109.100']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f06476f0-a1ea-4fe9-94f9-80d210b56a1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.146.28.70']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1820137-bf55-401c-94dd-1b295acad6aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.19.156.227']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff261c9e-55ba-431a-9c6b-12e06d57dfbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.25.30.113']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e161f29b-1315-4aa5-b10f-2420f465dec0", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.25.40.121']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bac87977-afd1-4a8c-bd59-b67aad4f4a3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.3.231.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bbd1f08-0e6b-4b86-a256-f9c390448a2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.58.191.47']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e70dd544-f461-483d-9dd7-64f4a466ac0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.68.180.77']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--367bf9bf-9eb6-4b28-b542-b302cd575255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.100.77.5']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0880e7c5-3cf1-47cb-8059-484ef3cb3571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.100.81.174']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a7e230f-36fd-4841-aa1b-87458232f8dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.109.100.175']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd807861-23db-47e9-98f1-a88ca944f7f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.150.34.8']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d001ce73-105f-4a36-bb18-39fcbad69118", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.34.187.32']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--833dbca2-7c7e-4e58-8a66-3cf8cf43b6ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.69.29.90']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80b427d0-5676-42a2-899c-88ef6eb60b74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.148.1.172']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e78fff5-7778-478c-ac82-c8f5e3c833cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.148.1.83']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83c9f183-85ab-49f0-bc2e-4a57a407090d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.148.1.89']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39062563-dff2-4894-b305-e474653f1ea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.148.1.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7278abd-753f-403f-ab06-4fa0923c08d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.148.16.76']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38e9d450-0a2d-4be7-92a9-99c6ba950873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.148.17.162']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--322df81f-482b-46ac-bda4-b9fcb769a323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.148.17.169']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f04cb46-416a-4f9d-bf5c-df6c9856636e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.148.17.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e49fcdcd-1320-4512-bc9e-44870ad23c4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.148.2.7']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d87ddc4-ecf0-4c85-9814-a580dc29f861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.148.240.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be0308b9-3897-4637-a29d-9293871ff97f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.148.9.100']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--665bc87f-7d31-4afb-a4a3-431702790aff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.148.9.80']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--679aeec1-818a-4e48-b32d-3eaf40737c0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.150.191.40']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b20da21-8009-4c2b-9d3b-9d950111b432", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.150.193.1']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--013f72ea-6127-4f58-a676-79e3bf0d2e82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.150.200.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76f549a8-42c9-48ca-a2a4-9fb167247f0e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.224.45.129']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0282fb2-76d5-4025-b99a-b941f01a8480", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.249.16.164']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b984d81-149d-488b-ac52-17de89b9f1a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.249.16.233']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--817d7753-e3ef-494a-bdbd-e41532f26619", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.249.17.106']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caac2d9a-5c1f-44bc-b01c-cafd9a81fa40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.249.17.165']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a78cf6bf-a800-4444-932f-c9eccc94b83b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.26.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--541e506b-42ef-42cf-a32a-d9da685a3fb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.27.196']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc34972e-0d0b-4e70-bc8f-4897147f3eac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.27.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9fa5c2c-879c-4f83-8a2b-35853ed9ef3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.28.210']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32e82b63-00dc-4389-bfa7-4117cac1459e", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.28.75']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed72db61-753a-417a-bd0a-923661399339", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.29.72']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1473b7c2-dd4a-4a75-9cac-cc987133910f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.35.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--784fa6dd-d1cb-4339-b574-5a76abcf3770", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.35.164']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--023e6a5e-55c8-4832-aa08-15695e6456e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.36.161']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--055c0b82-8e0e-424a-a9fc-90ee282d5df9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.36.46']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31b24a02-8758-4410-9eed-0984669868aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.36.65']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f149135-fcaf-4458-bec1-90280d9647e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.36.88']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32e0e41a-7330-4d57-83d8-02778427be3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.42.10']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d81e002-ccd7-422f-8e4f-0015bd6e3b19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.43.216']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b4abecb-1540-4614-b360-e609506e1430", "name": "Malicious Host", "description": "Web exploits: exchange-ecp-proxyshell. CVEs: CVE-2021-26855. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.43.218']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "initial-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855", "external_id": "CVE-2021-26855"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-34473", "external_id": "CVE-2021-34473"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--34c71d9d-6ab4-4c48-83a5-094035330fd3", "relationship_type": "indicates", "source_ref": "indicator--9b4abecb-1540-4614-b360-e609506e1430", "target_ref": "attack-pattern--bfe6a08a-e023-44ea-be23-fdfe6b3f5314", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ae739d44-e887-451d-8634-2d84f1b8ff3f", "relationship_type": "indicates", "source_ref": "indicator--9b4abecb-1540-4614-b360-e609506e1430", "target_ref": "vulnerability--5d2aa6fe-f699-482b-ad3b-a207f1fb2da5", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b40ce314-10ab-4dff-817f-7032bff1752b", "relationship_type": "indicates", "source_ref": "indicator--9b4abecb-1540-4614-b360-e609506e1430", "target_ref": "vulnerability--aa93b2dd-345a-42c9-b051-3862202e31ea", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ef9b359-060f-4f6d-9e5a-387fc8067d30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.44.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d47e4f83-4902-42e5-8b0f-48b64f5abb48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.44.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf31f9ec-07e4-49c1-b275-58dfe8773019", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.112.163']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ecbe934-cdcc-4ce9-aadd-798aecd2f45b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.112.171']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07baaf6c-9621-486b-94a0-4bb14f7d2421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.112.233']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29512c59-eb7f-46d9-b00c-e338aebac0db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.112.239']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--558a663f-8af8-4014-91af-f7324304f02b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.114.255']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c109250b-82ef-41ae-9ee9-24d12fa32e8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.114.34']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--086e1a90-03a7-4be9-80ee-bbea577bbabd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.114.7']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18ee9316-04be-4069-8709-c897acc7411b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.169.249']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6be31bfb-e5eb-4166-a9ec-1b3ec027e90c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.170.174']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--431131d6-1008-47ca-8c45-89718f0b7282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.171.2']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63b14d4c-767b-4449-b9df-d425c222581b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.171.25']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4b79399-16fa-4677-86c5-144e9ade63b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.171.51']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--007a96a1-a884-4ddc-ae69-2f41f0c8f44f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.171.65']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50dfd573-98e0-42e0-9e22-51efdb73b546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.171.7']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56f9d4d0-31a8-4cd0-b7db-a85f36290bf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.179.133']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb40889f-28b0-4ea8-a435-e70d58e99159", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.185.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63560ef6-2846-4ca7-a1f5-cb8d77b2a065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.106']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d60e2044-1bc5-4057-921f-b709adec3cb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--804937bb-718e-4b94-b9f5-c9e9c02e3755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.5.6']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b0a072c-4485-4200-8683-d2ca8f6b0705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.81.186']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ccef78e-28d7-46fe-88c3-3dc8a59e77f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.81.69']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86b9e3a1-f548-4205-956d-547b3ea0462e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.82.179']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4dbe0eb-6f97-4885-ae55-ffb11d5d0c24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.82.195']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8f26799-0859-43f7-829f-70520ce8aa8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.82.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e7e10c6-9342-46ac-a3c1-ad96165d13d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.83.11']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea6df09f-ac3c-493f-b79c-ab8aac05a455", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.179.206']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a8b8a7c-ec61-40ac-aa74-a8f2e2c239d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.179.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcea79dc-288b-4e3e-a78b-f612d098f9a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.74.208.142']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95ae7114-8cf4-4655-bf14-f419ccc21012", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.74.209.102']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6162559-b04e-4e84-a4e2-52e74fbcac8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.74.210.142']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31a2e9bf-4708-4f1d-b410-7b9303780f2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.252.140']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e455aed9-3aac-4b11-8aa5-670d44c41b59", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd22a5c9-4b77-4957-984e-558419fdb883", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.130']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3017b28-0dff-4c9d-aa5b-eb0f4eee3240", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.203']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4cd1f58-693e-46e4-a54e-36326b03dd69", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.255']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8999c97c-8073-4896-ab22-e0bcb6ac7b96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.78.194.103']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--700fb5f2-82bf-4343-a96e-51c9391d0684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.201.171']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25ffd5e9-8518-4450-a471-d24db05c77fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.201.230']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dc935f1-89cc-4a4c-8b55-7f2029b85ee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.202.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02e93dc6-50ac-482c-b626-a08358ccd372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.203.218']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--408cdbd0-cab6-40e3-b82e-41541e02daad", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.81.232.68']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a52890a-ea12-40e0-ad27-7e6fab226d25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.90.253.210']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9417e5e8-29da-4797-ab8a-4c4a920212cb", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.141.228.210']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a711032-ca3d-4972-9b53-3cd6829c4a1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.198.155.243']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f070234f-fa2a-40bd-ac68-e897b6a4cc29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.230.180.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--674631ed-ffd5-4f0f-bd5f-b0f30f4e3509", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.242.96.2']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--222ad500-1148-43a5-90a2-a7535ebd3bec", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.76.83.206']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--526552a3-02cf-48e9-8966-605055be9b2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.1.67.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc85df45-d6a4-4797-add2-ce707f27f4a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.100.27.42']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--065c22c6-f12a-4b21-8c6e-39bcc234b467", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.104.155.218']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26ab94c8-c4d3-49b2-870d-be57972e659a", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.178.170.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5adcef4-0427-4eaa-887b-69f9ed6b1119", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.178.23.111']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b844afc-1430-485b-aa95-9eac418ffc1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.225.9.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2151f07-6750-4968-b03e-9d5714ecf48b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.4.61.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--465e72c1-f636-4c61-ab54-b4614da5105f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.7.242.224']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--955df534-819e-4f13-bc57-416d8323a2cd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.96.20.16']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64537af7-99da-4755-8ae4-21e5dc1ac268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.101.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cda9887-fbed-4290-ad77-7b6ad2299a1b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.139.177']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cc61a85-8be4-4a38-8921-73b25fc785a4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.14.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb4d253f-2a56-4939-aec4-4d4dc7b15524", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.174.37']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8988772-f71e-4144-8478-110d6bcd436a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.40.120']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--971f18a2-e725-4ed5-89a1-1cb9af882f19", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.27.17']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf03253d-8eac-4660-8c06-e3b66730ed00", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.52.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e801ad6-a337-4c88-94df-b98645472693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.11.201']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85e294ff-79b7-4b63-a488-fa637d85b7c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.236.36']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6364ce2b-b6f3-43b1-acba-795329c2b69f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.82.154']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f6adfbe-82d8-44af-8f60-587baae00887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.93.164']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79c883fb-b1d3-4372-b422-c016ea52d157", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.115.233']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69bc0f49-b01a-48fb-b800-0212d544156e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.140.225']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c52065c1-779b-45aa-a814-68bc0be8cb3d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.140.37.167']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e4df4c2-9400-4c02-a65d-8ea15f78b75e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.54.14']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f852ac40-a2f9-4ac2-9d85-ee40c46e63c3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.88.187']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--869f296b-a398-44ce-91a7-4a13b58aa31d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.140.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--541bec32-81e1-46e8-8760-df62fa00f533", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.157.239']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d68784c-169d-4e3b-9d02-d8bb73d8b0a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.147.3']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5b8aa42-d678-4616-adac-9b458bee08ec", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.158.178']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac6fc3d-97b8-4f4f-b4c0-dd76665fd1db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.170.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e3971eb-10a2-461e-8432-d56332f659fa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.19.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d4cb226-a156-468a-8099-6e80aefa6b28", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.50.76']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3626023-0b86-4c27-b2f5-a54bc7d1e859", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.64.34']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9116554-440b-4ad4-8540-21d2bf6f75ed", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.141.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7518b409-3727-4a64-9255-6d29260f6c73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.160.207.19']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7caaf32a-d8ce-4aed-8cd3-e4f289452b62", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.162.114.69']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0d6b52b-59ab-46a5-84dd-341edc820874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.113.160']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8caf1304-9f5c-46da-a785-7bc279c5f9f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.124.133']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b1bd2bf-0c6f-4949-8dbc-04f88ee5710d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.232.168']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91689ac7-3878-4ee0-a489-934e880b9533", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.164.133.138']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--720fe04f-c734-4168-b6b4-6cfe46371f73", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.132.142']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a26e406-ab91-4d3c-9637-5e932f77f75d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.244.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e8be10e-0680-4160-b635-022cacc8a7cc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.245.155']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3776b87-a867-4c89-9cee-3f0205570060", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.247.155']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a6440a0-af38-432e-8f96-c0f8dd163e4f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.177.13']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe837765-5f23-49a7-9e9b-822533255e87", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.194.170']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c33d0a19-c2cb-4be6-bf8e-e8014fabd4c8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.232']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd529da5-fd36-427d-a9e8-04145ed4b18e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.105']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70a2b3f8-fa26-46f6-b3a3-166bfcf3c377", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd0c2dcb-54c1-4189-b94e-a3d5d6222093", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.232']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d63b496-7d08-4038-9cd5-62b27e718765", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.240']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad5c57e2-a5c5-43f8-ba18-cbcce72665c9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.228']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82f0dbb5-60b6-4cd6-a45d-ef0404a18ea9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.240']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a2613da-2486-40d7-a001-e123cdb9861f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.44']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64c0df6a-9c80-47b9-ae58-7f4c75c4c173", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.175']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c89088ef-42c2-460a-ba54-4f4cd699d0b9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09bf2759-0bb8-44fb-8509-6305a118bd42", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.132.80']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a479773-5e33-43b0-a24f-7eca625d6a14", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.197']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87a5e8cb-1e30-425d-bdcf-0414a6908205", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.41']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bc95393-c2e2-41d2-903c-ce07e295f403", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.72']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbef0902-ea57-46b9-adfc-3901d45cc70d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.233']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47f7fdec-68f3-4397-b916-063bfd752b6e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.164']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85cf225b-070d-47b6-bf15-3b0e38e9cd57", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.234']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1bbc45e-f882-4bdd-9138-66ce0563e00c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.178.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d49c0eda-e2d7-4eff-a92c-9eff9151c526", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--260fea49-04f8-4070-afb7-585c527e1372", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fbf3406-1096-4860-96c7-191723bda88e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.7']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af23f610-2f2d-48e3-83e0-04e935a03b45", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.176']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88309f6f-98c0-4bec-a878-224737d852c0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.41']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f62694e-eb55-4858-9083-35464749ba17", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.98']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6eb4dc4-de77-41ca-8e22-ef3a2d5318d3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f132ab77-8708-4ae7-96cf-07b6dd195657", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.243']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b570240-167e-493a-9812-bd892e7dcb89", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.75']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d936030-e677-4d7c-bf02-9d863f8b10a0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.187.57']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e8b4364-ba17-48cd-88cd-b54bc1d33e42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.10']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0fa9132-0ba1-4717-96a8-fc8e22ebf7ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.169']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--642c8571-1e88-474b-bbaf-0d187cf9adfc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.216']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ce1370-1924-4528-9057-9480487dee85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.8']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f32b91b8-1a75-433d-85a8-2b885aa9562d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.9']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0946feb6-dbc7-4fc6-bcee-440f1661abff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.37.109']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3f3053a-3b3e-4dcd-a92e-3c40abb5765c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.240.14.35']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaede208-8360-43f7-833c-aa6b07d6a94d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.108.115']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27f855e8-3d1f-405b-82cc-739588ae0333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.108.69']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67e8406c-1a0f-472e-8dca-07f193ddee56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.201.107.251']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c7254f2-bfb8-4e64-8f35-03b1897493b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.202.18.236']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c4d6e5a-2e64-46ba-8f2a-e9aadadea999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.211.148.114']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--084e08a5-cb0c-4eee-b472-bf42a46c70dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.215.219.236']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f873a54-90a9-4ef7-a4ce-96514a9c175c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.220.185.243']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e901ee78-6380-46e5-9a5b-c18e9b9bbac8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.118.132.11']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b1b041f-b0ae-4744-8bb8-9f63751afa55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.120.126.66']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--510522ec-b5a3-41bc-ae51-511d58607253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.13.190.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4874501-a3e8-4a61-bd30-dd93808dfacf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.13.190.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b289a69a-9d8f-4ef9-b6c9-bea2e4f0cd5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.133.114.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ce0e934-4e18-422c-955e-d295d99bc35e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.133.114.25']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6935acb3-358d-46d7-963d-9ec1069078f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.133.114.251']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff6ed8b1-e197-4d5c-8a33-efe5da29c48f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.133.114.42']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7ee67d4-9406-45e5-b0df-4913f3f7ae78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.133.115.233']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31e683e4-dd72-4502-8254-d256980d9949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.133.115.38']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c568abe0-49bf-43b0-81a3-54033396f72a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.193.193']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3448c126-7a9e-4af7-8bf3-d7ac93503546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.193.198']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a9f7312-d9ac-4837-bbd4-d52dd9790b5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cef1cba0-5343-478c-b24a-665a934fbca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.136.7.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df7d16b4-a9da-4a6b-8be4-dbd7fab3e60c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.136.7.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--823f4bce-45cf-4bff-ace5-e135a0e10803", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.139.198.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--374e9525-8f7c-4ef1-ba2e-e2bc2f58006d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.139.198.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--573eeec4-4e24-4a47-8ee9-0255126e0f72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.139.199.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f10e6c4-701a-4372-9396-38de4eafa650", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.139.199.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72c05fc0-8f65-4a1a-b803-4cbc8a0522fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.161']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--233fba54-bb21-45b6-ac98-a9cf7f6be419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.164']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e1dd71e-dc47-440e-b56b-f9165c0659eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.169']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5daef41c-524f-4832-b010-75925072c81a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.0']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b4d3cd1-a592-4906-8e68-61e72a76f01d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.1']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb7fd527-081a-4932-b2ca-81527b0af458", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.10']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad6f5e17-1a58-4e6a-9127-30ce6d115db0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.100']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9bf048b-6f2d-4b4f-b44a-67cacd444f08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.101']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eee48ae7-57ea-4d76-ba4f-b49dea8a4800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.102']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adbe63fe-dfa5-41b5-a7ea-69547ad0ab86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.103']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6694810f-aca8-4166-b2a4-9c3eaa51dd84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.104']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d35fc85e-06e2-4d01-ac37-c2480b61840e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.105']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f4153db-8b3b-418d-8610-5a091e95a4b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.106']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--021b958d-6401-45b1-9e40-ba11f9f30fc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.107']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a769016c-d14f-4f5d-a2ab-300b50160f92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.108']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b0bbd7f-f00b-41c7-b1e1-4de6f19cdf4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.109']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7050ec0-d09b-4305-bf95-a62549ed1b51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.11']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3f4d47a-9e0a-4010-b65f-6851f5666620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.110']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b132bce-c899-4732-bd18-85eb7aacb720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.111']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fd162b2-6f37-4f6a-b270-b512db2cf3aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.112']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c562bbd-b996-4303-8f3c-7f5a55ef5a67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.114']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0882509-c392-483a-84b8-64022600b806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.115']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ad4e675-9d48-4fc7-b259-de100f8322cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0fd2b0b-b46e-442a-b544-ab4f415cd4f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc845f9-ecdb-409a-8bf1-86ef1dd05389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28aa5181-935c-4f42-a7fe-401df103913d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23d4be8d-57f3-42af-a67c-57b7cbd60fec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.12']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2aa11e9-a1d6-407f-b5b6-90827fbb067b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.120']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f6909c3-b8f7-484e-ab17-6553fea58f69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.121']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8b8affb-2dab-4677-ade9-2a1decda9d63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.122']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f680989-ab10-483b-b5b0-6d4301c50b3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.123']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12341695-ef71-425d-9023-22e905f1011d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--766ff1f0-698c-4ac7-8d1c-8d2faa5eaf48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a77d598d-be79-42ac-b6f9-8333ad68f5dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--750e3748-7aa9-4692-b050-1afd095f3d10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8010b9c-dbcd-463f-9b35-ecf7e07e7db2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.129']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c10d0707-0a18-4a98-a00b-038736432bab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.13']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21f9a036-bf2f-4a6a-b3fc-139661f4ae89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.130']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9cad1c8-26be-4e3c-ba47-5ec7b9d63c68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.132']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e4dd3f7-71f9-4635-a4a7-fdd6ba547492", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.133']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fb1272c-5c57-42e8-a5ad-eb3f16308b37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.134']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26d65d3d-f3d8-4a19-b286-bc93094294e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.137']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8893d27f-68f9-41fc-b6c2-81cc295c22e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.138']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2677a85-d2b4-4f54-9249-64c420732a03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.139']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41b36db8-f000-4451-a38a-3200de80aced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.14']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae344626-4db6-4b18-9ed9-fe5412cc1aec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.140']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ecabc79-c751-4001-95df-99d3b2a770c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.141']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--322efc1f-936a-4361-bb99-862b5fe88e3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.142']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40028ff0-55d2-43e4-910a-5950dd97b51f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.144']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e18f3cf-6f86-484f-af18-7c3fd4fdf8d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.145']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff3a6825-2be9-447a-8b85-69bc1fe9be5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.146']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d43c0e5-92c4-48c2-9bb6-aeec9ac64caa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.147']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b73806ae-afac-46c6-be28-6460a251807c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a8e1e9d-ef21-4a43-a11a-5af42ee49184", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.15']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2669c66-9461-4060-9523-10f96791cfae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8b4f47d-60d2-4b0c-995c-d94d81cdd970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--955d44e6-297b-4fac-80d0-2d3f0daf9189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.153']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00c7cc51-c48d-40e7-ba99-346a6f166449", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.154']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f780ebb2-04ef-4bf5-87db-2182be082394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa68ea2f-1cf9-4c43-a858-53e3d7a49cd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2e6ed16-128a-4484-a778-64de55ad7885", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f20610ae-375e-47ef-987c-6028bb1aa4d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c07dca5-dc3e-480c-addb-891fcb0f68ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.160']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2126e676-9117-42f4-9880-a79652652ccb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.161']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e57884b1-8b4e-42df-9497-4ed6f7cd1e9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.162']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--600558a0-0297-438c-949b-ebfa08b16041", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.163']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc2f6d0-e5c7-4d39-8030-f81c4feec5d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.164']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d45beac5-44a7-4396-91e7-364c23156e35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.166']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a362449-1a6c-482f-bb78-dff5b5f20ee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.167']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8f99e9e-7b99-4b59-b4af-78b43631fea8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.169']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80ef45cb-ba51-4b2f-baae-614536f5bf2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.17']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17646810-34de-4111-8c75-c97825b543d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.170']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8b27ddf-a479-44b5-8981-9dd75b44964d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.171']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d43f13bd-992e-4ce9-950b-9b87c45fa3e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.172']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a004edc-a544-4896-b4f7-9655940a098e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.173']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36e0a393-78c2-4299-9be4-e9b52f56f087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.174']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a94d63c-97e7-4c1a-8058-852b1f8d304d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.175']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdd32d77-e260-4097-bd0b-04abf635a1a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.176']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59f7c8f7-9106-4271-9964-2645619b5304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.177']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a886a4f0-d962-4aa6-a5c5-8242150c423c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.178']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed4dcb3d-6cdb-4051-a824-8db635bd32f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.179']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4a8bb23-6b42-453b-950b-db64e6cecbcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.18']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c8b70d1-56fe-4b1b-965e-88ac4af74526", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48fe9ec5-3149-4bce-ad0e-e5759f58f1b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8421edf-6647-47cc-8ee1-4091f3259f58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e62eed8b-a9b1-451c-9242-7102387d40b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.184']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2b931fe-6714-4f27-a90e-66df50b9b07a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.185']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b46fb919-9528-41a3-8d92-e0691cec395b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.186']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2708162-29bf-4d47-b480-4d29eb31bf6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.187']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e3e41d4-4f8b-483b-9e5e-b6b93e06ed2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3f88a83-b409-4dae-9c10-1c3a017a7df2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0d33bb5-af7f-43cb-9ada-8fb50dd8b37a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.19']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5459341-4d5e-4f7e-b7ec-43bdb935d9c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89d8f39d-2eae-474a-9b20-ed8a2032caff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.192']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6035449-d80d-4a0b-b2b8-806924bb904e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.193']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cd38544-337e-46ca-84bf-6fd80e49e1b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.194']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69b5d30d-b8eb-426e-93ee-a7baee8ebdda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.195']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a51fcecc-495e-4724-8de2-f056a83fbc5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.196']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab02e23-4600-478f-8fcd-8df320ef1efc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.197']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9984ef31-bec8-4ae9-b41f-21d7561918b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.198']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eda645c-1bc2-4dd7-997e-6f307badb8b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.199']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--353de5e3-97f9-44e2-8078-3fbdf72a7cf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.2']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af003bfe-96da-43da-8562-4c6b5740bf41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23344915-b798-4adf-bbce-f396e6fdb032", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.200']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe1ce1c7-df03-4f72-8935-5f7ea98ff1da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.201']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c999877-4c67-4621-92ef-b8ad6db278b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.202']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a61b9c47-88bc-4f62-b360-1bf9ab6a8362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.203']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04638480-c603-424c-bb16-c12290d302ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.204']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--430ee227-317f-40f8-8385-3b8398f59cd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.205']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc8fd128-da18-44f5-ac6a-2396c4ac7911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.206']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfa68db8-8ad1-4998-b1f7-05600f9b7573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.207']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0582b275-b0aa-46f4-850f-897f2f7d85ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.208']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21eebf56-2985-44df-8dea-e9078bec5b09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e64cd318-6308-4548-a358-5e47c672ddb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.210']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ed0316a-ed1c-4c79-97c0-6ef0e1e30ea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.211']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6307b8a-d31d-4f88-bde4-3a7ad3309814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92b31146-7cc0-41fa-a5d7-18da1841c5fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6545cc9-12f1-4408-93eb-0a272491022b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70dead1f-5472-4bfe-bca4-c51901161d42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.216']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa7d455c-0b07-4efa-a336-8744e7169c5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.217']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcb1d26f-a6e1-4239-8442-8136d53309dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.218']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da5f02f6-e898-48e5-b61f-e3801e8a0207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.219']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69a6dd31-6886-4574-a911-d0d648b0f005", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0fff0d6-6839-4eb9-b9d7-8f8f0ded35e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c9f9509-4be9-4875-a3ad-2ebb0e7db258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d872bd9-21aa-494d-97a2-6534aedb70fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c29aec9-f7e8-456c-97fd-b8f6fdc1469f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31406895-6c0d-40a5-b5dd-77c981cf44b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.224']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ab849ff-6b2b-4f1f-a7ac-cdd5cd76dbf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.225']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f2c389a-dc65-42cb-a787-d5eee331d403", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.226']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59b941a4-ee16-4366-9e00-22b8bf92abc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.227']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db60c847-7f17-472d-9207-4591fdb23243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.228']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba7960b-5970-4d4e-88f7-423165171673", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.229']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec865e0c-becb-4fb1-a5f2-89305f9db098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f308e25-af04-44fb-a42c-b15495857339", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.230']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30d9d40c-2278-45bf-9418-03d06cd2ccdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.231']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8074558b-4511-4326-9a5d-81f5203a302b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.232']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf8a1c0-2d11-4303-afae-af8b5cc4a682", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.233']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79a9017c-9ea0-48ac-b717-778a316d5f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.234']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62a4d5c2-781f-4a27-b37c-dcb8e5f8c675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.235']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--318f90b2-4fba-4f60-8ae6-9e42ac5f2168", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.236']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a37b3e19-1e53-4517-b881-e59b552db0e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.237']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a5a932f-5f69-41b5-a6e2-aafa2ae1b683", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.238']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4daac8f6-4f73-42ae-89a4-2db0aa01f40a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.24']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91ca00b2-78e0-4736-b5c5-8e0fe75374c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.240']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fab22def-0511-40b2-8486-505c1f9ff6f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.242']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b89cd18f-b2b8-4c41-ab7b-2697e944ce5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.243']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c849323-60f8-40fe-ad23-a1710c27c08c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffac10a8-f717-43c0-a799-bb77d774c2cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac2df6e2-4fef-49cb-a8a0-c15ac6fd7f15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e27b2c4d-dd71-4437-9007-dc7017035182", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31beb87b-a5fc-4bed-a197-d53857ebe378", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.248']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--167d3cd1-7a22-4cad-97d9-ce28048a1336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.250']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcb4e0da-9780-4356-b1e8-0b27ab7fa734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.251']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5554ea6b-5dd3-43a2-8bb1-78f9c41ec624", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a57037c-da30-45ee-8c84-f43427cb0607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba7e4fde-596c-4a2c-b6fa-526ecbd9777c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--544176b4-2785-48c8-b4f5-1dce76ce4174", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.255']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b2eba89-2072-45a0-9578-5628e61c0432", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.26']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0162f0ba-a0e8-4eda-b705-495d633477fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.27']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db007097-1302-49f5-ab96-44b62646ff5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1be860a-803f-433a-85b0-aed31e234cc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78eceac0-bbd1-4999-a688-f9031d383189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.3']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95f3ce20-6e45-420f-9763-644ed51f4f79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad756a7c-8440-4a8b-8ae9-f44959c6cf7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.32']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51579e01-9b18-4536-8dd7-8788eef5d46b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.33']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c740f288-4991-4ff0-a7b6-dff7d5db4874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.34']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7db05640-eb3c-4d3f-b0c2-7eb590b88e3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.35']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac4786fd-9db2-4779-b9b5-60f64a65a4b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.36']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85a3a126-45e1-44b4-bb25-5d65cee1ef5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.37']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--182b9c3a-ba36-4b9a-a231-0e2cd775f5b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.38']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a6cceaf-9e81-496b-b629-1c6e5b20a914", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.39']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05d6976b-6e4f-4c6a-ad35-05bf80735094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.4']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40bfb0e6-4d49-418b-92e6-a4237fc7da63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.40']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d523e40-bfeb-43c8-94d1-e42b3b324b3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.41']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96542b48-2440-4629-a12f-32c2132ed963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.42']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d349ff1-e71a-464f-8c89-65c602149d1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.45']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ad25f9-b5b7-4de1-a9f0-01243852b93c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.46']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c2cfd06-3c30-43db-88b3-72e2979fdc34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.48']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b892d305-2d8e-4de5-b219-64e2628bebf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.49']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce98663b-ee74-4ec3-963c-8af56bea2625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.5']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6ab9f93-ec4a-49fe-a322-c1878dd697df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.50']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83183527-f50b-457a-b231-dab419e591e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce89eb6-91ba-4971-b269-1b05e753dfae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c9c47f7-7f7f-40d2-9523-dfc2c3827c30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2008d84-e521-462f-8e7c-714a9a0db340", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.56']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00af8a58-aba8-403a-ad51-e6675414d3f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.57']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bb9596c-6c6f-44ca-8274-64899d2554d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.58']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7160f921-69e8-4197-82e7-ee3f037090b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.59']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c0fcd35-2b9a-4c73-8174-91f70f84348e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bbeedaa-5e4c-48d8-ba5a-7e10a4111693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20457ea2-f6cd-435f-b2c8-5bdefd431a91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d49d1e0a-6343-4c49-8c35-c68d85cc4f1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba1732fa-6793-4533-b1d4-e03f66c5bc01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.64']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e80c2eb7-b523-44c3-a095-e9f0fb9a7204", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.65']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff595047-0947-41bc-be14-a750c9895f5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.66']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94ccee44-4b66-4c40-a834-d134baae8068", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.67']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3934b8ad-141e-41ab-8b06-aa643b04b0e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.68']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efad5df4-1264-40cd-aca3-f2e533b9b88e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.69']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db8a217b-f7a6-4d52-93dd-52e93cc64155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.7']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2f0c0a3-8fa7-4e77-ba0b-fed40336f496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.70']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9904eb5-d644-4003-9038-28374d603726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.71']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ffce8d1-84aa-44ca-a872-c7e4ecc7d423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.72']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9da0696f-3b9e-4fee-bb45-503c6147b221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.74']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b73038a1-6526-4f17-bad7-8360dd938d92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.75']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f58c82df-e807-4758-b74b-8ff55c77fd6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.76']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec3c61c9-b6a0-4229-9dfc-a3b5c81bb026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.77']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2a920a1-e760-4454-9334-877c8d254e09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.78']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e48f69-846e-4f46-887d-55e78b568b07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.79']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--265f1ed8-4154-48f5-a07c-3a544effdf00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.80']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46c59ae8-51c8-4d25-9f7d-b6edbc73cd60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.81']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74871235-f261-44f0-ab47-9bffe641253e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.82']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e3cf7e3-9091-4155-90e7-c553685ae82c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.83']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28ec64c9-2165-48d8-8055-ec44d68c5a79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faa1a4a9-1c50-46be-8327-ddd237218313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a83cb44b-5b5e-4c67-9f13-bef2971ff11f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4efb3083-f617-4b4d-8024-49fa4166519e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.88']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1318dcee-1b7e-4013-b335-dec9edec5a97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.89']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf080ea9-b521-401a-93a4-0e28bdc00a28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.9']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6be1bdeb-f8b4-46b2-834a-ff5c3a184545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.90']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c859df5-b363-47b7-ac31-73c9d1333ea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.91']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--210da16e-f7cb-4d9e-bd71-b7df331b4227", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22b20732-5a0b-41e0-be8d-902b0fd2976a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1223b2e-c2f3-4994-a9b1-070da64e44dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2c46f9d-ba75-4159-9c29-f4081e31d7d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.96']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a3e7431-ee93-4205-a13f-8e338ee03b8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.97']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7034cb5c-ec25-4825-ab36-3faf40ba50b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.98']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec6bed53-87c7-48b3-894e-f892cd00ba6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.99']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1a657a5-70d2-4ff8-90dd-5daa8feabb70", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.146.55.107']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6538ab2d-fea6-4d26-8bb7-4792368f1553", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.147.10.203']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71a10ced-16ea-446d-916e-1c595dd13c80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.147.10.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1554151e-2028-4057-85a0-881f21cb0317", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.147.11.66']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0578d56-56ae-4b30-af44-c23867dda320", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.147.11.69']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e75bd37c-8ba8-4552-8a62-1c253c5b30d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.147.11.70']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eea6e593-d683-477d-96db-9b2538a10116", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.147.11.80']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39c2d147-8a96-4abe-9dd2-afcebd0a3c94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.147.9.196']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d68343d-19b4-4950-b08d-87be319aea24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.147.9.56']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57f68b6c-7fb5-46f8-ba4d-3ba85e99b0c0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.141']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fde52bfd-fa46-4a64-985e-9d6502fa9625", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47b6d78c-ebef-43de-b316-e6db9a6cce20", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.152']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a14859e0-f69c-4418-a089-3cec3a4ead85", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b318a0e-6493-41a3-8fc3-e999169107c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac0fa99-3656-4649-87f6-3f7c015763f7", "name": "Malicious Host", "description": "Web exploits: aws-credentials, php-backup-grab, spring-boot-actuator. CVEs: CVE-2002-1149. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9fada690-1dae-4fa3-a577-c2e6f81249ea", "relationship_type": "indicates", "source_ref": "indicator--1ac0fa99-3656-4649-87f6-3f7c015763f7", "target_ref": "attack-pattern--f4ef225a-7ab0-40d1-851c-51f72d2a3af1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ce93dab9-178e-45bb-b9a6-f1e8865c11c5", "relationship_type": "indicates", "source_ref": "indicator--1ac0fa99-3656-4649-87f6-3f7c015763f7", "target_ref": "attack-pattern--bdec63ce-006e-41ad-9ffa-e50b03aa63d1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fadac612-258d-4fae-adf1-c0fec6f69a96", "relationship_type": "indicates", "source_ref": "indicator--1ac0fa99-3656-4649-87f6-3f7c015763f7", "target_ref": "attack-pattern--30311f6c-f26f-47da-bff1-b2323ba8673e", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b8bede7e-7cfa-40ed-b5da-c98ee931365f", "relationship_type": "indicates", "source_ref": "indicator--1ac0fa99-3656-4649-87f6-3f7c015763f7", "target_ref": "vulnerability--e244d6a3-dc81-4710-a38b-6edfe4916bce", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--95b6b15f-b6da-4b68-9722-3974081f0a8a", "relationship_type": "indicates", "source_ref": "indicator--1ac0fa99-3656-4649-87f6-3f7c015763f7", "target_ref": "vulnerability--8844fc8a-e028-4e7f-8caf-909ce7a03c63", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a7026f9-28d9-4e15-8d46-683f1ca38ed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.230']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--035d4590-4ce5-4956-b344-006be5b47933", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.239']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07e88b13-3162-44d4-a81c-c85824d71627", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.5']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--367ce33d-6670-46af-b267-a1a39807fec3", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.15.112.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36627a91-0c39-440d-9f3d-8b3c59a38679", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.15.113.240']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea5c765b-f9b9-411e-902f-767885a1e3e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.32']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96acbb37-f183-495a-a34e-95dc218ddf7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ec4898d-4991-4e36-9af5-84b143a17042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.102']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1a15a7a-400a-4753-bb67-6446c98114e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.11']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05f02577-e06e-4cc2-91c0-88e548580b82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.121']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a80b21c3-37e6-4ae0-81f3-bb8e7bf335c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50178ee6-574e-4c00-8ef1-5363b99f08e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57fd8ab2-f21a-439e-b56e-792fbb2d44dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.165']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97a86a2f-df4b-4b66-8669-669fb9b5cb4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.17']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fc645ab-64a1-42da-b591-19ff6c70061d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.18']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a1d405a-64ea-4744-9a9e-524b5522bfff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.45']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fa1cd42-f8e5-42d3-807a-0950a0c0c626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--518ad994-b043-4199-a397-a5b0c2c804e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--056b13ea-63f3-4dfc-8c54-8fb5b5bc22e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.66']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cf8c9cf-701a-4ee8-8cce-b82c1866bec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.71']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1783ae7-725d-4971-b8a6-c2767a512e8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.108']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d3e3583-4695-4d43-9580-738e14ac61d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.110']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1379db4-e85d-4906-9374-f2a891971965", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.111']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b3d21c3-da8f-4b10-9bc7-068f11689d3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.112']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cb81e9b-bb10-4636-8f95-e5fbf765c815", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.113']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f289e49b-93e3-407f-ae35-4226b9d7c618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.128']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5e22966-0002-4d4d-912e-e64014e1346e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.130']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91401fe7-770d-400b-b906-e7f6d5ea4b71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.135']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b29a049b-4698-4823-855e-d29cd7f32f53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ebe580-d6c1-4691-b7d2-982e0fb19db9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.65']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38e4fb0e-5e27-4e8f-b30e-8241424f9a7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.66']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7f2ffe1-0fdb-4e5d-8ad9-2853b3c2c0c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.67']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bba34c58-6c18-4f5f-9846-942cb62c7c62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.68']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c26954b-7639-4b02-a9f1-8933eb274c13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8926a99-d95a-44f8-b543-6c474b20093d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.88']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--266e8f5b-55d5-4dae-ae22-973756ba4fe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53e8a192-b5ea-4d7e-a5d0-71151288862f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cf14f99-8865-458a-a8b4-89f8643cce2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.159.23.136']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b257776-b43e-4d35-8156-2dc6ac5c3e89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.159.23.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96dcf586-2a10-4ebc-9d8e-3334d86bd1eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.164.247.136']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef299c04-cbb2-4690-b4e4-1cc64a876a38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.164.247.137']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc776b10-c3b2-4689-a964-2330cfe4fb4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.165.12.27']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed82c06c-5e5a-49f0-850c-61d1653f4433", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.171.174.27']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fafe553-0d9d-47e7-aa37-6f70a92b70cf", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.172.152.74']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0de9c87-4a48-49e9-a28c-d335db690d2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.185.199.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cdce9e6-67a2-4493-a9ff-cd75a2e9b51a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.186.208.115']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae627fd6-d84d-4dd5-827f-16d9c410d5f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.186.208.120']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--697f2919-985d-49a4-a68c-5407248d269a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.248']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88bf7738-e0b1-4f0d-9a6e-f57acd194593", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.249']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dab14d7b-5886-4890-bd3c-6cfe43541e40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.251']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb9f436-ca46-46aa-baf7-1580f0555f74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a0abafe-fbb9-461c-a1ff-e0b0d68fdfa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d43f5193-aa39-4226-9558-be13c0ad371e", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.88.27']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb2a5e87-1420-434f-a15f-bdcd26e80e30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.92.80']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11e37ec9-7200-4092-b081-1462df097e23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.92.81']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfb71da2-cb47-4615-b863-306a5d9e9b5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.202.0.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc527ba8-0ff0-4932-87c1-d48a964e884d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.224.150.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98c4c742-c3ae-4b15-b842-ff52c440c4fe", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.225.135.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6043765-6a1f-4daf-9184-a65f434707d0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.225.69.226']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e238d024-8c22-4751-a3fd-234c6ab586f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.234.103.41']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd062f6b-9b14-492b-b328-7ed5ee6946fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.238.5.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c110be2-64f9-4bcc-b047-2995387cf2b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.238.52.66']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c622cef-f483-4cc5-82a2-376ed35af489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.17']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d6073b8-324d-4b6e-93a3-d9d709df2044", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.120.143']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0717848-1525-4b3e-8f68-5746fed1475f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.28.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a99a3a4-58dd-40ac-a510-2fd4f746374b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.42.25']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c85835c9-c2de-4e1e-bfd5-81cdc98ee017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.54.133']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85feae8d-f099-4620-86f0-7749f9ce9768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.42.88.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67d8a67e-430b-45a0-a17d-62c554516040", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.151.3']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6570c42e-c185-485f-acf4-eb2c0581d0ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.153.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ca6e26d-2f45-4739-b81c-c02314eeb162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.186.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--711b8425-d65c-441a-877c-7e4061e910fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.100.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a084ffa-85bc-441a-b172-c725a3b84573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b6cd893-908d-4671-86f2-1a165419e280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.61.170.217']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29c10147-336a-4a3b-ba98-021559ba34d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.62.170.106']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--992de442-ff47-45d1-bd13-372babd71774", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.66.249.109']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--475bc987-c3ed-448f-b2d0-fcf23ca1e262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.70.131.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e25adf3a-b4f8-4adf-bd44-c017255445eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.70.34.137']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff54d185-7e87-4ae2-a190-1f21e782b949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.104.47']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19ad758f-f61f-4c90-8a5a-7887fad93bfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.110.218']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c998cb05-9119-49c5-834f-4f96bdf000a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.181.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cb5d39e-e559-44e0-9584-e1a97f3925f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.223.14']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3637ad94-cbcc-4caf-b3de-7ab75ce2d364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.100']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cb79b8e-ea11-46ac-a7bd-c82da8b39272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.101']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f31d920a-8b8d-417f-af0c-7933c603a37b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.103']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e85c3674-05f1-4716-ab9f-0b2ba71aa396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.104']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7d5af2d-0587-4966-be7d-49848f22573f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.105']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--162e1892-eb7d-4d9d-9509-744b0c9bfc5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.106']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da7c7837-5c46-444f-9ab3-fba4e62c2a24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.107']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d16c14fb-fb9a-49d7-b892-cc9992ebb551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.108']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9727c982-28a6-4a9f-8496-003b1b9c62eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.110']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70b431bb-a2e8-4431-8b12-e4e58ca95f7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.111']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab996885-1ddd-4a9a-9b97-50abea729135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.112']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--302c8eb8-394d-47a5-973c-7ad1b118eff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.114']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d8004a1-b044-4a94-b53d-0917a940590c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.115']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f385322-7f62-4017-99aa-5e2ff57e1077", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9428892-7032-457e-95ce-d1da1ea3a976", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7e88b14-2989-4a97-b3b0-e999ed005d94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d46edc0-3bc9-49d8-a50d-99525611f78c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.122']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c387965-41f4-49ad-82fe-060addb84980", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.123']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77cb8eb0-9d7e-4ba4-83d0-c4d701fe23d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15834d5f-9be3-444a-a16c-9cd8866356d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9660fdc9-ed73-4bad-b6f2-6a6ff4583060", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.128']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c58802de-75d7-49ea-9672-7f583af1759e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.129']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--436d9119-9dd4-4cd3-8a57-be980cd08463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.130']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa551aa3-1bf6-41a2-96fc-35d75b0f8e08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.132']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ce7fddd-a722-40ff-9eee-a10e631347f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.133']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aae359ed-44dd-4683-b0d6-a1f0de2b6b1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.134']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fee2f121-9f69-4048-8032-6e367f1b181b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.135']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9f08462-959f-45ac-b073-0af0f42dc151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.136']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8071784-2d61-4a43-9dda-16c941af5e2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.137']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e591823b-87ad-469c-8128-e361e1f029a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.138']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b12e4d05-c8db-4fc2-88cd-b2a73f084f8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.139']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56b3c3bf-ca10-4707-bf73-9b079f600d63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.83.244.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f5c4d5e-138c-4026-af0c-0709ec226786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.83.67.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f10594c-dcca-4c78-8edd-4318059710eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.83.67.187']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97be3822-3dd1-40f5-b8e0-1dcee6f5ff31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.83.67.200']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8fa9ee9-a064-4420-896b-1ea981a5a136", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.87.88.209']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a092f422-bc3c-48dd-917c-f447b21e72ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.88.229.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b298ec0e-f5f4-42f7-be20-12e0cf814289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.88.9.74']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1da62539-c94e-4031-9a82-35518760eddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.90.163.37']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f977e3b-03af-40ae-8de7-35a0ece4fec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.6']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--018d100c-5439-4964-82bd-506b258d4d0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.7']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f16e09e8-7925-4dc9-b0ec-ee7518014c05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.92.158.107']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f71e3fe3-1e6d-4530-92e7-03db8092c778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.132.35']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d40ce99f-fccc-42f7-98a5-65d9cf6d7efd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.39.49']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4e59531-6ebc-43de-9ec5-158d4b645c0d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.42.96']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1619465-4319-487e-b84e-00d0b8dd95d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.73.18']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e47a0937-a295-4178-b243-863e99fab170", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.126.216.67']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd715f37-5fbe-4149-88c1-c40fe6f7d5a9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.152.153.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14cd2f18-68c3-4c8c-837f-862ff57c9de4", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.187.2.235']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae35749-5974-452b-b4b6-47faea61d65e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.19.136.250']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b9821b0-8795-4541-86c5-4b1d4313cb50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28044c40-ebac-4cb4-a1c8-63dd19171675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd5afcb2-ef3d-47a4-b370-f1984a01924d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b6daf6c-533d-4f63-aa12-455756b01961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92178f41-1068-45ec-b95c-4e51b0884825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95b5349d-8979-466b-ad79-2a5714767237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88469f0b-bca0-488e-bbb8-f7c6217113fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b80ac7f-ce7f-451c-8541-8664f156df0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e04ee4a-b762-4719-9c0d-148479ea6a77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc9c0225-5132-4028-ae65-1267e779ab4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96aedc8e-2159-4d1e-a603-923ba64fc8b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--840ebf0a-6c2c-472f-b531-4969a150db4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f1c3abc-21bb-42ad-b50a-bf0a3233a01e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d0160ed-81d7-4283-a4aa-9ee129c31182", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b36de560-2766-4f67-84d1-d1225ad01251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20ab2309-badb-43fe-9935-2a6729fed691", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d261ebb-7771-45ac-ba70-0be5ba5967dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb07ad26-f1bc-442b-8f2f-612ef8813376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e2e7f99-97c3-48fd-8ed1-39f36013f396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b474ba3-a12b-46e5-b74f-92be7987d47d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd963c72-23c9-4f66-8050-82f930a094e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f1ed26a-bfad-4cfe-8bf2-2a726d96c0ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f028be-e8b3-438a-bc58-eafee9883aa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bf065c7-5b87-4a38-bbb7-594a940fd07c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--526539ef-5ddb-423e-9d2a-063beacbae30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--478f6381-1b7b-4723-ba6c-b54c1fcc7f98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--101fcc45-0a9b-4818-aa46-78c19fd93811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8cc58ab-7e59-4834-a768-960bcf734757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--954e5a08-95df-4cd0-aedc-0bb6a5b9291f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2838bf8c-0b56-4ba8-b5b1-778d256c7d9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb93e603-c62c-4510-9642-32a5d1d4a0ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b002ced-a02b-43d6-8c72-aaa0aa179ddc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--726eb808-d137-47a8-b656-e72a9b1e257d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--831b9889-3011-4015-9b61-340478006724", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d645a764-9df0-41c9-adb7-92bf340acd55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef06eedb-c7b6-4217-affe-2a1251daefe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f9aed2-fce4-46eb-8ad0-db695bc23f03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.255']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4ee377d-b7c4-4ac3-b4c7-e86b93b5e4c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9c55947-a7bb-4a82-abb2-686ce4fa71c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c66865e-af8a-4600-b45b-388fa0448689", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ca496e3-fc32-49e2-92e2-09b1810e062d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8674914-361a-4aad-afd1-29516d8c4c2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e4fcf0f-a098-4f82-9c5e-56c9796ca691", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb534b0d-2b11-4026-aece-421d3fb1b4e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2e2cbb7-1811-4522-85c8-e4ebce20d8a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0e7e45b-3f01-425c-90f6-855126995954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cb602e7-4c01-428f-abbc-b65a93a1c77a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d69db247-4795-4887-818f-3272cd0eb262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e317a1b6-fc42-43a7-8a77-1fed781650ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb0d4184-80df-42aa-a948-ffeee93a54fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d62189cb-63b1-4448-a7bb-08a2d2dcd112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b11501b6-fe14-413c-b92b-d6d147768c46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5199ba8-7c45-4a40-902b-c446a977bd57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76651998-cd0c-43fe-ae46-ce35a8cb2662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.15.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ad89b75-53c4-45a0-9a2e-d06332977c36", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.225.106.170']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ef04c2-faaf-4744-88a9-e59b569d298d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.229.233.132']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c0ff2ec-780b-4129-9395-1afc1c20f6eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.233.7.48']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29202f55-dec3-455a-a6bb-b5ba5cf82895", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.169']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--342f8773-ab19-4fc7-8a2f-c32e0a776554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.17']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e12bcdd9-aa94-4f5c-b947-ebd14a542e06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.235']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c696c581-931b-4a4e-a17d-6a1c3cb48e06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.3']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--554fa226-31c9-46f4-876f-9ab7315f0305", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.47']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c9c9cef-49f5-490c-93ef-665c3243fbe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.90']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2806e6a0-7e14-487d-ae64-73425c091e37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--882e4233-1f59-4d2d-8937-3b8d76610e3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd4b0718-86a7-4ac1-8b1d-0cb917165688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd8679cc-750b-495a-a541-ed13818ba413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8080f6a9-6a9e-4a32-8dec-2de4d5034770", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e1f6be1-3929-473e-a092-070ca652e4ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0deedcc9-38a4-41be-a913-717775975232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24468631-62f7-4fe7-aba9-0f3eafaac12a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38e4e8ab-5168-42e1-9ea3-27c4e930b45a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dd0f816-b1ca-4631-a334-2152be96d393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeb1f669-b747-4c33-b1aa-1a30f28ff89e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--005244df-8011-4bbe-801a-e5594ebbdae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46250594-0829-4d35-9cad-192887935032", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26088f39-f174-4678-8807-a010b936bbbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--751c4a6c-acf8-4c1a-84c1-3b0b4d241a30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17039d22-be13-46f7-b8d1-6ea07a3ec587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e01db8f1-69cf-4bac-95f1-a4710332ae11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3c16427-1c5b-4c35-984d-17a3fe1c6522", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1d72f57-fb9f-4276-aa6a-84eade7bea37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3338d64-0a22-45fa-ac1e-9eefde7397de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25fb4629-9cbc-46c0-9c04-0055c331402e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33d30487-5ea8-4209-8543-44fe36cee264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d59011fe-aca2-4d27-bd3d-b76b22401726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31620533-8099-43f6-90eb-29f66db87dbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e74b4ea8-8269-4779-acf5-4a8e3b36ab21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e47bc5af-7b05-4797-99a6-7e36ae6faee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84d68c28-6b07-4db4-9de3-a2c2a1479589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18cff63f-934f-4a9c-8f75-cf59374a1cff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d97ff5b-05c7-45ad-84dd-ac68f72d620a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b28539c7-86a3-4825-8ddb-9b2b0752dc47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef64bb09-8ddc-40a3-9366-91fad7014de7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcd79ad3-0db1-4554-a2b7-eea42cf26d0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fbd0b23-93f6-4d65-958e-d7eddbc4635a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc419fc4-f7aa-412d-a55c-0c0789a85678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9111c411-9ac8-4bf4-8d51-e5de69525b0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38d735c4-de3d-4849-9881-dae9be0b8f80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5893ddb-2389-4de4-8ba4-ac4bf43fd003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.255']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e5d1fdb-f420-4756-bbd6-23296ba61566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--276d9fb7-6932-442e-b31f-b337b830ed7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c002818-44b1-46df-b6dc-165f33c4ed64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b4bc50f-d4f3-41d6-85d5-78f7d1e2a9cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff4a4635-5959-4860-963d-ecb7507b4970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7db7f61-1a3f-4da7-8858-1696ae253156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b19e0cf3-a6fe-45c6-97ab-25a9c9c326d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bf46770-ccd3-4f9c-99b4-751f26d9b249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bca7f00-374c-40a1-b9cc-c547911af0f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92f22e23-36be-44ef-81b1-dd58158d98f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4da208fd-bad8-47e4-8191-0733b70769d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a29e05bd-12e6-454a-bbe0-05558241b915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c71357be-609c-433b-b075-89abdd2f77ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25bec116-e9e8-4df6-8061-a356dcac84e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bd40c8f-26b4-46a7-8561-ea48700a952a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e275bce5-42aa-4418-9d43-c688b2d52ba0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb7dee91-f695-4b8f-a646-b612140653b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6772210-d8a6-4e18-aefc-30ec22893e27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a212c45-f3a3-4b2e-8181-2fad0c9c8eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b347147e-5f5a-40fb-b9fb-1729fd71137a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.254.48.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d83cb1d-ce7f-4323-a574-5135865607a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.31.78.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8ab0f93-193b-451a-85cf-382c9d778a48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.31.78.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc3dd975-9f1b-4232-88b1-9032b5486a5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.31.78.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--628af9ed-2157-4408-a6f6-2beb29099d98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.31.78.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1646b61f-7e62-45df-9de7-e26bdfc7321a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.31.78.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--399bcb6d-a96b-4728-ace2-893f9e2702be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.101.206.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9c62025-fcad-45eb-80f1-ef74ae3d4084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.112.14.15']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--927cd293-7e86-485e-bc87-f562c37c5b06", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.113.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bfcd27b-1485-4f49-bd03-03c083b9c111", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.45.7']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f045c892-ebf0-4503-89bb-1a68f5c142f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.90.15']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ca0a88b-a1ad-405f-bb9f-913bd6454226", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.214.145']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e37c834e-de9b-4367-b169-c926fa7bd7bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.134.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aacb710-b489-4bc9-9ac5-aacc4abd4319", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.147']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa427cc9-4799-4148-bd19-bea2f1c40e24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.0']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--169f51d2-6644-429f-bf6d-b5fd62868f7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f38a516-56b0-4e7e-8cf9-baf7a58c0005", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.30.73']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--befa7eea-3708-4cfd-9f21-6a89387735bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.54.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6559b6a6-a83d-478e-9f27-d7ff9dfc28b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.120.196']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5c61034-c300-46a2-8960-cc6c4dd97cb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.127.36']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8116985c-2dac-4528-a8af-8145c30b34a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.132.207']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66a74b81-f807-40a7-acfa-17f3cb74330b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.140.248']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18bd6844-9c1e-49ba-b4d8-9b6dedbb1119", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.142.113']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a60b68d4-a825-4f11-a4c7-72d9935ad92b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.142.12']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d666268-91dd-4e87-9588-396efe506341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.147.77']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--695cf4e2-4d40-4f2b-ae12-1ddc64548ca8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.151.109']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f332dd3-0a47-4172-af3c-417caf9c5523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.155.115']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c023d66-7d13-4e61-8bbc-edf53f310975", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.161.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f2fb30-e3b4-4d08-b833-7ad5ba75939a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.161.80']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3907ffa-72cd-4944-b837-aab0fecb39f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.181.248']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ea2e0b9-de4f-46e0-b32f-fb343410c1c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.184.67']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7da4fa86-65c4-4b2d-ac93-2158804e380d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.189.193']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6835b82a-c09b-4b1c-9f95-fcfaa29574e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.193.165']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c80812de-7b7f-4e43-bda6-5bfa781ab3e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.195.73']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c220d17a-3c05-498f-8132-90e35bf38b63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.48.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac9dd600-2bf9-4a38-b9fb-f4ac93a71c29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.53.113']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8801ff1f-ecdc-45b5-beeb-25a5f0cad200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.55.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87f002ab-94a5-4f95-acab-0f8caac9ee06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.91.27']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6428f2e2-6c21-4545-9518-a32987a5f9ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.95.66']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21b7ab1f-7ab5-4ad4-a323-3d4dc51766d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.105.228']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f25274b5-c763-415a-89c3-6a33c613e5e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.116.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84255b26-5834-4969-a601-e286ef98be4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.118.34']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a946ac5-98fa-40d2-9bcb-ab9cb1c8b40e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.121.162']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--624b336f-4407-4a51-a5bf-5ab3c1ffd944", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.123.229']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bb37c7f-fc8d-478c-a76f-c4e9a844545f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.126.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43c23366-e4b3-4993-953a-7aee82ee02f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.13.174']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c05ef231-6df9-496f-a510-1216586e7681", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.14.178']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0f2f28d-384a-4b32-951a-45c9d117e544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.162.176']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4d71c60-e0cc-4465-8ead-703876500836", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.164.231']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fd1141f-2c7b-4400-8d72-8f95d37e0c34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.170.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b3d0b1b-32a8-4336-8387-45466142d1aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.177.242']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14c89975-95eb-4798-bf39-b94fd7aaee92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.181.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fedbd4e1-ab03-4e9c-805a-cedd7d9ffb4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.185.203']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28882876-2f1e-4d08-8f5a-1d3a3f13e7b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.190.104']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d37e222-c476-4563-9359-f37e6c786007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.190.194']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dce51bdb-73ba-4e40-bc6e-1dc62bb43ace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.190.201']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bcf166b-c93b-4790-aff9-5668ed975baf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.22.186']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d73a30e9-f84e-418e-8bfd-1912047f8662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.24.77']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67dfd20c-b851-4155-8d87-fc8518d03ad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.243.140']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--654df315-95bf-408f-8754-0c9c72558e9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.48.26']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67109c0a-7a83-4274-a897-7380b7f69e35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.74.228']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--875dfdcf-4da9-49bc-8878-5f7a89986cc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.80.35']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ebe89b6-cc4b-4ba5-af6d-bf9b8cca6220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.81.121']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebf812f8-b49b-4061-b044-26c06b4996b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.82.186']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a67d1108-8318-4088-b6f6-0eb9c2d0b067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.83.5']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fefd6948-68d9-4822-bc0a-00f1bd432644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.88.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cafb3210-3dc0-4431-a362-f9168e312ee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.93.165']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36e15fe0-89c8-44bf-a59e-ca980295201b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.99.107']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcc4139a-03d6-4dff-ab00-6fdaa6ed4e31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.116.19']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ef6a99a-4c57-49ab-9600-2cbbafd1f377", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.127.47']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--961847ae-6551-421e-a0f4-42466c6a95b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.130.139']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddce9e5a-5f9a-4ef8-be25-cae12e829a07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.154.155']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--944d6bff-bcbf-4489-8c9b-66433cfce957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.154.232']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ec10c71-1cee-4887-b52b-6b947c6ea3c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.156.14']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae376688-2145-4717-b96a-24240b94a36f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.156.79']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7be95e6-ada9-4574-8e06-acd41be51fc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.170.239']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c1c0962-410d-4c54-aaff-7618b6f26c8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.179.129']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a3e990e-f3ff-47dd-a2cb-26e816747c8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.183.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35bb9b3f-bacb-420e-8197-5a8f92328e7d", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.192.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3437ee95-cc3f-4070-8f62-dcdd334b54cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.213.105']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b210133-9ca5-492d-8d71-b75d86a95cda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.216.76']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71c8d18d-7bc3-4305-a289-18f585936823", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.239.26']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adf55b80-6807-442c-91c5-c5dd9190613a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.243.99']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3edc1f56-7bdb-45a0-899d-588e28b2ea2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.248.7']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--968aaf23-1db2-4686-8246-bcd51a12558d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.37.145']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf651e8-36f5-4298-b07e-73c4cb8737db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.43.235']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ef48708-97f5-437c-b773-964e65ceae70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.85.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc926ee-d34d-4d99-81a4-b11d6b7499ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.94.110']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f0d7934-f597-4d82-bc29-3d7f25cb69bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.45.19.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59100bfb-7a55-4a8a-bc21-2d73192f1869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.59.140.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3ea7950-df78-41b8-b065-1e93e96feae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.213.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6314b9fc-5421-4013-bced-d949114b6f04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.215.130']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--040e642d-0969-48e3-9d9d-ac11da53af29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.216.216']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12309e58-da23-479d-93e0-8cb081c0189a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.222.43']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--020aa608-364d-4d6c-8a51-dea449262a8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.229.178']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--628a8550-a23b-4a3e-b190-34d80b5c02b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.233.169']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11717a4c-65dd-4333-9dfa-aab1ca805716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.234.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--800c5001-b091-4fa0-8d53-cdbcc8a08abe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.235.89']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4d4d0a7-9eab-426e-9971-59f91b958297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.80.68.74']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01e6230a-f721-4c77-a5bf-22478721338a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.65']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0510563c-9873-4d7f-bef3-e0b420c12de7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.75']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c2d43d6-0741-491f-b5dc-337c60b99a27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.106.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eaf5845-2052-43e4-a586-f8619d127e16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.110.105']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4667153d-aa20-4248-a87e-23d78ad50523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.110.132']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13f99ba9-4853-4cc0-aaa2-70a2795507f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.110.6']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1b27b2f-8ca5-4ff2-b044-09d291fb75e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.112.185']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bbe828b-41de-44dd-a5a2-434dd643c3f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.114.18']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21355a0e-9494-4511-8738-fc5f82e7155a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.115.38']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc165c23-cd78-444e-9426-17e0b5f2b543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.131.144']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97203ada-baca-4ce6-aee4-b34864684487", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.134.137']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35bbef4f-542b-4b2b-9357-cc5146e15f26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.64']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa8485af-06ca-4d8d-b667-31dbe2377b8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.2']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d09c923b-b875-4778-beaf-514ceacbd654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.56']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b248cd1-51a2-4919-8252-f6b948441680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.195']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a120409-7d69-4579-b2b3-a395e3538c25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0df30f0f-df0e-4669-84dc-9e8aca02b4be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.132']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c5cfa97-6c1e-4161-8ede-8d244babca45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.233']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--308906ac-2fc4-42d9-8305-6affbcb26dcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.4']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90bf4d23-096c-4e08-942e-2f0c748e50ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.164']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a157b841-36d0-4245-95f3-791de2b9ebae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.249']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60cc8cf3-86fd-4e2c-a5cc-6044995b99a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.237']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26bd2147-11bc-46bc-a04b-c0469132aebf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.193.112']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4dfcbe0-91a5-4562-808b-ab693062ea60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.194.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d646ae21-9969-4684-acd2-14b70a290150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.204.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b414646b-c234-46f4-b4b8-742045a90d8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.78.6']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f7e6d80-6af8-459a-9539-c25f9f99bc08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.94.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--137b0585-1e33-4647-b2f3-080621901b39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.192.3']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6437731-618c-4d84-ac52-ea82325ba12f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.211.155']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d354b8e1-51e6-44d1-8823-69c07ff095ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.211.177']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de47fcf7-60e1-4735-96d0-7c62ed5708e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.247.18']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48419a97-08b6-45ed-85c8-e7ce87056a16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.251.210']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18087ef6-df09-4f06-8225-db776fbcd5ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.2.219']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b5bd388-cd13-4416-b778-d2da7a260f26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.94.210.24']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d5e238d-a4f6-4264-8ac2-6d7495b36632", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.95.234.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--066a4301-290a-4294-8a40-0c001ac5cee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.67.0']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--969fde94-9a47-455d-a4ca-c0d3ac782919", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.0.237.195']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--330e83fa-98fe-487c-8d4e-dbdd0642a96b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.0.237.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--919f3ad0-046a-49b0-b7a5-5f39c6e12761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.142.149.122']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dbcf7c2-e492-442a-9cf0-c88e6b65e3c6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.166.228']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dce560ed-0681-4a67-9110-49ab4274612a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.37.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8669b8f8-5c6e-49a0-bbf5-ebc1c57be79f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.39.209']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--411c5091-9e39-4a48-9c9f-46e806837de4", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.129.182.164']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c4169e5-557f-48f7-a65f-b096766d0bd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.164.134.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b0e137-f9cf-4aab-9048-c32bc5ac6638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.165.156.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59d527e6-2735-4223-bc30-865d34eaa917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.180.139.208']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b070953e-56b7-4554-8fcb-609cb35f84c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.181.86.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94aa3918-1cac-4931-90d1-bfe002f90c94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.181.87.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eca14ce2-61b3-43fa-a748-f4a65d57dcfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.181.87.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8100cf7-a765-4591-a781-042e958a5ebc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7db53a8a-c27f-4905-9dea-90507c74e70c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d3ed047-cbd5-4627-8d70-f8844d1766dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3752e54-8b1d-4a34-b8c3-a3a4e2cfdded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e58b7e2-32ed-4973-a5da-e95b8829ca25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95ce365c-dbb5-4d19-95f6-3bb448a5a89b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dda62ba8-260b-4a23-9e44-6473c436a159", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f72ea04e-635d-4fdd-87aa-150c04ae4589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--211276fc-e6ac-4791-a356-e7e8469ad669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8c971b7-638b-4401-aa86-8d93fc966ad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb36783d-912e-48d0-934f-21ad6da7ce60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--978a8b95-8108-4853-bffc-e9494f9d18a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8086900d-9ca3-437f-800d-5cb4f3c7a2c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2868614-910d-4ebe-8510-c0eb4d03f008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7562ac42-8d94-4777-ab67-43466a1e26a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--827740d4-5ca8-4df1-b765-963c719dbac2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5e3ee4a-bb85-4883-9b32-a6aca91f4bc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b35e2e3e-1957-472d-94fb-56632fdbaa3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c122b46-7c18-4e72-ba00-d151fadc0ac3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51933274-84ed-4a2a-849b-c4329ba8b271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f94d8d0b-e31d-44c3-8c89-5d3ccbc09106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12c1d59f-622c-4588-a4e1-a3b88665e58c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bcbef0b-c996-4cf6-b41f-19bde76f0998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bb58509-15e9-4a53-b137-001e1549a50f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a188f52e-f38c-42f8-86d9-6505e8e2fa7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4c1c5a9-e4cf-4b15-bb43-c19f215cccd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19aa5163-6f47-4b48-a471-b541b48f9984", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0320c0c-afab-4cc3-8819-613c34517440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b43c07c-dbb0-49de-9bfa-0abb320e14c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.34']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf2c16e6-67ae-4fe9-a535-4cb19851843e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.228.116.49']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd33988e-3472-4c7f-b11e-f13e5ed9c1c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.34.216.39']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bde31680-06d3-4cb3-8b58-24e031a933b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.56.29.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac363ccd-ee22-4143-971c-948b9ae2e62a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.56.29.255']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--420b5cd6-3595-4900-975c-e9f297ca7baf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.56.29.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35277c0b-8307-4893-83c5-8ad4ff134876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.56.29.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ecfd434-a2b6-4f9a-8423-a35d25885ab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.138.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--211b41f5-15b4-48bd-8a1b-352872faa219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.0']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbff7c56-0874-4eb2-9410-164005d47365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.1']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4a5263c-a9be-4aff-8375-d97ae0b59d53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.100']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f63751d5-e9c3-413b-9ecb-3f44a4f0ce31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.101']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffef54f5-b011-4e06-bf5f-a8593b041315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.103']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5a1e209-d85a-459c-877a-3e0674cca56e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.104']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b97fcb80-3ccd-4d29-a207-b203b50e0981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.105']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f590e3-ed07-4048-bbb8-6c0a6c2b6255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.106']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c34e08ff-06c7-4e17-87b8-ec024e905e49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.107']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6344d71f-064a-414d-a653-6f7614d90a0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.109']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae5f85d6-0895-4ee9-8c84-f74c991a89fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.110']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08185086-09c1-4348-8733-5d9365406d32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.111']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1a6b005-9819-4a8e-9977-64349b5ed0e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.112']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64cf3043-7e20-4111-8d38-0c7d7a6834e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.113']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1de530fe-1e73-41a7-a3e4-8bc886e67552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.114']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a56ae881-3383-4d0a-98ca-f48700ed1d3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1e4f140-7677-49d6-ac33-4227d58767fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c0e4a0b-06d5-4685-abcb-857ae16d8a3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8de283b4-80ff-4c2d-add1-f5954a385dab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.120']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cdb85a7-9ef6-46ba-95c3-664515fbecc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.121']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cc5424d-00c0-4956-b5c0-4b6650a4d312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.122']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d00a8ca-12ff-4e82-99d9-d2fc86db4270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.123']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09d116d5-5449-4544-9d3f-016565902ef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9b5418c-37f9-432e-ace3-f286eab8275b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aedd594-9982-402d-a8b2-ba927548acea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1e0d02b-a454-436f-a1b2-833bfa7b7e39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.128']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36b2d6ea-43e8-4855-b3d9-f2b02205567d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.129']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66932f27-6d78-41a1-812c-b25cf0fb0829", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.131']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c992d835-8b01-4c9c-99d3-9209ecb61c78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.132']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e4f4334-d4e6-489e-8fa0-3640c9adb1e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.133']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9865096e-3c79-440c-a95d-0000f1228659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.134']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d519b4f-414c-4836-bac2-6be040c231c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.135']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32403975-26b5-4bba-9023-d08f1b5997a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.136']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c72799c-7c49-483b-b0c9-85e775a8fd31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.137']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbbe420c-c5b5-445d-818a-3c34d27d1d5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.138']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89daee36-e66e-4296-9f67-e8adb580b365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.139']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4e23e30-0c09-4eb6-9a7c-65332d091ddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.140']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2173f951-c22a-4783-a119-f4f9acea4faf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.141']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfe77d93-7d45-43bf-8453-036b3f932542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.142']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e8271d8-193d-49a7-b28a-e1fca77bd86d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.143']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e3c7d8c-a3fd-4161-ad74-e68aa830ffbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.146']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c44b6b-420c-4709-bfdd-0689e0051a0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.147']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33ad4b39-5cee-435c-bd28-c70eaf7b400f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daed4282-7d10-462e-a3a1-d348cd3c7dd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--898f86e3-1da9-4ad5-bbe7-cd43dc924a1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.15']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9948e9bb-89fd-4ad5-b4d7-3a02940a773f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20a298e7-23e0-4c57-9110-e80647c0383c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ac28037-2cde-4f97-9277-b1c6180bdb89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.153']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc1c3fa4-69a7-4573-b11d-aed7d3bafec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.155']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f75223d-3522-4885-a15b-4324b784a77f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd4ca3a7-209d-4309-a115-32ed5acbe93c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53d2d0f1-6ab7-4804-98f3-134c08eff0cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ca38655-cd3a-40ee-8431-f4f84d12e9da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae79134a-2157-4bb5-843d-e87267dd8d9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.16']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfa20563-e039-4491-99cf-d6b89132066b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.160']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea022800-8634-4aa3-8abe-560d917b2a1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.161']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d185a40a-32d3-4cd0-a9ee-9e5e6bb541cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.162']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28c194a0-be47-4aa0-bf36-3cf6be0d4fd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.163']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aa95019-dabb-4f00-9fb7-1923e21fd1e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.166']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05d73c2b-11c7-4d61-ad9d-77005c49f76e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.167']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf2061a8-d847-4b8d-a6c0-5b533f00634c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.168']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a400517-d48b-45d8-9c33-08dca6f77af3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.169']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3586346a-39ca-4474-a5eb-cbd2132d91a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.17']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2f5f712-6f72-42b6-b60a-52863895602f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.170']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37fa5db6-c117-4554-a5cf-fcea54a510b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.171']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6548f840-8b66-45fc-bf48-e11936dd7001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.172']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5be78f6-4e6b-415c-bd08-78138a23eca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.173']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dc58461-892c-43c9-8034-bfb55135c877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.174']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dde5a31-faec-4771-b3f2-2df1d7a6f7ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.175']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14043f27-0a33-48e4-bcf1-c59506a52add", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.176']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1f2b0c9-6529-4f81-88f9-c96abcf6b399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.178']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52c12f98-fef8-48d5-96fe-46839c4be493", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.179']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d84d0783-dece-46f4-95b8-5e1d323316e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.18']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd3299ff-9bea-4803-bcc0-63e688aec2ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04c8b51f-d0c2-4fd0-9ef9-1075c33f0734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97bbbf05-fc10-4b33-9b8c-188e5675d16c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b5dcaf4-23a7-441c-8d57-2d2d5231c42d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3786c79e-1eb6-47ae-ba76-19d7f447c87c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.184']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fc4383f-1471-4eae-b2eb-a8b2ffe9bacb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.185']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fefcd37b-be91-4b3f-a376-0984fee8f6ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.186']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--392a2a71-8406-4e33-a4c4-d1f18bf23173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.187']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--694159d9-c3ff-4914-b0df-d1e1b9614e5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de35f623-85e5-4c8f-a3bb-756b4547db64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75c1d760-64c8-4942-b376-cadfbcf4c338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.19']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83b4aa60-6bb9-448c-bd0c-f3734d4d3934", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e53435f-4b11-4e3e-867b-e99a8dfabc8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e05d847-f1da-45a9-9621-35310f99c5f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.192']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a320dad9-4760-4b18-97ed-090c59a4e2ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.193']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eea27662-ec24-4d3c-912c-c412b2126a3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.194']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78f96b26-d87f-4993-9518-704f808e9189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.195']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7dfb3ad-1960-4387-8187-0da1be44f10f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.196']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5afbb4a3-067a-4bff-aa90-52302755f46f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.197']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aa6ee8e-d85b-4862-a9a5-c43006e8f998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.198']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2507e234-854c-42ec-b1af-610d796ad4e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.199']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61868ec7-5972-44a3-b42c-0a2980dca68e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.2']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b13f711c-2348-4026-a8e7-5326f5a49dbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--915d611f-20c2-4c26-a7b2-0b6e313abe83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.200']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b235525-000c-4a47-8e84-1096bc3fa799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.201']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3870039-26dd-46a1-ba04-cfaa3961cf9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.202']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7801470-59e5-4a0c-8d66-26f7a26b9f50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.203']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2980ebf5-35a5-4b37-9df4-716f722c0d9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.204']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c93185d9-2bf9-48ae-8b62-9ef2f6b41c37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.205']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a7e35c3-755a-4544-a8e2-98f2c7216d43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.206']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16838e33-ad19-4494-897f-0d798ebba2a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.207']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a782056-4605-44a2-928d-210de5e468ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.208']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1f13c53-e52f-4ff6-9333-4628464d0cdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.209']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c766c5c-23f1-4649-87b2-7bba6675dacf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--535ad3fe-0978-4b29-aef5-ba8fff6ccf58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.211']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eb3a6a6-960e-4a7d-a90a-87caff03eab7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a178881-bc20-485a-a504-9264db1d9b6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f16161-e47b-403c-ac95-105fa03d5873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--086a8b17-a135-4ebe-bb09-1952fbfd2155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9db88ec-6cd7-49f7-8cd0-fb0935c5e246", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.216']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f9b3179-637a-4450-b3bf-d940b66ddce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.217']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c398efef-5cb3-45e2-988c-48254d6a1c4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.218']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8abec604-0049-4fde-aa1c-cb2d9064fc80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.219']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cd47467-e66e-4431-b330-f754321013b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd54ea35-00c7-48bf-a2f3-64c64d84bd13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--463dfbe9-a0eb-4a0e-b9f1-9fcd46b6626d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9178a5f8-0634-4e8d-88c8-054226821b6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bdabb93-92b4-496e-ac93-db4e01ea438f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--226583a9-37b4-4a43-82f2-d265ea729302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.224']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c660313b-9fab-4743-a6e1-fcfa5f1c4ad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.225']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ac38d76-06f5-42e2-ac35-ba4403ae0307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.226']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb5c7fc4-94da-4c5e-8c5b-ae0c89ac09f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.227']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d917b7-0599-447a-9787-a748016f0b57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.228']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11df0a0c-2b7c-4252-bbef-4abc75ccf12f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.229']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cffbe048-8581-4395-b65f-70120c8257a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc8628df-dd24-4f11-b86b-5242e452a51f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.231']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8571d708-86b0-419d-8b3d-da60fe6c678b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.232']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22ab399c-8dc0-4029-a3a9-522c5d87fd6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.233']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6467059c-342b-430a-8584-9c0d05bb2c07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.234']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b98a4b79-c021-4bf5-a17b-ebab651b3e13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.235']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18145812-f4f3-4839-9a6f-54209bddc51b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.236']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96803049-6a5e-49dd-be2f-e6c0ba5a5dbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.237']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8df6dfac-4886-483d-aeef-d95430b2e5cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.238']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0620d011-c85d-4a40-ac58-78d85d5f9d2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.239']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1db0437-294a-46b7-ad2c-a0413f7bd22c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.24']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecec0e2c-4949-4977-89b0-f92034a1cd3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.240']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c366108c-a887-47ad-9e40-759b69813d5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.241']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b353e99b-2a6f-45e9-be5c-b95978954139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.242']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d38d3045-a659-4539-a70a-70b112a538f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.243']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--becbb27f-5cf5-4ab7-99be-e2b29d399f40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1de6d5fd-15e9-401b-97fc-256eb480a30e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f38b4f8a-c17a-4f28-b21b-9133c09609c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18629dfe-c7c8-4a8d-ae9c-75d2a75466b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--133905f9-1016-4f4c-8c35-3e6f261d97ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.249']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba5515ba-9dcb-4e4d-aa55-80827c14a63f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.25']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1e04e72-65f2-4695-b87f-890dcf2b4b6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.250']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c47a1bf-f715-4efa-a7b7-c5d2e693d256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.251']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42acac69-f477-46d7-9ec4-812297dd55a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a391ecc7-141e-471f-8a38-81403e6887f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70081c6d-9b2c-4311-8062-89257a032d15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c8260e1-03fc-475b-b81b-fcffa5e0a330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.255']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b05929db-7fba-4200-b23c-c0d4e07805df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.26']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99f94e42-aff1-4e12-95b2-ffdee774f427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.27']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8e35df1-7c8b-4894-b508-a58711fffb0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ea56919-f670-4355-ba5a-e75805b6e660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87a0148b-cb96-458c-9fb9-a7625426b63d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.3']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44636af3-1a67-4a62-a6a6-d735aa1b1c90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f706f730-ccc5-4ce0-be47-c757ef21b580", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50c717e5-16dd-4397-9b94-2ce5c1e34169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.32']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97dc8e40-0406-405f-a9d3-21e35163a6f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.33']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--466c8c4c-3d2d-4571-95f0-951104cd4beb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.34']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25cecbd9-fd86-430f-9fff-81c1e524096f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.35']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d676c841-c576-4ed6-a30a-267655060355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.36']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2b103b7-6a38-4e7a-926a-9eb3876cd5d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.37']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20c0ec7e-0d42-4837-a777-ba47a6e56fc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.38']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea8d2002-339c-406b-bf75-3334c15c0f38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.4']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ddc3b88-569a-4ee5-8143-909b7e284868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.41']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--075ca0fb-aee5-4632-8e8f-92495d9bd4af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.42']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a53bee90-e103-40c2-bff2-3ee9ffc6bf8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.43']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26a85d1d-7895-4b4a-8554-93e82a4e399a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.44']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cc6ff25-3737-4993-aafb-d8e3214b86f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.45']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f767eab-d673-4a80-a140-050d1d6750eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.46']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9acabe4-61c3-4a10-97cf-bebdda98182f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.47']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97256396-94e1-4e84-8f48-9bbc3f60a263", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.48']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4c99d8f-a9a5-40ba-b528-44c41feccce8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.49']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4870da3-3d2b-46ca-bdfe-d264ea286062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.50']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63080b95-0964-4c76-9c0a-4c21a5fa0659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.51']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f4f3877-c38f-4a1a-ad9b-2fa3ac1ec7cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79ca6d57-074c-4a06-8600-1567fb965513", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c03dd48-8be0-4963-8d2b-2a8c5962a8aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9754e88f-b7a1-4d37-bf3b-23d1bf963fa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.56']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ff4c92-9c96-4824-a186-112cbfa1ae4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.58']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b46cc86-e88c-4612-a340-12dd09d0a3de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.59']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11c2c807-1d1a-4550-adef-10d2e3aa2a1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17e2a515-b1cc-4ae9-b406-bfbc8a4f0383", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c430fae-b1e0-4c09-8e0f-209600d5ea7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46ed5858-5edf-4d01-907d-76ebf4c91dde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6d9646f-99c4-439a-85e0-ab566f38dd51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.64']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fcf5966-d71a-4355-b29b-5a7243da00c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.66']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac52a8a-5ec6-4366-93e1-a20a671fb3dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.68']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--027ba37f-3326-4fa0-bdec-a3fde3e24d2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.69']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7abd0fc2-1505-46ea-b85a-5f725e6fcf04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.70']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--250ed132-be24-4a6f-a600-2a76fc952d76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.71']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77f6a9d2-156a-40f2-b7df-d12f2d3a92eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.72']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11acf950-b871-4722-b8ed-d6365400e20b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.73']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e79a456-48f1-4560-8799-19b37687820e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.74']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42d434ad-cf94-4374-9165-57ecf9288f13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.75']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--301199a0-d654-43f1-a75a-02b1441124fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.76']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--526f0faa-2c43-4ed1-98ee-193c04088686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.77']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f925ada-4c06-42c9-88a3-b69cc147f33b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.78']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b839eb8-9ffb-4f4d-ab62-1c10c1ac243c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.79']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd9b5412-671f-4c5a-bd79-c61a87b978a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.8']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ad77fd-6a67-4912-9f30-c91a16d3b8e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.80']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eac7bf1f-6489-4bd5-ba84-cb926dbf7590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.81']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ece337f0-9e35-409c-b308-e78154bb4529", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.82']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd597bf3-dad2-4053-91f7-b763c2954e56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.83']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d193d72e-4592-4f80-a1e7-9219ccf7d042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f45c8895-4d26-4b5e-a64c-2d36bc14f2e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--badb7aa1-736e-44c1-9a4a-33b9b1e9d2a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb989a94-4c09-4ce4-a279-81feb02b046d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab27d1d0-4b0d-4524-beb8-781c97240248", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.88']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee7acff3-55dc-482b-9850-7d1ed34a1968", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.89']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--080cf8b7-18d0-4c92-b643-55fcda753567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.9']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cef2b6dd-fe1b-4734-af26-fae332d88aa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.90']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4716647-c851-46d5-8e8b-3e30708b8219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.91']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d18a46a-e96a-4fe6-b238-bb7fff2e5b14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02109868-d448-4350-94b4-2032bb4e7e81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a9604d0-eea2-4767-837a-b8847ccabade", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc14e94c-8ce9-446e-b73e-143d97cbafc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.96']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85c7e7ed-17ad-4fc5-aada-6bfddc6db052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.97']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fe1cd29-9481-48a3-a643-02fbe42d9f5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.98']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0a96154-a276-4e74-acfb-46a8a4cff67d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.24.43']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9583f39-93d3-4a93-a049-d1c349194609", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.58.179']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1480cfb-654e-4f4b-83c7-a03331b88bef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.242.76.137']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--276bb2f1-64dc-4fef-91ca-285fb38ee6e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.203']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4864d7e-d321-448c-bf57-22df8289ef22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.47']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d314fbca-9b32-47ea-bfcb-00be7612ffb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.111.44']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b30aa0c5-d610-4e46-afc4-b9c715daf5bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.161.114.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9bd9f96-42f6-4828-830d-32dae2216707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.161.114.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--794a6467-1143-41df-8edb-5449cad44a38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.75.175.76']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35ded171-fc47-47cd-9eae-23a83e12002f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.152.152']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b318505-4af8-4bc6-946b-df5241af8ba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.199.16']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8ebc6ee-fa7c-4ef6-9eac-90f33325ea97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.199.44']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80310985-1368-46b9-bb34-03ad64a311f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.212.43']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c604e137-57b9-491b-820c-5425cc450f2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.212.48']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c568f9e-4d12-4abc-a8ad-1ab63c3b0c8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.212.57']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8776a2ee-6d95-46c9-a7fa-95be6a28df8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.226.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18c49212-babb-4a35-ad8d-f7848ba4cab3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.8.102.239']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3809319-e7f4-4c01-a73a-5ec50eaa4592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.8.108.105']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29f1f47c-4a4c-4e4a-b5f8-3cb4800f1abf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.81.103.243']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f8ef2c7-6f7d-439f-ada5-829f4e876ac1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.81.111.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7611f74b-14a4-400c-99e8-38a1e7f46343", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.81.111.72']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36c9dba7-9104-4e3c-865c-5f4e9a5525a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.81.27.10']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2afbdf50-a33d-4d9d-8110-15af6b431e8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.81.27.15']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2caafc1-ace8-46bf-b7ff-bac16ff32769", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.89.69.47']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a17aa9f-a026-4e07-8f45-6b6b11ad3dd7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.141.45.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a41cd7e0-4862-43b5-9ad1-268cf5e7e152", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.22.142']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec75f112-ea41-412c-864d-11061e3fec03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.80.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f81c103c-021f-4b4a-81a2-e234c62db0b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.83.121']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c67b7aee-7dd4-47cd-859c-0f6b3369d53c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.84.77']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94c3b6ac-1acf-484c-b547-a9561c9dffeb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff06beb7-810e-4f60-a83b-a536a90c0be5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.16']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c66aada-4c85-4e90-85f2-f4dd6caba4cd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.166']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48b84f99-28db-4c84-9a93-a91c8435cdf4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.169']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73a45d6c-b85e-468d-92ad-791d6742d019", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.174']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d764108-aba7-48ef-a16d-6b6f8057b465", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.203']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38a60edb-8dba-45d1-b91a-34e4093d0a70", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.205']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--762f7e39-b980-4e7b-a4b3-cdef73cbd1f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.152.102']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c068bb0-2ada-408b-b96c-21afdc52bb87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.183.114']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b09eef-21a1-4ac7-ada6-60c45fca1e96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.20.198.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd377b34-07ee-49a3-bbcc-64ca77092851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.21.227.35']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b234ad8-897c-480d-8793-81ab486c631b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.248.42.105']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f41cacc-bd35-4dbe-9a26-8697700491e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.248.42.106']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7a47404-44db-4aa9-bc9a-5ee37b02199a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.248.42.143']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ab0373d-6255-42f5-9cda-a69fb29e8e76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.248.42.241']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ad81f25-9657-40e4-93a0-7e36d0233299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.248.42.76']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b93bccab-ee7b-4e27-8dc2-4bda00916167", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.248.42.82']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9a68907-135d-4e3c-9c4a-760e0511359d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.248.42.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97f097a3-9b54-46af-8135-7f2b7a97dc81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.3.119.101']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acd1fdef-a24d-40bc-8293-55c7bce68941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.5.223.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--995e9b1d-9f18-4b81-a6fd-615149201bbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.91.210.202']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcfb55ba-cc50-40a4-bad3-2943c3e449ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.91.228.25']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d01ff80-7cd0-4b5f-8a9e-33ca06c86e13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.146.156.132']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0138e397-da1f-46bf-b42e-8527ec98afc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.160.214.80']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb6870c5-b37c-4204-82e4-ef3dbdcdb50e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.161.176.234']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ad5e97e-9ff5-4a61-8198-39d28f7d581a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.172.133.72']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f14b46cc-f67e-4a71-9fa5-5181e7e29f07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.172.145.72']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd51c40-cd89-423e-95a9-54f3b1ec3ef6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.221.75.112']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be3ba1e0-5cfc-4f4b-a275-592c52499c08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.226.135.115']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0cdba91-0803-4923-9874-bb0284ff951b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.226.29.111']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72e72612-3109-496b-854f-e7b96c14dc20", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.39.184.46']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c345600e-835e-4546-9502-2591e833c4f9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.89.13.172']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b348e554-573d-45de-a804-30c6a57bde53", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.129.74.123']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec68be4e-f8bf-4e1f-ba9d-81ae472ac455", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.16.38']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f76546ca-9fe1-4c22-93cf-945ff15c9d65", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.16.46']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--618ea68a-d17a-44bc-8b62-7ac7f1c8a957", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.16.99']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--183791e1-749e-49f2-ab82-7bad35d2d5b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.154.210.79']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c18ddc8-632d-477b-85b6-55f443676881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.209.82.184']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76d9879f-06f7-432e-8574-bffaa970c1af", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.212.119.120']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e62c191-6806-4282-b903-f086a2fe2732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.212.237.108']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be274814-82ac-47d6-be0c-3a6de3479aa3", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.47.218.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d201b8a-459c-4604-b6c2-2c1d11ec9834", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.59.233.134']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e099d8d7-9e9c-400a-9770-8372726848c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.59.233.163']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ae4f73d-1ff5-4508-a32b-ab9a343bd363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.59.233.173']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb56609c-295d-4a29-943a-156ff62372e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.8.111.38']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cd344a3-7a79-4c84-8d9d-08c8d5672a43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.126.160.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe73437e-d9dc-4fb1-a7ca-c55e86d6bdbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.126.162.24']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb1c18aa-52db-4839-84b3-280029778b92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.20.66.69']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9471236-44d0-4b56-8e4a-d1e6bcdd1f44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.12.44.234']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8522665a-7107-4f0b-a553-171844b7ceba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.16.205.67']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd193271-ecd3-4915-989b-c18342115331", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.16.211.184']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7928a28-8bad-4b8a-a178-a6254c3c3a61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.16.223.235']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--510d4882-bbcf-483d-a95b-614e4a8661e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.183.220.110']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ece5bda8-391b-4406-8f23-626fceaa6146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.205.223.197']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63895c5e-f4e4-44fa-8336-12a704a85635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.220.171.167']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09c108e8-1df0-4cbf-b5a7-b6faf129f747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.138.113.187']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e41e8b65-808a-4fd6-9abb-870c7c930f9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.76.136.25']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4433c018-831d-43c4-a837-a81991724485", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.133.62.69']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--893d9395-5d62-4e30-9d6e-d14ffc5e4197", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.164.211.80']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95a909a2-1128-4f74-8d2b-d0c9f8ccb5c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.169.20.168']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0b3302d-0cd1-4828-b7f9-2e94e86feb61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.146.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b1318f5-0d3b-4dbf-be1c-804729ed42f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.147.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5beea604-fe50-43ac-97d3-7c3204137dd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.169.75']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98dbee2a-5806-4b7b-a318-ff1a71def003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.232.89.250']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71a0f8f2-d25f-419b-875f-2d4541199459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d4cc4cb-03f4-473f-8e5c-3a4bd758dcc5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.201']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f36d2fb9-624d-4023-89fc-9f257f5e9b18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.219']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d52ab9f4-43b6-463f-aad2-6caaafc51946", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.242']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af6350a4-b8c2-4b4d-a9bb-9be650d77e6c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1acdfd92-80f5-429f-b6ff-efb902f76728", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.202.186.161']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--402902ec-9e24-4acc-8bb9-693c726b2291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.74.178']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60363d2f-2ac5-45b3-ac72-2207e31a6a70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.107.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b766e2f7-466e-469a-b4d6-d784c26bdf3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.86.7']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64200ad5-c52f-4821-bb7e-34921eb256e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.130.40']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccd25b0d-dd65-41dc-9953-3d226e41e970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.146.243']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfcf77dd-a5f7-4b2a-9f72-27a3b6dfd9c9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.25.196']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfa778c9-4936-417e-8b4e-c68dbc6c209c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.161.101']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b55804dc-bd84-49f2-ac08-59c42ffa06b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.214.73']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef88f95d-4826-4733-a229-5d8f10b511e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.34.81.199']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12e9a5c8-0285-49b9-a744-f5bab74b6667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.10']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e7f73df-c69b-4cfa-af1c-a1d88eac4bc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.102']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86f2bd8e-aaa2-4a79-9ff2-b013f705124e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.108']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--371c9916-5ef2-4994-9061-81881d8678f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.11']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5da3da1-e188-4888-a070-c3a6e938104d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.114']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c00e552-60fd-487c-aa55-c3de64c937c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08507a80-b0cb-4cf1-b8c3-3340c6cb3926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.122']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7d276a6-8502-41d6-a988-6dc8b90aa0ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b09b7b-e9a0-4ff6-a665-28b630349b9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.128']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14fd2365-9c58-479e-8e24-f37b144f1a9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.129']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60b523ec-f243-462e-aca9-29531f78f13f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.130']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c88d5cc3-e141-4d6c-9dd5-e38ad6578598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.132']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c1fcd87-de72-48b3-ba8d-bb92ec9e1745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.134']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ccc0393-92db-46bd-bdc6-d5faed4bbd4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.135']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f72395e3-8d5c-459d-9e9b-19490f52b48a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.136']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de818076-e467-460f-8340-f6e76ad4affe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.140']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26877f3e-24a6-4c4b-8e11-33454bda56df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.141']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1532d134-2210-4db5-b0fa-e1a2526bda9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.144']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0b80b5d-1650-417a-9e45-22d0e67c2ec6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.147']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d642b2f-cfbb-4cf7-b2dd-4659cb83feb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8362caeb-9cd0-4805-b84e-674b60de4f85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--551e5cb0-8f73-4404-b846-23778b8762fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.152']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abcb6b19-f75e-4516-ac2f-2c60d2b28995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.153']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0fcdeef-befe-47b2-8020-6bef1ea10131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.155']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c0452a1-1c74-4492-bbce-1c1c1d78c6ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cbfe2b3-3d54-41f6-9c10-ee6c5cf39966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--800494f1-b7a4-4dfa-81ac-ea93d35b923b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abef4eaa-22c4-4371-b32f-4ccda50d216c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c013203-88cb-469a-9659-6aaae1fea4f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.160']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--749a1807-3e09-40d4-bb4f-064e8a92585a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.162']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06e2cbe8-9fe8-4be5-89c7-21d9f0dc9bf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.169']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d1d95bd-5b1e-48aa-b463-d85f6823343e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.17']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2ccad33-d935-4e7a-83b8-f1a5d55cf82e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.171']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21896f6f-8d2e-4b60-89a8-4718b28f0e37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.176']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aa3d29d-bca3-4328-b0a2-ef6efeadd142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.179']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29de5a75-2fc0-4747-b3cd-f32904e0aee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a506a00e-aff0-4054-be58-92d76214a863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--558d3ad8-64c8-491e-8a63-c00a26b5625b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0a1320b-7ebc-4397-a728-0a9903d30601", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.192']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42c19512-5e6c-4116-9260-28966891a746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.195']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4c56ec5-4286-446c-875d-c9c6f90c9416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.196']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b6c0742-9154-4f0a-838e-77931a823c2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.197']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf77b8db-8a35-412c-a580-4bd23d947a3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.198']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f938f4d-0c4c-4827-ad25-08fc09d907c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.199']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d00a25d-c5cb-4aba-9606-0ba765fd03d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e3a36bf-0b6b-44b5-8024-d009e2340f1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.204']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56571807-f8b0-4be2-9e76-1ad3c7c9e0b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5535e054-bddc-40ac-bd37-ebee44f8bcba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0e553de-2de1-4a04-af70-ccf29658c29b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.218']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94dc3391-182c-4192-b7ad-6b7a90c206bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.219']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5898463-3dc3-4c00-8c0f-ee9227bd22a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a6d7453-9151-45f3-bfb0-7bfb870c2cbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.228']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a3ff6c1-a920-45f1-bdd2-ba3a6a5875b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.229']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01363d4b-23b0-437d-a7d9-26f9e370ac47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.230']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d6da10-e800-41d8-80a1-1233e14fe779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.231']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8732ec28-e74d-4fc2-b5de-14ef50fedd5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50a41124-5ee0-40b0-829e-ac5571164844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.34']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55bf97b7-2e58-4184-9bf7-147bb4e0f3bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.36']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--619f037d-f404-4632-80c0-d60a578782b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.37']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25fea065-0604-4ac2-a157-051b35b47635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.42']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2881fc7-78ec-4375-82a6-fdf90745d624", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.43']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8662d3d2-2b64-4e49-9741-8cf525f01ba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.44']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7f29a04-9144-4c02-9be1-2f493e6b7588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.48']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2025cdab-ecd7-444f-80d9-efeb1f30dc36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.50']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8bea919-c893-436a-99e7-4f9c5762e5d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c2b6bc3-ad42-464c-9bef-806bbdeff475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a12b0e7c-109a-487b-82f5-d6e80eea72f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.65']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e007287-f0c0-4ba0-8cbd-5a40f0e34570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.66']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf77d7c2-9f5f-4f91-a704-8948bfcb3598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.69']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00e18389-b165-41cf-a246-fef3a51daba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.70']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e909f0c-e136-4d6e-8acf-5b42a002816b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.71']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a304225-8869-4430-869f-a479d799d578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.72']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db783535-7af3-4e27-acd0-349d57d38250", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.75']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee9fb58a-0053-4a32-a96e-0d1ccaeb9805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.76']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23b282e0-2a65-4e95-bb85-41aa2339862a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.79']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d5d459-92d4-4098-b7ab-abda975c789c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.80']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32e44d17-4647-4643-b859-874f47afe5ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.83']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14d6d0d1-197b-4189-ac91-6d08ae4be1a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5675308b-449e-4996-9674-f0ae7dd4279e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d368138-dc05-45b4-88e0-2af6455613d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26513036-62da-49da-82e6-2548fb363910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.194.197']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7564050e-2c97-4c9e-86ae-812c708a7463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.100']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f22c092b-3d33-4f5a-987d-9674fc8f12be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.101']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e7ed964-31ab-48a5-a5e3-6c74504c50c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.102']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--666b7ff0-7593-4d51-9380-9b0a8551ae58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.111']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfe6a1dd-f40e-48e6-b8a9-07d7040d5e02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.112']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a823f4de-d207-4dee-a8a9-d45fcea482ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.114']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c7dc5e7-74c2-49c7-a092-b40e65751edf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.115']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aae0a940-247d-4633-82ca-663d0fb5fde5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.137']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb280453-6cd5-42ef-bd5f-2cf06f010ad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.138']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44b6d058-3bc4-48f6-bdb8-588d113e3105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.140']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66ad1738-098e-4ec5-a452-9a6d2425f0cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.144']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc4bad2c-3a76-46a3-80d9-42a324f5d07c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.147']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d88ae17f-3c17-4dc3-a255-84f6971df779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.15']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9585431-d7ee-43ef-a933-4b09986e4659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c480070-a0a7-467c-9a9e-8b40c4826f96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.175']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--679d56fb-5ea4-4123-8b5c-a9930ed66849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b69e446-8901-4f0f-9ed7-7c1b1b573718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.19']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91707ee8-2258-43aa-9f40-b3279b8635be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccbabfe8-c2e6-425b-b52d-a04a5171eb9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.194']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4aaa5a4-7369-4cab-a19a-c9bc744797a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.201']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf00608e-c0d3-47b0-9ebe-ac3958e05270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.206']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7811ffa9-4730-4adb-9d3f-cf6156729ab9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.209']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fb1f7bd-5800-474d-9f41-eb0f2270c4e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8be5a61-f55b-406a-95ef-7aefc2390eb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c0c1bc8-2b3f-44fd-8fae-b3d64c86c481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.225']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aee19db4-4f14-4dab-9530-82a9e662986d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.231']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e330c76-e2ee-443f-9484-e57ecf8f6952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.239']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c171a36d-27f0-492b-ba0a-3afdeee2d5aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e6de094-7459-46a5-896b-5939451e532a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.33']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28772f12-1483-485b-8aa7-01f6d900bbca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.40']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f21f906e-c43d-42ba-a285-39fbdd0dcf01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.42']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03db77e2-738e-4992-b983-0fa97ed46409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.48']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e2afe28-560c-477b-8e23-ed080083d36d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.50']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca3bcf95-6ef6-4fda-8895-69b4377b4b0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.51']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4fc9e2c-4a37-469a-b569-fbee5464c6c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77ae1863-4fd4-415b-a742-83a2f301d7fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.57']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b32bf99e-91cb-4eb3-9756-0fba65e05c81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.6']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a6b00e5-26d7-4dfb-8023-7bfb06fc658d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1601650f-001d-4223-9818-c81670589986", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a59c284b-d0d2-4dc9-8780-efa100b8bccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9934391-e4b2-4490-aee9-44b56584c7d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.68']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5444204b-a0db-4cb4-a0a6-b542a6c1896d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.71']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--837a4297-3f7f-46cc-a819-82b5593e1e0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.72']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--525e0d2a-0c3c-4b75-8982-fe6ebd5a7d77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.76']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e06289a3-dfbf-4e26-8bf8-394639f0029d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.79']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ca16e93-5ed7-42e7-868d-c31c304847e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.80']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ed8f1ba-8545-464f-b734-43fb3e3b6434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2238a10d-0677-4c04-89d1-a06a857a7684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48c441cd-d735-49e5-b411-cfb66ca0dc7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.98']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29681a61-0f1f-4e25-a1f7-41f1a028e6dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.99']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9244db83-c901-4cc1-9ca3-242af5a52589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.135']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a19c8f0-4824-43be-9b89-7b36759d583a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.201']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66a14a75-d62f-4e95-99c8-0565d63d14dc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.5']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a086bcf0-35f2-4520-b536-8d31ea92b2f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.161.184']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0f4b3d4-379f-4b6d-b68d-90ead1c8a54b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.138']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42cd8bd9-a3dd-4ce8-9b58-678c63d81e00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.143']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73309408-4405-4fad-891d-e61fe633ddfd", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.144']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beabae6c-cd2e-47ee-be84-6b0254ed6966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.145']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--856e8d34-6bb7-4ebd-a08a-b10240d414d4", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf7cb122-0809-4d02-9274-08c69a77914e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c875aba0-9fd1-423f-9de3-c83d8072ca02", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.163']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e2a06e-80f0-497c-bf9c-a60bec5d101f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.166']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcdf19fb-1a36-4795-8353-9e56e2a9891a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.168']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cba6697-9ddc-4b57-9cd9-7ea3205d48c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.170']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b920d94-d3c5-44d0-bc9c-d240f265d989", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.176']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9c49570-6450-4a95-98ff-87893e927156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.235']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e690e139-8b78-4c9c-9aa3-43bf53a4fdc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.78']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b6316a6-ba35-447c-907c-e0f9359a4ae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.81']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b649761-d1a4-41fe-a7cc-24ba4c3c3c6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.83']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfbcd825-746e-490b-9921-98d3533fbdfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee61a514-c725-4fbd-b8fe-51e3e5b1b4d1", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.91']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd422081-b3ec-4327-b894-3dfd8df7b464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dad77b2-ae6a-4ec1-8364-53d8bdb1d42e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.90.20.234']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f70a16b-f6bf-44b9-941e-1dcd22454767", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.111.15.35']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f88a02dc-1c62-4b35-953f-9131cf3513cc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.21.113.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc2b1064-b97c-48dd-a269-498cc45632f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.10']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4285b385-8c38-45fc-aa4a-2350c90e5d21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.100']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3bbdd7b-130f-45d6-ab54-d04229bd40ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.103']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceba758d-4a7b-47e4-afc3-264bedab9f04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.106']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a31d6136-176e-4893-84e6-01b3c5c8c62a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.107']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b5c651-a9bb-4381-9ce3-337f9bfe31ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.11']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--027071a9-b3ab-4dea-ab54-e9e523d33a75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.113']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a55dfd8-00e6-4f96-ae4d-b29ef36e6c9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8279e8ec-92c0-445f-924a-77a454bbb3c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dae9abad-ccd7-408f-99cb-4e222322f495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.123']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef91789a-07ab-434c-b3b8-ab78e8487b93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.13']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5befb8e-61b9-4840-92dc-180630d0b9cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.130']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--132f7cec-cbce-4e5b-a085-3990a7474480", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.135']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77dbb516-663a-4d40-85a7-9054c08cb31b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.136']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bea1b480-02af-4d78-a25e-a9527810dd58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.143']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca4faaab-da5e-4579-a3ed-7d91baf2ce5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.146']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd5a6cf6-4c09-482b-84f5-bddf78a2c2e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e57f193a-1e4e-428a-99a9-23d21706bdac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.15']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a27c570d-de3d-4824-973e-698ef23c5478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc97c82f-88dc-42ae-81e6-556dfd98f3a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.152']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29bd19a3-7981-4ddf-9d78-35b90f7a6a86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e0c440b-1caa-4ba2-bcae-e1372db72138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4b10c9d-afa1-4b55-af25-60f967382128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--878c789e-0e4b-43e7-b1d9-04a308611b9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.16']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fc7a91c-cd2c-4e97-afa0-3e5a4f98d0a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.160']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--564afb08-76ee-46fa-a5fa-fc22684e9053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.161']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f83791f5-3f3a-4902-a686-fbf028bd9bd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.166']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ad406cb-9812-4435-afcb-c8d1402fd143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.168']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c988d404-ce36-417e-8332-f6af1c97feeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.173']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6c627c5-1763-4de8-af7a-ea3e044fbe9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.178']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fb38763-cdb0-465d-9ca2-c468d66dac6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.18']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1d43f5b-2e8f-4df7-9e58-2ad59e12906a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f73b6f12-5066-4ec0-85b2-d22663185ba0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e276f8e1-0b82-4456-a820-651f50fd5666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3d77a26-f0d5-40d4-869a-63e6918b7df1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.186']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--835d0d2a-15e9-4c42-9b45-ece49b73601c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.187']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55f8b7c7-7ff7-435f-990e-9b7a44263b5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0802275d-28d0-476b-86fc-0b1321fda08b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.19']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a75bae1-6ca1-4f94-a79e-4ef41c9d1a24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.193']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9239360-ed97-4fc1-a42d-b4ad821d883f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.195']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c98f1568-39bd-4d65-a141-12af7630e469", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.197']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e58b4b3-953a-4259-b01b-eafc320846e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce97dbd4-eee1-4cf6-a913-0adb95a91e3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.200']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebb5726a-b25e-45f7-b167-0f7bc69baa2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.202']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b8dc0ed-1434-4db4-a860-524a2beb2eab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.207']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8cbdaad-8e54-402b-ba11-f03482d78930", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.209']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2952301-0914-4df9-9f38-e8ab9448b11b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.210']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c783208-f00b-4f71-9c65-64685a3d657a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.218']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6af1ce0-dd30-496f-980a-2b19e5df6316", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.219']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--711a3886-6c72-4fb4-8036-b24918b4c4ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebb02eab-336e-466c-a1eb-9f8dc9d2e41e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e6590df-d04c-4d0a-8107-e4015f65e7da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.224']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17280e7f-d9e3-4083-9e97-3150b7e104a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.226']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aca50c0-72bc-492f-a0dd-1e28a76e0606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.227']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8655d9fb-e593-43a8-94d5-c8ae74be75fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24748e9b-b4de-41db-99bb-fa99bc9c39d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.232']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe7b0634-a25a-45ca-aea9-c9a6d03cee96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.234']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d765d53-ccde-48d9-ba09-c645c7297b8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.238']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df7bc055-fe67-4b40-b619-f3980ce624b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.239']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8b4295c-8e03-4d80-a567-23d3b1e732b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.25']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--989d23f4-30b4-496f-a187-cd3567e588c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b9f9c99-19a6-4a3d-b300-716ed5f04eb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.32']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64ffe9b3-f4c2-4402-91df-7f3be796382c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.35']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--570cf845-e3b8-4598-8de8-bf5ae00f732f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.36']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecdb7c6f-fe09-418a-a9d3-60edfe96a47a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.41']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95a0b080-f0f5-4f12-bffe-d5c861aa0f21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.43']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9dce8d7-0e83-4e5d-818d-296b45a5a0c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.44']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea5ca6a3-218b-42d8-a0e4-7c0a2abfd805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.45']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--329dadea-8970-436b-8e30-c803b32b6f01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.49']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7b745c1-af10-4757-b759-6ee4eeacd203", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb12a244-3829-4210-b1d0-416bcd95e8e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5229aa7-67cc-4f55-96ad-88359bc8f310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.56']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea2fcad7-a9b0-444a-af27-c6950e67932f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b5c59a4-0b1d-4fb4-81f6-a846927fc37c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.66']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0d6d811-b63e-4a4e-813f-b725ab70946d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.67']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6739c418-274e-4142-8915-45cd07a0d8d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.72']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76b4b369-2cb8-4182-96f1-caeaa19952e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.74']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd76a0f4-1756-4350-bb7f-ac54b23328a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.77']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd7d8d78-513f-49b8-b8e7-6fa652a07bc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.82']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--013d8416-250d-4c72-a297-21e434ff4dac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.90']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71c96ba3-f740-4784-a0d5-c2821f3a1191", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.101']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--425c53b6-a405-40aa-bbb8-3384966c9a92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.103']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--807e2ce9-7da3-4df5-abcc-d21f76d69626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.104']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4469ca9e-aa25-4ea4-8f33-d65b7f2b9df6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.106']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e19dd3e-bbd1-43a0-b4a3-3884590a792a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.109']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9d512c2-7382-45bd-bc3d-09e788250fc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.110']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dca160d-f90a-4ca2-9bdd-f22d6334250b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.112']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--096f4fbd-d18c-452b-941e-10026fd84c1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c61c514-393c-46bc-8a04-05c10cb958d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.123']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8571d6d0-a9bf-4d1e-992d-70f4253c02e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.73']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4082ac82-58b5-4368-8ffb-ea809c0023b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.74']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cd52856-d0fb-4690-86c2-57e99290d34e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.78']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6c92b07-c940-4b9f-82a0-45baa943725b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b76d590d-ae32-4fd1-8479-79ab761de52a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--351489bf-4fea-464f-bd88-545dabb3b279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.96']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f601908-8f20-440d-9993-4c74cfc56f2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.98']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd322ede-602b-458e-91f0-30c4fce294fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.100']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a4144a4-c597-4f06-9884-2e281119f403", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.104']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a57055c6-56fb-45c1-a16b-1f22d9e6fde1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.106']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2109e9e7-b618-45b2-b2df-14f5e0cd8b83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.110']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc4e55b1-498b-4351-bc39-5982e20b8213", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.112']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d7cbb1c-9a79-4185-84ac-8350f6746fdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.113']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd096d38-8b82-4603-85d8-93a925018d4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c91cff-075b-4790-9a63-682866037dff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cb2d5ea-9283-4d88-94d7-bfc8701f7190", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd07fc8a-0fa2-409e-b331-384c9229e1c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.121']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f880bc37-1878-49a1-b396-a590fd8353e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.122']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0567c2a-06f5-4b43-b497-94111e906049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.123']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5421978b-4cb6-440b-be92-5ad96329bb20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ac950cf-d3f7-4fe0-b816-298a08b27794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68a4e39c-11bf-4960-a068-d03fe08b9409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2999321e-93a5-4327-9cf0-dffb4177e07f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7215e8ab-e671-4fa8-840d-8a17dd6c7a90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.128']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a72db90b-214d-4db7-a0a5-899e65ff8a50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.132']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49d94899-92fe-424f-a3b1-3c7a8073a98b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.134']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a87a92b-c179-4420-a010-28d58f38aff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.137']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30ee4821-b228-4fa9-a8be-5b3b25be1a0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.138']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aece95b3-6d87-4b82-8bd3-1af73882cc94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.139']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5087c4bb-e9ae-49ab-b111-44b7e7d62db6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.141']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5a0be4c-82a6-441a-b6ab-e44de2c895f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.144']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b652314a-cffd-4365-bcc0-d978437f564e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.146']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8a46e89-b84f-420d-bc57-65a2ee4bda9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.147']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b989b721-2534-4770-a0ca-225bb99e91ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d17ca992-beed-4154-9588-b9deeb8eaf3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--962a5581-ed7b-487e-aed8-3171ae2bdd14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fce39a19-4b80-4805-90a4-459e0904f734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d656d2c-5734-4866-8677-594328803270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.154']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b2423c5-4aba-479a-b994-a1a18ee604f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f85b5df-8e84-4862-9d57-63e9e6271340", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f0d0ec8-03df-46a5-a2fb-f48559bd3ef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48324066-9237-4a0b-ada6-184207670b63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.16']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf1f00c2-cac3-4239-84e5-5760f989da7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.178']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65f0c626-69ca-4a13-9ba5-f1269e1e1af7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fe78e7b-1021-4f91-8f0b-a90659531acc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e502869-02b4-4cfb-8ff3-183ad7902539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.184']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80bb76c5-5ece-43b7-a922-ff921196ace5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.185']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e9779c-72d9-44b3-8558-3061e9d37176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ad5aaed-c4f4-42a0-92b4-90f1638f99b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--debe1bf1-bbaf-4d2f-b3d5-7956d31708a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62bafc5d-b10c-45d9-b319-2178393615cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52e2d9aa-e513-4077-9eff-c8840f6af736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.194']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d88e7f7d-8152-4adc-ba28-d071e1976866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.204']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dda34d92-8069-41ec-a4de-0b99942c715d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.207']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ac5bfe5-678a-4c81-9052-55949121875e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6c215e0-74fa-4b7c-a4dd-a0ef39e648e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.216']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82063005-6025-4c67-8644-f103b53372e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.217']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02ca0d2f-fa13-4790-ba9b-ce97e309dc07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.218']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09ff6ccd-ea8d-4523-8955-bbaefc35575e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--982f086c-fd40-4613-9504-a01a18fafd2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71e5c3bc-094e-4d36-a89b-9f75d8ce010c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a06d2a72-75a6-46ad-8dd4-7b2895e43115", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.224']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63f46ce7-ac28-40c3-9f2e-b34202579127", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.225']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dee1c68-b675-4834-8891-f98b40b1eb5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.226']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5641a1c0-59c2-4194-957e-d5d800987c67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.227']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07e6a4f0-d340-47d7-9b04-e05024db1fe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.228']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0265aea-9c0d-4c9c-b03f-98eaf1a4bd93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.229']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede73ef9-ac41-45be-8e1a-d211b7c51f58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.230']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f24b899f-7acb-4f5b-8353-83ac220d2e2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.232']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e3a08ed-5a1b-49a7-bed2-aeace54a41b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.234']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf4d7de9-5e4b-4e1b-8d91-2aa6fecd3255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.235']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b1f672a-0294-4dbf-8bf2-5e4d43b65688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.236']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b023b5e7-79c0-4a34-9add-98da7b666252", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.237']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deeed9f1-ad96-4cc5-b805-e81da0c1412b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.239']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7131f64-fda1-4f85-9d98-148ec873b486", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.32']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef6c55d8-a42a-4b55-bc4a-e96679c6b42f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.34']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--932d6ef4-2d02-4913-92c0-98fcf545a150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.42']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec11b78d-f845-4406-bfa2-2d51f9060fba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.47']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea691978-c8c3-45cd-a636-9787bc73bb71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.96']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--432d0330-c1a8-42f1-b072-2284914aeec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eb42e95-d399-4bf1-b821-10f569de02c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.128']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1470f8f-7478-441f-a06f-ae392bcff891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.129']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ffe0d2e-2c24-4842-8702-5ceb4b7bc20c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.130']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f45faa0f-05b6-4fd9-85d0-e6611b25525d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.131']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62a3bf34-4ddb-43e0-a149-3821ba8ff9cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.132']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--258952b8-ee90-4d63-8617-0ba74ec5b707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.133']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d87c4f0-bca8-46b7-8c16-8436e81ef380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.134']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd8cfc67-57f2-4d9e-9a63-afd8dd85e09d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.135']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8a64302-a788-40e4-9fae-7d8d5907b351", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.136']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--168f674e-ac36-46f4-8ad9-800b7ffcd35b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.137']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d7877ff-afe8-4a05-b745-e87aae1fb5cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.138']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c2a2a3d-c396-4ef5-b6c8-d518728887c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.139']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe8fe0e7-0b62-45f8-ab57-1f2796ca8e92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.140']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71a8b54a-b224-4dce-8325-150182af1191", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.141']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4319a1db-982a-419e-9358-049a1955701f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.142']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9887ab26-49a8-4041-b80a-ab681bd5d24b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7d86483-f065-4ec9-b866-77e8644dea5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.164']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--406c7dbc-df7c-4272-9e59-27382141c13b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.165']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--771f638f-1be6-4de2-9850-6cee735ef1f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.166']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3163d951-cba1-4c43-ad8b-02b3d65d98ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.167']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4000ef9f-0870-47cb-9a3a-13abfc7c1afd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.168']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30140f61-3579-4254-bd68-e9035e6a21ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.169']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--580a4b0c-dd43-41a6-9161-01033f767283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.172']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33849d1d-e72e-4064-affe-160e6fcfe74a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.174']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e5b7a65-6ab4-468a-9d8f-57c89f6fafa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.175']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--788db783-6818-420f-b198-814c489d425e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.177']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cf0a3d2-116f-4628-ada7-0407e2eeb612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.178']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1502229e-80c3-429b-8848-ca162804623a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae73764b-aeea-4ec3-9b9e-fed86461f042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00b657cd-5b10-4323-a14f-31dd90da9cd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.196']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7051febb-b08d-4fb3-bbff-8c5dc8e137e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.197']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fc5700c-e859-4f73-a246-59c6b0a84596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.201']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--998e7e62-e30a-4830-afbd-14f5ef3fc171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.204']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f44ca79-d135-45da-8275-447593c00c0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.206']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66d990bf-9e84-4093-80b5-8847f20c57fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.208']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41e65cb7-a9c1-403d-8673-c1dbe451709a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.209']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af7ce6d1-c72e-4058-b53b-649f30281968", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.210']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80758f14-e92d-45eb-b22c-12204ba161a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.211']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b2e36d5-d822-4e94-ae30-0ea512193c7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9805f0d6-f859-43e9-ab87-f6571bb3807d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c783947c-1aa0-4659-9cc3-1dc361091085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bfabe26-33fa-41d9-b310-462504475e62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03dcff77-5fd8-4394-a215-552cfb82cf32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.216']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3fb04dd-9e02-4458-a7ce-df02dce932d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.217']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e09a3b-8a69-4a66-9b30-ffb0545fd38c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.218']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca6430b2-a5eb-4524-97b5-3be2d8440899", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.219']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50c36ebb-9d2f-4efd-aa81-b379b133b582", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fea42c2e-12f5-40d1-bb6e-12cb56b73b79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a9c7a39-d95e-4adf-ae61-1d9632618b73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--564f899a-e377-43d7-af30-83254dd58a01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6a8306a-7b15-422c-93a3-586dc82b2d19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.224']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bce86cb-fc0c-467d-9f68-863f3100a1b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.225']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c066d6f8-dd35-4b1e-9369-7c7bdba4053e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.226']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--381a72b5-21c1-4d31-9a95-8f2eb7f2bcf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.228']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7d76084-d4e4-4828-a808-4b11c617cfd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.229']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3021ef8f-4066-494a-995a-fff51efadbff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.230']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9d38fea-e43f-45eb-b667-3b5cd589e830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.233']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaee223b-209b-4c11-8e8b-8e08816e3661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.234']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b2f6faa-22eb-4c3c-8234-c6abb63dfc22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.235']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5402d0a8-eed9-43a9-a4b3-179eecd2a598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.236']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7653dd86-fa6e-45f0-8df7-f0dc5ce439c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.237']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0428f240-eb41-44ea-b578-ca28be080059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.239']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd8064e-720a-46a4-8554-86d4aedf3459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.240']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34775ae2-aea4-477e-ac58-c3298d661b53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.241']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3b4aa54-2920-4360-9f6f-fb61300bc73d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.242']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3577aa6e-7d4e-451e-9408-4c834d0acae2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.243']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff1d2938-ee9c-4c2c-b77e-4a2d3ccc8b99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d8cac1a-ed92-4f0a-a1be-48a7546bb5e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f720a40f-e924-4f62-93ca-22c4675b95a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08b229ef-ccc1-4e2c-81e5-9fb2124515fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.250']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ff287a8-b96d-4588-bb8c-9e0c9dd7fdd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.251']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa79eefe-c177-43a4-b108-ade5f19c8358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1338047e-b9f3-49bd-a93e-0f65579ebe6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf17d83e-05dc-45d4-8f2e-8e3519644596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--925f8050-7058-4e4c-b137-caa7a863b8f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.100']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34602238-9118-487b-89e0-57b90c671190", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.101']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28da26e6-b8cd-48bf-b6c4-31cf3b76151a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.103']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5907ed63-06eb-41f4-b3b0-eed078a5d49a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.105']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cb807ca-d599-444c-96de-2fe281347ee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.109']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e87c6489-b263-48e8-92d1-7382c6181f6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.110']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19257e11-e476-4297-a3f7-9ab96bb65c89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.111']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64948005-4b54-4949-93dc-d9fda31afff8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.112']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d6a9e9d-0428-4809-bddb-05adb32c72cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.113']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65ef82ad-895a-4593-9a0a-f5a0a669eef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.122']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1be7a10b-f7dd-49a7-a256-5adfa4d5ab47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f9fb674-7b25-46ba-a04e-5ef39fcb1285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.143']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f099491e-4db9-4690-8f99-c8290adac2ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--028b1dc7-a236-4540-8fc3-6a30ceffea00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.15']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15f09eb3-2133-4b9c-a67f-2a30572cda11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.16']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--071d1d42-5a62-4f89-b051-82c1180106c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.17']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a81dec36-578b-4aab-9cca-4050a632b4cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.18']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4320c3d0-b90a-4575-b941-dac828e40fae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.19']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4589c903-915f-45a7-916e-7226c40eaf8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a86c51a6-dc94-489f-aedf-6591d106a93a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c127442-2542-4e81-abe3-f372bf01c3f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81d394b5-6659-4312-8ab3-1eacce7454cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f09b2e6-e25a-4058-8ca5-e096e1f7e5e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.24']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dc10fdc-1fb7-43b5-8e02-c89da9a6dcec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.25']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--243c158a-6934-4b00-bb95-4589d893312b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.26']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cdbec6f-ab45-448c-944f-9bc17b7e84ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.27']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b669ce2d-1b2a-43a1-983a-bbe660236e68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1be551c1-919f-43ac-b2a8-db0ee2391e5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--350adbef-bbf3-4ba2-a4b2-1737055cef9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26d66d61-1022-4c22-9640-3f2e2032c836", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.37']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec5ef1d7-7dd4-4f70-af41-1998ad55b151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.44']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a647d0f-514e-4592-a73a-5e1bffc46ca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.47']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67dfea85-aad1-4672-be78-533d54870c6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.49']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77f7e9d3-7d61-43eb-a4c1-471054d00e22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6515beda-807d-4ea5-8a71-cf546125828a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c259dcda-ce10-4084-879f-ba5f6f631dda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.56']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c657da96-83f2-49b6-a73e-ada9462b49bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3cd64a4-2349-4b4e-a43c-9e183fa6bb34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1b49a07-68fb-46a2-93e3-f89cb32ab684", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.66']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4b0eba1-ceb2-4623-a668-e82d6def8c43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.80']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b21299e-bdcb-4ea7-9ef3-59509a0c5eb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.82']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39472289-edb4-4132-9065-a44fce8a4f60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--384edd48-cb68-43a1-be84-0df17d2a32ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32949a69-a55e-4812-b619-b7f9d268ce56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.88']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a5ff62f-7931-4441-a702-888839e8b82b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c7bcb20-4670-4d98-ba53-124c1c9e3072", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41f11e1d-c846-4cb6-8381-3e7cec0d3b1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.96']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48af21c6-f059-4613-b0fa-7a28ca9c6c05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.97']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2992b81e-7fef-47e4-ae9e-3fa3a4546db4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.98']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6613a0ef-83d9-4490-8478-a3ae19083a28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.99']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d518c275-7535-416d-9ed7-f96910588091", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.16']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da4647fc-be43-4200-a4d9-b47a861c99ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.17']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87bf328b-0f57-4021-850a-d9b3048cd576", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.18']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--782632ea-8473-420d-a8d7-f66f986dcd19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f1161f2-0db2-4f93-851e-ace6bc3b18c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07ee80d5-6eca-49fd-bc4a-8e345711ac8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.230']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c098418-392c-47a1-9014-dcf7daad5709", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.232']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae47bd8b-6409-43e6-9386-530acb67e5b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.235']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c6c6746-f1ec-449d-a54f-fb0b27e03b5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.24']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93f13f98-7932-4b84-92a9-4b4c78f40122", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.25']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75121ac6-deff-4772-82ad-931a3db34402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.26']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcdf98d5-22ed-459c-bf81-d3cc971e97e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.27']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cba3d491-7eda-46b5-9658-9a8700b8caba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--678a6fad-1efa-4d69-b2d2-71e36225f453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9b683b9-32c2-4f37-940e-8efd9e4b1e8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.80']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac56b0e0-fbd6-4c9a-af50-1d0e577c195c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0790b7c-386c-4d7a-9c7b-fd0f43beb024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.150.198.186']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--142deae4-8be7-46c0-806e-4e09b08d2e95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.179.10.139']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--439fb284-d464-4484-9a8f-d2d233fd60d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.212.16.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82c85bb3-b78a-4c0e-9e4c-bb767ac932a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.42.204']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac3ad0a6-78a0-4a4b-9778-36369bc3a112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.23.228.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77c60ec6-deda-44b7-8739-de07007be741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.192.138']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e444bb62-7b88-4292-bf19-850e874b4ae8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.205.34']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45f89dde-e1a4-48d0-a338-2602a7e6361f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.219.146']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9803d313-91f2-4764-bbda-a2e08ea08f8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.236.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c5dd452-4d40-4502-a2c3-e1f6bb7157e8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.207.86.9']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53816fc0-d2b5-4560-a4a2-7fecf2aadbbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.105.61.14']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c550e23f-666f-4ee5-bb6a-f3dd1d016af2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.143.137']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--394b7138-ad1a-4146-b790-16718eb552fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.2.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22d88e8-1339-47d7-bdbe-2ceb493633bb", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.203.187.32']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5198a51a-047c-4a6b-8a27-fc24941b5a49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.12.71.34']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82d0232e-c73a-46ed-92c6-fb9c3293e7a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.213.99']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--727c0472-e39e-4830-bdc4-78c6738cf68f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.165.75.192']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c88085fe-3d9f-40a0-bc72-b08b3ad41570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.206.160.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4485a31-d134-41dd-890d-a7d372938a8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.187.203.185']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45598a66-4e43-4f9f-8c92-3942ece7e37c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.208.95.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac56da2-d1b7-4099-9d50-776ca274ef41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.204']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbd46462-461c-433a-91a4-7f3075a345e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.228']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0eba962-4088-4557-8b90-47026702105e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.229']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef7211b7-e3c6-4eca-a0ce-323aad3f303a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.231']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ff8bf48-e810-4920-8d16-4353f0c9208c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.232']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--230806d5-993b-4e30-8105-343a9caf4bbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.233']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a67c21a-4f95-4d68-b836-e73829d4da70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.235']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d764f52-8830-47b7-adfb-628f156b122f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.236']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1142de34-7d53-41a9-a22f-83022eb57276", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.237']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--591649d2-5b86-4a79-8403-40caa1169e83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.146.185']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d514da2-b46b-463a-9dc2-f64371bc2d38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.147.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fd76ba0-928b-488e-aac3-f83963abcc5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.158.166']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d44ab452-10d2-49cb-b597-35bb4679d0a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.165.200']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d16f6f3-9263-473b-a018-dfd151b5ae38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.167.142']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdcd6af3-a6e5-4c3d-9213-ca32736c1539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede91a66-0115-4ad5-9660-eb2402f1684f", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.255.19.44']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9396ce1e-5c4b-4141-a084-4e8f2a650175", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '73.13.114.179']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73b7350d-3ff0-4525-93df-b1cf71d2d223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '73.225.0.101']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c6b584-709d-4596-8d1b-66d83f549641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '73.76.159.70']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38a4766b-b9fa-493a-bd1e-b544b477c0ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.104.153']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5558df5-1534-4f72-b213-c488d15ce716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.184.74']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--220e2f12-b5bb-47cd-a0ac-8d33c5af2a7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.204.177']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e30626e5-4f29-4022-b900-6253eb07b122", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.244.223.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df6baef1-a394-42e2-a28c-e293d021b109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.178.155']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc9ef23a-ab42-4f9a-b7d5-207b57a8e1d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.194.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--762e74b9-2c07-4c50-b18e-6519befb11fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.195.24']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aee7c5f-b62d-4a16-a76c-9f0f537e9cc9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.175.186']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b39123b7-12f6-425f-ad92-b5c8858a414d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.228.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e9075df-226f-488a-b0b0-2c386bef419e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.242.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02a7054d-dbea-442e-8618-391fbc7ff664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.16']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84a5a4fe-fd5a-413a-85f9-4ce7f38805b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.17']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b1e55f9-5986-42ae-a00b-cc2d5ec64cbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e88cb2bc-8e28-48b5-82b8-363158c430da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.25']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3775adac-11eb-433d-9c59-82f71c6d6437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--398d652f-406c-4a15-b85f-26b4e9827b06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2254f51b-c06a-4581-9691-734b62e54ac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.34']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43ea6c08-2eb2-46aa-a322-48533947a336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.4']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e18f7055-4a6e-4150-838e-e4f2b5c4a176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.41']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48d0e304-17dd-43e5-afd7-62a1db8dd4eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.47']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--003e349b-eafd-4801-a8c8-2165a42871f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56b92f20-8551-4daf-959d-b67adc3f51ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4480b72-6471-495b-91c4-8c5cac01a569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.7']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa2d663c-57f3-4d79-8f6c-0714cb63d8cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.91.195.12']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5320f53-21ae-419b-a788-739a4beab8ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '75.155.35.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82779567-b1c5-4601-a428-ba7a5ffd106d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '75.176.1.64']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cee1e15-ada1-40f6-91f8-f502ee1b153c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '76.14.106.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28ed7cf0-e947-4b32-9701-7610ade6e5b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '76.186.151.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a169a961-d0ac-4487-a9b0-54aa50140c88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '76.76.21.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49996252-a356-4ec9-8c98-3b65813eb262", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.222.43.59']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6c31cce-ea77-49ec-be55-05cbda3337db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.239.124.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17bb5e55-7417-4552-97af-38a774cbbf3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.239.124.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b11dfafa-13a0-4d9c-917a-3cefe56ace74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.239.124.128']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eac4e0bf-b2d0-40c2-9d2d-04860c75ef32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.239.124.130']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--616c3762-b730-4c03-bd34-ed9f1686d91a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.239.124.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d673481b-4ea1-491c-929b-92a87d2ae300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.75.145.77']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aa79d6c-f91b-426b-afd7-2123c94ce50d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.4']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b04b116c-59c8-46f3-9977-c10824f43711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.207']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62e31571-15e8-43c4-881d-409420cff54f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.238']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcba78fb-4f5f-46f9-a887-fb6182f05593", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.5']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--963bdda8-baf9-4faa-a734-e060c2b00d04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.78']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4e01924-9b9f-46e3-bf61-f2223170248a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.79']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35a2628b-3a7a-42ae-a30a-e551de00ec1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7b17cae-d06f-4ace-afc3-391c23508e48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae5e905-2567-4ef3-aab6-cb080c334376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5ede9b0-9aeb-4fc3-87af-1ccb5209ba96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44055280-a469-43d3-9575-31a63696f0da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7acb90f0-bcf4-4493-a6a5-78e25ae2769c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed9901a6-bd7e-4b40-b49e-a013a60680da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16741bd5-ef1c-4496-9174-337b12eb38ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc85783-ab01-4791-baed-f8f3484e6f1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f03b03b-ef41-4af9-93aa-9acb3c31b4fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a966371-d52b-4245-b71b-562ff2677462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f503968-447c-4498-9b09-ccb7a7ca9857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b79a3031-d743-4404-bde0-ce1187329f30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5450e350-bf60-4491-affd-1426569ad666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc1867ec-6e78-4abe-bdeb-b23ebacc4a2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba267004-3c2d-4f72-86d2-ed921b6866fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b40a9e4c-b7a3-4b62-b6bf-333ab25d9807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dad5482-e6a9-44b4-b823-8170e285ac87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--233e627a-c952-47bd-963e-2cb1f41911bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25ae889c-d4c9-4591-8751-11f645532c8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9c1a597-5538-418f-be73-8ec61c6a3907", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e0af1db-7dd5-4476-a033-0e7b331c6664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06831295-ff6a-41e7-8d9a-661c9256c15b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd1f7d3-cd06-426a-b0a7-61dc79463749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--083b729e-e576-461b-98ec-aa7fccb9716a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c808571-fd97-4da2-a56e-472d7ff033da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01e9c4e7-7cde-4009-829b-5c57be72a043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af1a9fa4-d88e-4a0b-ae25-df5caff825ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e538a53-012b-4fb0-99ff-bd5b88133cae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22534ce-697d-4fa4-b4be-5fc9c38a4e35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a8124d6-1cf0-40a3-92b3-299d007d49f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfaf67e7-0358-4792-81f1-9b6f72214cfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74148b36-91b9-4ffe-8efe-9f83218eab85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2269f8f5-eed1-4974-bb50-038f2aa75489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f13eb74-29eb-44b0-b1fc-4ba6a1fbd5e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e6509b8-2e74-4574-9568-e19f1fcb2a11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcb7dd6d-0ece-4583-8d61-01c97b8851bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd3a9a7-b45c-41ec-9cdc-32b0e7275a21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.255']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1fb74d8-dd72-4a77-a423-88d111fbd1b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2311e27-39a8-48ec-ae9d-bd26b0d805ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5679b43a-6a79-4874-ad9b-15cdc7311cd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--874aebf5-4472-4ed1-a82d-34887c026c28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b58fd573-e140-4fda-ad71-20d987b0bd2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--617cb3aa-3c6e-46da-af47-5c8ab249316b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b81c8da-e846-45d9-b7b4-f8874fcf94f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1866bd17-5158-4f6b-8bfa-b12d2afc9210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b7f9f03-4c6d-43c6-924f-e5d470d6a149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--139f1149-0988-426c-935e-823e3a527a8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e95215f-db57-4422-a340-149e7d5f8e8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e123b7fd-38ad-4a15-b750-a63560f84041", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87b0697c-c69b-4c13-82fe-77cc9be1b869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d297d202-c9c2-46d4-8e0f-77b50a3fb636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ace055b-2734-4e23-a98e-737d0c0cad9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9950c575-9629-43bd-9941-cbbc8bf87047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdafb3cb-24b1-42ed-a4c6-508624c67e3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d07322f-6283-4a88-a8c5-968644fd8cb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.142.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a68186ca-26ee-4ed5-a0dd-74dfb261ddb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79c8c9a3-1d9e-4b3d-b1fd-866354b3943d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--333a57b7-fb41-4865-a708-db4b3945cb68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--588302f5-68c6-44f1-ae3c-9bb273ed983b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e89fc9a6-3794-4b77-a315-29590e2fd66b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6658977-416b-4a9f-b8c5-0ab5621cde23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1b88f27-8ea4-4d08-9a84-cb133b43c9ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8106700a-8dd3-43e9-ac84-ecb68cb5682b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb28d366-2566-4d5b-900b-ba2ba5230484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4160e9aa-0627-4747-b551-bf82d96eb932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceaee9b8-0502-4dd7-8e53-a43e262ecce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57b1ec71-5999-4372-a7b4-c728a58a8d74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eccc48d4-22dd-4a81-8e2d-2b31bbee65af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2abc8ed3-7d9e-4ddc-817e-9ffa5b0e2aa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da1a2475-1cba-445c-99e1-4e4aade62cc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6078881f-a01d-4a5e-9197-cbaa2f67c4e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65560cef-4e47-4122-8063-a15f4c113e7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d2c9106-e3ea-45d6-832d-8a31e0b5ae3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da459753-8261-4958-a85e-b67d2be85760", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--101e8a8a-8b79-4c29-8db9-15563f4190f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d784b06b-6f05-4bba-a8eb-c92a5c3190f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cc6938d-3ea2-4758-b7a2-6600924dbbaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44ef29f4-ece4-4b96-bab6-9275ed96c38a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f733f8d-2841-407e-a1b6-c04e5fb481cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--630d4e3e-1f79-4c41-8c1f-111984708b0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--316afbf9-c159-47fd-bb81-6a9726b8483f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c14b8f6-e079-4bef-ad35-ba37a5a9bf70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53407952-4713-4bb9-a8f5-2f0061f2352a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b9dec1d-29e1-4429-b639-cbc98380a0fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c843139e-a0fd-46ab-aabf-7fb7b1126a4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cb532e6-5c4c-4569-b2a9-7ed04ac02aae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3332c525-546b-4ee8-a915-fd36e3e61d86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.255']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33d1ea38-318f-4a8b-97f2-bda426bcca74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9185e222-ae0f-47c0-9490-43da92b39615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15ce8e9f-1fba-42f5-a7a9-81e8ed8db7a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d49f7d0d-294b-41fa-aaac-f329d7c75fb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9684962f-7fb1-4e03-bdfe-3ea58b1bf230", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f20ce372-0515-428c-8dd5-df77c105fa95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e8001c1-d0fd-4edb-98e2-47722c3acb5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebcc1982-979b-418d-8df3-92a25d6cf1ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3168727e-9738-4d4b-bc65-ab084e98183a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37ee7cca-b95a-46d0-bda0-63c9120cae89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd32fedd-762a-4ba0-b042-af12b6bfbea8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7a4a383-9c7e-4faa-86ff-fefe53f00fda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcaf150c-aac1-4b90-ab48-cf3a4ec2b8f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.152.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fcc67f4-138d-4052-a445-a7ad425e0bb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5265b077-3a8c-4e53-9c7c-8f3c00721e3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.6']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c744a8ef-2679-40ef-96d4-480a3ddd75a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44c622b5-62b0-4b07-84b9-290db963aa09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.46']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fc2770d-0ea2-4830-b17a-a2344849da28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.74']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--512a7af4-7326-4ff4-af41-f9c7d59e5acc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.162']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d12e2543-e01c-4964-b74f-1bb209aee198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.174']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc2fea36-fdca-458e-9872-6149b7d13de9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.46']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fce211b-9d30-4381-ac51-a67fcdc2a030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.111.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ddf5d69-fcb5-4ed9-9bb0-2917e9541a26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.111.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be380e1f-70fb-46ef-9280-96fa1375d163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.82.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53cc5794-f58e-4038-bb11-5225f1eab61a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.82.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a52b422-c819-4ce5-b502-2230a3aeabde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.83.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4897af2e-949b-4cdc-9fcf-e444f6e6a3ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.83.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84b53b35-6921-45fe-ac25-6f0409912aac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.86.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f198e727-b066-4d56-b650-c32e74f8310a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.86.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76ca0934-3ec0-45ce-a89a-a8ed6c06571d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.86.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3986f33-05f7-479c-b814-743f1b41e81c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.86.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe31e72d-3597-42b5-acd1-4a715be3b36f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.86.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de501286-81b5-4c0c-9829-806352d660d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.86.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ab3474-6ac6-4b95-b0d9-70af7a00fa19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.86.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61c70676-d9b5-4d42-80b1-7664c59804dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.86.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccc215c4-d7c0-4e16-b095-994468c4717f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.86.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71ad7270-cf6a-42ed-8a8a-2fe35a911d42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.86.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--017bf8a0-5810-4325-8bbb-a74cd5250da5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.86.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a5e68a1-c9f1-4eb8-a64f-a9d7a72bffd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.86.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e555a9-39bd-46b6-b124-618a8369718e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.86.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4f09dad-56e4-412b-a033-e2ba536d99b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.86.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--602b2f02-b3a2-492c-933f-73b897c90e2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.86.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76a4144e-7908-4b8c-b6a0-0b8fee71c243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.86.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db21885d-d70e-4c31-8ea7-4fa518bb04e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.86.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76c0b0a0-f890-4654-b6e4-31d50255099e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.86.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3466ab6-c251-4680-8023-1350bb773442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.86.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1080d92-631f-4126-9d43-86eae4577fd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.86.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11261271-e395-489a-897f-46791fe1341f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.86.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45a5e3dc-fb7c-4e2c-96a2-e8f35d76ffec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.86.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c24332b6-4c70-464a-abc4-987c793d8f81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.86.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51bdd1e3-d16e-49d1-a662-c6608258638a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.86.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67089ed0-f70e-4b86-aebe-8d1c96a82c5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.86.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bc0e534-175c-41c9-9665-1f1638ea06ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.86.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51357f46-98b3-448d-8b7b-89f5e88c28b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.86.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3409d283-1cf9-45d8-a1d4-44ae59972643", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.86.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b33e05-3d2e-492b-9554-dbab105b29a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.86.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43203713-8a72-4a92-bd80-49c8e9b3503d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.86.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--021e5b5e-9eee-436d-8dec-3c38c83fa819", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.86.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2520434-acdc-479f-8a05-f1ce5f3400cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.86.255']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9892eeee-b13d-4fa5-b197-de3f41caf8c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.86.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46c3fe6f-e3a0-4aaf-a65c-0032cee857ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.86.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b936a142-9d81-4786-9a13-d8dc0ab1d45d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.86.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeab8440-3463-4a8f-a3b2-343ca077edbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.86.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66fa3dc6-4e43-4e3f-95ec-08e707d54069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.86.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c8af76f-8e24-43e6-b504-b87e33509ee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.86.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e823616-8d02-4114-acce-24c235bfc117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.86.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64b4876e-f3ef-4f01-ba49-7de01465d31d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.86.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e22355e-c547-47ad-9bdf-9feedfa39746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.86.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d42fbaef-0e49-4179-9fb4-73d0edb20a36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.86.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac3d9ecf-fc56-4203-9722-222bc168e1f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.86.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34acb39b-1c64-4f4d-9980-5f0aca05316a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06ea94cd-f926-4ea8-aa40-21943b40940e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9606764-ec52-481e-8993-fba5a54b7051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d0cff99-efe2-4eef-b99d-b94df69b15db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdfa8ef7-19a6-41f4-9545-5260a082e44d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--785f07bb-5fab-4a8d-85cb-e31781b07349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f4a685c-0e26-4a4f-9835-c9772f82f90c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b8e00e3-ca75-4d12-9f21-38390c34a95a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f663182-717f-4849-9be3-dd8e327a4643", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67c78a0a-af58-47ee-892d-6d75058264c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c5271ef-0910-4658-9349-9ce4aa588634", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89d4105a-3cb4-4bd3-bd39-223134ca36d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--694760a8-697f-4f88-bf99-a7b5a2a1d3ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1ffc7a0-33be-440f-b1fc-2581e20b971b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bb3c9f7-ec09-4ccc-b04e-93c522e3a10f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf275ac-7ab8-4a1c-9458-53eb4bce579c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68ef3a94-4af7-45c6-a1c3-af20b22e59fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c872db33-8c69-4267-ad68-c0002f6e7350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cae03aa-7e49-45b5-bb45-02c3c5ec6cb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd40d32-c976-4af9-9b0f-3a0f40cdf73e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--524c69e3-22dc-43cb-b4aa-5feae8f0a715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e734d21-8331-40ec-908c-f14975a02c79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c94303a-d003-4b58-a269-2ab051d164a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7bcee02-d593-4af5-a110-8de324c56a88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ece8dae9-5890-49e0-82b0-2b7a36d6eb78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aba043ad-33e7-4984-a4c0-5f648829ca18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40e90270-2c34-4291-b770-63beb95a44f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47511c7e-e7bf-4ea9-a9ce-fed3d4995abb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4db966d-57c6-402e-9580-fe7dae135320", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bed48ed-f10f-4385-80f6-2a18a505c50c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fa82ae9-dc37-4bb4-ad34-677ea295278f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d72059e-b033-4199-95fb-32a319358a54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e270295-c74b-44e4-af0b-c6939d97f245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4fe03c4-c8a8-4674-963e-5e56504da826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3da98591-195c-435a-93fe-5f44cb878780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b9a1dfa-5ff5-4971-9d7f-aa3e05ddf1ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e8f508f-e0e1-4e79-9e0f-1ba5d09f08c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83d6e0a9-b461-4e89-8068-28c246450fab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.255']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--075cb5f4-196c-404b-9995-bc7d049814d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce54bc58-bf39-4238-8c04-b6250ed2b823", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41890826-fa45-43dc-8f0b-47bc69d8467d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa9c298d-53e4-4259-b525-f79eb77f5b12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fc830de-94b7-498f-8300-75be5ea91c2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2642defc-5c9c-479d-9d12-5ef922bc3b8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ecf2100-8f53-4d91-ae42-019aee20572d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98b58219-2837-4f32-a362-058bc366d0b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e861212d-eacb-45bb-8edc-bd85eae29f93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d48ebdf4-074f-4060-bb3d-1b32f30d17c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a814e43d-2274-426f-83c8-bd6ac25cb5df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b03a752-c8a8-4d38-a6c8-49242ba0e0c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20152d53-aca8-4291-9fec-d85ff5768503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--955b302b-782f-41b5-ac71-85ab2c1dbac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55a6ef81-cd4f-45f0-b183-d827d6d1261f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7c5c642-2b5b-4d65-9508-c70fae9f06c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13312d52-ddd4-449b-a583-6c28803ec603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88c60e87-5a0d-42b7-9217-f88fdd681335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.135.98.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de3e382f-8181-452b-b72a-513e904ca0b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.142.18.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aafd9b8-ad43-467e-a914-659409a40a79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.166.59.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3cf7010-6916-4150-bf57-27ae4950c732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.178.153.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca0329ee-1446-46b9-966f-325cd0b69045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.162']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65981508-0374-4c03-83ec-24b716910322", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.166']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60f4600a-126d-4f1f-9309-d434fcd0cfd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.102']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--415e20bc-945f-4f19-8ba6-2f94692818f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.130']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f1d5306-6a93-4a74-bffd-11030ee7c041", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.70']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d519fdf5-a005-4768-9e25-98d13e078ae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.90']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a190eb1e-e310-4e57-a477-6f6bdcd3bfd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.102']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--322ceff1-5844-413c-b681-6ee402f9f8f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.142']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9683b839-67d7-45c2-b11d-5d384b1230ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.202']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5ba5280-0cb8-4007-86d7-1e1b07f2f655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b64ea191-8a05-42e0-93b9-f8c572962f0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.18']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe19d7c4-e251-45c3-afda-23d5665bd481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.198']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fedd4be-2733-4638-8c99-98ab1cdb8e29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6792b4ff-7da6-436c-8042-edf76083ae00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.90']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e07dea8-6aae-4df0-9738-e54623dbcf99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.59.106']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--774c3e30-d066-41b1-907e-cc04218eb7c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.59.178']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95564102-a6b2-4647-b63c-b487635eeb34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.59.186']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--371c1978-7636-41d2-9bf6-d57d24c850b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.59.78']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f915f4d-2943-4e7b-8da6-b97f0470cd1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.60.218']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b02f59e1-d425-4470-aafe-29ecd2c95fd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.178']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04eaedb0-614f-4d45-9518-19e1e74e723c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.20.216.233']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--127efb70-0b3a-48bb-8b43-76fcd182b7bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.152.99.77']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7956e35d-9e43-4819-baf5-268bfc955bbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.163.77.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--141aaab9-cc89-4200-af00-0440483bf896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.101.146']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ec6fc0a-6901-41af-85ef-04acf71a74f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.107.133']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d13222fc-5a18-42d2-aee8-656370a2b1e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.115.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8110738d-ed73-488a-a5b2-66cc486bb01f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.127.2']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5784aebf-89a6-409f-a2a6-ba871534f57f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.201.115']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--976e7070-d4b4-481a-a812-1511d91d5f72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.208.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b155959-0e05-439a-8695-3a1adc9e69fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.208.8']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3b1838c-abd4-4401-84f8-25b52e1875da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.237.241']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45e65a68-9136-4d52-9d14-9e575d0c1aa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.65.98']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--034f5454-103c-46c0-ac87-b9f592a8bb8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.90.19']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb46df7a-52de-4582-bb64-4c09c5f4048c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.148.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90a9126c-6a3e-443a-bd7e-650e462da461", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.162.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbd49b9b-4512-41f3-97b4-0cd0cd02efc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.191.243']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cd0be71-89af-461d-81ab-47f250fc1e66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.2.225']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6f518d4-b9c1-4ba8-8c43-66e9e1642aa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.24.65']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0e16294-e80b-4a0a-ba0c-651310ac074c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.25.75']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4689e68b-316d-4654-bb19-6739bd9433a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.39.83']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27cf479e-5ab8-41df-aafd-f0ace16a414b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.12.192']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2325a048-95c9-44ec-9437-14c20d298d86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.13.57']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57fa9544-95e0-4108-a9ed-eea9b9edc59b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.14.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39d60c91-6012-40b3-adb7-62f827fead45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.114']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--763d7613-e8aa-4dca-9b56-a5bfa2508a75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.164']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffc08c54-c05c-4677-9999-f30d0c39a929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.216']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf4cc2f1-b477-4c2e-8d11-496412b61587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.233']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4604f467-cdc7-4827-8d9d-1b8a61ab6f28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.50']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f48e6ba0-9242-4fec-953e-5b69be8b9900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.218']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce7c36db-8233-40f6-ab18-2cf40fc872f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.36']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64d56679-32c4-47d3-88be-bd13b7742204", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.37']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fedf548e-7fa9-41c9-8047-b591d0b5b2e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.56']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1e0e776-9882-4ab7-ad88-5bfcf07a2372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.104']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f2afa6f-37ba-4380-92cb-78455c5d2cd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.184']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--138d57b0-e9df-4c2c-be70-8617c762c51c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97400624-e327-48c1-9d94-b8464a7b5c5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.69']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--491b9e6a-f62d-48e1-a221-ca9e92ab2052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.75']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8687f4f7-ef64-42eb-a09d-b491c6516ffc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10fe1ef0-52d5-42b8-bc23-3477337c7255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.107']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--620b6125-e272-40ab-a76c-f10b2a84613f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.146']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7a0e7f4-483f-4481-8490-394cf956743a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.237']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4484bcc3-a152-46b6-b4eb-3972e7b5e039", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.238']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2688805-cec9-482d-92dc-32595d6d0cf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.133']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bebf43a7-0391-40d7-84bd-f9017344a762", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.217.145.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de037334-9122-4233-9e35-86f9c0c55aba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.125.155']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f170489c-0fe1-4ab8-bac9-f8323e8127c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.182.204']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de5cf047-6c5c-48d9-93f6-050feb3ed69d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.220.195.43']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03ab0724-4bdb-47d6-b597-a62af46bde23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.231.74.25']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26b6dcf1-79b4-4807-bac9-5c38d2623f89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.234.96.227']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47c40766-34ef-47c3-994c-faf819da1a72", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.208.71.104']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3d07b78-6602-4da1-84c2-1cd0b697dd8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.253.249.174']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cb798c8-cd53-4044-bac5-09c9ced8a2c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.65.211.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2452fa58-c746-42ce-ab0b-3ee718a4018d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.43']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79d2bc31-29ef-41a1-97a4-9f9924de63dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.80']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70180d5b-ed5f-4f90-a5e8-3aaecd84381e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.73.14.133']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6862c4f-0634-4c8e-9eaf-6928072fa764", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.80.212.5']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11963f78-c00c-4f09-99c7-be2b439aa1df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.139']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24bb3bcc-7aa3-491c-9795-43dc313fc97f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.33']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6245780e-fea3-4802-b9f2-0180b7799f89", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.179']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d497f9c-13bf-4cfd-893e-963b56a06de9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.115']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1661db46-4353-4107-b44b-a6ad07828c50", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cbec062-33e1-45e8-a4a1-2e02d1f20f83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.185']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7316bb4-e5e0-460f-a2fd-b045d49ef115", "name": "Malicious Host", "description": "Web exploits: mitre-t1190, php-backup-grab. CVEs: CVE-2002-1149, CVE-2022-22274, CVE-2023-0656. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.211']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4aa40b6a-dc6e-43b2-b47d-25a612bb4286", "relationship_type": "indicates", "source_ref": "indicator--a7316bb4-e5e0-460f-a2fd-b045d49ef115", "target_ref": "attack-pattern--bdec63ce-006e-41ad-9ffa-e50b03aa63d1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bc3543eb-ee78-4b42-acec-1607558efdd7", "relationship_type": "indicates", "source_ref": "indicator--a7316bb4-e5e0-460f-a2fd-b045d49ef115", "target_ref": "vulnerability--e244d6a3-dc81-4710-a38b-6edfe4916bce", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e9f6f37a-8394-4a82-b1b7-5d327326afb4", "relationship_type": "indicates", "source_ref": "indicator--a7316bb4-e5e0-460f-a2fd-b045d49ef115", "target_ref": "vulnerability--7a369f54-0fdf-449c-bdf0-e287fc8fdc98", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d1e27fb8-5995-40ae-92f7-c78a7aab4dde", "relationship_type": "indicates", "source_ref": "indicator--a7316bb4-e5e0-460f-a2fd-b045d49ef115", "target_ref": "vulnerability--9cecf465-ce84-4269-b927-dca2ba0b43cb", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da53f05a-d7f8-4ec5-ae3c-14f9cb244c8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af0e7438-f98e-4af6-86f3-d036b2eaabce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.83']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2acbd2a-fef4-4d73-a6b5-6fe489427b2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.97.160.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b98b53a-0512-4c3f-a2fe-22ca9a2a9c72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.163.126.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bbed06d-afab-4827-897c-d75e136823ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.163.23.111']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f6944b1-529e-4459-a67e-842a1de2f752", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.171.74.67']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69993908-3eea-4f55-a5a1-6e7ca55457c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.147.85.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f929b21-6d3f-4099-8765-e4ce8a946f2e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.152.132.24']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfee156d-5a8b-4ed4-9b6d-b693ee995922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.22.23.132']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9d4b950-ccaa-4de9-a644-6814f9705b84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.25.45.100']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10e3845f-1d3b-414e-861a-56ebc67196a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.25.45.37']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8a5ef28-5fa8-41d6-b087-c39b5f438a4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.39.212.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00b48708-017a-445b-b714-20aa99ecb373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.67.202.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15a941dd-87cf-411b-9743-4358192de7e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.172.42.32']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--542ebf43-6493-435f-9fa0-414bc1f338b3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.217.213.120']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4f73c23-ccab-4092-a8d5-7343746df76e", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.59.122.80']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3905b495-7db2-4c2a-b477-2aaff47d2578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.193.128.162']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c44ca6e-7d67-4bf6-8487-94fba2577cbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.200.89.7']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ee330d0-ee3b-471f-a232-fb0e231bbdc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.246.209.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fa700be-a0f3-48b0-97cc-4abbd30396db", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.252.113.66']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d9c9785-2f4d-4390-a8ba-3c7a7fc8a8f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.50.189.153']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5ded417-418b-4897-9fe6-eb94aaec0076", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.54.70.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--122705f2-4555-401d-8735-a50c7c7adb87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.132']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c54c0e88-9fbf-46a0-9d88-2599fffe48db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.154']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d84484b-062b-4e1c-b0b0-c298bb414ff4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.185']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05419f00-a7d6-4c38-9930-1afc3ad32bc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.7']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c793e262-7f85-4ea4-a607-0f5ac4c8c807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.74']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07941ba2-c10e-4413-a8c0-1c585267403f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39c91614-545d-4538-87b1-84b4814393f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88197260-e192-4e5a-95d4-5356ac9fb1b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--879d07ba-baed-41fc-a90f-c7be1dd9334a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f56defe4-b4e9-450c-9849-042c0b223bc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bfc2e8e-88ef-48ef-8ca1-5ac3fabe65c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a279652c-2c7d-4e9e-81fd-bf91ee0e899f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a2ea47a-28f0-45f2-b58a-2caa11ef59dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33db4879-8092-45b8-99ae-b97893441943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b90ec12-c65c-4da4-b140-1e7d50b29f05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11f10d44-ff25-4d0f-ba14-7ee978f447dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e558189c-78bc-418b-acc9-9f5d2f8bb6a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--523a8c8c-a390-4055-a3df-51665c360699", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28150ee6-7bd0-4442-b9ae-3d4c3a548cf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--802650e3-1be5-4dfb-a8e2-2bbf61116709", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c3053df-bbf3-48e0-a03b-17ebf69ebdb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20dc2e82-34dc-4e6c-968b-073e9e83d6e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ba4d362-ccaa-4bd2-94a0-07d1ab5331af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad975620-febf-4a87-a673-b0ae9ec44da8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fea8ef80-c8be-4e61-af7f-451cdd30b19a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d2783db-0ce8-4386-bcf1-3c208c132e07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef469891-e376-4955-a561-b36c36e8b8ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d19bae-ca34-4885-9688-aebc41273c09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0446a1e0-4f6b-406a-9e78-1469deaf53c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d572aba-b9cd-4a36-98c7-1ab05edd561a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef7a1688-6d21-4d29-b187-e62ef64cd051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70a562ab-4896-4b56-a91a-86c4b2ba7468", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbb222ad-0511-4a02-bc61-24758fa9cabf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d02ed69b-782c-4b3f-a96a-869b3d2c814e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bc8e36d-aab9-4abb-82d9-14a97d7c8d7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.255']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36bae7d8-1684-41f8-8df2-bc1c1b6e2fc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02e23e00-6a9b-4a24-a41a-d30ab06d23ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13f45599-f336-49cb-b903-2aa515ee1dd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4b43760-af18-43fe-87ee-d06d0d07739e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--188977d6-49b4-4f70-8066-4b65f1410563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e258abc8-8b0a-46c6-b925-cad6df11be7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61eaca15-5930-416d-a762-a2f22c64920a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc92f7a4-5c66-4ea6-ab02-528a853e1222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09719d06-8401-46a7-9845-53e1976dd153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5840a09-389f-4852-84b7-e0a9a2114a6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14899554-a771-4b7f-b23f-d21499844c94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a206748c-501c-40c9-a06e-ea0914176472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47f71af6-0d5e-41ec-bb71-dcec79e0c9f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--066b0952-a1eb-45c4-8fd1-f246c66f3432", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93d85d54-5849-4126-96e8-8308801f50f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.236.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3b98b39-aa91-484e-b73f-f162efd885b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.237.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6ca04d2-81dd-4d93-84c4-39a3f8a7a55c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.237.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef4e32e5-42a0-4fe6-a78c-09391767d709", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.237.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32ac0558-3b2c-4588-bf29-b4a87d84d93a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.237.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c15907f9-a706-4198-840c-208512f0ac22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.237.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a498d9d-2ddf-41c2-a227-09f8faeeb6bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.237.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b91e401c-fbad-48e8-bc82-87eff5b2351a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.237.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7884f46-0f2a-4b47-87f5-1af473350bec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.237.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb9cf335-3f33-4167-bfae-0aac7ea4ecfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.237.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5edd6a86-9be0-409d-ac3d-ec74bf29a332", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.237.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c84ec151-8c1b-4b1a-bd64-3050e23977e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.237.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06adf708-1f98-4b55-aad5-08c00807eb28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.237.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aac7848c-d37e-457b-a413-72d4f7aa5726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.237.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b43107a2-5207-4243-9ba3-17d00081ba3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.237.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79594052-14cf-4439-9735-d95c9abc995a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.237.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--927de04f-cc31-4382-953a-c842f3217e63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.237.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2927a23a-a164-4d76-bcce-be5bc70293cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.237.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63da3d7a-573c-4ab7-89e7-c0fd9c9e488f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.237.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2a84453-3a91-4c7b-b889-e8d1f512b858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.237.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e85cf19e-1fcc-41ec-94ca-57051aaecbc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.237.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ae83456-0cc0-4b6e-a591-a83b7175dcef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.237.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16c36dd0-00c7-4530-a1bf-7495941ad388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.237.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c18b93c-18ad-483c-9a46-e144c2a4d96a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.237.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bdaadb4-cc04-4f73-ba01-46c8973c6749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.237.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2b03b72-4d2e-4812-a156-28826e7b52f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.237.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60165273-b6ca-4eae-aec7-35be7ef2cc4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.237.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--290ca48b-a856-499c-b12b-fe50ad53ce54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.237.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc9d946f-8e96-4f83-9028-9c700f16ad56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.237.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b523e8c-726b-4600-9c92-3fbc24e131e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.237.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12e65cdc-6eef-4d2d-ae93-bd76149661ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.237.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97692c42-6b2c-425c-a38a-9fd926f404c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.237.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1435c945-77f5-4e59-90e6-d5052156085e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.237.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--362377a5-2f06-410c-9b2a-b39a5cad6d47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.237.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef55d44-7327-4898-b71b-dae27069cda5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.237.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2071cf0f-3248-41e9-a164-48248501c831", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.237.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fdf529a-2a3d-420a-b6e1-26b5e405ac5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.237.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2be54f7-8e56-4e52-afab-864d3e9a829c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.237.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--450be0b8-2ce6-4b91-a8c8-5c93798f0175", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.237.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--094bc8e5-0daa-40af-9667-1850a9344901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.237.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f62b7adb-9cbd-486d-838f-68c6429760fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.237.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73d1a4a4-f537-43bb-a6bc-f453fa830ad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.237.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b9026be-2c14-452c-bd59-b7c7a904bdaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.237.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ce3a20d-2678-40f3-8e65-5e7146739099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.237.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1662061-930a-4401-addd-da2b8424e01e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.238.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2adef8cc-b6ac-44f6-ae3d-22b85446121d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.238.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2b7a05e-c9ee-4259-aa10-0a9cf2c27b8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.238.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4baddb80-3613-4d54-9588-14cca56be40d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.238.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--819ccf9e-e807-42a7-be5f-205cc4f7e92d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.238.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--600d0466-74e6-44cc-a452-35fe4985dcc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.238.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc1af451-edb4-485e-869a-6d03d1f41533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.238.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed640909-2267-409f-8aaf-bf3afd419d53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.238.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b4dad15-0460-43a3-811c-9a9edd5195be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.238.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a97748f2-e956-48a4-a5bd-47fc67652f34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.238.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b76d9f54-eea8-4157-831f-c3c0ef7a17f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.238.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef915eb0-fd86-43b4-9740-84ff70ac3360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.238.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c403592d-40ca-4a2f-8047-7cc55c2b0a60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.238.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--918107ae-472b-4f33-b2fb-385d11f24684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.238.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3715de6-8b79-4a15-93ac-92a62ca032b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.238.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f455aeff-9f43-4d02-be35-a5a249272665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.238.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5af6391-d47e-4551-9214-6f67f9fa4fae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.238.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4c7d53a-f602-4c5a-a4ec-2d962d8cbe41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.238.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--943fdec0-2473-4c04-bdb9-d5ac39417979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.238.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4cb977d-530b-4f08-a7f3-279455edc398", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.238.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4939f05-12db-452a-b8b4-6b7373b0249e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.238.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9453d14a-5247-4288-af42-804d1555161d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.238.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5cfa4f2-d985-492c-a2fa-b5808493a0c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.238.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19e6c369-7a86-4a06-beb4-ff8eaac677ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.238.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--588e1eb4-6276-4072-9300-4b555c875292", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.238.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b901cae1-6722-4156-b35d-ad15dd46f55e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.238.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b56ab84c-4978-4a2e-8df6-ddc25635d8ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.238.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c962e39-ec77-49d4-b9c0-0d39e246910c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.238.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--814177e6-a544-4183-8c47-e7ac069718dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.238.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba500a1c-cd62-450b-8fb0-71092a765626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.238.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f32abbe2-5d35-4267-b55e-edeb00136d13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.238.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3a764bb-7193-4f37-b605-8c6b68bfaa63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.238.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f07b41d6-8f3d-4f29-95f0-cee0a4b863ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.238.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc876659-5148-4ab2-b526-a3a2ff155a38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.238.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a236a7b7-df42-4d85-9602-1d7b580d4f91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.238.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5251fdc-60ab-4c99-a350-b3847dceeb19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.238.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb1eff87-eb89-4c9f-bb40-4497b393bfce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.238.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b014ab9e-2808-4063-9315-5c15ec7065db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.238.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94bfda8e-853e-462b-9656-36252345b06c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.238.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68c9e10d-ddfd-4418-8a7c-2d3e65a86902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.238.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--232d9427-5faa-4d31-949a-a7d7bc94c901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.238.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e669c07-1270-4143-84bf-12b4d19dcfa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.238.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cffd3d8c-47d4-474b-a459-bef7d934d7c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.238.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adb70152-7567-4f4c-9207-d6ec1c862ff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.130.210.16']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87e4ac19-4e86-4f13-b535-bd4e0d031c27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.153.204.204']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b395355d-086c-434a-9521-bc86f6ae8d1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.174.251.45']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95e89baa-4883-4c53-b04b-0ecf73b78b59", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.204.70.96']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37f5bcd8-c30f-4dd1-bf81-014e3fe1777d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.193']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64915846-5c08-4672-85e6-1f67f210afc4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.194']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea9e38b0-2fa5-4845-bc38-adfdfc3b5d31", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.195']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7512df20-1dc6-42d1-b744-5dedd7fc920e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.196']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08705ae0-b023-4101-b9fe-3ccadce8184d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.197']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39e1dcbe-b13c-40c4-800d-668237578794", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.198']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54ec6d8f-58c2-434f-b31f-e32e6e03a3d1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.199']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e1d86e9-2f8d-4817-a385-776f520b719c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.200']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--354497a7-ce8d-4c4d-8f1d-824d29826541", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.201']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e894490-2a33-460b-a509-3d50f70c7caf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.202']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61929dd4-5a12-410e-bce3-cacaf563e1cc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.203']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1db80344-9bd5-4760-91c8-4aa04d404a11", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.204']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12d43f64-12e9-4d89-a111-ea4fae337fab", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.205']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fe8f3ea-813e-4479-988e-84f6d7dad8ac", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.206']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b2066b3-52b5-478e-9f9d-c9179e3cc92d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.207']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--820d97d2-c519-4968-a38a-2c4405cf569d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.208']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c04a2996-c9cb-40b5-bf44-bc85848ee472", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.209']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--252fc116-663e-463b-beb6-4bdd822ebe6a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.210']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04e80f9c-9cb8-462c-bf03-6e6cae58adf3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.211']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--375737e2-29ca-4718-a7db-5db623440e6c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--611c63f3-f903-4fca-923a-852d61546744", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb19b293-38d6-4bd7-8769-59607d637d80", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.57']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29971386-2e07-4906-a3bc-bca7cda1f973", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.58']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a12ff7a-6c0f-4d86-aace-1a81fc501b6c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.59']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcb29811-9f96-46bd-824c-7c59942935d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.1']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27841ab1-37c9-42c3-8089-4c01479407b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.10']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c12211f0-1f12-43a2-98f2-b0cef9f34076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.11']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ab0fda5-374b-417e-848a-d317f857c1a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.13']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d98b28a6-9cc3-4642-b5cb-062a489d74b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.15']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e556051e-5856-4d4c-92be-9385bb2d8c35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.16']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88825e82-0c9d-4c77-a737-11b0aa1faab7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.27']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08752c57-ac26-4c31-ba64-bb18fadb0f9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75ebd69c-c635-4007-b281-9e677af97947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.3']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03ece340-48c6-4e31-9327-f2fbd5bf6259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acfe3805-fe83-4d91-b859-0a62c8eb3be7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.33']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87d6499f-307f-4986-b1ee-db5d509d3bfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.34']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdceb7a2-067f-4ed9-9a90-29a721950c0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.35']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7b92ef1-ca55-4cc3-bdf8-7b043432897d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.37']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdfb5a3b-93b4-44b5-a4b8-78a5072da883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.39']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8f6c895-bfc8-4dd3-9c24-0f640c542be9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.40']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ae7b888-c0dd-4210-8be5-b4eeb6955c60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.41']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1885b903-3f56-42ad-99dd-d4044903068e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.43']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8264da4-09c7-47ae-b2b3-2428c845da75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.44']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0fa078c-ee42-4270-b140-3678901d5bea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.45']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0f02754-4166-46b3-a161-3412795cd965", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.46']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b15713d-02fd-4cd3-901b-396ad5ded16a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.47']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a597e931-c881-498f-bbd8-9561b89208e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.48']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11579cbf-9528-4e0c-adc6-dbc06552f3c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.49']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--097b95bd-9363-4825-8283-44f5957d2879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.5']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e764f35-2a68-401a-bfea-201801025913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.50']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa424ceb-0a17-46f4-bb59-4f899f7920c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.51']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a45d8b6d-7a78-4aea-b81d-9b0b74f6b50a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f21f5d93-94fc-47b7-8c81-ed385f9cf7d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41e3e0fd-e93b-4ddf-90d6-d8fc419d53a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.6']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aad533cd-6964-4c8f-95d0-88e287197c76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.7']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e1b8acf-bdc1-442a-9cb2-0931c5672b73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.8']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--185dcdf4-9cb9-42ba-85ed-17f644150138", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.1']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdc3a2c6-0f71-40a4-aafd-c562c40d6695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.12']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea8e6d84-3bdc-4d91-836c-b871270d4290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.24']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7022094-8b19-492b-a2de-7812933a56f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.3']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75995946-1895-4ce2-802f-3a92ab3c8126", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.37']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92e7a584-bd8f-48a1-a9d7-95f3c56af8d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.40']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8b5a296-1daf-46c4-b5aa-459d6be843d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.42']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2015693d-d938-434a-8556-7b1a270b69b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.47']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f005a3e-f316-44ed-b369-53549cbe5d3f", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.49']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71a1cb99-1cb4-4148-a35e-c80ccddef9a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d4b0ac2-fcd6-4203-af18-55b15c793a9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.56']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03dcba03-8d00-4a07-9997-94b78bf4f202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.57']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d85e487f-ddf6-4de4-89c4-569a47d7f55f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.67']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53adcfeb-c8b1-414f-a4c1-1443c4af8066", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.68']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aeadb01-7ded-45e0-8353-1ade3eb011c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.69']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adb1e766-a3c7-4157-9534-a621ade48ffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.70']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec8657b8-efea-4fb1-b50a-02aedd21beed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.71']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c9f408e-08af-404e-ace7-679b72ee96b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.72']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43af6801-308c-4570-a0d4-380360ca0e62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.73']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80bd0589-a78e-426d-bfa1-54e9e2c7bdf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.74']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9085ab1c-94f6-416e-853b-5bf6ee159526", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.151.34']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7abdda4e-3962-4e45-ae18-57f0e58afab3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.91.200.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c0b1f7e-568f-4b24-aec6-a8c5bca6aa3e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.98.126.108']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcdb3d20-1ef8-484c-9269-519e066d26d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.105.4.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c71b895-6db7-4668-850d-f5087763583d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.105.4.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5553f8a9-1198-418a-b13b-0bd20c60f4fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.105.4.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f36491bc-bbc1-4482-abd3-51b13165533c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.105.4.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96e6b8bc-f1ce-498d-85f7-7a2d999c432b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.244.74.66']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f41f0a-a115-4314-9d28-16264ca6b996", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.32']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e8db8ec-2d7f-404d-89cd-763ac3c3cff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.34']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa34ad88-5dce-4d8f-9cbc-0b7ff837ae52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.36']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed0c3196-5b98-48e4-8275-a744da98c7f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.38']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea595391-6d96-4332-81f7-ec571a9a0c0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.40']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d0addba-8758-4b3b-bb20-641c3309d9ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.44']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c812be4-ddf5-4b33-8353-a86facfa63c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.92.53.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c719dad5-8a46-4197-b500-68d46d80c4e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.120.104.79']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7529b2da-4f0b-4326-b5ef-93be9484a94f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.192.253.110']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1ce6218-8e16-400d-9e89-487c10feafc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.10']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b238d33e-e167-44df-8fcc-791d1e149b85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.154']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06c6320c-bfa6-47ce-8787-f5a172517210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.204']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a870948-59a7-4479-8685-550c1d68383a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63cdef9b-ebfd-4f3b-a41d-9f8ce772df88", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.248.155.192']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--575b80a5-2ad9-4d85-86df-522e53895d74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.50']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e95ac604-a41c-4dd7-a05e-607289450372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.58.197.196']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd79996a-5f33-477e-a9bd-7bb047242307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.135.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57a14c6e-db5f-4495-ac97-56c3f010141f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.135.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3fc51d2-e7ba-459a-944c-a65cab9de4c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.235.217.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1105db0f-14e9-4246-9b77-d38c01c08951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.125.125.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--411efcda-3f2c-4a9b-bd1a-ef65a1669264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.125.125.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--373e7125-c3a0-49a4-854d-58e1d0d4e546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.125.125.91']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e5ce0c0-bf8b-4334-9286-4168757cc460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.23.153.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a380cd8-fce1-4c77-86cd-67e4268be93b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.236.204.26']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0ce040d-ed77-45c5-b93e-e878f8e4fc2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.163.168']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e0a101b-102f-490a-a511-7967e4872673", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.167.131']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77f9ae88-76e0-43a4-934d-b827a5bcdcb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.168.36']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--420bd6ae-f89b-4c22-b9a0-3d6c5db63c9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.10']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e9781e1-b246-4f31-8e77-ee711e2253a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.11']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bb2304f-44c4-4b9e-851d-441170758bba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--883c4c19-4aa9-49e8-9ecb-9ae18cd6a535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--414b5d2a-b1fa-4adc-b8c2-1dc18a40330c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--388b0480-7b2b-4eb4-b8f4-6c6723e07fbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--847a19cb-aab2-431c-b02e-c7025ac3b319", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c10e2f50-84e7-4784-84bf-ba27ca3b463c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd8b7703-f468-46fd-8272-c16457fb4f05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd5755f9-3c5f-4e2c-8c56-7071b470bcb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--412d7b99-01f5-43b4-935e-6d3431976435", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eec4ac0c-0ae7-4c58-bc6a-35ba208f4e50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5eabf4d-a492-449e-9a81-65d728621111", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98372211-dde1-42c5-9380-60803b178c7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6766981e-f84c-40ee-b9ad-4dfe878858ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f2681ca-7e07-4c24-8ef6-3ee942eeb68e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da21d52b-1fe9-4d3c-8ee5-c760d4dae7c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d55059e-4cf3-409a-bdc6-b9854e0e35a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79baf7a8-fc99-4c6d-875d-afdec14989d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73eb7066-036b-4198-bf68-fcebc90f678d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0866b241-8b95-4c77-8afb-b4e6d1b41e93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--951f24ec-6867-4867-b05b-f8b10920f3a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc56f35e-9c82-43ee-a793-167c58ea5985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a533958-75b3-4f23-87cd-b29f788f669f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bece02b-bcd4-4eab-b684-e700f7a0d58e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--643e4b22-6104-4513-8436-f4ce713782ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97ddcae4-c620-4542-a16b-4df5c9cf83e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bc3f379-8616-42f6-bf5b-a4d1686512de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20d52c07-2b69-4fa3-b2a8-34c9a89d5169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a083c34-8070-4a0d-9209-b74b01492921", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb2bc03e-264b-4607-a166-6465e6ef7fdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11c17278-a88b-4a91-b5aa-95afec3edbbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6faa73b-86dc-4c81-9a25-893e980437b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15bbf979-57c9-4273-a2d1-15e6e1e5ad1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed64dc19-a274-4d37-a1de-808e80826d8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9945a53d-6dd1-4af0-977d-d9bdcf014607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69f80521-7d04-4321-985f-7a3780d22380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b30b577-17de-4b7d-9d5b-40342c2d8a8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ffa34b4-6d46-44ca-a29b-432807c00931", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88b9dd7d-7972-4abc-8b1a-83604d90aa50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--984341ce-f064-4bbf-b106-8f70eba9779f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ad6fe93-bacf-4152-a81f-a81389d61cbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa8017a6-a672-4e53-96cd-2f063ba05b63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7d9408f-4399-408b-b7b2-f362a98295a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbdd4eb8-4bb4-4b6b-9835-cff1c59de379", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69da867b-f899-455b-835b-da75b94e33d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.255']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63cf6c85-7921-4ff8-b981-e8fc31e678e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24f04480-c2ea-446c-aad8-cf2bd07a2f15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1b49c2f-b704-412a-af5b-318f184732a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79ca6a66-9d00-4fbd-8fa0-e5a06b17294e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd5528b8-9159-414d-b6c9-1df11da2c3ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf9a052-6a18-4377-a95f-7bf517f3c384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94e466b5-cfd8-4eb3-9819-7fd373d22c9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98a2253e-b614-47d5-aa1d-db05e9d849d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2be46e9d-65d5-4012-99f9-f8d5cb63d717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9f1d312-c4c7-45e0-918f-7a0bb3517f14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d05022d-9565-4d1d-b6d7-399e5476f84a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--453245c0-a2f2-4632-a46e-a0b9a7392976", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b24c2ebd-ce25-4764-ad6f-b56b6441f1b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbeda2b9-a96d-4945-a328-2265c7910a01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d63431-4102-4a0c-abb6-b868af790fb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--450579be-c865-47c0-9d00-b92fc812d6de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d5f07ca-87ec-44a0-9de0-5f9dec0ffba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3dae526-3515-4aaa-b61d-1c6fa0d35782", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84e831e9-231e-4fdb-b703-b47920558a25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae564d3-23a7-45e8-b0a8-5ac692b23f95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.153.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d9ca2ba-8052-4097-ba63-e47bffb0bea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.28.202.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5269067e-30d3-4969-aefc-9edc141d4228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.28.202.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8131f1e4-5c84-4cfa-bd50-d459176b7830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.28.202.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ed8d0b2-4700-4aef-b0ee-432882da2d62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.28.202.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6707b88c-952e-4ae6-8565-badc51e6d9f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.28.202.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d023cd87-3aed-4b0d-9953-60c03017bcb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.28.202.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55f2e76d-ad0c-4782-98f2-4a9da17bcc4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.28.202.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77f6d966-5b49-4c1b-8d62-088fee75a162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.28.202.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f73e5854-168a-452f-9c05-218c4beca96a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.28.202.74']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b54a0d7-6979-4c9b-94bc-b3083ea83d1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.42.231.200']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09c0b112-fb24-45e7-bb99-6df8c450dfdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.58.88.17']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc50ac5b-463e-46c6-b740-17723e5211d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.11.42']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--617e8e39-aab6-4d1e-983f-7d5b72917272", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.188.247.0']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5d8b81c-81d5-43cd-b2e4-5463b9fda43d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.107.190.175']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca782f2c-ab79-49cc-bbda-f3c230d24eac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.1']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ae73654-4d8b-4a6f-9796-d01511bf8994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.100']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55b4abae-c479-4479-b397-46227762f0b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.102']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c349063a-b849-4608-8f76-8feada920133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.104']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4ec2a35-73de-4796-9e68-a14aa5b958e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.105']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acfe47c9-5614-4535-b4e6-2ac04b82b169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.106']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--405aa20f-db7a-40dd-b38a-a70c704414a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.107']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--566c2121-6c94-47e4-8c15-763d6f9f0a6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.108']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1878f9a8-4737-42b8-8f1b-b7e26b31b9cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.11']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e075c48-fc85-4770-a179-5029acd5fb08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.110']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8d49d5e-d8de-4a1b-98b2-5df7c41311e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.111']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2df6fb61-b273-4607-a86c-63df33672e5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.112']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--922b379b-adbe-469a-a67d-bf094fd00a7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.113']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7829c836-6ec4-407a-8b5b-f3c485108e41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.115']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc55c669-a9fe-4e11-9621-f6d5e29401a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ed54c52-4754-44f6-a54e-66343ed775d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e16b6d25-d856-4a99-b879-cc76ad772740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04bf2600-bfdb-4d90-8506-14bdcd97d72e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc2ad201-023d-48b8-a800-3dd65bac82b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.12']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a2039f4-af6c-4476-af39-fbbe10780e82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.120']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e81b8621-5729-4646-ac2d-3b02832c42a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.121']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb85ed0-9d09-4f4e-9667-2df7a54845fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.122']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20a62655-b76a-4000-a3f0-85bacde81e0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.123']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57136ec4-c407-49d3-a549-eeb37044ac60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c013db8b-4df2-4b2b-acb5-398fa085cfa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33ffcaac-810a-4f83-a213-cee957be6302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d658a7b2-caef-403a-b876-0da5262e6336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.128']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b188c686-98be-424c-8a25-6c73ae0a27f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.129']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2ab1945-40d6-4596-88ca-4262a68d1e33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.13']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdea8358-4ddb-4a3d-bd36-cafdcfb11bd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.130']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45cd04ac-754e-47e2-9d6c-1ae70e0c9d84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.131']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e21a86a5-df69-430b-80a8-6b31fac9662c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.132']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1807c9a3-a513-473b-8a46-ba8a9a2b32e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.133']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67552f1f-5634-4b7f-a8f4-20c7119ee96e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.135']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf0e3daf-07f2-43f4-bba1-84dd7d5e9cb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.136']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95e55af4-a94b-4263-9755-03eb82b037e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.137']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10ce9229-6d4a-4933-94fc-2c5783ff228a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.138']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1390cca1-5149-4429-8c07-bb970e7710df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.14']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e3501f2-5700-4e15-9237-3972a7a53c7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.140']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92486bbe-128e-4421-b93d-83d286bafc4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.141']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9268e0da-18ab-444b-bfab-fd038dc4c30f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.142']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cb87bb4-e896-429a-8678-b720dd865f9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.143']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--566ddd3a-5f8c-4464-91c5-e28f0d57ef4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.144']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29ee6ce5-4549-4842-a8ac-6b9aed7d1631", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.145']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59f66f5a-f23d-4fcd-9e17-6aea1af9339d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.147']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--830bf46e-c96f-4066-a229-8154bd252316", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e86a3e8c-773d-4976-b003-dc474a343de9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f15c373c-f0eb-4caa-ba0f-eac27fe8c69d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.15']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8aa9dc0-d793-4c59-aee9-ec5a2b5ae379", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe4dbdac-1d8e-4359-83ca-e57808975188", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f67d4bfb-4bd4-44ef-9544-7f5c7c11a7c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.153']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eec13ef5-feb7-46a7-895b-146e3e5ca871", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.154']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75bd004b-0b5c-4e15-b32b-8e9fe1899687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.155']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--985d6a35-79d4-40e3-a1c0-bc95bfcab1a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8559f86e-0880-4860-b8a0-d0930f127989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8fcbed6-3a13-4720-b9ae-6c48e9dc9cc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43ee7da1-fac1-47d1-8139-859ba400a980", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.16']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60ad7188-1e4e-4cb9-a825-ae5561e1b5e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.160']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7083577-9adc-4f3d-815b-903b65845ec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.161']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4a7da75-9334-4aa8-92be-2f229f8f9402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.162']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f576bc71-ceeb-437b-b74e-7a8dc3d7207f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.163']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a5d91e6-b676-43eb-9711-32a154aea087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.164']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea35da89-91d4-49c3-b9d1-adf5f27fe9f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.165']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5b2bdfe-2f4c-4daf-ad1f-968db6320d4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.166']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78e4b5f8-885a-4253-802a-e1b1d90009ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.167']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a7625e-58e4-49db-a808-e3b7e394ad02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.168']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f801565e-4797-46f2-9d9b-8a21cf0dbdd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.169']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03e6e7b9-df93-40d5-b877-c3c254eec687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.17']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b47b1b38-a001-4a40-99fb-bb6bdad8910e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.170']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e0a87cf-fd1e-4b77-9003-3878a1e1a3ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.171']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67bc8499-1236-4a5b-bca3-40223a0771c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.172']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a029496e-912e-489e-b664-d3f7ae8738b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.173']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81407912-cf88-4d74-9402-530735be77dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.174']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75f53a8a-129b-402c-acc4-34840911615b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.176']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0764cca1-f78f-4aea-9481-e6204226404e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.177']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c57ea7-5ce1-430c-a071-a4816137acd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.178']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9150b416-30e9-4155-bfeb-f3743ab96050", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.179']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7651422d-ec21-4ee9-b407-7f816eb3a693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.18']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--455503bb-6920-43d0-b2ba-da91f9fec189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74d72f00-b190-45e7-a02c-6373cbdf9c9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34d02f50-1689-47eb-b0fc-6e063392c8bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4262ccdc-1aa6-4599-be2a-64221677916a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d5acbb-b730-4698-82f0-ade8af68321a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.184']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb8e7a77-6765-40fe-913a-3e9171caebb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.186']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ca26119-62ea-4996-8173-ac7749a7dbf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.187']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8e2409f-0f55-4e0c-abf9-0b46e64be547", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ccfd89c-587f-40c0-8cc1-bb3a8f055748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.19']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8495c32-4ff3-4750-ae2e-e187dc9a3394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f13ee1b8-8429-45aa-aa75-dcb2195e55c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--349e714c-9bb3-43ac-bf4c-7c3d198e7259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.192']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb525d4-6a48-4287-8100-6e4eb1aeb1d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.193']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--112c19b8-b41e-4678-aaa4-1cd3ec13fd2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.195']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d268b3b-a3ca-4605-8e77-454761c5cf89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.196']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6045b5ef-cae0-4e62-bc71-4881b489fbd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.198']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abe11832-4d61-478a-a234-e88d73bf1c8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.2']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86b45604-ee12-4df8-91c8-26a2d60137d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55202ca6-2123-450f-8548-1c1795d476a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.201']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bca01b9c-e255-4334-8c25-a888904c988a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.202']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1d29b4c-7135-4513-bfa6-ad661520c283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.203']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b0bfe0d-7553-4eb9-bbcc-c236583c167a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.204']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c586443c-7a09-41e4-800d-6d95c16eedca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.205']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef9cd0d-1234-431d-8fad-52ac59d6934a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.206']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b18b55d-60c6-4c78-92c5-32a75f998a43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.207']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9e67df3-e471-45e3-b3c4-424165748ef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.208']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56a3d9e9-8565-4558-b29f-bd4fd9f37698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.209']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1612773-8417-4176-a4f1-1f7f4a40f2d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a6babe7-99be-4fa0-83fc-eb133826ec8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.210']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10b31f79-a19a-47d6-9a33-ce66b8da4bd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.211']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50c4c59a-7183-454c-bff5-075f7d61b66e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15cd36e0-cc85-4917-95f1-4a337c12344f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03adeadf-398b-4c8c-9c14-42af37988974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.216']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daeeee6a-ea66-474c-87f0-c61e3d1b938d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.217']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b99bdf33-4bfc-4b0d-982b-aea9177af1f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.219']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7fe51ca-b89f-4b2e-b9cb-8d1d235e95d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fa62438-a52d-49de-a9fa-1ca50732fa5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e119f2d-b6ee-416c-8d34-915721e377bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75b1f538-6bcb-44fa-8c05-010dc564215a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f0e3308-b056-45c2-8cb2-c7dcb1284937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.224']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8fb1ccc-03ef-4ed5-8295-0d93985b09da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.225']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ab32531-ea6c-4a84-bb7b-3d35353bc56e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.226']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ff22a0b-b887-4939-b3eb-3d73a14eadd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.227']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1c82090-2c59-41cf-bd35-f1fed8a56e56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.228']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b0b3d2b-8208-4861-8cce-4e3134733adf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.229']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--866ce51a-3513-4bc2-9ba5-129a7950e0af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d63a6fae-02f4-4ea8-b967-94cb51f04c54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.231']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a85da1ef-f308-45b9-a66f-c6572321f0ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.232']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50a0065f-345c-402c-90e4-9644fda3e57d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.233']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c44f455-e76a-43ab-a503-426afdb54074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.234']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb129e23-9987-485d-b4a3-40c170365d3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.235']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07876379-d0ac-40fc-96ad-09ab852fc6d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.237']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--527393fc-d9e1-4ee8-a2ea-4db37eaea55d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.238']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f678a143-36f2-4644-a972-95f1e0dc6847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.239']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8599450-c9c5-4b33-a0ec-bf923e65d032", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.24']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dec093d3-b535-4d3c-8160-6e3fe560eace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.240']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0546eff7-c424-4326-96e9-7216620e930a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.241']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37bb0701-9dcd-4d49-934b-30804f5545fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.242']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--399f88bb-1a68-4c6f-b99c-9617adb3e324", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a998173-3e59-466e-8a0c-92049578ac1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c04bf6de-f070-4a88-b78c-666fad93d194", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a258b734-a5bb-49c3-b688-651cea0962b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.248']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0c93223-9527-4139-a232-2939f93cc84e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.249']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--378e6bb6-8a32-4fb5-9aa1-a5ab2eb84f19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.250']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56b60071-4781-4b13-97e8-0fb030ee2707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.251']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf67ca76-ac67-4d0e-ae08-1d91e63a2684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b99e689f-0c8f-4c08-88d1-156c49c212b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c3715c3-e1fd-4c50-b24b-8e29f7ae3e3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ddc6e19-a948-4612-bc69-36fbae7a3a38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.255']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e784e9bb-4709-46c9-b670-7b040dd8d202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.26']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a298ecb2-d8b3-4b79-b637-088c79893828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.27']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66599634-1978-4dfa-b132-c676b5f02250", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a7cacb4-4cab-46e9-868a-bf8b23daa17f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.3']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe23f17c-329e-4e70-ad6d-1f5247573283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad9f5dbe-d3ae-4ee5-abbb-0dab1c75e8c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.32']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecec5ed3-4315-42dd-b634-4c328559cdaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.33']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98ee76da-7d6f-4bc7-8ab7-e9cdc7e40c71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.34']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05da8504-d79a-4d6d-9392-9520202e3dde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.35']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59125675-d581-4146-a38f-08df57bd20e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.37']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92fa95a1-da5e-4452-b4f9-66867ab8dd02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.38']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7e94393-79b7-4b26-b038-0d5fb606caed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.39']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31fea511-fe1f-4026-b1e1-76476f8c4130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.4']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc5e4491-3a9e-4e7b-9d61-79f76b55a3f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.40']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cde6454e-40d5-4d99-9f5c-967360fc8bf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.41']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38f207c7-40db-4db1-9e77-555663e59eec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.42']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e9a5bbf-46b4-412a-9a1a-ad0ee21c9440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.43']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e4a8360-fe8a-4717-9342-967d72c71425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.44']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f43668b-a362-4827-801c-7c1be52a6b33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.45']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e47cd1-77d3-4060-bdec-f1b5071a7180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.46']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0f3d937-7928-4706-8017-9498ba3f36cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.47']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29319d64-9bb2-4a74-b17d-d83b874f0888", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.48']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24054c22-eb99-4da7-9806-9f3bf08e53b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.49']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1e32900-4e71-4fe5-8243-03bc5be7c2cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.5']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47571c3c-714b-40f1-a673-5b5a9a39e532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.50']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e9071c-fb00-4bf4-b48d-03cabdbd2cd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.51']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de0eb956-9d59-4f8f-87ed-cd30d33531ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--808adcb8-1ec4-4429-89fd-b8de2cf6fb0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37fb5d12-c256-4767-abfd-ce2f5ab18f2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35f890e3-ea4f-48a6-b681-dbdae77b7510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.56']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a7f27b7-30af-4665-8e05-f6545602dd88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.57']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00e5c6d5-7efa-46bc-85da-c7543b39113b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.59']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44be118a-4a98-463f-82a0-d1482676f408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.6']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab7f5dde-9b7e-446d-b021-cf105418fcdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f28b1b8a-1fa7-4d5d-9455-e388c3f183ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3535f63-9b93-4ae1-a5bb-2c80f7d73745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2555569b-e848-4986-949a-43ae3c437d1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.64']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a462614d-bfbb-4413-af0b-6128a278916d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.65']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed7be71a-defc-4f79-887d-4870088686c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.66']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9615325c-b0e1-4ad2-a7bc-8406f70ae84a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.67']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df4c292d-37d0-4a4f-99e5-d9c632f9f58c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.7']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d7de2d0-fb09-4b2c-8b71-c573371d5920", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.70']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f4bf5be-170a-4e7a-990c-8574aeb143f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.71']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1298453d-19f7-497e-9620-c06c1ff88c03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.72']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--014a843b-8dec-4168-99a9-a93aea9cc557", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.73']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e593a7ca-b33a-4599-b40b-eebfc844c129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.74']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9ac5453-f796-428b-8972-4de81fb03955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.75']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dac91948-ab3d-4cff-a957-b22fffb27ed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.76']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cd8a349-dc2b-4d23-90fc-9a06411fa146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.77']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--091bdb86-95c8-4b54-a0f7-b7cbb6e77d8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.78']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71be034e-4492-4457-ba3f-7e41bb56716c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.79']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41a6fa22-1ac5-46bd-993c-3eabb0bf1e16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.8']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb3263d8-0b52-4de7-92da-bee93d031f63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.80']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3dc28b7-4d96-440d-8100-ac998e7b1958", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.81']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5835aa0d-ee13-40aa-9809-1368efe4e0a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.82']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2860b82-1699-4845-91a8-7e51f7eaccbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.83']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdfcd447-d9d5-441b-ba6a-c5159d4c6c03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--827fb68d-056a-4cd6-91e0-4e565e13e96d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1889e6a-43d2-4f40-9230-3023ab858ed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--374804b2-7725-4f81-b8ad-76f0da0d09be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e57a5a15-9926-4b31-8956-a08906257760", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.88']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--328a010b-5bff-4136-ba03-a5c0fb8279e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.89']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c012461e-ace3-477d-9435-714ceeebf76c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.9']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47f39705-b689-49d5-9b42-e6c3d344b5c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.90']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b20b68e-0fca-4340-ad32-454f400c26ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.91']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2288f20d-08b0-4946-8c01-726f44208327", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66dee6d2-59dc-4be8-9a7f-43de52b79d70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99d4990e-31f7-440c-9e45-44aa5f7d4982", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4833932-f3f6-4ab4-b0d4-368c49578e6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a89701a-1383-4d70-9f05-91da389f5df3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.96']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9169457-d40e-4fc4-a6d5-f17e0e7a2eb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.97']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d29a4749-3463-49f7-a9a8-cc04c14d2275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.98']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70cee809-f13e-4357-94d5-fc7fdbdfbe43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.137.179.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a6e5b11-47ad-4aca-8f18-98e59c0c71c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.148.190.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8774ee9b-7845-4164-974a-769603dbc488", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.157.251.7']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d20092e2-053b-47ad-8f09-9d82b4e7d002", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.174.38.196']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38a7ae18-5eb1-4ed5-8c85-56f4b0fad782", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.184.197.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b04b0ccc-3d8d-41cb-9a1c-14b3c34a1437", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.184.252.72']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec89661e-6097-4896-b2f3-98fbc1eb4dc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cb90962-52c6-4180-bf9d-31d26f3c7e3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.198']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c310e941-863d-4cef-8a3f-52dd92ed90bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.46']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba658c31-c86f-4aca-874f-8feeffa838eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.98']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51bd1d13-fe86-40e1-8472-890f49ef3404", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef030e8c-86f6-4fe1-8e15-c47690b790ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.120']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b293d5e-0b12-4fa9-81f5-13c0eccbceca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.122']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63b39953-aa13-4a8a-aaf5-3bf483600bf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--830530e2-f180-4bdf-84e1-e67e91d3b762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f394217c-25f6-4f54-9ffa-11d81c99be80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.14']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b3f010f-7acb-45b9-bfa3-d90acdd09727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.163']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9093e88-bbf7-435e-a283-f4c52a1f0616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.164']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ffe3002-c1f7-4d5a-ba54-0b46e5fc91e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.184']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1238c049-9640-480b-b005-a7f09e332aa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.186']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76606b7f-e985-4e1a-8ebd-56a80c08e762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b305124c-afa4-4214-8ab8-bee5d4ba8c7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f3719ab-6b1f-4c62-a010-1ca7ef0a3589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.192']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--671f6030-06c5-4b7b-802c-36b2b922bfda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.194']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5d203c8-b928-4f66-8a2e-1d80b27d991c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.196']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47e36685-5dcc-41b5-9533-13c037418b31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.198']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d4092f8-f0a9-4fb2-996c-71f3986b6462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.200']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86a2a176-6881-4448-8c61-70ad85be3814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.202']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e11a716b-4ddd-413f-b279-fd92a5ade207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.204']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--770f3d4f-39fc-4da8-9395-e42b693b287b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.206']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0011a7f-e2aa-4411-93c5-085048b16f9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.216']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81a67532-bf32-4a96-8393-dcf2efd66e7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.218']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4346829-eaf0-4305-a7b5-aa86661bf35b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1caccf18-0b06-47e7-87d7-072df66e0c9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cbecab2-1c5b-418d-a511-703f68423416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d200391f-5198-45c1-8786-ab893f1b60ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9971a7c4-a46b-4885-97ad-c0bff51c3e81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.232']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c188b418-59b1-44b8-b570-8782b56078f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.234']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c08c672a-93b3-4d22-83cd-ff4159799be0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.236']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bc9f38e-878e-4877-b20f-db72aa713c1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.238']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33a8ff70-b8f9-425e-937d-40e2926285c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.240']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2579620d-877f-4b73-8ccf-197556988363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.242']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40d73384-5277-4995-a4ac-d0a4b4813629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a6ee588-49e1-48a3-82a8-c8321ef7839e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00153364-4d3a-441e-b05c-9e385f2d90e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.27']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f88ce06f-f49a-4936-a0f0-5024fdb3cde2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ec8db26-b60f-4465-8bd9-1a91eb0c24fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.32']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c9f7771-bfbe-4c97-9a66-52ab3e9253e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.34']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--481a9905-6de7-4e1a-ae19-7ef8b5d29819", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.36']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c24320d-29a9-410c-a047-45aaf0ae2a76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.38']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67283cd1-c8f3-4627-8e63-2bccda9c0bfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.6']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d93050d5-0247-4981-aa18-3fc7981a277b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.72']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61f18bdd-0612-4447-89ba-8c48916e3d74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.78']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44a23467-bb7a-41e3-a8ee-849a686aa953", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.216.173.121']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07eeeba4-caa5-456f-b422-5b8f64129a76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.219.80.164']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bbe0a9d-7da4-45e6-956e-2fae4d5cacd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.0']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dbf4e62-3733-44c1-abac-0601e7f843ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.10']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--904548a0-80b0-4123-9f27-d9d93a2e6ef2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.12']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4c9db4d-5043-46d1-b28a-1b7e05bf20a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.120']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21ec4a6d-b14c-4d4f-afe3-d0a7d4d9f172", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.122']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--645f6a51-8ccf-4177-8ebe-5b7f036ea9b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c1efbc2-368b-47e2-89a2-bfcd9a2517ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--009b5bd1-3b9d-4be1-96e5-c5e0f0f39fda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.128']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce9b2de0-0c66-428c-a0f3-5231acb49f7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.130']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a84ce1c6-7dbd-430b-b911-435ce15a6162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.132']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e21a31d-6f4c-4bca-9c2b-2c33d479c8aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.134']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f7c2d14-086f-4181-88f7-dda043ea3ff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.136']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e693cdba-1a55-4cbb-972d-8a79ef849ac2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.138']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ca83508-c23d-4484-990e-74ff7576fe67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.14']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39deb268-602b-4802-80bb-2b55a6fb3985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.140']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--710e7bfa-fbf1-43b7-b3e5-0d9b74532d92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.142']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd1d19d-6721-4680-a001-fbca75a7c2c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.16']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68a831a9-6294-4e51-b212-0decfdd6d016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.166']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f08c8348-2ae5-40de-aa41-02f155603162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.18']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fb28598-98e2-4fcf-8758-23d738475827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.184']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--565e35e0-282b-472a-ad51-233c9f36735f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.186']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0583184-b018-42f2-8e7c-d9b64e558d17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ba84159-11c3-46b8-ab33-f77f9f903597", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--762089aa-7bd2-487a-8b09-fd004d60b179", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--634cca69-7cf9-42ad-8852-9fee564fff7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56f852ff-56a1-445d-9cb1-319e1fa7b51e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.2']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e31f8f70-3461-4db2-9d62-7f9235bbe0f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e60e345-aa30-49c4-8b3d-b89f1b8e375a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.208']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98b029e9-ae51-410c-806e-64e74898548c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.210']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff8c282b-a561-49fb-ba50-5232297c20a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b72a8b-33f3-4894-a312-b6f609d136d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf35498-c387-45a6-b107-eadd0b708011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f0e04cb-9ea1-4a54-ab63-8615d7501f07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.232']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--170720d8-b9c2-4592-915c-a92aaba01277", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.234']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0f6217a-a6ce-4313-8f4c-4a1a10bef115", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.236']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26467645-70d1-46f4-aaad-7c9f74eb291b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.238']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--332e8cdc-cd3f-44ac-a09d-9fe511b80547", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.24']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c696e9f6-acd8-4745-a486-619c347c0ce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.248']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5419b7dd-f2ba-496d-81a9-e66aa73b0f82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.250']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48ecb087-dc4e-4a35-a57a-4b644ba0d447", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dd96fd1-88b9-46f8-90db-1f695b2b98a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eee1eb10-4679-4ef5-97dd-9d457a5a9274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.26']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04cd1cc3-073e-4ca0-99bb-cd7022934bc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96429605-976d-4cc4-ba3e-f59247277f3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a741dbfa-d885-409b-87f0-df3e33a02641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.4']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--627331a1-a293-46a2-a6b9-35481627ebba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.6']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22c4788e-1b0e-4171-b3aa-514b86c34c52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.70']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe62617a-0ab3-4715-a25b-bcbfd7c16881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.78']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d5b0468-6313-4443-9223-fa2ec2930eee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.8']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0770235d-04c6-466a-a10a-2649b6ba1d71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43cc10e4-6622-4f02-b7f2-3fc48c53408b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.88']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7b92ae8-f17f-4f3a-85be-2119215fab8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.90']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c728fb6-7246-4753-891c-7b5cfb81efd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b4b04cd-cd4c-4ed4-a4f9-2c053b189b5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e88eb3e9-7b1b-4e29-9499-c0080ae8f58e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.41.230']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa64cec8-87a7-4e0e-805e-e8445992ad55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.0']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b01c2fdb-4354-435f-b3e3-13e9940a084f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.10']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae6b6b20-5709-414e-9d30-58429fb222c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.104']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f90ba487-7c6d-42e6-99a2-cae07ec14644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.106']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42573c93-e3e1-47af-9b5b-90d097da9de0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.108']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0af439b3-e71d-4141-976a-02fbe6a0821c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.110']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc5db6f-5e27-4b80-9035-082be6796b64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.112']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d310114-86ff-4433-af53-8090554f0623", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.114']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02c1382f-2501-4273-8f91-94e026f7d351", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fad38d4-0aa1-4dd9-a426-efb4923ed358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5acd3680-0d68-458c-8fe1-0a0a8eb70f00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.12']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42128c82-0820-434e-b756-2adda72029d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.128']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeaf3c39-7f61-45c7-8083-a7149f50b12c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.130']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0cff683-b09d-4b91-89ad-16870fc0379a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.132']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65b6076a-4226-464e-92f9-ade36f764c97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.134']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdfb9fb4-65da-4017-8fc8-d0f87649ce92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.14']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc80dcc3-179f-4520-94b0-db939c81a950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.144']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44505771-9586-43be-904f-64c87ee58464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.146']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57239328-e3a5-41bb-bda9-f233f8b1b6ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00737a14-5509-4cc7-bc3e-3907e462ed2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f486b19-cd21-4688-9749-eb1473e0f3f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.152']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0948268e-91fc-43ca-b691-a6a1b925ee38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.154']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d845355d-fae2-458a-9f4a-b4cec25a49bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c85936f7-448b-4c3b-a31f-676e2a821e36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9a5ed47-1ddc-45f7-94c7-29274b2280f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.168']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0045fd45-77cc-4367-a57c-8a3cf0b2b6af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.170']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4bae58f-6e25-45c0-8e16-85c2e040bfd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.172']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a5ffdd4-7266-4c2b-9ee0-6da278c1dc58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.174']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--916ddaff-6aff-4129-9980-c4e80950ee3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8272710d-354f-4012-b7fd-8a5bba679518", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.2']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b8edc77-84c3-48c0-869f-39b8f362b5dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.200']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dee1a46-2607-4d61-b282-f0d07d6bd56c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.202']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e76bd182-f7a4-4535-a7c0-eb3a31edb577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.204']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ab9a5e-f397-4e7e-8110-6d4faaaf56b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.206']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83c42888-ad80-4284-8380-977b02d50aad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.208']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65593d7d-86f1-4de8-8377-daf0fe02860a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.210']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d05438e-a065-4566-ac16-ef0f154bcd78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95b0ef75-ebc9-4a2f-9124-42ae7c08fed9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffbbe5a6-115b-4399-9342-9a0df9f72918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.224']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6009eca4-3f79-45d3-9285-ddf020cad34e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.226']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e8bc93-00ce-4b05-8ed5-a12b88ac57ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.228']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8bc3a13-260b-46ff-b11a-a29b8afd64a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.230']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a08b6e4-c9ba-4627-a973-9149b9e3c434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.232']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b22866f-bf15-4cb1-becc-42076c7012d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.234']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7529810e-fbb0-4b61-af2f-4d883afbb2bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.236']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1b949f3-98ce-439b-8763-019202f54447", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.238']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dd5ef4c-e85f-441d-b0cc-f4d1b6334b28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.248']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb6e5118-aed6-4be5-aa64-924395a6c2e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.250']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d95ba772-c149-40a7-97de-beac6c06f9ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abf9225b-86a8-42ce-9161-4d57de16fb0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c9ee29-e5a5-464a-85d7-a5970a3a35f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1837560a-42be-4815-af19-1b9d2eb4f4fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.4']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c16dc2c2-df8a-48af-85c0-0c7ec350e0da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32a645d0-40a0-4c2b-be2d-02bd53e74c0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.6']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eccfd2da-8c01-4256-a5b4-ebb2d8b99d49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--564f4646-74e2-483a-be05-3b1bdde8a2bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.64']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--553bab3c-107b-4240-a406-de0cf39e9b46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.66']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--317b58ab-87ae-4726-a900-0a15e36cc695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.68']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47580d1e-d9c8-40c0-b7ec-7804a5dc066b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.70']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f79d229b-5fb2-4a19-931a-4d7dd890e2a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.72']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--952988ba-6d54-4c53-bfd1-44170ae1eaf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.74']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--473b3b55-a8aa-49f9-84cd-0f84f16f3456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.76']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17e1880a-ee04-446a-84ad-2db3b5aab485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.78']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60b0a56f-83a7-4db1-9dac-2ce2867f1ccb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.8']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd1b0cd-385c-450c-8b7b-a088ece73f34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.80']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ee5c274-7ecf-41af-a589-381ed65184f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.82']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9075be46-5d82-4f55-9041-ca5278e28e7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29f9d36e-284e-4b85-a0dd-568e777034ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1915f1c5-98fc-4202-8713-f783873500bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.181.10']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c079a46-4f1c-4e7e-bf47-827dcfc9555e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.240.115']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee4a6afa-d887-40fd-b658-2ceb0c42266d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.241.196']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d94f5073-5ded-471c-bfcf-f58bb966cf74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.176']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77105295-e7db-4bac-8fae-f70e094cd214", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.206']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e257a601-9430-4adf-abf4-718c3d3b9962", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.0']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40faeaac-8f79-4946-ac31-53f4fabedd83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.1']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6da070e7-9e3b-405c-a432-baf3627a3acf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.10']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ccfdd22-b1f8-45fb-9ec7-69bf8ba1e3c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.100']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b48e6da-2512-4b5e-bb56-7a01ee0bd27a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.101']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99e3d473-a0d6-4d1e-9a89-7f662cc004d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.102']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff95ee29-186f-4beb-a71f-f43e0af6d5af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.103']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6447cb9-9063-4f50-820f-19089acd8e90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.104']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2641d5e0-8584-49bf-a573-8443b85ecd6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.105']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6ddeb37-2111-4f0b-95b6-0e1e5ef492d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.106']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62194e72-9fe3-47ee-8b6c-d3c9b9d9f708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.107']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd3f6d35-5217-481a-9458-055671d8a563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.108']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bf51c80-35b2-4b05-857e-bdbbfcb51006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.109']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--444b51bc-059f-459b-ac55-a3897377d2d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.11']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5cc0ff8-6895-4d8f-80e9-afa4f87366f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.110']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e5a6127-2687-483e-af2f-e98161378e6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.111']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9066c8f-ad9e-475e-821d-b4abcd93ad28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.112']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38c0cb62-196a-4c6a-9261-5c094d5e9fe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.113']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f187f38-ea7c-442c-b8b6-08b026f1b8e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.114']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c4f0f0c-2759-475a-b4b7-465bd5937017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.115']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ec096a0-3f17-4972-8607-3b83db8e8d89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9634b13b-78ec-4c98-b84e-7a408c19696d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cae7ac6-0c5e-4568-9421-2ec6951bc39f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07e02317-a0c3-495b-93bc-ba6ee2250692", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.119']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf726aba-d089-43ca-bdee-a78a6dd67689", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.12']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b4e5893-e262-49e9-9ede-aff21f2cb5d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.120']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01037430-5937-4431-bcd8-d28af6002e59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.121']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cef6ad05-4505-4efd-8300-f00aed5e3b6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.122']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe5a9f00-73b1-4c32-9eef-c363e63d7a58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.123']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c57884c8-7957-4ff6-b6a4-0e84c873ec44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.124']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72338538-bbb1-4973-af88-b72dc287ab56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.125']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a9e4012-8b39-44ab-8200-caefa81d038d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0924a86f-31d3-46ee-a329-7d48fdb98c92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.127']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98117a3f-6e0f-4981-95c6-f6ed5027cb97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.128']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25ac72ad-717d-49a3-9e91-c0474774f28d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.129']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10eb8279-2ae3-49d6-a0f9-9bbed6cf9dc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.13']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20b8580b-44ef-442c-bc40-7be1e50894f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.130']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a14906b4-f358-45db-aab5-2847d18a617d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.131']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57fa8ab2-2ffd-43c9-87c1-fbed5ba86cf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.132']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68d548ed-bc70-46a9-8906-5dcf646bb037", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.133']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f064e983-64b2-4eb7-a555-4c5ccac7210e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.134']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cb22665-f3c3-49ae-8785-c933c4c1ceb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.135']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa18d48d-0e8c-4383-b422-0381871595f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.136']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c96b9fa-3177-4582-aec2-af9d011712ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.137']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--495b1281-fbc1-4050-8ec0-f293ecbd216c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.138']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1078a1e3-fbb4-434f-846f-5aeee32bae93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.139']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85fa327d-99aa-486d-b7bd-da76e5745886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.14']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06bc4c32-5ba7-4337-b09c-03a2ac3f5f0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.140']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4206a3ba-39d8-42be-83fd-f27f461c5da6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.141']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f98efe5-5698-4bb5-b443-6669405623db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.142']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d02b3aa-0783-4b5d-8cbc-8b3a4c0cb4cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.143']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2882423-f6e2-472b-af1e-1abd3d13be4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.144']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e17446e-7f0e-41eb-8a7c-d0cedb16330c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.145']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a0813b2-5a97-4bfb-8e92-ba390eeb7f0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.146']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9312f774-f506-4fdc-886f-1b0841e71619", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.147']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86857dc8-f268-4ad7-9cd2-17ba31c04c49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.148']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b880b0d-46e2-410a-830b-e1f1d2219269", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.149']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2ff62f2-877f-431f-a9e7-967bf6bd9ef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.15']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c85b715-f18d-4ad9-b80d-4df8a8c23b25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.150']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cd3e3ac-84e2-4288-a833-8539bfa534d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.151']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--023e36ae-fc51-4725-b08a-fbc5c8c33951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.152']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04679e48-4432-4ba3-b8a1-79b41cdaf2f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.153']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37a38810-8b58-41c8-a524-4055dd1ac2c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.154']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7808de4-6a38-41cb-ae13-8274c2c53f7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.155']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b414c27a-04d6-458b-8995-9eb0e7858877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.156']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ca6de8c-9859-4d61-b166-d629b2fc27db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--951015de-3b14-4a90-a81f-237a28be46ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.158']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00fe6852-9f6d-424c-ab6e-028fc4c2089c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dd9eb4e-7ec9-4266-96c6-f667af261d8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.16']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edc20c92-7a43-4520-83ad-291f49cd3f49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.160']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e0f25a1-0f91-4ede-9c8a-4ce4658d8b56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.161']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fbe21ac-10cb-496b-9225-81933c61a304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.162']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f29a77a9-18c8-4614-a1b4-ed374a47c44c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.163']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2ae6d62-53cb-4b62-9a63-ea400ef1a07e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.164']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b12ede91-1f0a-447f-9715-41e7c208b7ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.165']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa1d127e-b033-4c5d-b09e-42f7b17f8c68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.166']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4974a05-b586-4cf2-baf8-c8f6e84f5ecc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.167']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b02cf143-c7d6-4d39-8910-6cc7e2f63973", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.168']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f9a5da0-0ac8-4dc3-a117-06c153c5ecaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.169']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--819bc7a4-6bae-47a9-a623-03a0ebdfaee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.17']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d643260f-1092-4cfc-9310-0fba11c7c8ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.170']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3e58077-1bd1-4a3c-90e5-f01851bd319a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.171']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b857070-515b-4858-8989-999b1d663787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.172']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c3b0d03-dc97-43f7-8ca7-151657042a49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.173']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d840048-620f-4581-9b57-5b73ee82169e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.174']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9095c1bf-bedd-4e0c-a954-f7c09855e58c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.175']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b1a2bad-b1ce-4e02-8b8b-36ab9374b25e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.176']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52cf747e-66b6-4add-9c64-404cd0a2e9f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.177']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f97705d-bb58-4840-8217-d6d8918e8782", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.178']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--493af20b-0df1-4e7b-809c-45afa05d677b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.179']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ab416bb-037c-454d-b53d-f28180c41889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.18']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d21631c6-f84e-4bba-8a79-b42596187be3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.180']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eba41f6-b0e4-4331-98b5-2c66fef20688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.181']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19a71878-98fb-4e5f-9f75-6004d8d57ed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.182']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4d92018-fec6-4f88-90ff-4a0738bba1d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.183']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9360d84e-4345-4339-9212-62de3e688d4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.184']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daed72ea-ff7f-450a-b882-26bb73abfaa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.185']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb2295a1-7cfd-45bd-81f6-92260015f9e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.186']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf2946b-69a1-4adf-8f96-cc22b50b633f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.187']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c614ba0-e58e-492d-9749-95139af9e73e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.188']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd227ba6-b822-4ec0-be74-c04a9097a2e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.189']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e85ffdaf-b90b-491e-9ca1-65dc8e924521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.19']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c575b6b9-ac9b-4b57-bc4f-5d120c94dddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.190']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42223346-bf8d-4e40-9b59-2b75a9b39d9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.191']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--755f8c48-847c-4187-90bf-9e3b9f61e9b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.192']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1761edf6-406d-4500-88d0-01622e29a79b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.193']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a8a9968-9d89-485d-b352-874010c900d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.194']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--932f514f-5960-4c59-bb50-9a91c4164540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.195']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d95d62be-26d0-4466-8735-8517d1797358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.196']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--082a133a-3f66-4485-a548-f27197a9a31d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.197']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbf9d0f6-340e-4f34-95b9-5a0f02affa53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.198']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7df24cbb-a6e2-4a25-9269-4a4ddb2e2f02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.199']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--938ba721-3770-43c9-b7ff-4cc27ebfa3dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.2']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6881626e-f151-4a9c-869c-cef82341bd33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.20']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd5cd8f6-f0e2-431c-b0dc-785c9d7f4c67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.200']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cdb717c-447e-4046-810d-a24f04cd5f30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.201']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49abfdd9-0f33-407b-9035-ea98d5044d84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.202']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ff5804b-e711-456a-ba55-cf7418bb845e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.203']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fee8cf9-2e72-4117-9933-2a2f68fec0ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.204']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97fa30aa-c37e-4784-b014-442951c1cd73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.205']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2045958c-8f0c-43c8-b940-ef45adc709f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.206']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b1ceb9a-0fbf-45c1-9ece-4156822c3753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.207']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1deaf613-c11e-412b-b985-e575ab178867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.208']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6573c80-a6c5-4f9a-8055-6523bb9150fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.209']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f540025-cca2-4459-9223-0cd673bfc052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.21']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d25c4038-ef23-4053-9746-e2e17e3b3146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.210']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26beefc7-f34e-49cb-8241-5e39cff73cfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.211']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb9bac64-00d4-4643-9ebd-07a1f32ff9da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.212']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff42955d-e278-49a3-8099-593a7496e774", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e1d2f69-fe72-4d75-bcc1-19a604e95db9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--362b2377-d761-4486-8c0a-80200f4366fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--868423e1-671d-4439-8ed4-04a9c4d44620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.216']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f114cb8-a640-4bf6-988e-d581ecb23a22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.217']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8462986-21e2-4a27-9850-8ddea1a2bf3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.218']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8de597d0-46ba-4198-be04-5ab91d66c8ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.219']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6a66f16-477b-46fc-8051-21b451501e64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.22']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1e5dc91-72af-42df-b946-8c80a43b6600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.220']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7826b38-f536-48c1-becd-c203e7ef3b43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.221']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05cecbb7-0ead-4e25-8fed-3a22279c588b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.222']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c92a554-6e1d-4df7-b3c8-1256ed69c921", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7363ca2d-faeb-4b7c-835f-3761af13f001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.224']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab77acf2-00a3-415c-820c-9d5c7af9aef2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.225']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3d56675-ba99-4eb5-a4f1-c735e85722ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.226']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25e804dd-a588-4628-96a9-0d4c37b39460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.227']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--651f4ea1-5526-45a6-bee0-39b179235f2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.228']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--761f8775-4553-4db3-b33a-4a402f10292e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.229']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff85c08b-a2a8-4b3c-8fac-36aa60e1ed17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.23']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08e72aa6-fa6e-43b4-923a-cc0ca92c408e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.230']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8c0b2f2-4096-49da-b03c-3a5a62750546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.231']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a9fec9e-1ab1-4ec5-8147-ac11acb47b84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.232']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c31ed9e-ce5e-4545-8125-d16474ce8462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.233']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f8ac3b3-53ad-46d3-a427-673081680ecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.234']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbb6ab36-03c5-4aed-a9ed-bf82a84201be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.235']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--236fafd0-289c-4c27-a89a-a25787b44ca6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.236']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22be0cba-2d4e-4e1b-b53a-bfd7a14ebcfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.237']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f62ca8f-776c-4d73-9104-bf400004869f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.238']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6a6db46-5442-448b-804c-4a165d4be94f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.239']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d5182f9-4679-45f5-b0b7-91cac19157bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.24']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6344330-47f7-41a6-8b5e-5173e246f86d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.240']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcb6bcaf-d349-46a2-aa2e-b2b9d45091f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.241']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6271e970-e0e9-4517-a5d6-ce6a496352b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.242']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a55e5af-07b0-43fb-ab39-14af8ac78bf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.243']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d80d0f0-099a-41a1-b218-206c0abbbc30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0957db08-eb7e-411a-b487-126b2490bec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c056b9a-ef60-47ea-832a-036aad9ca434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.246']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b2b164e-6ab8-4dcd-ab07-3557c650709f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.247']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf5a45c0-07d1-43ed-9fc5-4fbbbf5d639b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.248']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28f94f15-facd-4af0-98be-e65fef04a490", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.249']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b830c0e-04ac-4089-b7bb-fc6108b1c9db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.25']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63494fc3-0087-467e-9b49-e2e845956248", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.250']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a8f267f-291a-470c-9d1a-052646bc2e8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.251']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28f2ed47-e333-4393-b891-3a677dabcf75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d4a5b99-642c-45c2-8f57-1238a150b6d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.253']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47b81c8d-3eef-4c47-979a-60b1ac70596f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e14e99-44bd-4b85-a643-4dbd9e2a1df3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.255']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fc13690-6eee-4fbe-9747-e076d60f7b94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.26']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a7b7812-c3a3-4bce-a9a1-404ea7e4e294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.27']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78cf86f6-7bc3-438d-9a4d-05996ac3e98e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.28']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--933fb68a-e033-4453-b4e0-cc56d20aa226", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.29']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13b9e3e3-deae-4425-8a1f-0f5233dbea4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.3']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b7500c5-8b51-48a2-a40a-2df9118ba0e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.30']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54bc26a5-207d-4d82-aac4-3b825efa4e54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c76c7f32-927e-4e09-89c8-d4da147ab769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.32']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27219168-c3bb-443f-b6d2-24cbca6a163b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.33']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33ca853f-3a31-410c-8893-c027449b8874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.34']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a45f3ef-695e-4b84-b250-fa87ada83cf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.35']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f477912-1adf-4f95-b097-36af3d4341d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.36']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5bb77bb-a545-47e0-b523-276648181977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.37']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe26ea29-4785-4edb-b226-591710ef136b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.38']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f69be524-a6a9-416d-bbbc-a3a4014624d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.39']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aec2fb8-2b08-46bc-a1ec-7430c638c966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.4']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fd51f53-4a64-4dbb-a21d-4df4ffd7abc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.40']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61f060e9-bac3-432b-ae43-516ffab7cc36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.41']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e1f5328-052f-4a55-bf9d-5876b103192c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.42']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--794b49d3-e46a-4b88-a4c9-e7ef2a2d6650", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.43']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de70f627-41ea-4b52-abe9-86a7d3573086", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.44']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8353082-ca51-4abb-ade3-084535d4a502", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.45']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b3d652c-0a69-4eaa-82d2-e30f64eb6496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.46']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eeaa277-99f5-40ce-9065-f97230880ee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.47']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ee03a02-fb04-4579-b6c9-cb67d08ae3b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.48']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b69d4e2-4ec9-46cb-97ae-95f3b6d1a0c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.49']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6661bb46-32d3-4440-93c9-3303071b19b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.5']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ae5c758-9799-46b5-8b94-99882d0c854c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.50']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09d8cc3f-9f43-4fd0-9950-140a6aa6e488", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.51']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d25a7342-6097-42b5-8c6f-579a7dd1973a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--721da829-4039-43ba-97b8-a258e4a60180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.53']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b432b54-3737-4282-8cf1-d1bbc62661c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.54']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5fb9db8-1c6d-4d2e-9b57-57ababbee14b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.55']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cb069ad-60e0-4b8e-8594-83282ff192a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.56']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e1ab1d4-c20c-401d-84cb-3c064d99108d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.57']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6268d2c-1c58-47fd-b43f-3c6008354dde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.58']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55cfcab9-1172-4d36-8c02-996638bd005b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.59']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2a73278-3f1a-4554-95e6-b6e4c0393acf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.6']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--889d40df-340f-4ff4-8e18-2e7bcd96ce89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.60']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8794448-7b4b-47c1-8214-5fda34d53a53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.61']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73768cff-373a-4507-a9bd-9405fc178089", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.62']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d110281-ab70-46e3-8be9-07b8d8f59da5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.63']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0acb585-2fc5-4f53-b1fa-9855ed95c0a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.64']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bdd16f0-2f42-446a-af7c-efd6e5c2dd9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.65']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0516893d-d940-4ee4-914c-d791327686e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.66']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a7bf662-dca6-4833-b03a-e35af843d197", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.67']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--905a9061-5111-4e15-8bb6-c99ff0ffd6eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.68']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86f3fabf-b75c-4c81-b2d3-8919c7714b05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.69']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cb294a6-1630-40d4-a374-36059ce5b8eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.7']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1e6f70b-cb82-45a8-adb1-7015d6c2f118", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.70']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83b97879-61e4-4c6b-b5a9-b42403a921db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.71']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaa687cd-c66e-4ac8-a46d-21f2fa84590f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.72']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84da6455-d1f1-487e-a59e-3283b121d293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.73']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70aa97ad-8020-46a4-bee2-0cbcf7d1cba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.74']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7e736b1-30ec-4401-bc5d-5a3576c68f19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.75']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--464aab08-1fd3-4c96-b366-6cb31e3e1d72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.76']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82ff1931-e38e-40d4-9310-68e1c4cab0aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.77']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c642256-9585-4120-ba9d-6a78ccce284a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.78']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--698b393f-88d7-404f-aba2-21f38ddd4f78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.79']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f647cab8-1551-498a-9600-5f4691dc5194", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.8']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b8fc794-16c4-4f4e-82d8-3dc2926a3d20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.80']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a52193cd-ff9a-47c6-9633-a1dba8fe13d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.81']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5504ce91-c231-4b63-b8b5-06014f78eefc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.82']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--990b4f40-6237-47c1-8a9d-57f3fd9d3bb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.83']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--429ee796-d3e4-4587-9a54-c3fc8c3d29c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.84']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ebd7ede-03c4-4e2c-acf1-a7a3b0098992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.85']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ea503e-3c02-4180-aa47-9b9b5f7597c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.86']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83312e2f-ae82-4dea-a375-ff89996b784f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.87']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3113b6a2-871c-4aae-946d-bab2ba5511ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.88']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf5c9846-6648-4f53-8677-916be4db241a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.89']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fa1706e-d540-4fc3-8755-1f9e2d172d4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.9']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eebf3a2d-178a-4b67-b7c2-69fad64869b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.90']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b64e0bde-435f-49e3-a56e-41789dd65f3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.91']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--049b2747-89fa-4fec-aeac-ae6c20571936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a1967e3-3b8e-4758-ba82-e9f8679c57b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.93']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db0450ae-7c07-4bfe-987f-c64e392ff810", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.94']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f9f30f-5eb8-4590-a246-e64fbf9f0007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0c29270-afc5-46e8-beca-c6b89b57ff8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.96']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--582c0f2b-02d4-4756-ba9d-1d32e6a295a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.97']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--299183fb-a262-48bf-a225-a06d3c8dcedb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.98']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c59ad21-33d1-4ec5-b536-0d74b5370d44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.99']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eab3bdd0-b87a-41d1-9511-3af9bf26f03c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.47.116']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d36ebb3-9f69-4119-931c-0846e5c81f6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.47.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1875e69c-4e0f-43c7-9731-fbe9b2101001", "name": "Malicious Host", "description": "Web exploits: aws-credentials. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.47.26']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f2651012-0e1c-4503-b518-10c32a1e30d8", "relationship_type": "indicates", "source_ref": "indicator--1875e69c-4e0f-43c7-9731-fbe9b2101001", "target_ref": "attack-pattern--f4ef225a-7ab0-40d1-851c-51f72d2a3af1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ee222e9-c21f-47b8-a7aa-24675272ca1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.114.107.111']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f33f0df7-41b1-43e4-9be7-e93a747cde4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.114.107.48']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c792768-4e05-4602-bfec-e0f29e458b8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.114.107.52']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c52750a-9596-401c-b966-cf3d7ba633bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.114.107.56']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7c52570-4d1a-4ac1-bff6-2050dde83e01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.71']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5099a068-46e6-4a99-bb26-7f1b88b5e924", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.74']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fbe2854-6d79-4022-a848-392f984785e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.57.209']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3fe3950-05ad-40b6-a6f1-a4f7db0cdff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.58.235']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f29acc6-48e9-4d1c-b4a0-6ccac66f4263", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.204.138.187']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57dac45d-4ade-4c2b-af45-cc9a908eca6f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.54.195.236']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcfeaf6e-aca0-4c3b-b014-70241a008691", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.113.10.244']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab9cc694-ce10-4cd6-a439-29143e3e97b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.123.109.214']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1a5f31f-f00d-4ed4-aaba-20510b107c03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.221.206']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec40835f-1dd8-48f1-b93d-b62ea4aae98f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.221.213']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b73828-e7d4-48d1-832c-236c12372f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.221.67']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7991da91-6443-463b-89e3-ba8724e4c1a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.224.9']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4411946-1cb2-43b2-9fa6-2a2f9a0a954f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.171.178.215']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65521046-74a3-4baf-8d86-e3b4c9a96558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.171.33.79']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9eba2c5-ba8c-4975-b8af-6f06ec89adfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.95.106']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95467228-481e-45b1-a1ca-8c173cb58016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.177.103.252']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0c43b69-1bcf-429f-8e5e-21f3be4752dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.177.103.255']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dab7f70-4dd3-4901-9147-4b898721e0c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.177.151.72']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2221a1b4-037c-471f-b482-3338ff2c6611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.102.49.193']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1e41605-d422-4c5d-acc7-0b4b0eb9c6bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.103']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f2de285-e763-4f24-9388-8e65a16b2ed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.104']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebde03e0-289e-438b-9f54-c77b8a5e5289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.126']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b08b504-e88a-492d-87fe-6a3c358125c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.140']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9499ed35-29bd-4b61-8c9e-ff4a7b151073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.196']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29f16bb6-aa35-49b7-b430-2d554a7e2d1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.203']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed545f9-b6c2-46a1-939c-a8d5b1cf7870", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.223']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e978a324-9370-4327-b312-77ddee77765a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.245']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5374d3a9-cf66-4916-86b1-c5f11933409d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.250']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90532362-a488-4b84-9254-f62748a0ab70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.254']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47ee802c-e7f6-4f08-9d18-2afad35d03fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.31']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fd923d0-cb72-4321-8592-af5de73fa544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.36']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d12bcff-2db1-4e06-bc24-0c470d80c22b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.43']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1454f7cd-3c87-4d4a-bbb3-5efc110d5104", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.69']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33858067-6424-40a0-a92a-ae61e2b0a15e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.7']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7a42476-edcd-4d75-9a53-de2d22606231", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.70']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f5c2567-e416-426d-bfc1-4096ede0f000", "name": "Malicious Host", "description": "Web exploits: openwrt-luci-rce. CVEs: CVE-2023-1389. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '94.183.174.95']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "initial-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1389", "external_id": "CVE-2023-1389"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a5fd4e41-6ac2-49aa-b353-e507d0f2fd2a", "relationship_type": "indicates", "source_ref": "indicator--6f5c2567-e416-426d-bfc1-4096ede0f000", "target_ref": "attack-pattern--bfe6a08a-e023-44ea-be23-fdfe6b3f5314", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a4245158-8e39-4b5a-91b6-f93253899bc3", "relationship_type": "indicates", "source_ref": "indicator--6f5c2567-e416-426d-bfc1-4096ede0f000", "target_ref": "vulnerability--87578ce7-bd64-4d09-a580-4b3f1c5fac4a", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a07d0314-8cb9-4727-952f-057841602914", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.10']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faf1cf11-127a-436d-b1bc-ee946f5f5ef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.134']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a7e9496-4484-4b6f-838d-67644504d1e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.5']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58650893-0356-4812-aa00-b9f921d43173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.6']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48015389-7e29-40ab-9b47-1364c6824712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.8']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90c84ebb-337f-4acc-bf95-83b15430cf29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.13']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f106204-00ee-419a-a737-e7715dcc29d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.143.217.78']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b023dfe4-1df4-4efb-aac7-b92ed3f2fc9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.53.157']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99694ceb-3a7e-4990-93e0-db315ffcfb03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.215.50.202']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccf11c41-1256-4c0e-8c4e-da5f59377477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.217.118.117']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5a00d5f-e541-49e4-b09d-ab1e752fd3e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.26.190.92']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c135a436-4d9f-4ffd-8eb6-e45098ba45a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.38.184.207']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de5e0f0a-9275-4389-a28a-a9e5639dee85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.66.162.203']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8232603-7f0b-4b52-acbb-7b7b3e128f2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.98.168']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9cb8fa2-b2c1-43a9-994f-5e75a3bf974a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.22.33.18']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e5ec817-3522-401b-a15f-2cc8516cfdd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.134.234']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efb7a9de-2f0b-4d82-975e-edb2001b5267", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.66.233.228']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa82859-bfab-46a7-a2ca-5dc0cbc3e60e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.80.120.159']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9191d7ab-b0bb-4742-b770-ea8cde85edc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.89.204.118']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3c056ea-802f-4bf1-8b86-cfcc8044f41f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.90.43.197']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0598a1b3-681c-44c8-875a-472c2933fffa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.94.3.237']", "pattern_type": "stix", "valid_from": "2026-09-11T00:00:00.000Z", "valid_until": "2026-10-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-11-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c44d337-848a-4cda-88cc-a2a591d2193e", "sighting_of_ref": "indicator--6eef6d41-20a2-4276-a3f8-ddc63e308a25", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa252e9-bb29-4423-97e1-fd81aacd7f9a", "sighting_of_ref": "indicator--8092d7a6-b28f-49ca-a8ea-81114bab2c70", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cece5e1-ca5a-4f9e-b24e-bc57f74c8aa4", "sighting_of_ref": "indicator--d9c09190-0ec1-4b78-8aa6-3cabecbb1105", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--265383da-f90c-4761-ad91-c59c66bdc6cb", "sighting_of_ref": "indicator--70d1d012-2113-47a9-a67e-741fc0f9a6e8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98f3f50b-2ff0-42d9-8b38-b970cae79f8d", "sighting_of_ref": "indicator--5504de6d-be99-4b4a-bb0a-559306df4616", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a6e19d7-59e8-4cb5-a919-67d7cb11425e", "sighting_of_ref": "indicator--ecfb020e-0371-4134-8ef5-5f82dd34f98f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73fe4b62-23ec-4484-9ff6-bbc8b5501f32", "sighting_of_ref": "indicator--f5581576-a866-47cf-9449-0a6b1ce472db", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada4c37d-0fa8-4f44-9d51-cacada6fb80d", "sighting_of_ref": "indicator--c6840b9e-ec5d-4ed6-86f0-a2a8919c2604", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c27f7f-dbbd-4316-82f8-ac142c000836", "sighting_of_ref": "indicator--fd411dde-0eb5-40e6-babb-81b3fbc09da3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6155c05-c2fa-4ac5-bffd-c0cbd2377fd0", "sighting_of_ref": "indicator--7bf5688c-e85e-4eed-9484-b99234f97d1c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--842800d4-d7ca-4e7a-868f-d4bd58621ff8", "sighting_of_ref": "indicator--6e867677-f700-446f-a7d7-f8fe17a562d7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--645526ba-5dbe-4aeb-9250-0c7297498946", "sighting_of_ref": "indicator--6e0d959f-726d-4d7d-940d-ea71a5c5953e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfcd6c60-2515-4892-b68b-5c015e0c32c5", "sighting_of_ref": "indicator--3511f00b-a67f-410a-8d68-cf13d92ff259", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--334186c6-3fb5-4a26-899d-0d89cfee2486", "sighting_of_ref": "indicator--0bbfc5bc-64a1-4770-89e7-9b8a177ad485", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c2e739b-b5eb-4ddc-93e1-23a79abab827", "sighting_of_ref": "indicator--dc876c2e-a015-4af2-ab67-2a035c81e529", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7789ae5d-29db-42ac-8449-a292cb11bb80", "sighting_of_ref": "indicator--b82f485e-6764-476b-bc86-f42006c86ddb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db5d16a-c5d7-4975-a9da-f682ec19f19a", "sighting_of_ref": "indicator--aed6b5a1-77c1-4635-b8fc-1259cea87ea0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25b4b8a5-a06b-4d4a-99cc-53313801df48", "sighting_of_ref": "indicator--b81a441e-0e88-40c6-9804-144e0911974d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d8d49a4-4916-4a0c-9681-e68e8b9f29df", "sighting_of_ref": "indicator--e50d4cbe-4691-4e9c-b859-70bc99116df4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b32dc3ef-7a55-4244-89ec-fdfb94f854f7", "sighting_of_ref": "indicator--ccb19bf2-f3a8-4abc-9c2d-dae114bf8993", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94ac668c-3407-4509-b623-0e44fa071a93", "sighting_of_ref": "indicator--7c555b72-cc7a-4a53-9dbe-efb52d21670d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94bc3c9d-d5c1-4158-aa1d-a5085e7d80db", "sighting_of_ref": "indicator--69ce972c-1ca6-46aa-8cdf-7d0ed975ff5b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b218ff5b-d8d1-466c-8f01-ca56a66f4b3a", "sighting_of_ref": "indicator--39360fe4-9fb8-4596-bb9f-48477762a347", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eb897e1-ac14-4979-94a1-fa6a2330a515", "sighting_of_ref": "indicator--616ded2b-f09a-48b4-b717-3ec134492038", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0763b49-12cb-4ddf-832c-f385ead1f9ed", "sighting_of_ref": "indicator--8b704c04-69ae-4163-9c46-03f5c9b18bad", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c1f9f3-0549-455f-bdc0-b12930933ec1", "sighting_of_ref": "indicator--e3a288b0-a1ae-4dad-89bc-3e34aa50be2e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--646bcd44-5cec-4fe7-8fae-a56b6ccbfd2d", "sighting_of_ref": "indicator--6e8b8e9b-0313-413a-8df5-1e477b8ee99a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc5ac6bf-f610-4bbd-9712-a2c37ba74312", "sighting_of_ref": "indicator--e2469084-3099-4b5e-a038-ee6a615b98d8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--533f8818-ddd5-4336-a1ab-83401d0f1dde", "sighting_of_ref": "indicator--95e41dd1-48f9-4830-9151-159506f29f88", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc3f584-d6cd-412f-8f10-a682ae6c295a", "sighting_of_ref": "indicator--6f053bb9-6226-4e23-8a79-39df737ac3d4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9dcb281-a68a-4a47-84b4-4358bcf06154", "sighting_of_ref": "indicator--995f1080-d817-4aee-9308-41310abdb118", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78cd01e9-2599-4b60-ab97-05da8c080c60", "sighting_of_ref": "indicator--2d8312bc-8bae-4372-be91-932039331ebc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ef96873-af43-4f13-a319-2f2528132700", "sighting_of_ref": "indicator--0d8e9509-0241-481d-a6c7-754dc45dfa06", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--325e5b5b-cc38-4edf-9f4a-57d89187e64b", "sighting_of_ref": "indicator--7b6bff99-6791-4d41-9274-28fef8a8537e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dba28c6-fa10-48a6-8b4f-15854912e668", "sighting_of_ref": "indicator--fafd2ed0-96cb-41dd-8a42-3302b7cdb2b8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b2c3ddc-417e-45e8-930b-459f33b0bb35", "sighting_of_ref": "indicator--65f6d085-f09e-4761-8bb6-122d98b90ce4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb259080-f94b-4fc7-8b7d-2befc23ccfde", "sighting_of_ref": "indicator--81ca6273-6521-4aee-a97c-5b8589de9e1d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cc96751-ed43-45ef-a980-30a633b823ae", "sighting_of_ref": "indicator--e18318de-1d42-4864-a19c-24c9f780ceff", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00ef4a52-4db4-4742-a0a9-9d05cc87952d", "sighting_of_ref": "indicator--2f85f418-43b0-4320-8ef6-5060f3eb80f6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96cf8f40-35fb-4a62-a02a-48e1374a5489", "sighting_of_ref": "indicator--bb5c93f3-6d9a-40f4-b741-37e9670bca68", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56cf6006-ec59-4556-be0a-e498114f31a5", "sighting_of_ref": "indicator--a6d06ae7-70f5-418f-85ae-15ebeff3bc82", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c479298-00b3-438b-a279-a7a7193c129b", "sighting_of_ref": "indicator--49a28c84-cbe7-4426-bf32-a598b06dc28e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d179b68-ae1c-4935-a399-03bd9ba07dee", "sighting_of_ref": "indicator--ea9d151d-b324-4c10-b84a-17ab6e003c36", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8024e72c-9f08-424c-8687-2027ffdd0bb0", "sighting_of_ref": "indicator--6b973749-1fcf-430e-b73b-d72618b31520", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2352090-2228-40bd-bc2f-166210b5ee9f", "sighting_of_ref": "indicator--7ec57418-c14e-4830-a87a-8c6ab7098b45", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c992d56c-3001-4ddf-8512-eaba7f3b9f50", "sighting_of_ref": "indicator--478ca5a0-b46f-4684-b6c3-1cbf4452c64a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2526fbf9-b573-4613-992c-c370cc5ec9aa", "sighting_of_ref": "indicator--e1e2d871-cd1b-41ba-b6c3-9bcd6503a5f3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e64a02-9e14-4cc5-a8f4-75c5c86c083e", "sighting_of_ref": "indicator--c655b31e-9cd2-4cb0-987f-d89a1faa71d6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cba4bd6-1635-44da-8b33-09ce6149eae8", "sighting_of_ref": "indicator--e7ceceea-8f79-4da6-8774-abb6755532ea", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdacef97-19b4-43b7-bb19-391b88d14fa9", "sighting_of_ref": "indicator--e0ca38a2-0c92-4213-8212-58767509116b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eab0c228-025b-4948-90fe-048428a86ed1", "sighting_of_ref": "indicator--cab3a438-76f3-4215-9d6a-675965ac52b2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e80c50e-bcb8-47b7-aebb-27fb12c3117b", "sighting_of_ref": "indicator--05e63672-bc00-4df8-b600-4479297e0db5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b477c75e-e1a1-4952-b99c-f7d83044c5ce", "sighting_of_ref": "indicator--a9c9c0ee-a33a-4370-b919-cafa3dd4fb17", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74b70900-8eb3-4b7d-9f53-f09b68a89736", "sighting_of_ref": "indicator--c7a5079d-9a1e-4959-a92f-271830ed6972", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f4a59cc-66b6-40ce-8dab-1bc6383ea94f", "sighting_of_ref": "indicator--d55a3b2c-dda4-451e-93da-b47faa4d0785", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f22eee9-1fd0-47ca-b62e-fbe2f9bd5e9e", "sighting_of_ref": "indicator--f9f2e30c-c6f4-4e82-8b76-dd7ff4754394", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f1cd50a-f1a3-49c5-a6ca-4285c3106284", "sighting_of_ref": "indicator--f61f62b8-8d83-4fd9-8975-aae028b958eb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e121b8e1-d7e3-46b5-aabb-15543bfa97e4", "sighting_of_ref": "indicator--6997641c-f77b-4ad6-a0eb-068be11654dd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50aa3aaa-2145-44d9-88b6-0f407c3525e7", "sighting_of_ref": "indicator--ca72808e-355a-4ea4-9015-49689ee0ca5c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c33fa9-0b3e-41e7-b06f-8150696c5845", "sighting_of_ref": "indicator--1e0d2dfd-5504-4626-8e27-5b76c6693507", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2dad62a-af65-4c7e-b20d-1714c76e82f5", "sighting_of_ref": "indicator--6c117bee-6510-409e-9574-4697d4e9cb27", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e5cce41-7c2a-49ba-91d3-ea57c2e9e5c6", "sighting_of_ref": "indicator--64aac258-2e7d-47e4-ada0-9cc1a93ac817", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1385573b-d6dc-4ac9-999d-c94811bd2617", "sighting_of_ref": "indicator--e6bdf9d6-f803-424b-95c5-b4a896845987", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad32caa1-68c2-434b-a0ef-c0e031eacf0c", "sighting_of_ref": "indicator--16a2994f-4182-4080-bbeb-649141ff650f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23497897-c41b-4072-a6cf-4e0a245cb9d8", "sighting_of_ref": "indicator--cca5c934-d6ac-4b37-b081-8acdfbce8995", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f983f0e-aee6-4511-8d1f-739b55dfea68", "sighting_of_ref": "indicator--fc823505-bbca-46dc-8f1d-f161231cf8d5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5661d3d7-3b1a-47db-901c-1dba58bc5bc8", "sighting_of_ref": "indicator--55d74f3a-65fd-4080-a44f-77753224351d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a26b1a89-03bc-40a7-91b4-e580cb624aec", "sighting_of_ref": "indicator--4b58bf81-d203-430c-a43b-32c2b7ed2910", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a123c6-a2cf-4b42-9669-6cb63755ae6e", "sighting_of_ref": "indicator--c937c70c-4404-4d64-b277-ceb77f084ce9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b52f7988-c6a5-413f-8a24-efb3d524fcc3", "sighting_of_ref": "indicator--46658294-d68a-44a3-9717-5215aff9fda7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e14436a0-56bf-47f5-b18e-0f7948ce4404", "sighting_of_ref": "indicator--d47f2df1-634e-4ce0-a75a-8279adc7b61f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e27ba209-c43b-4723-b36c-59d7e6ea59e2", "sighting_of_ref": "indicator--8705bd2d-8a85-4b2f-b3e4-7354883742c2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a68ea3e5-65dd-40a8-b540-62805919821c", "sighting_of_ref": "indicator--7ba7ee42-e00f-4739-93fe-c5d9fb7e858e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b19ffee-5477-4ae9-a682-2eb5a9a0e89d", "sighting_of_ref": "indicator--6e352749-c399-40ed-b878-1d05569d38c5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3ad5d6b-d424-4ae8-92b3-4dd0b457ee32", "sighting_of_ref": "indicator--fc644550-fde7-46dc-a4e4-277bfe54370e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe8e6acf-4858-48a9-ae3e-108353d55c2c", "sighting_of_ref": "indicator--28ffa693-1447-4a5b-a6cf-54eb47f77daf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23af020a-984f-4d6d-924e-c18f224077f9", "sighting_of_ref": "indicator--d8e9d22d-50b7-44a4-a7d0-7b8b6a639ae2", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--701cb5d6-b9e9-46cb-8512-5d975505ae31", "sighting_of_ref": "indicator--f87bd8c0-0f3e-4b53-ad43-20d157164f34", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b922f451-d767-4289-87ac-530ecbd94d0d", "sighting_of_ref": "indicator--ea4f30b9-66fd-4ddb-9c6a-26cd1e1dff86", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ea933eb-c6af-41f4-9cf1-32c508f8f836", "sighting_of_ref": "indicator--4624fbf3-8a61-4b27-a8a6-ad2fb93055aa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efeeeaca-ab42-4885-bad3-a7d466ce1a07", "sighting_of_ref": "indicator--aa880f7d-b268-4e69-8078-25fe20e8b946", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d74fb7a2-9907-4f18-911f-2dd9c80cf3e9", "sighting_of_ref": "indicator--3a744c01-3744-4560-8de7-3b9cd8c6f42d", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76333ad9-22da-4c27-a15c-37fa47c0c6a1", "sighting_of_ref": "indicator--3a744c01-3744-4560-8de7-3b9cd8c6f42d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b715d0b-1976-4559-94ce-6e01410d8cc0", "sighting_of_ref": "indicator--0f753d4f-5759-4132-a5a9-9a2eca6324e4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02e0c1ce-b6be-4188-80f2-d6f4ee76b3ff", "sighting_of_ref": "indicator--acf13be2-d9dd-415e-8aa4-018eb88c0274", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b750563-7223-4c91-a00e-ff0b1ca74dc7", "sighting_of_ref": "indicator--76449047-0f68-4704-b827-eca70ba38bfd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3a02034-6361-4721-ae2c-e33b132caf21", "sighting_of_ref": "indicator--ce269bef-f50c-4f8e-9aa1-a2001c1521a5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d68530-0957-4669-8cd9-8d88b68403be", "sighting_of_ref": "indicator--610d838d-1ac5-4076-95be-fefed49e3cc0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--414428d1-5942-4a70-9c38-2933281d635e", "sighting_of_ref": "indicator--aada14a4-98e6-4dd8-98d7-63c44f94015f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f553cd78-0746-4b31-b797-52ef07856e0b", "sighting_of_ref": "indicator--20646c51-27be-409d-97e9-7a55a44f972a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e78f5cd-11fe-4890-b907-52866d4d5cbd", "sighting_of_ref": "indicator--12160aa9-f0ea-460f-894b-eda75af07432", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a29b18c-3868-49a9-875a-12afdfe31fab", "sighting_of_ref": "indicator--12fd0251-b877-4d7e-aff0-6da10645fdc5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d12910c1-c3eb-43cd-8078-c8cf4b4281fc", "sighting_of_ref": "indicator--1ea8beb6-e07c-4709-bd7f-d3d1a0a69d52", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2028c154-4c71-4512-83dd-ba2521809642", "sighting_of_ref": "indicator--ae304bf6-5ec9-491b-8b22-aba323777746", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2de1faaa-9804-4290-b57a-eceb351618e3", "sighting_of_ref": "indicator--5aea4f0e-0d54-4d4e-acd8-99d9289fdeff", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d08c9ba3-c3a4-49f4-a785-865d38f41e13", "sighting_of_ref": "indicator--a1218cc9-a875-42e0-b3d0-72b231a6aa49", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d640f659-4678-4e71-a6f1-8c003c923d8e", "sighting_of_ref": "indicator--9fb878d9-2beb-4a87-9c5f-f0bc9dbc477c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5953c6e-529e-405f-aaff-c730935b2f66", "sighting_of_ref": "indicator--65844ad6-ee07-4de2-9e2b-766c6c083698", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--425e260f-0087-4c1a-a051-4ddf34284b04", "sighting_of_ref": "indicator--b1eb35e4-fb9e-4208-b450-65687da5f4a2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--616a483e-271d-42d4-8192-ee4ae45cde58", "sighting_of_ref": "indicator--03c304c4-17cb-43c6-af60-609146068ff4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c93e077-0d1c-4d9b-bea6-29fc68f25be7", "sighting_of_ref": "indicator--875d7a98-774e-4bdc-b517-a0bfcb97ab56", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d63b0348-8036-40f5-800b-9a09663cee13", "sighting_of_ref": "indicator--16784b17-8df1-42ae-94c7-1ea02e7c9b64", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57345058-8499-45c1-a3c4-49dacdf8a0a9", "sighting_of_ref": "indicator--99efc04f-75a2-4a17-9ab8-59de5dc24e2b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a69de9a1-b72c-4bbc-bb56-e40951b9c566", "sighting_of_ref": "indicator--dd44ea10-6e6e-4021-9d1d-a72e3da5eb43", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--357ce93d-2185-44ac-989f-16dbf95d35cf", "sighting_of_ref": "indicator--657bbc42-af81-4c1e-90dc-7539016ac21b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be289084-0536-4b35-8bf4-1c3d8a8d39ef", "sighting_of_ref": "indicator--ffb8dc0c-b64e-41c7-8023-f4a46bf5ecdd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6413ba0e-4c58-4051-8f39-85e8bc873677", "sighting_of_ref": "indicator--ba55566f-5265-4e30-a9d5-c09739e2a49a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e07b697-534b-47a8-b98d-07ac977e1e20", "sighting_of_ref": "indicator--a4ff3db1-2766-4328-a56c-da34c7db8a61", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfda6278-8008-466d-b1c6-91cd2b50f755", "sighting_of_ref": "indicator--f65f4582-4651-49d8-b093-143e0a6283de", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aae4448-4307-4295-aab0-bcb3b47dae56", "sighting_of_ref": "indicator--457d8741-7ee0-4b58-8368-965c4259a261", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b4da50c-f376-4606-9f7a-36b699ec9180", "sighting_of_ref": "indicator--fe6f12c1-ef5c-4e40-88d5-9471ab4329e4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81dacc3a-6fa0-458f-9458-8cf71de0bc3d", "sighting_of_ref": "indicator--b99635ee-79f3-4007-a6b7-0acc5da7c631", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1dd197d-aa42-4a9a-9683-9041215ba7bf", "sighting_of_ref": "indicator--e17952b4-d948-4ec4-81c9-825bb1f11b6e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d3af31a-0c8e-4a08-bc90-d868b4f9c16e", "sighting_of_ref": "indicator--66f34932-bfaf-4430-98ca-991a0974b83b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c684deb-2de1-420d-9df6-b37ba2391dd5", "sighting_of_ref": "indicator--dd385100-a581-4a19-9a12-4585a7ce8ab7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e8fc392-c971-4851-b28a-d6e1491e2869", "sighting_of_ref": "indicator--33afdcc4-b9e3-4413-9ee1-c86464a6ed1b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c09c8cb-9a42-412b-a088-ba64e393af0f", "sighting_of_ref": "indicator--7b1e872b-dd13-4570-b415-7a9f2740787d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d62c089e-17e4-4316-b22c-2da83b85957d", "sighting_of_ref": "indicator--c42cae3e-bf2a-41df-b69d-c3e8caff96bd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a1a65f2-8b99-4137-af95-fdd1fc6291bf", "sighting_of_ref": "indicator--f2f55aca-0503-4a04-8351-e9dfed74e799", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc312b29-dd88-447b-b341-caddc4389b11", "sighting_of_ref": "indicator--fcdc4ed4-e793-44f9-bd5e-daa55dc507e4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d233b9c0-b92a-419a-924b-f2cf4ffa3e08", "sighting_of_ref": "indicator--a889ab59-b9f6-4433-b5c4-b4b2d9551a2d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f185e07b-0aef-42e4-b73a-e92e73c017e7", "sighting_of_ref": "indicator--cdddc4f3-a78c-4f30-b88a-955390b82bd0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16dac512-37e9-48ed-9e59-f1b3927d5b65", "sighting_of_ref": "indicator--235f1fc4-0c7e-4048-bdb2-59866b9fa3a3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--623baab4-dbbf-4255-bf61-222662b603b4", "sighting_of_ref": "indicator--8c9b7df9-a16c-4348-8bf6-81ae8faf4319", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42db2b23-6b30-4027-b6aa-ab96413458bd", "sighting_of_ref": "indicator--339fb4a4-715c-411d-932b-4637274f7c98", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b111e3-78db-4438-8322-9050ee4f018f", "sighting_of_ref": "indicator--50b698e7-a767-414d-a28c-3494b23d2473", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6be62182-05c9-474d-9362-b6ac9a864027", "sighting_of_ref": "indicator--c015e572-a88b-4d88-9c52-04498b74fd2a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d59df1-e4b6-451a-80bd-4d1eab395065", "sighting_of_ref": "indicator--f6d2193f-b0a4-41e3-be98-13e1c2dbfdc8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9566b72b-2b57-4cb0-ada4-552139a90ffd", "sighting_of_ref": "indicator--23a9175b-aaa2-4de9-8157-3768240347c4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad7323b2-daa5-4c30-a8e5-7c9c91b2627c", "sighting_of_ref": "indicator--4cb87d7f-9a3c-4189-a0cb-053e40b6d313", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d9739c-636c-4fa6-94cf-1e288ee2ee5a", "sighting_of_ref": "indicator--92b17ab0-5d85-4135-9c63-b955858bb0c6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e3aaa1-3f91-404e-b6dd-0b359e131cf4", "sighting_of_ref": "indicator--7c80b211-817e-4865-9872-904e83273b9e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2069d78d-069a-462a-9464-40b0e16b2425", "sighting_of_ref": "indicator--bfa8d3ff-3c36-4f42-b6c5-de4aa9146e8f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8c954d1-3e13-4f90-8435-5c1ceefd269e", "sighting_of_ref": "indicator--6868e93a-f83c-44c8-856a-96fff60af717", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ed8245-0b27-40f1-a746-9427caf87093", "sighting_of_ref": "indicator--0f938db8-8cc2-4f2a-bc09-6d9183ad48f5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d07aea6-c2a6-479b-b733-b6a446151d9c", "sighting_of_ref": "indicator--905fbde6-1e74-4a09-a791-fe3597bef9fa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80f81d97-99a1-4e48-9f30-68209b8b5189", "sighting_of_ref": "indicator--6fcea77b-f759-49af-a3b9-00c283ae0896", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02911e1f-a72c-40d3-860a-abdfaaed6778", "sighting_of_ref": "indicator--0ba9ff4f-fc14-4989-be52-197c2f449db5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a9c447-62c2-40b0-9762-6981ded79a52", "sighting_of_ref": "indicator--16d34ab4-eede-4f67-a728-44f755a83536", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab2e67ef-0556-4f5c-8cd3-ce06c53173be", "sighting_of_ref": "indicator--6b2ac40a-77e1-4f11-ba23-558a49f23079", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd78214a-47ed-4895-aa64-e91303841031", "sighting_of_ref": "indicator--de847d5f-f4b1-43fe-9bed-b759018fdfc8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da2ed297-1aad-449d-86f7-17288ede4b4f", "sighting_of_ref": "indicator--db44dd80-00dc-4319-9368-cf2278ffdcd7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e198d4-e1dd-497b-b49a-2620c411546b", "sighting_of_ref": "indicator--e811fcfa-b79f-4789-9825-87c6d9fc65a6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fd68ba7-32bc-4b98-bad9-fb56c28ae426", "sighting_of_ref": "indicator--2f4f830e-c046-4b8f-bfa0-922d494f7d91", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe66d86c-579f-484a-973d-1f960cbf2071", "sighting_of_ref": "indicator--4bc6f5db-5f84-41a4-8713-abae793d8b3d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0cee4b5-dd62-4572-b3bb-ae0d52d8b3dd", "sighting_of_ref": "indicator--2bcb765a-803a-4fcd-9ca3-011c784ec516", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21671979-ab6a-4538-a8a2-80d8d1a6e5b7", "sighting_of_ref": "indicator--b505f833-3677-471c-ab61-c4db78ed3689", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98dfb5d6-98dc-488c-b83e-2268aa579ffd", "sighting_of_ref": "indicator--8dfe7523-94ee-40a3-a880-857b04cb1c6c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7fcedea-119a-4e2b-983e-b983c2abe5ff", "sighting_of_ref": "indicator--0ea0aad8-e449-4fe3-ba87-efecbd112268", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e583976b-4225-4080-a24d-6d7422b45c10", "sighting_of_ref": "indicator--ee64c58c-13b7-4b83-97a7-ce5dd7591ae8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a91370b-1360-4784-a1d4-b04be5be4dca", "sighting_of_ref": "indicator--b4aca33f-2a35-4c34-b72a-fc14382849d3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2800e47-f9f5-43bb-8f57-8f554211e831", "sighting_of_ref": "indicator--dc32a8af-7e9c-4db8-8485-4a60d10b5f44", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43536e04-7e35-453f-9da2-aa0b41707055", "sighting_of_ref": "indicator--29450ae8-8ca1-4d00-acc9-bfd0845d837b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19845ed8-4607-4b9a-b0f0-820bda62aae7", "sighting_of_ref": "indicator--56b0a005-5fad-455e-ac3f-38ad4e862081", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddf5af75-4e9e-40be-a197-bf762e07049c", "sighting_of_ref": "indicator--02aae3a1-6b65-4a15-b88b-a1c79c3cca3c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae5f52c2-b910-46c6-90d8-0f38ffdbf15b", "sighting_of_ref": "indicator--d2745853-023a-476e-a096-4fa8247b9f08", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afcab9be-2c8e-4343-bd91-8054f959981c", "sighting_of_ref": "indicator--44090dad-2c16-4256-a7d1-da31fbfa0737", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ce83e21-a50d-48ec-97b1-97dec861b229", "sighting_of_ref": "indicator--4076486c-8dca-4b13-9410-d869913b7c76", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0aef380-6bf6-4336-95fa-251b828804d2", "sighting_of_ref": "indicator--a00a8ce2-ddfb-400d-9fc3-170596c6d565", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4debb540-4ef8-404a-930d-ac7c5e0d879a", "sighting_of_ref": "indicator--93bdf114-f5b1-4bb4-88fb-5f533bbc2969", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b14546ab-04b9-415c-94c5-eb909d9fa557", "sighting_of_ref": "indicator--077052a3-bfa7-4140-995a-7a3bae3e0fd7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b5343a5-8f6d-4d0c-9a2c-71a082312e23", "sighting_of_ref": "indicator--ce46ea6d-3cfb-495b-9dbf-cbf954de2517", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0fc01c9-5420-431d-961d-7de28305225d", "sighting_of_ref": "indicator--3b1f7aff-1d18-4f6f-8e05-8423998f61e5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2d4c1f9-ae55-4963-ad3e-ee84c6f77940", "sighting_of_ref": "indicator--875e71cc-b04f-4a2d-a6c4-d40122f6c4af", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a883fa6-c147-45a1-a38b-9ece283727fa", "sighting_of_ref": "indicator--91b5ab28-b326-4c7a-b9f5-81a3c0027faa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d66a7d4-1efa-4069-870d-6235bb11e4e9", "sighting_of_ref": "indicator--acd2e5cf-c03a-42fb-ad75-886bf82aa4b5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f381d4-5386-4a42-bd70-00d008b371e4", "sighting_of_ref": "indicator--1b068954-61ac-43c6-8688-5bb1d0532bb9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd2dc79-e901-4c46-bf52-1c10f47c9faa", "sighting_of_ref": "indicator--a43ca19a-8aa7-4f7b-b9fb-b0cd537eeabb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df08949d-bf87-4ec6-bff5-f8684465e5a0", "sighting_of_ref": "indicator--329169ff-70f9-41a1-a177-fc9eba81c743", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a2a7f40-0931-430e-9a69-b16c79845c83", "sighting_of_ref": "indicator--b0e9b82c-8edb-415a-a4ae-97552c69958c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c30cc947-7de3-4d33-b550-70ccf98cc73a", "sighting_of_ref": "indicator--212a0906-fd00-4cfe-b7e7-53e57ef9aeb6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88cd3e60-2f5e-4ebf-9175-23cfbab64d40", "sighting_of_ref": "indicator--07515dcf-1dd2-4db6-bd16-16d6a39d17b8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aab31cd-3b18-4ab1-99a4-5c2f144d5150", "sighting_of_ref": "indicator--480b8d90-20b1-422c-aca1-f01e33dd2a2c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53569fee-97f7-4423-9e5a-ab36f9850c5a", "sighting_of_ref": "indicator--4fcd165d-158e-40dc-ba28-f1eb5332a2d3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b386c1f-62cc-4fee-9864-021ca1923b6e", "sighting_of_ref": "indicator--903b64f7-b759-4ff3-a5ba-a86cb364c14b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5f26f9b-38a7-493c-b8b8-4eb4cd4101f6", "sighting_of_ref": "indicator--8cba16d5-d873-4500-8418-98ec1c166f1c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--780f08e0-35bc-4641-818b-1b93df476157", "sighting_of_ref": "indicator--ee6b55e2-3dfa-42a8-bd76-6184c86c6f07", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b298e311-481d-45f8-88ca-7afacdf5d348", "sighting_of_ref": "indicator--d9e89f6d-8100-40e6-b260-c4d10846eff4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--162731e4-8595-4c4d-8c9c-25ae8c8b0866", "sighting_of_ref": "indicator--779e20f4-f55a-4f64-927a-e75e63b953ba", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19381083-e51e-432c-9732-988c701e61cd", "sighting_of_ref": "indicator--186f707d-170d-472f-8277-9d5d93e09415", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f4f0a90-d350-410e-87db-9f6306d86e25", "sighting_of_ref": "indicator--ca9883c6-33c5-4772-80b0-c7e31e35a0e3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a54a6fb0-0a58-4a47-a942-7eedfe5cc2bb", "sighting_of_ref": "indicator--4f710794-cfca-4a90-977a-0a49464dbb29", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe4d9d6-75e9-46a8-9a7d-3ac721a77f11", "sighting_of_ref": "indicator--54da736b-c096-4023-9f9d-6c5797f2f071", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d22d993e-5f79-48b8-ac6c-d142f78a01ef", "sighting_of_ref": "indicator--087423f1-6404-4ea2-87cd-9a1222ac0ad4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0184104-61ae-4ce6-a504-9825070fc945", "sighting_of_ref": "indicator--713636a5-825f-4089-9bdf-aa7cf7b95ad8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a658559-20e6-4ffb-9de6-432959b28801", "sighting_of_ref": "indicator--514d8811-1e0d-48e3-8008-dc2c80e13a7a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a73045e5-3c82-4d15-9b7f-2c8fbf753c6d", "sighting_of_ref": "indicator--bda2759f-2e3c-4475-9d7c-78a97cc308a7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdb2c827-bc7a-4fc4-97c4-a7c3c840b4cc", "sighting_of_ref": "indicator--798f543c-6b4b-42c2-baea-0b6af3085469", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47482735-8423-4f5b-a2e5-a0bc81ed1bff", "sighting_of_ref": "indicator--968dc472-c1e7-4369-97a8-a210dadc5e87", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c79426c4-63c8-42c0-a286-33913f346a30", "sighting_of_ref": "indicator--14279731-0396-48e9-99b1-8f82ed07ec0d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6919ff58-4c20-4564-a55d-8e1f4cd8b6ae", "sighting_of_ref": "indicator--976b87e9-6275-4c05-a612-def4385579ad", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ddfc6b-0813-4806-9383-0d0afba73e40", "sighting_of_ref": "indicator--fd6b8f4b-a7eb-4fa8-8865-f56bd1f5d424", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98179ced-9b3f-4768-9c61-8a7c3f857092", "sighting_of_ref": "indicator--5a913be2-2465-4d29-b502-c1cc53df964c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f365552-eaaf-4a25-902e-209dd8074334", "sighting_of_ref": "indicator--20a0b6b5-073c-42c4-b247-9d56e2bc0b79", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--348b4bb0-001e-4e7a-9eb3-53247dd000d5", "sighting_of_ref": "indicator--ed8fa23c-bf2c-4064-bab0-2a04aff1dfbd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e06f44ef-d028-486e-b647-345aba7cdec8", "sighting_of_ref": "indicator--ff7e32cc-5ea5-4b8e-a7b5-4fc70afebf6d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbb0462d-2b1e-4999-83f4-a68397be9c0a", "sighting_of_ref": "indicator--873f3b12-8383-4d43-a52e-2b793edafbcf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc1a619d-dcfe-4d5b-b951-bd8bd2ead546", "sighting_of_ref": "indicator--681e50ac-67b1-46ed-8690-f2632cda21e6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c33e59a7-2d74-49f3-8f8b-21f6a60525a7", "sighting_of_ref": "indicator--02583b4b-360b-43b8-a010-b3665b91ca11", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e6482d0-b23a-4261-89ac-912892ed99b2", "sighting_of_ref": "indicator--4c40d43c-77a4-42e9-8b42-40d43241a43e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--765d3090-86ba-4c58-bc32-2d2a96657e7e", "sighting_of_ref": "indicator--1a6df1eb-be5a-40bb-9e4a-4f388d54d172", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--889038ad-3bf3-41ca-97ee-5faed5fe34b3", "sighting_of_ref": "indicator--caef1e93-37fd-4611-ac4a-35327194e0fa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e568f341-9719-4447-915b-1845efaf18a6", "sighting_of_ref": "indicator--4d93ff49-4a11-431f-adc9-bb7ed23099bd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--139ea975-8e71-4abb-a6d3-9074b68da5f9", "sighting_of_ref": "indicator--1b590067-5e8e-4530-ad00-20777524984c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d15a4ef-0f36-42c5-94f6-3dfe2cc515cc", "sighting_of_ref": "indicator--5c1b516c-0a5e-4d21-b8c3-ea4dce5bac9a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91240dca-801a-45d9-901b-f8414bb84d4a", "sighting_of_ref": "indicator--0c28eef2-1260-43dc-a7a7-44257d92d814", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4567e3aa-546b-415c-8225-e7e223434141", "sighting_of_ref": "indicator--baa01882-e3d2-497e-ba0a-1936b4bfecb6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1569e787-eb09-4294-8d70-f831963fb35e", "sighting_of_ref": "indicator--3f443395-ad55-4a27-8a62-d2040d9c6a76", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d3ebf3-2c15-49e4-afff-c8f8a32bd616", "sighting_of_ref": "indicator--a95fa64c-f6fb-4e39-90f5-f3fcf372eea7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c547a601-6196-4251-bfbb-ed83caabe35b", "sighting_of_ref": "indicator--7b216665-5100-4eff-be84-e32c70f9e4f9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5b62c54-749d-4ec7-8fc2-955559ef523b", "sighting_of_ref": "indicator--513cb3bd-1832-49a9-a152-a391b72ffe33", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e271627b-e7e8-4ad9-a629-4d068b954c4e", "sighting_of_ref": "indicator--eaf78a3a-7eb0-4f1b-af27-dc290472b772", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--818c0631-5426-4789-bd12-249f5e28e088", "sighting_of_ref": "indicator--41be2cc2-5f8a-4252-985d-3dbd07d524d4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df7f513-4429-4c87-9385-257c6263d90f", "sighting_of_ref": "indicator--5ae8d10e-fe2f-4069-8437-bfa38ebcf095", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba29c38-febe-4aa1-aa31-05816d93fc36", "sighting_of_ref": "indicator--d62ef5e8-1021-4945-b140-622f264e3c21", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e0f4195-bf21-4552-8f7c-3a00402e1ea4", "sighting_of_ref": "indicator--600db4b9-ec02-4420-8594-27c647a3246f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd21c595-f60e-49be-920e-330d470ab884", "sighting_of_ref": "indicator--01e0ef30-8469-4c1e-8030-03e6b0f3088f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b80f9d1a-1463-488c-bd9a-f2af6fde9bac", "sighting_of_ref": "indicator--345070a8-8cd2-479d-8914-f517256ce6b0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--070a0902-8e31-4baa-85e7-3bc13801c1ef", "sighting_of_ref": "indicator--d34619b7-dca1-41ea-9b02-3f9f32761d1f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf2f177e-ee4a-479e-b32c-686069c5c45e", "sighting_of_ref": "indicator--4d14b1af-dbab-4e35-a130-fbde9b9c1d25", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa244061-077c-4a54-8fc5-3de004b4b4b0", "sighting_of_ref": "indicator--0629e3cf-e190-4e24-9f0e-6a2c3000019e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ef9b87d-1db7-4b84-a007-5993c593c7cc", "sighting_of_ref": "indicator--0c1b1fca-c9e3-48e3-8729-57a8140085dc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e161ee33-1097-4881-bd48-af2b328ba087", "sighting_of_ref": "indicator--3a4927c6-c82b-40c4-977f-810a001237c5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d34c9160-0835-437e-9d96-7a895464d62e", "sighting_of_ref": "indicator--a07c9a4a-32f2-4a50-8316-f9d615d29bc1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ed21c9-333f-41b3-81c2-a670277bd0bc", "sighting_of_ref": "indicator--7543ec38-0aef-42c2-a738-98f26b323123", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c59f83e-e36e-4d9e-8fd7-c4d73b204fac", "sighting_of_ref": "indicator--197bd452-65f6-40b8-a1fb-be201e4317b1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e691f21-68b3-41b5-88b7-317eac948dcf", "sighting_of_ref": "indicator--85f5831c-6c2c-4961-8b18-e60d2dfa7e14", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f43a9a-eb7e-4f9e-9514-01337415b08c", "sighting_of_ref": "indicator--d8ac1ff5-d59c-43a7-9d4e-e65752ce7691", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--311760da-eea0-48bb-8180-fac2f58e712b", "sighting_of_ref": "indicator--c57bcbfc-77fb-4d17-8438-3874a5a0d055", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d25b503-c81a-4b96-9d8e-fa7377ebca8d", "sighting_of_ref": "indicator--b6e97263-62d0-4eb9-9120-c9081821b504", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c8e0f92-e3ae-463d-a9e6-1c0b64301f7d", "sighting_of_ref": "indicator--c497b610-7a5d-4d86-a1fe-96f67b5cd62a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4c050ab-6193-4333-a281-aaa7232e952b", "sighting_of_ref": "indicator--f93476b7-a5ca-4cee-9966-427707179cba", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450e65cb-c69a-4866-b6da-422b754fe4ce", "sighting_of_ref": "indicator--259552e8-89b9-491d-bd40-463af98be790", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ecb316-13ce-4a8b-b237-eacb5f77e7f8", "sighting_of_ref": "indicator--28b9c37c-cb41-40b0-85b4-142a1cdf386c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efb41a53-e110-4f0a-ba49-1267ca189ccf", "sighting_of_ref": "indicator--0f9d405c-6eb8-4100-9209-085b84d0df81", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b44f2af-5b07-4ef7-bd50-67f0334f642e", "sighting_of_ref": "indicator--e81213fe-fa8e-460b-aaef-301cee9977f3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa6acda9-600b-4f63-9a80-952dfda36b86", "sighting_of_ref": "indicator--906e8c48-633b-4fee-a1ff-4d535b2a2bf3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d1827de-4e4c-4489-9fe2-57edef9f0286", "sighting_of_ref": "indicator--1467c9a6-292b-4bb8-b745-9166c03c2d44", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81a3be81-fa5e-4059-8546-488ae0b65cc4", "sighting_of_ref": "indicator--5c71dfa2-baea-475e-9393-cf66449649eb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--318e5aab-b595-4ffc-9803-f03026ead3f7", "sighting_of_ref": "indicator--1733aa0e-ea16-41f6-b84c-af8e622face9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--609b9a47-0a10-401b-91a3-f095eb9448f7", "sighting_of_ref": "indicator--2465bdfa-8efd-45a1-85b7-28b56bf22c0a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be22151e-9865-4138-91d2-dd578e0a58e5", "sighting_of_ref": "indicator--1b21acff-3cde-4131-93b1-fbfc58ca680f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b29d6d3-10b4-4364-af38-5980488eb09e", "sighting_of_ref": "indicator--09043e37-0a7b-4c38-a084-b48b6f127d8f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b8ad0f-3bfe-4095-8254-a8b77efa49cf", "sighting_of_ref": "indicator--09993431-fea6-4560-a3d3-ce82cf3ee66e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de41d226-1fc0-4296-a8c3-a5254b6bb2b5", "sighting_of_ref": "indicator--15dcb879-507c-4076-a8d7-74e3748bf4cb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--855ff4b2-a5ae-452f-a231-c01f023029e0", "sighting_of_ref": "indicator--fc376bf1-3a79-43f1-af9e-e158d142bc4b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--878f05e0-a024-4dee-be7f-ab09abda80f4", "sighting_of_ref": "indicator--9b9a5546-b467-4d96-b3cb-bbd74669167f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0bc48b0-3425-4991-865b-1f4c947d74bb", "sighting_of_ref": "indicator--b771cedf-343f-4f93-8418-037eb75d6745", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9564e2ce-4033-4067-8499-5f3f20fa505d", "sighting_of_ref": "indicator--38c16c37-4f91-4ee0-b1f0-97ee427e2e41", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02aa9848-8035-42ec-aa46-54329f19f122", "sighting_of_ref": "indicator--ec8a066b-216f-4c47-8438-7bf537beab35", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2c2af52-8195-4481-979a-036dd56fe4f3", "sighting_of_ref": "indicator--dcef07ce-8255-40cf-821a-3f417b439f31", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--129faf13-7268-490e-b160-d7be81c7f145", "sighting_of_ref": "indicator--cdcfba84-9ebd-47f6-9ac0-add602b65fd3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07258e8e-0a03-4518-8f89-eb5342488863", "sighting_of_ref": "indicator--2e6af91d-68ae-4be3-98ee-581f2bef424d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85bc100c-9fc9-4d5b-a661-b37ae5421430", "sighting_of_ref": "indicator--d236b822-54ef-4ea5-a063-35aaf054b022", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd39a942-47f1-46c6-b2aa-76268aedc805", "sighting_of_ref": "indicator--be65341c-a13c-40b2-9372-2e32ac03dbdb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ffa8f8-320b-4af0-b1c0-5b66c18f51b2", "sighting_of_ref": "indicator--6c775d6f-fc7c-436b-b18d-e468250f6b0b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f57efa26-5c1f-4b91-8211-a9e293099a12", "sighting_of_ref": "indicator--fee6f0cb-0bab-435e-9b9b-c7d33a107036", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42555746-15ad-4196-8d86-1d1ccaac3939", "sighting_of_ref": "indicator--6a98f3f7-8db5-4d24-ba6b-2024591cfb85", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--922cb91e-8292-42ac-a56c-32b3f06ca3d3", "sighting_of_ref": "indicator--a6c42803-f0ad-4c86-9a1e-7efe561aeacb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e14482c6-af95-452b-850f-e0393281e775", "sighting_of_ref": "indicator--3818ad92-3d9a-4ed9-8646-26ae328a94c1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca84d70-4129-4eb5-b750-0769b84b5c75", "sighting_of_ref": "indicator--0ece027b-ab97-4f56-8a1c-000099b1f7db", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73fa557d-476a-47b8-864e-7ec29184963f", "sighting_of_ref": "indicator--6d43f538-ab27-4f3d-911e-6ea93397dd8d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec7fb810-c24d-4303-8ba7-205e949379e5", "sighting_of_ref": "indicator--a687dd3a-efef-46ad-b204-394817d40b4d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbfd240f-e858-4b5c-9e24-af011cd77198", "sighting_of_ref": "indicator--05ddf3e8-bc2c-4b73-b16d-4fa720b9794f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5be72316-0385-4843-9b7e-571e10d8fbca", "sighting_of_ref": "indicator--5d3d1555-5ac2-4f41-8651-c9e20867ad16", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f9de554-d736-44e3-8fe3-4b03dce9b45d", "sighting_of_ref": "indicator--2512a87e-49eb-486c-b2c6-e0aecadfcff6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--772873ec-22d4-4ec3-acfa-a384092cef43", "sighting_of_ref": "indicator--59c6b099-12b5-4a13-9905-222a3451d01f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6796f428-e2e0-40bb-9053-ee33e2d87a8b", "sighting_of_ref": "indicator--7776d769-76bf-4030-9ee3-f1cabdd59d4a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2242a085-ab86-487c-9072-400780bb43ac", "sighting_of_ref": "indicator--97d3d18c-7eb0-4d3e-a784-0db4aa43b292", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5704d004-da66-43dd-b151-6548de626b21", "sighting_of_ref": "indicator--73d28a3f-6c68-4822-af6c-03072bf27819", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78794b3c-2d5f-4102-956b-0a7708a06e3e", "sighting_of_ref": "indicator--98b48be3-df0a-4f5b-a42d-3fe9420496af", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c24e7bad-3935-4643-ae7e-029e2c9087d2", "sighting_of_ref": "indicator--2fd815f7-d244-40c0-afe2-de147d5d7e33", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51b8a955-5a0f-4ba6-8cd4-37bec2676de8", "sighting_of_ref": "indicator--dfb8a6cd-344b-487f-8e1d-3a3527a9e2c3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff765640-80c0-4bf7-ad8e-574772e66384", "sighting_of_ref": "indicator--e6f492d1-3818-42bb-bcda-44d6c3232420", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bc2967f-7dfe-44b4-ae01-b85c931d0a7b", "sighting_of_ref": "indicator--08fb29fe-5088-4a5c-9bfe-34da9b14030b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9eb66e4-340e-4e36-9a31-1eac209e9dc7", "sighting_of_ref": "indicator--ac262e56-bfab-452c-8b5e-0c779bd085e3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee3b2785-3446-4cc5-a768-dd2b851ac6bb", "sighting_of_ref": "indicator--daa7962b-56bf-43a5-868c-36422269e428", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25adb73f-b9c0-4190-935a-c64f82ec6332", "sighting_of_ref": "indicator--f4251453-6db2-4597-9305-bc786ccc2d85", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cdc33ce-31a3-4f96-bfc8-e6b9c98fe4a6", "sighting_of_ref": "indicator--f594d5f9-6c15-4e00-8d9f-d1b26e5aa33a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea032aa-cff7-4ce7-bb2a-98182cb0ed23", "sighting_of_ref": "indicator--dd44be37-4f95-4605-8073-8c38b110da6e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e2ac4b1-588d-4e39-8901-f7397db7d5bb", "sighting_of_ref": "indicator--827b9bf8-27ab-4e0b-b4ab-00d144dad09e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4cd806c-82c3-47b1-bf0c-654e630221e2", "sighting_of_ref": "indicator--0a79f4d8-8372-458b-b081-30ccca704a0b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e5e7cb-a767-4453-ad51-fdc11bd1579c", "sighting_of_ref": "indicator--44ffa019-ec88-4d26-8758-4ae56dce643c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7a188f3-902e-4cb2-8556-f5c93a69e992", "sighting_of_ref": "indicator--06eff056-65e7-4d3c-af3b-2c8b0a9b349a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c65290-6af9-4172-a64c-fe4ef9e5bc28", "sighting_of_ref": "indicator--becff67c-9162-4ce3-90ef-bf3a05aa5d4a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--237758c7-e2fc-4a6f-8141-e799beb7eddd", "sighting_of_ref": "indicator--35b8546f-a034-48ff-8405-22141db7fab1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64cf9576-41bc-4cf2-98b8-fd9017acd780", "sighting_of_ref": "indicator--d43c4eae-a499-4cd8-9f80-e71a95b695e9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39f1ea56-58a1-4cf2-a158-44850a4bf6e8", "sighting_of_ref": "indicator--cdfab5c2-6127-4241-bc06-c27d8b11a5a1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e244c7f3-9a99-4968-999c-34c5062eab3d", "sighting_of_ref": "indicator--908a55a0-ba45-4ea6-9495-039fb1c82c02", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--929e726c-83e5-480a-8ec1-a20381d5732c", "sighting_of_ref": "indicator--7ba1d16c-7151-4454-a2f0-72f0b0531096", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--136b38fc-7c7c-414d-b27a-d948202f3008", "sighting_of_ref": "indicator--686a84c9-bfe9-4cb7-98f1-d549a27fe3b0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95754325-3c12-4718-989b-155016b3dfd1", "sighting_of_ref": "indicator--78f6adca-bd2c-4ca9-bf82-7e8760b0ab72", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b9aa41-1375-4446-9fc8-8aaa8736f6c0", "sighting_of_ref": "indicator--b7dea135-aea1-454e-beea-489a76777edb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b0c7983-47ad-42a7-b89b-52cd63c2f21b", "sighting_of_ref": "indicator--18a8f759-b491-4ac8-abf9-f6e1362b1362", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f84d153d-8340-438c-8ced-1f7f7a5c5463", "sighting_of_ref": "indicator--681c3da3-9c85-4663-b8da-acc80124c056", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85795bcc-0704-420d-b3a1-7152a834bada", "sighting_of_ref": "indicator--a03747b4-5540-4e5b-b492-f8ec2c845e95", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--938fee41-f8f2-4180-92d4-5b0e7182a925", "sighting_of_ref": "indicator--6e8457d5-5796-48c4-8d95-e02805e90385", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d91ff92-41d2-485c-9dee-949fcba1bba0", "sighting_of_ref": "indicator--0ff5c2d3-d722-44bd-ba64-2812d0f3b7bb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31511398-3590-4572-90a7-94bfc09e4aca", "sighting_of_ref": "indicator--4e6b17f3-fdb7-4e80-8f00-e5e355db7fb1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2b9d9b0-feea-416b-876d-2482e139271f", "sighting_of_ref": "indicator--b35631af-3ff9-4a0f-be20-8ade35517497", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85639bba-53f9-4da3-9da3-d5428e1e2525", "sighting_of_ref": "indicator--8f2915f6-18ff-4c7b-bcff-bcb0381c4d11", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c91894c2-4b69-4ba3-a905-45d37e4f9447", "sighting_of_ref": "indicator--005eb1e3-43bd-4df0-93d3-2a6762d64d81", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eee68281-8740-406e-b4b4-535ea1031a91", "sighting_of_ref": "indicator--4a9dd623-c2b4-4162-8267-44770bd895a5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5328eb51-1c91-4e7e-91d8-2e2524c0b81f", "sighting_of_ref": "indicator--a681473d-8f5e-450b-a095-7a3c816259b7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89988731-bb44-4708-a8e6-6b02edc84e95", "sighting_of_ref": "indicator--21a766c9-d547-462e-9677-a90a2dffc3cc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db07cb12-e921-4254-ba38-e2397ef53d93", "sighting_of_ref": "indicator--f713dd5c-0704-4228-81ab-e298e73f1ed6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3538636-9435-43f2-8cd5-684018e70061", "sighting_of_ref": "indicator--3c16f668-bbb0-42f9-96e8-4c145d5a95d5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc9f59d-6367-4eee-b280-1b99bcc57595", "sighting_of_ref": "indicator--bb2a174d-55cc-4c30-8d98-96a783d4652d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28a69d96-f1e1-412e-9aa4-367ddb90865a", "sighting_of_ref": "indicator--33a78820-e2a5-4974-95d0-7e20601b78d4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fe466d8-6293-47fa-9f4d-b6c4d8f141e7", "sighting_of_ref": "indicator--9b5eac87-2fd1-43f8-93aa-4130c52f83c4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5d8e711-6a95-4d32-811d-4f80fd888283", "sighting_of_ref": "indicator--93258e3a-7cd7-46bf-bb83-2133eb8528da", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d3fceb-50dc-4e58-81a9-6695cac625cc", "sighting_of_ref": "indicator--dd69066c-0e82-4dc9-bd8c-4bc8f87ea6e1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4574081d-db5f-4be8-aa66-fd97c47e3781", "sighting_of_ref": "indicator--310f6350-3d32-485e-9c6c-554ea4ee43d6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1a1bc49-e519-46a6-9e03-ab82f18c788e", "sighting_of_ref": "indicator--383ef90d-2209-4b3b-8433-74d85fa8fa05", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8193cc9-cbad-41d1-baf9-6f830bdfdfaa", "sighting_of_ref": "indicator--dd421fe1-06ba-4fb5-8267-dfa1dc01cf24", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa3fdfc4-9c16-4c27-be8e-9122e24bf7ff", "sighting_of_ref": "indicator--e0f5acc0-0da5-4a1d-8ce4-3b531fcd627b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f6f059-314b-4c7d-afa6-d5769da1f8a0", "sighting_of_ref": "indicator--e78d3904-c6ec-4ab4-8be0-1faca0b75c6c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae305559-2aa4-45e7-abb6-2c5a86e57b73", "sighting_of_ref": "indicator--9539567f-abb4-4129-9428-40c6d23fe4db", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bf9989b-0515-4dc3-9667-01b607c10569", "sighting_of_ref": "indicator--cae8f6b1-cb23-459b-bf42-b4d0b5f5ac5f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfa695ae-3bef-4cfc-9ca6-bf0a448ebdd5", "sighting_of_ref": "indicator--11db34e4-b94d-42ed-bf4d-188519c1a849", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a956b4-f543-4c93-bcca-d1f369c65f7a", "sighting_of_ref": "indicator--f92f00af-e4e2-4a98-958d-6715d621a3f7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c66b724a-69e3-4061-8bd0-33aa70925afc", "sighting_of_ref": "indicator--7e5cb0cc-f0a1-4275-aa78-fe1f0b49da4e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f2f33c2-ca44-437f-9cdd-cc5ac32d51dc", "sighting_of_ref": "indicator--1b68cf95-86ef-4160-a0d1-c5389687b121", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--157d4579-f46c-4c5a-8e87-ebf93ba87616", "sighting_of_ref": "indicator--e93abd60-97eb-4a37-ac1f-1bb72fd7e4d0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c4717a-b39d-4599-ab86-0dacba0f88ee", "sighting_of_ref": "indicator--bebdd41a-e30b-4486-ab29-0e1d035bd3ae", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a892b1cb-c389-47b7-93cb-dfde4e37003e", "sighting_of_ref": "indicator--d1f58d88-de17-4cd5-91cc-df065842dc6d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e47311-7d7f-4fea-b4fe-76216aac5f96", "sighting_of_ref": "indicator--c1263158-0db2-4d91-b544-aa4654c19b40", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e590e9e6-c5e4-4f49-a54f-b16b419f6e55", "sighting_of_ref": "indicator--a7373324-bec6-4d03-bf69-c3f65da6999a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c72d3e7b-5ca4-42a5-8584-80713b3fb0af", "sighting_of_ref": "indicator--6a386d5f-c00d-41a1-b3a9-64604e9de5b1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87e63c37-c45f-4d18-8f15-8ee82adaa1a8", "sighting_of_ref": "indicator--29175bbe-08c1-42d4-aeea-534cf285080f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11963c7c-57e1-41ad-bbb0-5e1da25f7ff0", "sighting_of_ref": "indicator--169c962f-0468-4994-b876-63bd9ccf9d84", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efd54b6e-7dd6-4136-bdc7-6e8183474aeb", "sighting_of_ref": "indicator--2f1ce1e0-7fbd-4d4d-b4e0-df8d2337e76f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb7e3cb7-13ab-4ac1-b7f2-1d1667b2afb9", "sighting_of_ref": "indicator--4aa02c3b-7f5e-47ec-b5ff-74e351d2d8b1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9c703c5-ec49-4c7e-84a2-30e9d329ff4a", "sighting_of_ref": "indicator--2cc4d9ed-c61a-4238-9f36-483f55fb7978", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e70b9f8b-7e4e-4998-9ea0-288750051b35", "sighting_of_ref": "indicator--5703fa1c-d59c-424e-bf04-0e675e1b1540", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f97107f0-18e4-4382-a647-d36cef2797ef", "sighting_of_ref": "indicator--4592e383-a02e-4980-8390-7c83c4d153b5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--796ff1ea-25c5-48dc-a020-9251d8e101c1", "sighting_of_ref": "indicator--b7edf416-1a19-40f7-b90c-6cef99c00e68", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e996deb2-14ef-4c45-910a-9b1cff4713a7", "sighting_of_ref": "indicator--a445f57d-9a5b-4fda-85c6-5e22e6c686ca", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f9d7928-8d70-43bc-aabd-9fe794076cfa", "sighting_of_ref": "indicator--00a4798a-1459-49a9-88d8-cf76eee971fe", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--942187ac-fb6b-4cec-859f-23f272509424", "sighting_of_ref": "indicator--0b434fa6-6386-4294-a7f5-4738f2395338", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe6125a7-68e3-4183-822a-08ed170cc5f4", "sighting_of_ref": "indicator--e6c8d486-01af-4104-b18a-d31b077becab", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41792f78-2c1d-496d-bc77-1dc73c288dfc", "sighting_of_ref": "indicator--cab6d0dd-1636-4989-b3d3-a9db91ec183b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3bf59b2-9347-418b-b956-a355f7d6b191", "sighting_of_ref": "indicator--1011349a-e123-4773-949c-87c767cedf80", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52eeab91-2fb8-4a77-b97c-7bd27a3a1042", "sighting_of_ref": "indicator--7fc4ae8b-d41c-4bbc-8ada-a579d916f88e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c7172c1-6177-476b-b216-b3bf5ed2bb40", "sighting_of_ref": "indicator--34392c7b-4f38-43c0-9399-58f5f86224be", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3205e579-023e-4b03-9432-2a5a7e10bb65", "sighting_of_ref": "indicator--1f5bee56-c3bd-4802-9422-a62fa5b429fb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42571d6e-45af-4fd2-967b-fcef6d353437", "sighting_of_ref": "indicator--bc9cae19-ad08-4930-88e2-001163afbb55", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e016b7-4dc8-4b07-b009-0fe47fa34aad", "sighting_of_ref": "indicator--1efffe58-6a5c-4858-b50a-942edb91f47b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eba1929-002b-4b5b-892e-3652ea6b43a4", "sighting_of_ref": "indicator--443f1c9f-0e39-4ba0-8b46-e716361d305f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08edd312-d2e7-48b7-9dc8-8cd69685d093", "sighting_of_ref": "indicator--2d49867e-df0e-4dfc-b9b0-abd3dd52d8e1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b88663ef-e5bd-4e97-b00b-de84b3c6b0c2", "sighting_of_ref": "indicator--d5203053-e531-4cab-a51d-f067a736cfd7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--981aff9e-9e1c-45a7-ab5a-dde0125d0ba9", "sighting_of_ref": "indicator--2481495e-beec-4797-980e-1ed1a4fc192e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5097f9b6-01e6-447f-ab78-90dc43c51cbb", "sighting_of_ref": "indicator--f1942d66-2c2a-4170-aed3-9c798f4725bd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61074252-57aa-4f9c-a57f-ddc15b31b427", "sighting_of_ref": "indicator--62962995-a0fa-4f89-bfb4-41c58caf0ba1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d50567-c430-4c38-b8db-ed80c0f483e2", "sighting_of_ref": "indicator--3df7baa2-6b68-41b8-ad6f-146626b06b03", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c33996-6628-4625-bd25-3f40cb43fba0", "sighting_of_ref": "indicator--99b8b3e8-8188-49c9-bfc3-3eec2b98d00b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98ba9f0f-b15f-449b-9248-5b8ffe6b18f0", "sighting_of_ref": "indicator--f0b1bde8-f931-442f-adee-34dff8e21a55", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ec47ea-8572-4d9f-b25a-128bf3a59474", "sighting_of_ref": "indicator--fb56ba64-ee3f-4f4e-b502-d920b13eca31", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f6d29d0-664c-4318-bfdc-0a94a1682144", "sighting_of_ref": "indicator--e93df2b5-4436-4ef4-9532-e42838f3434e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea128c4f-902a-4312-acd2-60b58908ba18", "sighting_of_ref": "indicator--391f95d1-a7d7-47aa-8f7d-462d8172118c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--154faa8b-f993-4a75-8d61-5b6e5adb912a", "sighting_of_ref": "indicator--fb2bdd81-a423-41d7-8439-c2b9760119c9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dddfe1e-9ba5-45cb-9085-b685a42647ec", "sighting_of_ref": "indicator--54c3f1eb-f278-40ba-b145-69e37775b6aa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5bcbf11-7e7d-4f25-8ad6-746b0d19356a", "sighting_of_ref": "indicator--64f0c83e-0886-41c3-b3fe-21dbacb91a36", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0519fe4d-5520-460e-93a0-753caaf7f5d3", "sighting_of_ref": "indicator--b2ac6e88-8a72-4b9f-906c-b9700808d388", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9862a9ad-d02d-4d5f-87d2-e021c9b1541b", "sighting_of_ref": "indicator--a5ad1bf7-587c-4b78-a927-b3acce0e65f9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d4d74b8-bf5b-4e0f-80ca-cebb66d516b3", "sighting_of_ref": "indicator--52a16a56-5d8a-4c71-97e9-c4b4ceb415fb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b8b1c6a-7cab-4360-9e21-bbea12a0b04f", "sighting_of_ref": "indicator--1c660247-8aa6-4488-b7af-b8a1cd53849c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db8d176-77e9-4601-aa05-acdb6ca80f1a", "sighting_of_ref": "indicator--5e5c4b1a-3aab-4736-9fe5-d57e6cff31af", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b999430-8923-498c-97b3-be869192c17f", "sighting_of_ref": "indicator--1cd583a3-6686-430f-a9b5-2f94729022cb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20ef66d7-3a9c-4110-98c7-577ad60040de", "sighting_of_ref": "indicator--91483124-264f-47ee-8f92-e356ab7bca48", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b40f1ea8-a472-4d88-b77f-263fa01d8c4f", "sighting_of_ref": "indicator--9cfceeea-5da9-4b9c-8271-46a6cef98c90", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d353aed8-a8d8-45e1-bcef-4a0d3bab7f7c", "sighting_of_ref": "indicator--3a02230c-d36f-40f6-b34e-2618379a55ae", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb6e65d-101f-48fe-b00a-4fb83a6f34f9", "sighting_of_ref": "indicator--6bd5787d-1dce-4e0e-a29d-4eb52fb97bff", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f66676-cba0-465f-94be-cc51e6e302e8", "sighting_of_ref": "indicator--b80c7e31-0f1f-4cb4-ad1f-005d445eec2f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b96304d8-6896-43aa-8792-4a6c835cf534", "sighting_of_ref": "indicator--5b25f40d-4c7c-4a28-a49b-9b67165d1d3c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac7828f-4db9-47ff-aafd-75854e6497bf", "sighting_of_ref": "indicator--71905bf1-4128-4cc0-9824-ee86d4f6af1e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d445edfd-3540-416d-9db8-85b8a672922a", "sighting_of_ref": "indicator--0915d21f-7d06-4409-909c-095fe8426d81", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e37b4555-3593-4f2b-befd-1bebf568368a", "sighting_of_ref": "indicator--fc4b2f1a-a9a2-4d08-9d2d-f0f9dd66ef98", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51572c1f-6f21-458b-b607-5be72ba0093d", "sighting_of_ref": "indicator--04631831-d1c7-4ecd-9040-6a9c2cec51d9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19e6456c-1079-4358-addf-d5dfd2bf4a2a", "sighting_of_ref": "indicator--872e8686-0a9c-46e1-b422-6b5e451b514f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e57f6d6d-4694-4ad6-b4e5-524db8db8818", "sighting_of_ref": "indicator--dd7c8828-13c3-4d38-b9c9-0b1655e884e9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40291bf2-720f-47fa-b905-6f9ab1d80224", "sighting_of_ref": "indicator--077d30ae-216d-4bdb-823f-3d03c1d61caa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7b1c0fa-78dd-46c6-82f6-ca7d26948826", "sighting_of_ref": "indicator--49573b15-771c-4db0-b881-3d0a00fa0658", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ba673b5-a1db-43c0-bcd5-aa7510786826", "sighting_of_ref": "indicator--0593650a-d87b-4d3e-879d-c56f4e1b7916", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7adddb87-9aa7-49fe-89b8-e802c82ee530", "sighting_of_ref": "indicator--35018fda-c447-4f96-afbb-561d8e1042b9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7165f8d-848f-4e97-b4ff-e1f136b05443", "sighting_of_ref": "indicator--b5cd1381-49a9-4ba3-9980-ca2207ebcf10", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84739946-c0cd-4576-97f3-0df281129e38", "sighting_of_ref": "indicator--3d22d1aa-e746-45f4-b77d-9969ed145f1d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33fe7449-b68c-41d1-9c3d-f14e11ebbfb1", "sighting_of_ref": "indicator--8321525a-33d9-456e-95aa-a4518babac9d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09625242-f054-48de-ac32-23b7087d80d5", "sighting_of_ref": "indicator--daa6902a-abdd-4190-948c-886af6919ae4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--596ba4d3-94b2-41c2-a3be-345a0358c939", "sighting_of_ref": "indicator--ba7cb4fd-3fd7-4c46-a34f-920a3a6e9852", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e57b49-45a8-4d0a-ab68-859bb248ff48", "sighting_of_ref": "indicator--ff5a75af-171e-4988-8688-6ff01c747a5b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee23be1-9653-4bcb-8b41-2242edbd7c97", "sighting_of_ref": "indicator--51f8f7ba-c7b0-4e59-a199-89c378d1fe9c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d6c06b6-8c96-47e6-b6ef-4eaab80ebcad", "sighting_of_ref": "indicator--01a4e0cc-6d7b-4899-a7ae-68dbd1897f65", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c04b6d-e174-4e1b-bf05-fdc2d94bf1c0", "sighting_of_ref": "indicator--9d70128b-cf40-4d13-b32f-e48dd6eb449e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17c45a01-dfb1-49fb-af42-e71a1ed73fcd", "sighting_of_ref": "indicator--6c05660b-7278-49c0-82fc-da8fb0ebfa2d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27074fb1-c6e7-4fd7-915f-600276440cad", "sighting_of_ref": "indicator--69e6f9f3-022b-4aaa-b693-ee3cc7d0b907", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59ef3268-b715-475f-bf89-d25b422e061a", "sighting_of_ref": "indicator--59e11cc9-ce35-4f8e-8896-fe00984484ca", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a987a53-6644-4350-9ee7-41cd160c4a7c", "sighting_of_ref": "indicator--5c826e7b-feee-43a3-8415-865707deca00", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3465d471-8939-4e62-9f32-d0237b1239df", "sighting_of_ref": "indicator--7ac04323-10d5-4348-8b6c-ead5ca9c6970", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49cb54f1-5b08-4731-8d5f-10d57ea47152", "sighting_of_ref": "indicator--2676c004-c329-49e2-83a2-bd077611291c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4b40c21-f92e-44f4-916d-2ee11b9c45de", "sighting_of_ref": "indicator--06cf931a-0287-40f7-b776-609ea45ec625", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--641c9332-6441-44c0-a2af-ef27bd48b04c", "sighting_of_ref": "indicator--b5c483d4-12fe-4398-8225-839302dc7617", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a323ddf-3639-4cda-bebb-405e9a39539b", "sighting_of_ref": "indicator--01e07918-7ff0-43e2-a87a-9d9a8737ee96", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--970a4255-0fc5-40c1-bf54-ef305c0f32c3", "sighting_of_ref": "indicator--4d5bca1c-46b5-4e48-9280-d484c2807c24", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27db89b7-f2e1-4d6f-a071-784d18d65b50", "sighting_of_ref": "indicator--9d322158-8d16-4ad2-929c-d28f21e5418f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f4e04a8-1b85-442d-bd7c-2dade0653d9b", "sighting_of_ref": "indicator--c04a3693-98ec-4145-b1e3-013095aa6ca9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7da7be1f-9ef7-409e-b7be-5f9238a701ae", "sighting_of_ref": "indicator--c624e659-59f4-442d-9a96-fd100d53ac75", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5928581-ef24-4b9b-88e3-d5def14d207d", "sighting_of_ref": "indicator--2188c746-20a2-49ff-aab2-1fe81ea54a49", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1dcd78d-38d2-44fa-9262-1342a0a1fb5e", "sighting_of_ref": "indicator--47d9c68f-8830-4edc-8854-565018629e88", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85ee7123-08e1-45f4-8b59-ec212549ebc1", "sighting_of_ref": "indicator--8b96e089-0c94-4c84-8daf-8de4ba4d9970", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b89e73c-0cd5-4e40-a522-e75961a55cdc", "sighting_of_ref": "indicator--63068101-6167-44e7-ba4c-12a56ff2453e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08778288-ace3-4a81-be80-0bac3d087f38", "sighting_of_ref": "indicator--2bbd0a40-7f5b-4f6e-822d-add0d9b0b8e7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7289a2d-cb70-4240-9ca6-47c82664af41", "sighting_of_ref": "indicator--877cafce-6d81-456d-a78e-e74b10e4397a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dc469d6-ed69-4f2f-9a72-07d0efdaab57", "sighting_of_ref": "indicator--881fe1b4-5ffb-44af-9fc1-d83443d84891", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e20741-680e-4eb3-bc5a-87ac975ee98b", "sighting_of_ref": "indicator--c4672775-8c2f-410b-b947-79cc9f3c4feb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ad2e5b2-6964-4c1a-bd4c-042e6c267a77", "sighting_of_ref": "indicator--f5eb7f29-1fb9-412a-aa4e-32d83d15a354", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--130162f9-3111-411a-bf6f-03b0051b6606", "sighting_of_ref": "indicator--372b927f-6e9f-40fc-a66c-4c830b8e56c0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd87fe6-bf9e-485d-b7cb-81191b599a3f", "sighting_of_ref": "indicator--7732e97f-7e8a-4182-99ad-9330576acf44", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff6bea15-b80b-4290-9bb7-40930a1e6c4e", "sighting_of_ref": "indicator--66dc3a7d-b2cc-4af3-aff0-ea50f3aecb28", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d55f86-fd57-4138-a2cd-87fcc695a06b", "sighting_of_ref": "indicator--6dfaafc7-7eb0-45a3-8986-51ac4842629c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdcfd581-514e-41dd-9c2a-388add59b0a9", "sighting_of_ref": "indicator--bcd668a8-1bcb-40f0-86de-f186b79975bf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bbc27b2-7071-4277-a36c-1f57d775e720", "sighting_of_ref": "indicator--04fc2281-5d1a-45d7-83ad-7b0a82ba48a9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88df1b46-0960-484e-87e7-1235308059a2", "sighting_of_ref": "indicator--6c3d762c-f15a-47c6-8ac9-4396690b020c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a38e76-dd09-4cd5-a821-f6fe51a2976e", "sighting_of_ref": "indicator--494db794-d39b-4d9a-96e6-32474ddbb216", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e9bb5d0-2e62-4678-b1a2-c102eaa2f8b9", "sighting_of_ref": "indicator--52d81cf8-2834-49cf-aa4c-02bacf03c156", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7754c1b6-7dcf-452b-aebc-be431f70977c", "sighting_of_ref": "indicator--b5508097-1d26-4bb7-8823-c082f413295f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15ce5e0c-7a33-48f7-9017-c695fe01e3a8", "sighting_of_ref": "indicator--b6316d3c-440e-41a6-9a3f-85564758f0ed", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c31b918e-9dbf-4a94-a8cb-b77a263b92db", "sighting_of_ref": "indicator--1d6ac922-26d0-4f73-b9d4-4811a0989387", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7603367-c209-4e34-a1aa-9ad87e4ac50e", "sighting_of_ref": "indicator--4a2e5bc5-706e-4140-90fb-0cbafd5c57fb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e3fcffd-fbb0-4de9-a3d7-14c40f57535c", "sighting_of_ref": "indicator--b282be84-cd6c-4f9c-80e3-5a84e611fd21", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e50445cf-5e09-4926-9f4a-96267650133d", "sighting_of_ref": "indicator--93ec2cd4-fea5-4d32-9673-ba1e76da7bab", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07824a7a-3f03-4f2b-ba98-58d0b8a4c5b3", "sighting_of_ref": "indicator--a5ad6698-44b1-4f7b-96b5-4838d90dbb5f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a04dd4-9a1d-4dbf-9a1b-653559201c40", "sighting_of_ref": "indicator--b954534a-6dbd-4829-857b-e471bce13c43", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e080b5b-bd97-49a3-b545-703af4189179", "sighting_of_ref": "indicator--cbae5ae2-3ae3-4864-b260-e621a7bba97d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--056c6e84-be11-4f46-8669-01ffa568712a", "sighting_of_ref": "indicator--434820ae-e878-4101-9f98-3f3fb307b600", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d69f3666-5a2d-4b23-b8cb-6f320c4c6eb4", "sighting_of_ref": "indicator--ed19119f-3638-43d2-888b-1d5a5f87da00", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3228a41e-f634-4ddf-bd9c-d6262399c031", "sighting_of_ref": "indicator--12cb7da9-64b7-4f29-8745-10c8e9158a31", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb88e262-15d3-4e1e-b29f-8de905db0f34", "sighting_of_ref": "indicator--6f042779-f864-422a-aab9-cf2c55f1d079", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df118c35-1ec5-46c3-8991-05a5995e3bea", "sighting_of_ref": "indicator--5bd91ed1-fd0b-4f63-aadc-f49fd25cb8eb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--958de775-8ff9-42d0-b1d8-c6f749c260e9", "sighting_of_ref": "indicator--8b47839e-8691-4377-ae6d-b1a8422a949e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25b78320-4c5d-4a4e-8cef-24df7160e07a", "sighting_of_ref": "indicator--d1d5b2d1-c01b-4ae1-83a8-a493e7472e87", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19bdb663-f005-46ba-84d0-5cb3d33007ef", "sighting_of_ref": "indicator--242046cb-06e5-4766-ae86-8985b59c71d9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff33290f-1837-44fe-be7a-335a50069fda", "sighting_of_ref": "indicator--342aadd2-65b1-4888-b7dd-ebfe42947e65", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6149b6e-4263-46d7-871e-8f3898655443", "sighting_of_ref": "indicator--a3db1dc4-33f9-48a0-a00b-f07726d3c1e9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa0f4016-4088-4341-b53e-fc09b2ccb290", "sighting_of_ref": "indicator--ef2e7c7f-4a02-4648-84af-b6047501bcbb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce8a0fa-56d1-4afa-906b-43583c3f0868", "sighting_of_ref": "indicator--2a550dff-6a2a-40f4-90e7-e60d0973d7ad", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faf11ba7-384b-4931-9a8d-289901b436d8", "sighting_of_ref": "indicator--a4ceaf6c-5b18-4bca-9ec8-0c259321934b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd701ff4-f5f8-421d-a1a9-f0953db30b30", "sighting_of_ref": "indicator--bab27977-71f1-4b4a-a5ce-df4376c5625e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d232ec-0b32-49d9-a0f7-9bb7fe254a2a", "sighting_of_ref": "indicator--13cd0112-ebcd-46ed-a70d-3b552224d683", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56b294d3-6b36-4f13-b025-713935443afb", "sighting_of_ref": "indicator--b05701ab-5a57-4b83-81e0-a04fc3b24c3e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--347289e3-3f4f-477b-ada9-7a3258f44695", "sighting_of_ref": "indicator--26e43d40-42b6-4f4a-8a5a-c1e5f4893627", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba742a66-6f06-47ed-8bd3-1243bf8a343e", "sighting_of_ref": "indicator--60e0c4af-8c4e-4c59-94bc-04be1e06d180", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18bcc520-5e4c-4df6-998b-fb8cc77b0976", "sighting_of_ref": "indicator--257c7c06-4b53-414b-a3ff-c9a0e747a989", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa44f321-9b8b-4e7e-b119-56c496e3976f", "sighting_of_ref": "indicator--b7f35093-5035-4d2e-bfba-f2754a88aca4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d8c6caa-7752-491a-ac95-951cc4fe6b55", "sighting_of_ref": "indicator--d6ed7003-9a87-4ab6-a710-4ef5def14bd9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0e837af-ccec-481b-a114-f12341b5badd", "sighting_of_ref": "indicator--ce0090bf-6727-40bb-a215-d60dbe36569e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a379651-f70b-4410-bfe0-5564b84b30b5", "sighting_of_ref": "indicator--d1db820e-f48f-491f-9df1-d2ec14eb27d1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6592165e-d9cf-4dc9-ad01-8bf954eb1f43", "sighting_of_ref": "indicator--9bfa3cf4-576f-439d-872b-2d8a4499781a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e735f9d1-072a-4469-9319-ccb5fc5b93ae", "sighting_of_ref": "indicator--53d4f2e4-7018-4e1a-b725-4e2ab6325d6d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7824d921-871b-4dc5-b847-998215acef24", "sighting_of_ref": "indicator--886322fe-7618-4cf8-872c-b0fd5218b57a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9ed5188-8675-41da-b63a-e27434e7091a", "sighting_of_ref": "indicator--16467f0e-f66c-4a67-a5c1-2b9257c28e0a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2740b651-459f-40e8-85bc-29dd80afa54b", "sighting_of_ref": "indicator--0d4ccee3-3602-4f98-9405-f4737f0b2a87", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6377a8b9-c2ab-425d-88a5-c75b0f53163f", "sighting_of_ref": "indicator--84b70f2d-51da-4966-bf58-1ce097d7da0a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e72ea4-b5be-4b86-bcbb-3cb13852d5d0", "sighting_of_ref": "indicator--be70e138-1c6b-466c-bc04-3e99b0693ad9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43dc618e-57d6-4cdc-9051-73125a329393", "sighting_of_ref": "indicator--c2083d19-924f-43eb-ba22-01b5d0dd876b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e5d687c-12fb-4ca4-b70d-48c1d9d055ce", "sighting_of_ref": "indicator--5abe4847-6eab-44c6-9c49-2dda1ff51bd6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfe63916-249e-46cf-83c4-fbca1281663d", "sighting_of_ref": "indicator--85802017-c882-4ca3-b3bc-098dda261c1a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01f32b3b-f5cd-43e7-8980-ee6ede013623", "sighting_of_ref": "indicator--7fd5cb8b-c15e-4bbb-b76c-d56759b7dbea", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3382f8dd-4931-40f5-a067-55526c1c418c", "sighting_of_ref": "indicator--4b68aca8-c7be-4b50-a1c0-e9673ee2bd15", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c98821bc-7c89-46a6-8985-d10bbf98f1cc", "sighting_of_ref": "indicator--0ec0c42a-f38a-4299-a5f6-a12fbd5f94f5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96deb6fb-1ced-41a9-a142-a072a0cc26d3", "sighting_of_ref": "indicator--a963ad9b-31c1-4be9-9492-bc6fd44081f2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd924a8-adcd-416b-a9c1-95770e986ef6", "sighting_of_ref": "indicator--a7615e35-1932-4fb2-b9d7-78142e9417a8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aef59ab-a5fe-4a0b-a671-a54344318a32", "sighting_of_ref": "indicator--f6874901-9a6e-4963-a5b9-bf8edcb0c47f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--904e7f95-5b2d-4499-b6c1-155fafbf0253", "sighting_of_ref": "indicator--75aa3d4b-4211-4073-a5c5-5e0f14819b4d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--247e311c-7717-45c2-bb00-f4495680e0e7", "sighting_of_ref": "indicator--dae0349d-ffac-420c-8f13-bf7bf258daea", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06186343-9a31-41c3-84fa-71dea38cbebe", "sighting_of_ref": "indicator--44191ba1-b36c-40f5-9f53-df4212880519", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ba9c97b-9973-4d87-b524-7a7097337987", "sighting_of_ref": "indicator--f8772ae8-0134-43b3-9f50-0e69822b1163", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd29ff16-cac7-4a81-9da1-285edd8f305c", "sighting_of_ref": "indicator--169c417f-4603-4460-8129-4e80e8ccc535", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf1905d-a955-4a17-bf12-a3703e8987b9", "sighting_of_ref": "indicator--9cf2009a-32f7-480b-b2eb-14f240bc906f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d263ac47-3c2d-43c0-9d37-a410d543b893", "sighting_of_ref": "indicator--42574496-53b5-47c7-9ba2-1bf7dcf4c7c8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16c3b89f-4ce4-4020-97e1-4849a06f2fbc", "sighting_of_ref": "indicator--a2a2dfed-e257-4dac-a7dc-0da4df7a2be0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e0319ec-b935-4bfe-9639-a04ece069cb1", "sighting_of_ref": "indicator--55f36044-9e5b-414e-a166-82b4527699d2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8478e8c0-40f2-4f5b-89b7-8adc5b50f2d4", "sighting_of_ref": "indicator--00ca85b4-4524-4e10-84fe-a5c3c0738093", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fa2ea70-92c0-4b4a-8ebf-33b82176c201", "sighting_of_ref": "indicator--ade24c2d-c790-4138-ba9d-e083052fc57d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa4df89-1435-46c4-8b58-50b84b1814b6", "sighting_of_ref": "indicator--98953183-3ab5-400f-b430-b419bf930c86", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1d71f32-a10a-430b-bbc3-6366c404ce9f", "sighting_of_ref": "indicator--afea9865-4e45-44ab-a58b-9dd462c3ec96", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9e24e22-608d-4562-bad1-88d834d264d8", "sighting_of_ref": "indicator--14f990a7-bb8c-4922-b2e1-3f8f7e221822", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8508fd97-8834-4d2e-9e32-17650dea09bc", "sighting_of_ref": "indicator--86e3b442-21f7-4973-94cc-10b13a1f190a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cf0b32e-66be-4016-969e-e5bc8a94a353", "sighting_of_ref": "indicator--faee2661-4543-4812-8680-9baeba65b0e9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c401055c-b5a0-4bbb-a449-b627b00ba613", "sighting_of_ref": "indicator--a2fa93dc-521e-4d7a-9a87-7a92dc5d1149", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62246eb3-c998-4c64-99d0-921a56538dc0", "sighting_of_ref": "indicator--b887e669-554b-4e0f-8fba-c6e9e65f8232", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca182aa0-f9a2-4e3f-b2c9-78dcbe6285ba", "sighting_of_ref": "indicator--3a8887f1-56d0-4841-91e6-51ca61e375c8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba767d3-fa5a-4cc7-ade3-827754f4af0c", "sighting_of_ref": "indicator--c61e9fdb-924c-4a87-bdf4-37d76340d165", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3794892c-33a4-4b84-a251-415aac1e2232", "sighting_of_ref": "indicator--31e5959e-28cf-44d3-9c65-f2de9b2d749d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1d938b2-d788-417a-a8c2-8be80962ecb8", "sighting_of_ref": "indicator--16d6b72f-2c0e-45cc-a692-0ec20863eb51", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a73ec13-9d46-4785-b8ba-ec9460d126d5", "sighting_of_ref": "indicator--b366a1cb-0505-493c-91a7-7d51b390f672", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20f24113-4c54-4bf8-8e72-fe1d2e163e38", "sighting_of_ref": "indicator--3e8c1605-9b09-43e5-8234-a564181bccf6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bd8a9e2-2857-4138-8836-51ae701f5c96", "sighting_of_ref": "indicator--98626e3f-6709-44b8-a43f-6a98684e79a5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--007d2d03-398a-47d0-87e5-dd0c225495f1", "sighting_of_ref": "indicator--ccd44ed3-3678-42ff-abe8-4329ae954213", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6fc6731-66ca-42f7-b952-f130bc22a0fb", "sighting_of_ref": "indicator--a7cae3c2-cc1e-4dfa-86b4-de3e40234db1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e8728c3-8040-418e-8533-82c7be79a06d", "sighting_of_ref": "indicator--8a6f3661-2281-4263-8665-4445a148c1c9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8bb4b33-b16d-4b4c-9e96-f48a5fe2fe40", "sighting_of_ref": "indicator--b1849823-2bbd-43b6-bcc3-c14e7a31d64d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4783addc-6808-46ce-997e-49cb420de16b", "sighting_of_ref": "indicator--08a9ed75-5076-48e0-b3bd-df092f167e0e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0571a8ab-3ae9-493f-882d-b9c25c6cbdd8", "sighting_of_ref": "indicator--a59b7477-2e34-47d9-bbd8-b66d277ca79e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f34ba3cb-6cd0-4d07-ad34-76665b7aef8a", "sighting_of_ref": "indicator--0feaf113-f084-4924-994d-c0bf3b1d7b82", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55fab762-9f68-437a-be8f-a9b896aa4043", "sighting_of_ref": "indicator--88d4e979-2777-4825-8eab-bce01bd0b145", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3897e8e3-4e30-45fd-96af-e3a3ae16f115", "sighting_of_ref": "indicator--a6b69817-f2ba-47f8-8ef4-b0ebbc1ab806", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d120dfd1-2c34-4dbf-929e-eb4062838938", "sighting_of_ref": "indicator--b4ffe87c-ff52-4965-a028-a41923e5834b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--897cc714-b926-4661-87a4-37dc9baaa72d", "sighting_of_ref": "indicator--8e4c32d1-d951-43d2-8c96-60a0e716d901", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c05d2b2f-39ee-4932-a66e-9fe7c73e7daa", "sighting_of_ref": "indicator--8651af99-d006-4635-a1d9-223ee9445a19", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9dae2b0-8de3-4c00-b083-6b40053a66b3", "sighting_of_ref": "indicator--ad82b464-fa5d-4fdd-9397-44da8b7b5afc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fddbeb75-0eef-4acb-9f7e-cb52a1f0efdd", "sighting_of_ref": "indicator--b8c7642e-9891-4f02-b1a9-0f29d9b0a856", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--456a099a-fdf6-4e83-baef-c70b7fd7053b", "sighting_of_ref": "indicator--c465a00c-3fde-4426-8232-7ace27c5dcbe", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e4e6697-2e5c-498e-80d4-dcf0aba73050", "sighting_of_ref": "indicator--92b52b27-562e-4b60-8d05-b03314fe65d5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--249a5aee-fb74-4def-b92e-afcd9cfd35aa", "sighting_of_ref": "indicator--ff03a129-52ab-4032-bf28-c654ca512dff", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f418d29-74f7-40b1-92b7-e2736c19ad77", "sighting_of_ref": "indicator--c7259851-52da-44fd-b357-67477033c17e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd548c19-9917-443e-80b8-01d7380ee5c1", "sighting_of_ref": "indicator--3f489e15-7edf-4117-b2f4-1aa4d4571df1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b912a842-b4a5-4cb4-b51b-d262edd99500", "sighting_of_ref": "indicator--48306fbe-127a-43a0-bdd5-65889183a8bb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b4820f9-84cd-4017-9a74-bd6428b52ee0", "sighting_of_ref": "indicator--ec443248-928b-4182-856e-b1fee49622ff", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade0e6db-8a4a-459e-a55d-94cd97dff4b3", "sighting_of_ref": "indicator--71b101bd-c8eb-47dd-9155-f032dfdbc515", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d402ae0d-62b6-4b2e-9584-b5ace13e70c1", "sighting_of_ref": "indicator--0823dee1-04eb-408a-b069-267a4da88285", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b778af1-0908-4bc3-a261-2050a6a595a1", "sighting_of_ref": "indicator--d21f9b08-f3ae-4ae0-84bf-1e7d2342b708", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d3c478-3aa0-43e9-96a8-9d2540b01363", "sighting_of_ref": "indicator--1827e620-84d1-49ff-ab9f-69a865483028", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5545121-029e-4233-9e2f-927fe8b487de", "sighting_of_ref": "indicator--cf1cbd8e-d434-43ee-ae65-dcd4478bfd89", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c497d6b-78a6-4890-b5ba-22308e5f5cf1", "sighting_of_ref": "indicator--ada2d671-5fa5-4600-a384-a0e4a72cd199", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb956818-109f-4b65-bc8e-a2529f67902a", "sighting_of_ref": "indicator--58358a1f-90a1-490d-8a10-ccaca99b5084", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3dccf18-d7bc-4b72-ac93-2be8b06b9009", "sighting_of_ref": "indicator--00632478-c238-4e6a-b597-734490772a1e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88834315-8106-4a0d-8525-751e0a5f7945", "sighting_of_ref": "indicator--f612c8e6-fb15-46f2-9b10-cdf1b73c24ef", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2be48585-1b67-40b4-b8ec-4e8a88442245", "sighting_of_ref": "indicator--ab3b2802-dfc5-4035-a907-e649b3751889", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--911e6f7d-6754-41b1-b111-f6fd7e870ea6", "sighting_of_ref": "indicator--68e8ba9d-8d3b-484f-8ba0-ea7b52c81eb4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69fcdd09-70dd-4449-b92d-10b69ccd81c4", "sighting_of_ref": "indicator--31a9df97-dbbd-4b3e-9adb-ccb952cf6a47", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd1ef4bd-81b4-49e6-a69c-b19fa16a3d9e", "sighting_of_ref": "indicator--f3847d2a-2dd3-4109-8e21-4b80a9d01294", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--744399f2-1f2a-4e67-9f20-fe6a2852e113", "sighting_of_ref": "indicator--6d4860a0-07ce-4bd3-b6d8-21c1f69d863d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09b50a7e-4749-4e48-930e-b04a42630644", "sighting_of_ref": "indicator--f738b739-b356-447e-9f43-c36238cc0794", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d059613e-6c02-43d9-9948-d09901ff75ca", "sighting_of_ref": "indicator--494ce483-fde9-42a2-8d3d-c51056cf73e4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b88ff419-6dbf-4dd4-a970-35ca1431267a", "sighting_of_ref": "indicator--ad498a35-6604-4075-9543-6a7fda9e5125", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ea9db4-46b4-40dc-9052-0d741ffbaf34", "sighting_of_ref": "indicator--8d7c700c-ae5d-486d-9a8d-8bf742668bb3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a17050f8-f186-4b6c-b19e-e821622e8e31", "sighting_of_ref": "indicator--482b18e9-6dcf-4898-87fb-d2e897363536", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f290166-41d1-48b0-9867-cecb2797153b", "sighting_of_ref": "indicator--bf679ad9-d5eb-49f8-b97b-464289f680b8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--418c8ab1-5ee2-418c-9dea-322650b0d7b1", "sighting_of_ref": "indicator--9301ad9b-5a33-4d0c-b8e1-6838cca19cb5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c3afc1-fc71-4f1a-8d18-a52ef943d09b", "sighting_of_ref": "indicator--12512784-594d-4114-a2f7-2bc79bb04181", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fc93025-3411-467a-8c3c-2196bd6f66e1", "sighting_of_ref": "indicator--bd36c044-44de-4a71-b1f6-91b0a663d8d2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0365d529-38b8-4689-a455-3ba6681c10c0", "sighting_of_ref": "indicator--3d14cd95-fe75-4106-9bbd-c9d7ba9e66ed", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--650214bb-8c85-4073-af0d-b1cb7973efe8", "sighting_of_ref": "indicator--f58f85e1-9ed8-4de1-b515-1ff010a2a49b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74e5877c-5f8d-4575-a1cb-443451ffc844", "sighting_of_ref": "indicator--90b699a6-8b88-4fc7-9ff2-ac534c3de250", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--744a6ec5-14ef-4f13-8e99-0b73989072c4", "sighting_of_ref": "indicator--a89cb483-ab1a-49c4-ba91-99e0f39633ef", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--690ca5a6-a07f-4f68-a1dd-b159dae2cc3c", "sighting_of_ref": "indicator--08982548-f1dd-4add-8a79-b21138c81b1f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--682ca252-9b04-4bae-809e-4e1972ba68a8", "sighting_of_ref": "indicator--ee4bb5f8-917b-45ed-81b6-aaa82821dc74", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b8c17e-393f-4288-811c-3bb64e5b4314", "sighting_of_ref": "indicator--257ad3d5-a582-4236-8f8a-328f349dc05f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02c47ba7-3711-43dd-89e9-347528c9de3a", "sighting_of_ref": "indicator--c92c120a-a38b-47fc-bb23-f67430cd8353", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a00ee19-c48f-45cc-8371-643c016eca7c", "sighting_of_ref": "indicator--755a89fd-366f-4504-b145-46a10232d2da", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e2af365-d29d-4b57-a247-90f4c93feb6d", "sighting_of_ref": "indicator--660ad0fe-143f-4127-bc5b-774381e8d9ef", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f2f951a-8afc-462d-b94b-a561a9388abc", "sighting_of_ref": "indicator--34023d99-d077-430d-ab8c-72d44dedd12f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d1255cd-7136-4040-90cb-ea8f57a91c7c", "sighting_of_ref": "indicator--d86c4616-1b92-40c3-baa9-93556bc83ca9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07017ea6-61da-467e-b5d8-2e2e971d01ca", "sighting_of_ref": "indicator--f2e985b1-bcf0-45ff-a130-65c227264e7a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd4442a0-db55-45a6-965c-87848f9ee93f", "sighting_of_ref": "indicator--1c5df6d7-a1bf-435d-a838-c1f9ba8ade39", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b948279-a630-4db3-82bc-723d2149be3d", "sighting_of_ref": "indicator--6a19c126-1e9e-4c5c-a350-2b0f97c3551e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a358561-7760-4ff0-aa95-4c3af496129e", "sighting_of_ref": "indicator--01b65e4e-fb69-4044-8c72-332351ce84f5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c23cc4aa-f4bf-47d6-9a89-5bbe08e88c67", "sighting_of_ref": "indicator--d4c58f85-4168-46d5-abfe-fc79dd5d4d29", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a010e976-f0bd-4dad-8feb-faf739f1b425", "sighting_of_ref": "indicator--f1b40aa8-dc71-4864-8c78-b8c5eba86e06", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73fe8cf5-d662-4f8a-911f-b2c980908b3e", "sighting_of_ref": "indicator--0134f9a4-a3a7-4609-8f6f-5e0ecdd11a7d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0563aac9-f764-4460-8a78-9762dc634550", "sighting_of_ref": "indicator--814668af-2f81-4e7e-8e7e-fcc4540ff6be", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84020fde-f9dd-42fe-adbb-480c2b544065", "sighting_of_ref": "indicator--af25d2a9-6d2f-486b-a743-66569d8df9a0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c84abf1d-b66c-4fe4-bd06-1f4208a9dcc2", "sighting_of_ref": "indicator--86df4577-9297-4861-be74-efe9bca1fea8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afec580b-f306-486d-af80-c8cbc1b1c149", "sighting_of_ref": "indicator--ee29c83a-cb67-42ab-9a72-6f153e7e800b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c84fcc34-c823-4296-8b3a-b5f4860d9f97", "sighting_of_ref": "indicator--5d4ef23c-8d8e-4db6-a40f-60882131f2cc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27087754-8770-4e7f-a88e-a20ea0be5b67", "sighting_of_ref": "indicator--6b818162-d05e-4fb6-87b9-4850bd4250c0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a92850f8-d86c-4749-b2b4-c8eb1a3618ba", "sighting_of_ref": "indicator--40399e99-c173-4106-83f4-5a7ac1ef0005", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f96081f4-1b16-406a-9210-2699e1588047", "sighting_of_ref": "indicator--08968d08-4c1c-401c-a0c9-90622d055aa2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a8efb5-7b4a-449d-9c05-571c90b5de51", "sighting_of_ref": "indicator--6cea7c8c-b6be-4298-8e1c-b4e62c8a5b58", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c9a06d-7ecf-445d-95ba-11b8e7b75e8f", "sighting_of_ref": "indicator--59846884-096d-4c6f-a0e8-e99467a259ee", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b2b2dac-a3d5-48d5-bb18-260f72852259", "sighting_of_ref": "indicator--293f6cc5-7a1e-44d7-a9ab-640ef80ffb80", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ad49f3-934d-4f8b-a486-76d9af90bd4b", "sighting_of_ref": "indicator--b07f9c0e-af3a-43f5-bb27-be3dbb3c4825", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8f0fa74-ec6b-4a7c-8ef9-149485979216", "sighting_of_ref": "indicator--f13b5bb6-963f-40af-a15e-dc8d557b6e13", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--796a1ed8-7ff4-4400-aedb-67b119958a90", "sighting_of_ref": "indicator--4142a56f-1727-4625-ad67-10c5f4567770", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72841cee-46e9-4c55-a5ba-81b4dd089870", "sighting_of_ref": "indicator--932a7ed9-8c10-4616-a8b8-d503c2bd397b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61cff5bd-3db0-45d6-8337-9820f6cea06f", "sighting_of_ref": "indicator--f9f72f81-426e-4631-a161-51d1413a88d6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d36512-63f5-4549-b48a-488d65244f84", "sighting_of_ref": "indicator--00466874-8009-4806-9a00-9c5dad6c83ca", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e87f8a-55fa-4f02-b931-87cfe26dd988", "sighting_of_ref": "indicator--1b8f1860-6a97-4e78-9d47-01d73e945887", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa695550-b4d3-4d64-bca9-4a0abe39bb70", "sighting_of_ref": "indicator--f0a39aa5-5cbf-4e2c-8144-fb29fb1dcdf7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92124c95-db4e-43f2-ad21-ebd19b62c86b", "sighting_of_ref": "indicator--313c1ade-8c36-4a75-aa88-062e3574238a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f57b62c-e718-4044-bb5f-a71cc726ea3f", "sighting_of_ref": "indicator--4154406e-0091-4a78-917f-0b945b9c7e7a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ceadac1-d386-47f9-b422-bd5e197fe0cd", "sighting_of_ref": "indicator--ec75b281-b6a1-4aaf-8c0a-3b7c23ac8dd0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c7ad3ff-4c14-4831-9b18-ae21c3dc712c", "sighting_of_ref": "indicator--a27b7700-719f-450e-9311-c640ce723750", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57abcf64-7a62-4e89-a206-32e4e94ecca3", "sighting_of_ref": "indicator--8e812537-f067-4eb2-922a-43d971d78361", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18231981-5644-4418-88fe-4784d89fa2d0", "sighting_of_ref": "indicator--fd6a6735-ba80-4447-932a-7e8384ec257d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c886a6be-9f75-4290-b75f-11996f0a7094", "sighting_of_ref": "indicator--faa70570-6948-4e0c-9352-c99ae07058b7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e00f4850-ad59-4c1d-bc37-c7a0711afb69", "sighting_of_ref": "indicator--544b0668-11ce-4047-83c6-7077997e36fd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25683220-4111-440b-9ecb-d11cbf1a630d", "sighting_of_ref": "indicator--f406fbc3-805a-464f-8ce0-06adb401a009", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3494361c-7369-4921-b706-17f83d4e9713", "sighting_of_ref": "indicator--025d6b15-188f-44a7-8ec7-68edfd463b6c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34bb042a-20be-4364-b073-8721fbd0346e", "sighting_of_ref": "indicator--edeb352a-c103-4bcd-8302-1187bbf0b926", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--303f2f50-6975-4e54-bc9e-688d5b484ae3", "sighting_of_ref": "indicator--f1f50096-6b31-44d6-9009-cac1d60d871e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fc710ca-1369-48c1-b607-046f707338d3", "sighting_of_ref": "indicator--80b54f66-b72e-4645-a688-0449c3808a61", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b2a00dd-8291-45df-a083-17d25ee51469", "sighting_of_ref": "indicator--5cb169f1-c317-4505-b9f4-1ec3837d4484", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0cdc2f4-48d0-45bd-988f-796e46fab7a9", "sighting_of_ref": "indicator--09a6e006-eae3-4fb3-b209-ac0d17de06eb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f041b0a1-062b-40af-95ed-1ec1f6bed3e5", "sighting_of_ref": "indicator--a4d55080-7664-45cf-b93c-a2d69895191d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65451ce7-6fd2-4d38-8ba4-58b2993be866", "sighting_of_ref": "indicator--e1691369-0812-4bda-8b38-1ceafaf1af95", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61e7078b-5741-4c65-8fb1-8877a705da86", "sighting_of_ref": "indicator--76bb6ac6-7a60-4bc7-90e6-5346215b405b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--867637d2-98af-450a-aa5f-59f65fa54756", "sighting_of_ref": "indicator--2946ffaf-5ac7-4569-b4dc-28fd890cbbfe", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e449091-4347-4cfd-8da7-a1fd32616633", "sighting_of_ref": "indicator--608e839d-67e2-4e92-83d2-bdf13c18fa13", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90cb6e4f-1a68-4f42-b800-d1024ba9b8c4", "sighting_of_ref": "indicator--ab6ec9c0-85cf-4225-8051-6a8513690e46", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd6bbd08-f580-4d9a-9eee-3760125422bd", "sighting_of_ref": "indicator--838c55f3-fa3b-4d5a-b56c-68e7d8fe5de1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8379160c-d1e5-4912-936e-a84d800d40ed", "sighting_of_ref": "indicator--ed0547d1-b28e-408a-b623-1abdd159e2ab", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e39ac13-0ce0-4670-8947-b4bed072e550", "sighting_of_ref": "indicator--d224b9ce-b44f-42a0-8f40-9dc763f491fc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1a8fe5a-c592-4406-bda2-ba59fbb372ef", "sighting_of_ref": "indicator--4f1d2ca0-e998-4beb-87ba-12590dd8d5be", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fbdcbc6-85ca-4db0-8d46-f749af8cb20e", "sighting_of_ref": "indicator--da9fd395-4bdc-45d6-9ce0-f3c6a4559f20", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--676df784-c6f4-414e-9752-1af26fc4e37a", "sighting_of_ref": "indicator--6743265d-ebca-4f43-a89a-0759407cbe61", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee7aeb3-8bfb-4f86-90e3-20fe9885f629", "sighting_of_ref": "indicator--faeadc5d-8035-4554-a5ef-324ab12556bb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bc0ca5f-009c-4cbf-8938-53f8cf3e79c1", "sighting_of_ref": "indicator--534b4996-9b72-48ab-b662-1535a4504436", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d8a5d01-8ce8-40d1-834c-7a86e6113bbd", "sighting_of_ref": "indicator--1651b461-382d-4246-bbf8-0b9b2298cc61", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f9c444c-52f9-4402-9ae3-846e6a85b498", "sighting_of_ref": "indicator--f9ee0049-e06e-4a93-9328-5a3ef708bcd5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a38a385-62e8-43cd-b5e1-a66606b969c9", "sighting_of_ref": "indicator--17429bb1-184d-45e8-aeac-eaad393f1280", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d576287-d214-46d0-b58b-51fc03230b87", "sighting_of_ref": "indicator--15b8c347-2600-42ca-ab5d-67d8397d76e1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--301aa7ae-c060-4936-a462-3ed0d55c4ca3", "sighting_of_ref": "indicator--1e98b8f8-16bf-48d9-a7fb-80f5af315e6d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c1ed22-42a4-4135-b6ce-423ee6cdb62f", "sighting_of_ref": "indicator--5c50bc85-2fd4-4ee3-a86c-afc48ee9fde8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f32aac2-6774-4fac-8cad-ce3aefc684c4", "sighting_of_ref": "indicator--cc97cfec-4fc3-4313-9aac-da7f3fdec0cf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e092b8a8-cb86-4741-aaf9-d1a9c31b564c", "sighting_of_ref": "indicator--4d0f6629-37fb-4b2b-80a7-9028c568df0a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d47ad91a-ecc4-44e9-b5b5-bf72801b9077", "sighting_of_ref": "indicator--7efc0052-bcef-44e0-a751-32002f9050b3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80f60110-4f3b-41a6-b74d-3d69dc28656d", "sighting_of_ref": "indicator--6e886a9b-3eb2-4287-872f-0180280d1755", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb821a56-a388-4509-8425-eb42d298c9b7", "sighting_of_ref": "indicator--ebab2ff9-2fe5-4039-9513-bd2b6f41bbf9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce4660b-85c1-4eed-b07e-4bad36fc635e", "sighting_of_ref": "indicator--5c0a375b-c3c1-4b50-b66b-d8b75cd33aa7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86406e86-dfd3-4216-a8b0-445e7a53bf08", "sighting_of_ref": "indicator--6a4bc838-8305-41d5-9b0e-f3a5b7aa88e2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--469b56d7-0297-4129-a336-e206ac686f81", "sighting_of_ref": "indicator--6f3e4285-38cc-4fbd-8c5d-d3fdb71b721f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f34463fc-4297-4fe1-87d1-42413a5671d4", "sighting_of_ref": "indicator--15a55171-1b6a-4927-8b0b-8754d31a2256", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bde11d94-9f0e-4149-a302-b425b5d59f2d", "sighting_of_ref": "indicator--0de8ab27-156c-4993-bb03-49d7a70115a0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9628a2e-ea7f-4f18-8b63-df4ed694a6bc", "sighting_of_ref": "indicator--e3df01b4-a02b-44ef-9f5d-2daa99121982", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00172ce3-4c8f-421d-8096-7d0455af6e36", "sighting_of_ref": "indicator--9cb8b295-4141-4bc8-8df9-22483ef3f90a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b3677a-3e58-4763-862f-884be6d8704a", "sighting_of_ref": "indicator--98943182-f778-417c-a0cc-163a157c191e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd14e63c-e0c3-409c-9016-ec1dfd6ebbe5", "sighting_of_ref": "indicator--c3ea6fb8-6487-43b9-9e85-f4eeff5bbbae", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--105b9444-fc96-43e1-b586-a3b9f256eb96", "sighting_of_ref": "indicator--2af059fd-07fb-4bda-a480-6a7742532d72", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58000efa-79cd-477e-8409-6f44b630ab6e", "sighting_of_ref": "indicator--e0e188bc-ed3d-48e4-8697-aedfdf6e68c6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf66a4f9-3ccf-4afc-a96e-770e06a12ebe", "sighting_of_ref": "indicator--d729eec0-a7d9-4594-8233-07286b589794", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed95d68a-4db0-4a27-9362-3122878404ec", "sighting_of_ref": "indicator--f3fa3f20-18cf-4351-90b9-291fd9846288", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--143342e3-e358-4c3b-a251-0aed84fa78a4", "sighting_of_ref": "indicator--4993e04f-3227-4e58-8cb2-9b9494ae9da9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca5c035-92ac-467f-8948-8e53733fccaa", "sighting_of_ref": "indicator--f1ea1316-ebda-404f-8c9d-eaec04dcf75f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1f26888-3163-4aae-a6b4-f3ea4e945ce0", "sighting_of_ref": "indicator--ffe075cb-08a6-4ebc-99c1-89740ac39877", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94eefd0d-cd2c-4b61-8da2-6dd7ffb51113", "sighting_of_ref": "indicator--cd10b44d-f15a-440e-940f-0a0db096ed96", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bff1de94-dd01-4042-a687-17918e7dbfe4", "sighting_of_ref": "indicator--10124adb-8cbf-4f80-b63c-9c49026346ea", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9471e2ce-d491-47cd-a013-43520f6f17ff", "sighting_of_ref": "indicator--b371315c-c540-4719-9b87-70c7edaeab3a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1c26985-5302-40a5-9768-8d884a7a90dc", "sighting_of_ref": "indicator--d45d9797-970c-4643-9ddd-a14a38ea0872", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2276d1b2-d7c2-4160-a0ae-d7fcb52bb361", "sighting_of_ref": "indicator--b1f61fa3-9d4a-4856-ad49-c1be2607236b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64b77856-916d-42bc-81b3-349978543ce6", "sighting_of_ref": "indicator--4f7aee0c-1b1e-4ae7-ae30-c4b825e56696", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--551f7039-912a-4ce5-81a0-03673dfeb63d", "sighting_of_ref": "indicator--46f44ea7-1df4-434a-b17c-4d452d40ff43", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c31a2679-027a-4985-b8f8-e791a27a2c27", "sighting_of_ref": "indicator--0ee54d2e-5c0b-4186-8ae3-e1ce275aa3c5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e8cdf7-196c-4885-8fac-07b2f81d5f8e", "sighting_of_ref": "indicator--f40132af-1107-4897-b41f-7db60bb958d4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2441343-932f-4bab-8355-675845dc122b", "sighting_of_ref": "indicator--fb37442d-6881-4ec5-b4ba-ac7cf132f92f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdba320b-67bc-45f9-aceb-fb966ca57385", "sighting_of_ref": "indicator--7e0c3e71-75c1-4819-ba1d-280d0f44fa7a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6eb021a-ab6d-4477-98ad-31753eca46cf", "sighting_of_ref": "indicator--c2337bbc-2090-4317-b992-8d0107f2268a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36bb4a24-0b2c-4910-8aff-bcf50cc1bf64", "sighting_of_ref": "indicator--d05577db-cf13-410f-a4f8-1bb4b5eefb4c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc8fd515-df9f-4d8a-a99a-3ea2ab171753", "sighting_of_ref": "indicator--caa9307e-3a36-4469-98bd-60d5a970e4ad", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d762cc02-cb86-4737-9e32-96e7c66bed1b", "sighting_of_ref": "indicator--e731fb68-947a-4148-913d-861c4b280ce2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7076dcc0-d93b-40d4-b8f3-323699647295", "sighting_of_ref": "indicator--66441e41-6291-4339-bd2e-1e2c42f88cb3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8b2fb09-1d99-4262-965e-a1cbb267f29b", "sighting_of_ref": "indicator--938bdaca-812d-4d6b-b6da-993c302def70", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a38f5f7-ac52-49a9-8ee4-f733e1294db3", "sighting_of_ref": "indicator--feb29b77-5499-4bf3-bf75-5b9ee6436416", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3035ae48-f7a7-4b02-9841-83a12f8427fe", "sighting_of_ref": "indicator--027e585a-6ad1-484b-98f1-b3eb928327fc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--160b5286-4c80-4da5-b293-cb5eeed66306", "sighting_of_ref": "indicator--87e9488b-f16c-4fcc-9e51-ee39e4f8ff96", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61fc1145-4ff2-4a23-976b-c3b30bf9442d", "sighting_of_ref": "indicator--034f48d8-1c37-4048-a5e0-3ac0c62b46f0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee7e687e-9c67-4ade-9a66-4f3939a22e57", "sighting_of_ref": "indicator--58cac4f3-44b7-47d6-b49a-a116de1e9486", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814c5d74-d781-463b-be3a-c476faa5b36f", "sighting_of_ref": "indicator--583d4789-eccf-46f0-8f86-a4fa5be3ced0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6107d220-8791-4b71-8447-d2cf3a569244", "sighting_of_ref": "indicator--be4cf9ad-f185-4a32-ae6a-dd1cb35cc2ab", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--171df8f8-e18d-43e2-939e-c65de767c394", "sighting_of_ref": "indicator--f5733f18-4447-427e-8afb-ff901c86113e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94095b37-2bac-48da-8308-6fafa8e45b0d", "sighting_of_ref": "indicator--760ed74d-918c-43d6-95b3-a6ccfc1ab5fc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3994bc2b-378b-4e87-9027-ddd156fc594b", "sighting_of_ref": "indicator--b4a518e3-4b08-464f-a7a8-b1b538abd4b9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18369c1b-1285-4345-9c83-18a184e44bbc", "sighting_of_ref": "indicator--74b6afc6-a668-43ed-b0a4-e08c65413495", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccf896f3-8889-4d52-8056-db22a35eb097", "sighting_of_ref": "indicator--b30a4ec9-c4ce-48dc-a3bd-cd9f2323087e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b1c1665-5c2c-4e40-8966-946b223477a7", "sighting_of_ref": "indicator--11390afd-f56a-41fa-ba8b-7267b6ad7643", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87e3cf34-6b1e-4bfb-8f80-0a8a6e9fff3f", "sighting_of_ref": "indicator--2a59b269-a0a8-448c-be67-4f16cf55533e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ddcc323-33b2-4f60-aa6f-d053ca262411", "sighting_of_ref": "indicator--1ffb70fa-ef3c-4bb8-af0c-7890215b5a56", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6252f14-dfcb-433c-83e0-fe491b1a79ac", "sighting_of_ref": "indicator--493c7b3f-3da2-498a-a1cb-db192f9c9b4c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0815e498-41bf-41ca-8776-0d367c551d73", "sighting_of_ref": "indicator--9afd0578-d5d1-4e2d-9aeb-6b10ec9dbd75", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--febac4a4-2a61-4662-8d58-ecb0b3de4b52", "sighting_of_ref": "indicator--6aa645e4-c273-40bc-b469-3899202d821c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c24babef-ff31-45fc-a255-6410b6042c5f", "sighting_of_ref": "indicator--9dd74a76-d765-490d-811b-966e10a9094b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af9617f0-c0e5-4b16-98ec-5989cf7491f3", "sighting_of_ref": "indicator--a80240b6-5c4a-457c-a5e2-a957ec55bc8c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93d5f0b0-fa8e-4cc0-94ba-131dbf313c17", "sighting_of_ref": "indicator--2c551571-d3f0-4fb4-80ff-c8b5325ee91a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e708105c-6b55-4271-b4e8-d850b1646fb5", "sighting_of_ref": "indicator--d269fab0-5ce6-471d-97a1-7c1f649ae3f5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26e01118-64c2-4c9a-b04f-f2f001e0047c", "sighting_of_ref": "indicator--68f2b503-7194-4c63-a11d-422040e65469", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--110bce39-5414-424e-981e-2a9624ac4436", "sighting_of_ref": "indicator--51e8a8f2-3fe7-4ea3-9324-e0a827a0a162", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce752a9-a2ee-4c7a-a919-1d40dd49fee1", "sighting_of_ref": "indicator--5341e3b3-b0d5-4375-adcb-61d237753f94", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c46d787c-6888-4735-b44c-e0a1e159b3d5", "sighting_of_ref": "indicator--d8728e52-a8d5-433f-9086-02ffe73d312c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6423cf6-7d28-4c33-a447-33773388658e", "sighting_of_ref": "indicator--b3bdb549-0dee-4d7e-928a-ec6ffed59170", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6380b835-ff38-4769-81c3-b41792671680", "sighting_of_ref": "indicator--e095342c-5284-4469-9cbb-5d870326ec34", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--742229bf-f491-4dfb-b984-7506ac5dc0d4", "sighting_of_ref": "indicator--54abefdc-592e-4383-bcaa-85408eeaf6fc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f20ea2eb-0f17-4a3c-91f4-d2bd2ea878b4", "sighting_of_ref": "indicator--ba985cad-302e-404c-ba99-dc3746d65a56", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f149b1a-fef6-4fd4-bd7f-7644039ee5d0", "sighting_of_ref": "indicator--683709ef-ff42-4ba0-9bb6-cccc7018f424", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4cae3a6-f545-4d22-9529-8f32beeae39f", "sighting_of_ref": "indicator--829cdc73-5b14-45db-8c32-d8056bab922a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29714c09-587b-4f6f-81d8-2ec8ae9aee28", "sighting_of_ref": "indicator--ac1a073f-cf77-45f7-914d-a4ce16f98456", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db23d1d9-71e5-473c-92f0-1f02c1a15499", "sighting_of_ref": "indicator--eefffa26-0659-44e6-a0e2-2b149bcc7c30", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dab981bc-8de9-4473-b5f1-48c41b478245", "sighting_of_ref": "indicator--fc6fc49e-8e47-4ba1-8ab1-52fb13c0faf2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f3d01dd-236d-43e3-bc4c-f3a0b851876b", "sighting_of_ref": "indicator--cd8942c7-40b0-4bae-8dc5-2cc4a8eb93a5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22f01436-7c14-4201-9c7e-2521da0d8cf8", "sighting_of_ref": "indicator--e39b7c4c-770b-41f8-9251-b9d64111d9a0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbef4284-aeca-4e39-878f-fe4c2d8c8d20", "sighting_of_ref": "indicator--b972ae0c-fe54-4d69-83b2-a77890fe33e2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7dde195-4514-43f2-8ef7-1c80915e87ea", "sighting_of_ref": "indicator--145d66b3-1291-44aa-822b-b9c57d8d3690", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--196d3f48-731f-4dac-95be-3800ca276be8", "sighting_of_ref": "indicator--dc30bda0-7616-4db7-9521-76dd9f5efac1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af41d288-1f19-4ec9-8e39-3b51c955cea1", "sighting_of_ref": "indicator--4d45691c-5c7c-4181-aab8-d67399311c13", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab9e95e1-7cc5-4666-9f2f-b9871c62aa42", "sighting_of_ref": "indicator--0df69dfe-b3b4-4f80-85e1-7b8438614cd9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3167f5b1-7829-492c-a538-c677538ddcd9", "sighting_of_ref": "indicator--2e6345d7-cdc0-481b-81d7-128e8a412efb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba255fcc-b974-4177-8575-26dd0b8eb28f", "sighting_of_ref": "indicator--abc4a7a4-0450-4f27-a5ad-327f5ad3e549", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04a93e3a-4d36-409d-912e-bdf7ecec7fc4", "sighting_of_ref": "indicator--7a074e3f-4bc6-43e0-8494-a0b947043e3b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ccd7701-2947-4f3c-b6e1-d1949ef1d877", "sighting_of_ref": "indicator--ca1df837-91c0-4aed-a29c-18051f8b6afc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d48b1d-9c3a-4dc9-adb5-8587638a0011", "sighting_of_ref": "indicator--074b1d06-92ee-46ef-847b-bc7e15713e37", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df8d8f70-dc48-4d0c-926e-c4b89ddb8aea", "sighting_of_ref": "indicator--a5f6bdcb-be5f-46f6-9602-73ca77ac4423", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b75a611-85d0-408d-a679-e00f0700009f", "sighting_of_ref": "indicator--94e6a741-a03d-4a3a-b14a-25323f6d85af", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fbd07a6-4030-4794-9d99-12e036995bff", "sighting_of_ref": "indicator--4cc75234-990d-4f7e-8c8d-52fabc390d59", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af189dbb-56b3-4ce4-87e9-9af253711e92", "sighting_of_ref": "indicator--47a9801c-5ac4-4219-8310-5e90b694797b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ceb2f9-98d8-44f4-91c8-1d6f207371a6", "sighting_of_ref": "indicator--c1937651-e78b-4f53-abd1-33bc143fda2c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4b5700a-5c76-4e1b-bad2-81f4af68933c", "sighting_of_ref": "indicator--197009cd-9961-4d43-b28f-c99a189e5f7c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13be5836-5bc6-4b6e-9534-05b3cd458868", "sighting_of_ref": "indicator--f691b4eb-6be2-47c3-bb25-1f8487edd0d4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52d95f70-f7c3-4ed8-9bcc-48614038a816", "sighting_of_ref": "indicator--4036a8aa-4be7-4df5-9e53-c93118ce0c8f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92d57230-0bb1-46f8-9bc0-ec86dbd02cf1", "sighting_of_ref": "indicator--c3d24868-82fd-4c0f-9e37-84197f3b10cd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb0c0ca-857a-4cff-b89c-ad20c8c118c6", "sighting_of_ref": "indicator--b5e02947-3ed3-4b64-8f80-4229a9b97707", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fd99f7d-e74d-4bbe-b3b7-409db9623659", "sighting_of_ref": "indicator--b26c3b4e-52c9-48bb-b66a-858c43a31f01", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--064d9110-bdb6-4b13-99f2-95a9bf710f54", "sighting_of_ref": "indicator--db37a6ed-f054-47c9-b4b5-0ada93b323dd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f8967cd-b971-41bc-88cb-95089ea528c5", "sighting_of_ref": "indicator--e010b60a-b87e-4c68-b5af-a408c17121db", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a678212e-6f80-40a4-a862-6f33c4b6dece", "sighting_of_ref": "indicator--17cf9801-4c76-4928-8fa4-d117b53b3300", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f066428-0fd6-465f-b56f-106cdf7c8988", "sighting_of_ref": "indicator--ef1e7127-a83e-4aa6-80d7-669ebe1cdbb2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d789ea51-dcfd-4151-81b4-7d69cbe6e72a", "sighting_of_ref": "indicator--6fe84722-dbc2-4907-9d5c-39508ff092ba", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c13e354e-05bf-4e3d-b464-12407e690d77", "sighting_of_ref": "indicator--43fdf665-223e-4476-9d56-79aa348d0473", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81690075-2c0e-4e82-88db-a4e6772bb855", "sighting_of_ref": "indicator--31744d8b-65f3-4d3d-a7a5-b7ab35da2299", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--104aa28b-7fe8-4596-a1a1-472a96fc9db9", "sighting_of_ref": "indicator--436059b6-fc97-4683-a077-22fd008e9837", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9c0ac69-4e50-4de5-b5bb-80c99c7ea3b9", "sighting_of_ref": "indicator--25c8bc07-3697-4c82-90a8-9858d6ce384e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2df2f09-6288-4731-bdd2-62b675ea5599", "sighting_of_ref": "indicator--50bfb698-04a6-4361-b19d-9e859730e4dc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3955ba25-3d76-4217-87f5-a3fec2a759b2", "sighting_of_ref": "indicator--8395591c-ac4e-4f98-87da-7a0f0b3e3b4b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d0e6b7-771d-4db7-a9fa-fdf1d399957c", "sighting_of_ref": "indicator--a91ff472-f9f4-40dd-9911-38857d12a25e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b5c50a5-c867-435f-8acc-fdaca96178d5", "sighting_of_ref": "indicator--5a973f9a-10a9-4937-bd89-4cd18a6b283c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55636c65-a417-48d5-86c6-bc33954ba307", "sighting_of_ref": "indicator--8e829f88-cc8b-4fd1-b0e8-d7158e691275", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ac7f526-4b16-4e6c-a7a9-70c4d334a91d", "sighting_of_ref": "indicator--505287c7-86d8-45e8-81b6-da94c69e70e4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5089745-f975-4115-a5e7-0e533b2e02c7", "sighting_of_ref": "indicator--ec4da427-1116-44d6-9945-2fea7c87483a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e82dc801-39e9-4b08-8bfa-b59bd0092a6b", "sighting_of_ref": "indicator--df55be90-e40a-4bdd-bbb2-ea121dd13daa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13f283a9-c59b-4b50-afe9-934c0c223440", "sighting_of_ref": "indicator--3b641bb4-5cab-4d79-872e-781ead8dbd08", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54893ebb-61cc-4baf-8c1f-e8309fd4664a", "sighting_of_ref": "indicator--6e5b94d1-54d5-46fa-b894-c271dcc7bced", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f50eacaf-29f3-42b9-a9c1-cb33cb261009", "sighting_of_ref": "indicator--7628c87f-cf2a-472a-bccf-ac5b58537836", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb3f3e60-ed48-470f-b6e4-8c61d94dec5a", "sighting_of_ref": "indicator--25c1eb2b-b97e-49f8-9084-8e6b42a4acf8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea7a0e0-4979-40a3-ad18-88e0dd13c775", "sighting_of_ref": "indicator--2bdc5534-db86-4195-96a9-4ab95c7254ce", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be723ad-93e4-49af-914d-77cb3de0d62d", "sighting_of_ref": "indicator--63444f25-a299-425c-b0ec-b9506161a185", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c14b6d5-f609-468f-afcf-a6242103f537", "sighting_of_ref": "indicator--db35745e-4dd0-46f3-b5c5-88f0aaad57ee", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4ec1431-80ea-42f4-a9a9-029d1378b036", "sighting_of_ref": "indicator--aae0dbd2-5f77-4998-80a0-d49b2f95a421", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b36142-40bc-4638-8958-614852534f9a", "sighting_of_ref": "indicator--405920a8-1bc9-4559-8408-bcaa86335283", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e049291-49a7-4283-a949-2c7942799064", "sighting_of_ref": "indicator--9f22b4a8-1859-4344-8a6f-c3f2c84cc2d3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fcade82-2ae8-470d-8155-63394a86d6e0", "sighting_of_ref": "indicator--d5ebf76e-73a0-42d8-9798-22f6d2d8fc86", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea16f02e-597d-4bfe-9ea3-4d6c66d05192", "sighting_of_ref": "indicator--9f62dd91-2228-4873-8506-a2bf18950318", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d492e2-3b9b-423a-bdb3-f468ff6393e5", "sighting_of_ref": "indicator--5bb9f175-7142-44ae-b7f6-dbf7b624a587", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf8f764-1330-4c3a-b812-2cca4e96ce71", "sighting_of_ref": "indicator--41191022-e32e-495a-9962-59cb12f42364", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44de23f-88f2-41b9-bb9e-23952a5a042d", "sighting_of_ref": "indicator--b025e265-c6e9-464b-8836-9050566fb6f9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18b72f82-edcf-48e4-b69c-972d9df757a6", "sighting_of_ref": "indicator--c78c3f8f-195a-4f6e-a0e0-a97759ea6066", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b20b430f-db78-439c-9dd9-3b34868e2722", "sighting_of_ref": "indicator--a749e5aa-d6ec-47f5-8c15-38b02fed8095", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d436c67-bd8a-413d-9ea2-70914974ae2a", "sighting_of_ref": "indicator--19bec6fc-9304-443a-8752-fc51565762f0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d206815-ebe8-44f8-b3f3-95d265bc173f", "sighting_of_ref": "indicator--02449185-6c59-4e2d-a561-0e31012205ed", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e3267b7-5d32-4140-a033-207ad1e30ae6", "sighting_of_ref": "indicator--bc63f748-5315-4944-9c6c-cdc5a156ce5f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9477fc1a-ed09-4bc5-b467-9b369a5898ae", "sighting_of_ref": "indicator--3b8d5a71-c9f3-437e-9eb8-a5bfb74ce428", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a56196a7-1b4f-4466-bea8-07eeeec481cf", "sighting_of_ref": "indicator--8b092b2f-8fd9-4e84-8d97-4201985d74b9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--850c4eb9-3049-48f6-85a0-acd7d6b5d2db", "sighting_of_ref": "indicator--086ff34d-861a-4c5d-bd0c-5f69e47becd3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65741a5b-dbbe-47e7-983b-981f654d191d", "sighting_of_ref": "indicator--d7aad6e2-f48c-486a-9876-d257bf701ccf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c4b9d40-8403-4190-b52a-1db88c1d49d4", "sighting_of_ref": "indicator--dc96be01-8d28-41a3-b252-9d8732128641", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--816e14f4-31f5-490c-805d-d11426d803e4", "sighting_of_ref": "indicator--bed559c8-721f-4682-8506-a13b44331c0b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d7f9e2c-0521-425f-b075-f637a6eda36e", "sighting_of_ref": "indicator--baab6b04-d4ae-4468-b403-4733635fb854", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0925d89c-72e7-4c79-b336-0b475e16f219", "sighting_of_ref": "indicator--247938c0-b6cd-4ac4-b87e-3344e395c5ff", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d98c0f1-f728-4483-94b0-36aa3f1aab6c", "sighting_of_ref": "indicator--426f2462-729f-41f7-b916-6f8294f17cbb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b671d9dc-7d45-4263-b52b-5282b577491a", "sighting_of_ref": "indicator--35248083-6548-4ba7-91dd-86b53c0ea110", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e3369cd-fa1d-4df9-865f-65d714ff87a1", "sighting_of_ref": "indicator--d6ff7f0a-bf9f-4c55-bda1-8ee3a360e316", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52a4d5a2-b15b-4231-a9ea-f8c74755835d", "sighting_of_ref": "indicator--7dab5fdf-3d50-45c1-b25f-9342d9fb93f1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e38c9d97-8fd8-494e-b5a9-9aa08545c636", "sighting_of_ref": "indicator--36c39538-54ea-403c-b556-eb7c5ddca3ba", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d19bb30-2aef-4867-81f8-92dcc63fc1d2", "sighting_of_ref": "indicator--0bd32040-83df-4c3c-91d9-fe286a9cbaf0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97c2a514-7d44-448e-a3d4-84ca3e1fe2f7", "sighting_of_ref": "indicator--efa10684-ebe6-4378-9337-af540ea47144", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--606589ea-a68c-4d7c-9ac2-8287416b0af8", "sighting_of_ref": "indicator--a94fc617-c240-4107-939f-24467163502f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca50d086-ea29-489a-925a-8b10c2306801", "sighting_of_ref": "indicator--9df72d71-5fa8-4fa3-b33a-df711d8aebfc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8077df41-af3d-4bf0-a045-5f904f46d053", "sighting_of_ref": "indicator--34ee9c73-2e4f-4bb8-adfa-33eedd6d1459", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49843f2f-2a9c-464e-bd6f-5b4d023ec34c", "sighting_of_ref": "indicator--5e371b84-375f-4f41-8bec-a60f2a233de0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd62b9f8-2541-40f2-80f6-fc893d0be3f6", "sighting_of_ref": "indicator--9770265a-bba1-4120-a22d-7696673cb5e5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ec739f2-99b7-4b33-8019-4fe0197292cb", "sighting_of_ref": "indicator--41344a97-79f2-45df-b0c6-9d42362e09a9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edb27ca6-e148-4fa8-8ffc-1abf36b95d06", "sighting_of_ref": "indicator--607f5d36-25ea-47f4-98ca-ae4abe24f26a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d92335d6-d6b4-4b96-80d5-a6cf8a71ae78", "sighting_of_ref": "indicator--fe0dc90d-2741-4e74-baae-dbc79e4811ec", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--611d68ce-0692-42d5-9693-b1365ccfd4b2", "sighting_of_ref": "indicator--0ab23a73-b20d-480d-befc-3ffcab74bdae", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--087dc608-a9df-442e-9b60-3fc2e1f55dde", "sighting_of_ref": "indicator--9079d213-f3e4-4acb-b4d2-5767a74e2a61", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45959b84-80cd-4de0-a64c-22e5a0ed4dd2", "sighting_of_ref": "indicator--237c5d56-a7e1-4e99-9fb2-11cba4c8cc05", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d29a553d-e73c-4640-884d-341d45b3ce67", "sighting_of_ref": "indicator--632324c5-1efd-4bf8-b56d-aa593cf8ec10", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab69ae9-70a6-41c3-95e6-386b4092bf3c", "sighting_of_ref": "indicator--bc1e9301-7a16-4700-9845-f6f97d3732e7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf51648-f8bf-4eff-8ee5-97f6f1e86df2", "sighting_of_ref": "indicator--16561f71-709f-4553-a095-c28291e5a091", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08fc19de-f09b-4d5e-aa75-51bb2af7d7c1", "sighting_of_ref": "indicator--679f7851-5635-4913-b9fd-8e00362800a5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98d0b250-869d-4c1e-a368-07e7a1c28aa5", "sighting_of_ref": "indicator--f45043c1-6cc5-4b9c-863f-ab65993c9d5b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--691f9089-389f-4dd6-8c23-50c87ca89a13", "sighting_of_ref": "indicator--4c0510ad-3e74-4249-9cf8-97bfb798053b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c221e7-1ba8-4a6b-93d2-1ba735fcc75d", "sighting_of_ref": "indicator--2484f3f9-7b63-4872-a0b7-69f4a7b3f0ca", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c5bfd6d-e964-4745-a8d9-f93b8d1e70a9", "sighting_of_ref": "indicator--235a59e4-4d58-47b5-ba32-668060afb9c3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27586735-bb07-4a6e-9966-28b0421978b7", "sighting_of_ref": "indicator--534be39a-a337-425c-bdbd-8b70a99b005f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d186647-8a9d-4293-b6f8-35cc4da7124f", "sighting_of_ref": "indicator--6e84080f-3276-40a0-9068-1af105b3c89b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--472e560c-9639-454b-814b-0363c2b8d5b3", "sighting_of_ref": "indicator--fada9c0f-aeea-4d5b-ae25-f9cfd1d4bb37", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69e14e4d-0826-425f-b53b-2726bf5bfe18", "sighting_of_ref": "indicator--f2df6177-5060-4607-9511-7603faddbe2e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b4a817a-0012-43d0-a963-f50bf7a66828", "sighting_of_ref": "indicator--4a93c14d-d348-4dac-9877-b4331b4f6cc0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--371bddb2-6af6-4cb6-b188-c0075630660a", "sighting_of_ref": "indicator--8f8c802a-e9b9-4e4b-9e8f-f310890efcc4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ea10e5-5c1c-476f-b562-cad7eb7f73b7", "sighting_of_ref": "indicator--f50b9673-8d88-4b8b-a57e-5fa5a7d3e10a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fbb1967-bce7-4393-a30c-0fd623004921", "sighting_of_ref": "indicator--1e568883-387c-402b-bc05-2f934b01a851", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c01f450-9901-4378-9cc0-cec747443e50", "sighting_of_ref": "indicator--90ad3844-9f18-4b49-b136-21cf8e42ef50", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ee44289-280c-4f82-8f4f-fd3f100cceec", "sighting_of_ref": "indicator--04444d27-7f3b-458e-89eb-2b1e4ae41da1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c51365dd-987e-4c8d-b999-319bedac30eb", "sighting_of_ref": "indicator--2670cd25-907e-418d-ada6-075bab58a7cc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f95f9b5e-bfe6-49cb-a7dc-66878c8eb82e", "sighting_of_ref": "indicator--d5a48ce5-734c-4820-b140-de2a72846a10", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07bd02fd-020d-4df8-9513-29ba640a6830", "sighting_of_ref": "indicator--2d363e8a-276f-449f-a761-b3ed47f94f3e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f10afde-93e3-40a4-96eb-0d75f79efa87", "sighting_of_ref": "indicator--2024a956-a6b4-4a75-8267-b3aae80546e0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9a6fab8-2a0f-4272-b514-612b755ee105", "sighting_of_ref": "indicator--66e467d7-5693-4620-9403-db53b4873fc2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e6b8263-9dd3-4447-b252-74544707158c", "sighting_of_ref": "indicator--224a79e3-79cb-474a-8fd6-bbf39aa3a69c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--541016f4-3b64-499a-8751-452bb7c64385", "sighting_of_ref": "indicator--3167f289-eb87-4988-a657-2442d3b8fcb2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b756b609-ca25-4045-b72b-6901d330cc7c", "sighting_of_ref": "indicator--451813b1-e66a-47b4-a0c6-47a455db1d3d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b6d851-55b7-4bf7-baa2-4dab34212a81", "sighting_of_ref": "indicator--386538e5-f3fd-4540-9d56-88e4225026dc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2408f77-b91a-4731-8c3f-73f90d1e8e87", "sighting_of_ref": "indicator--ab151271-3358-4e48-b069-9acf089d8ab4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab514c83-0beb-4b76-9310-70159fc31168", "sighting_of_ref": "indicator--1acb6921-92ab-470c-9e33-391a5b9c0074", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b812022-11cb-4a24-844b-574c01ee4b0d", "sighting_of_ref": "indicator--908f9184-f6a9-4609-8233-cfc76748cc6b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f5d03a-20ee-492d-bd5f-5ee4f8fdb29a", "sighting_of_ref": "indicator--0871980e-7b84-474d-96f2-97bae1c36859", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--645c39a8-9bb6-4669-8b6c-ab86ab0afd43", "sighting_of_ref": "indicator--77fb0d16-82bd-4b9e-97ce-94d0516e2dc6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a1ba78b-ab23-4b3f-9083-6c700fb44664", "sighting_of_ref": "indicator--09b2263e-d93d-46d9-a44a-c03df0b5d7e9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f6c950-4571-4cdc-bf33-3e27877fc291", "sighting_of_ref": "indicator--c1e4f7a2-b889-4eed-b239-ec8e47939dde", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8088c8e-f288-4372-af3b-91c4ac339fc0", "sighting_of_ref": "indicator--e5035a91-b7f9-4b67-8163-d179cf3c64ff", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3258cc1d-efe0-413b-a976-7b36a0e5778c", "sighting_of_ref": "indicator--5529cf75-3d4a-4b52-bf1c-e1ff8fef08f6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31aba4a6-4032-4010-b148-aa7a79a4de8b", "sighting_of_ref": "indicator--93405192-4249-4d35-8bae-57af22563e1c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3419b0aa-32f1-4130-bcbd-e3a790b419b2", "sighting_of_ref": "indicator--52313813-5a68-4169-b065-3687ff5b38a7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6da777d0-7e9d-44c5-8fa4-871a4f07c4bf", "sighting_of_ref": "indicator--f4679653-2773-41ea-ae8b-046ae03024bc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62790c4b-0d2a-4ccc-b3e4-651eab8a0475", "sighting_of_ref": "indicator--13227fa8-b8d4-4a2f-899c-840447d7ff16", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdf191a7-16c5-4929-bf2e-217274ad402d", "sighting_of_ref": "indicator--4f37e68c-4680-4805-9f59-96fff128db1a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--673165a8-ef9b-4f59-a380-aaa8840ba6b9", "sighting_of_ref": "indicator--2a487285-ccc4-417e-8b24-f0c95bb89c7a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--024066c1-e5b4-4ed4-b791-88dedee2e281", "sighting_of_ref": "indicator--58b26429-c9e8-4097-8afc-dbb2f67999e7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3555cef-aa67-42bf-a0a8-e8b24c91e6c4", "sighting_of_ref": "indicator--b042ec41-20ab-4780-b106-123725c38d02", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02e9a80f-030d-467c-afbb-f1f543f283fe", "sighting_of_ref": "indicator--1629af91-df9f-49af-bb5d-58d76f44bc7d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7226c63-5e3d-4c80-abec-807b4a9eaccd", "sighting_of_ref": "indicator--ef865fc2-b988-485a-a5bd-8f2a461f6aa3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--febf7d25-7f61-4f37-b34d-a412190971ba", "sighting_of_ref": "indicator--c7230f33-60e7-4f38-bc46-a1dc5ab483aa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b7a7c5-736d-434f-bf93-9ba951ad374c", "sighting_of_ref": "indicator--62c16091-e92e-45ac-8a23-d6b9f3490d6c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42016a79-50fc-47cc-8afd-e7bacfe63da8", "sighting_of_ref": "indicator--ef708d2f-8585-4666-af24-2124672de365", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cb4631f-ef71-475d-827e-5a7e3e43545f", "sighting_of_ref": "indicator--8314f3e1-6a69-48aa-bf02-a904cf6541d2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--854a7482-7e73-4a08-959e-b83a953ca7a0", "sighting_of_ref": "indicator--7535ec39-392b-4d29-b13a-de799c9dc650", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0aeea16-c4e5-4c05-ad3f-8fd57f1dc5de", "sighting_of_ref": "indicator--a40d54ed-e202-4e4a-8f32-12daba8bc0a7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55339a6c-26bb-4ed2-a0ca-d74f7aceb674", "sighting_of_ref": "indicator--42f4510b-91d3-4700-8a27-e996b98748e4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b40eae57-81fe-4d71-80bb-4177394f02a2", "sighting_of_ref": "indicator--fe61751d-7327-4941-8d94-c7e3ef829ecb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--576e8e32-7bc6-43f1-83bc-ab2f738b250e", "sighting_of_ref": "indicator--3d7c97c6-1da6-4cd2-aea2-91b130cad31f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a876c41-a844-4036-bf57-9a99b4cdc1f3", "sighting_of_ref": "indicator--771c46b6-a09a-4895-be1a-e27072668dbc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb66c3e-1036-4c87-9148-0f5b274d4f76", "sighting_of_ref": "indicator--1b86c68e-23af-4e13-a262-215550c99786", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9afb72b-f778-406f-86c1-14bfed09a022", "sighting_of_ref": "indicator--35eb2623-4aa3-46d5-b1e6-c05be9d337cc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f602999c-f85f-4cdb-bbf9-476ee0a451f9", "sighting_of_ref": "indicator--ee9ec9ea-9191-4d1c-b273-bf9c4dbe4826", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7af03cbb-082f-43c9-9d09-4b473c24d2ca", "sighting_of_ref": "indicator--aef8098a-c0cd-43d3-8eef-5c3999cf67a7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a5f56b2-e9b8-4050-a6a0-a9ef19ea702a", "sighting_of_ref": "indicator--1c56b556-b557-44ec-801e-49574c3d3a64", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce887b49-214f-413c-8928-84e7fa4ab670", "sighting_of_ref": "indicator--21f27f74-ad49-4a7a-94dd-61d7b12e31fe", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9812d97f-ab80-4ac8-9eee-a11f5547e5d4", "sighting_of_ref": "indicator--ba5f130d-3a23-4082-a4a3-9b882a59bbdc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a6442d-6705-42af-9a28-b89bbb7f1fa7", "sighting_of_ref": "indicator--21449b9c-7010-4116-869a-3e25f8b6521d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71031249-c86c-4829-a36a-cd63073c2ebf", "sighting_of_ref": "indicator--a0018ace-444f-4ea6-9408-1b2514915b53", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d30f83c2-3180-449c-b570-db64a8c24c7f", "sighting_of_ref": "indicator--f4799ca5-ad35-4aee-b3e7-bdb6a69685c2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b57e9e-22f3-4793-9d56-3397a0540d9b", "sighting_of_ref": "indicator--4e74c627-ca89-45c2-8c76-4e437a4d8852", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6266b54-79a8-49ff-b77d-fe3754f0ac0f", "sighting_of_ref": "indicator--857f6576-e567-4c20-bc2f-445765094950", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a31d4b-afe4-49c0-989c-c390941364d9", "sighting_of_ref": "indicator--2d772b9b-fe92-40df-88f0-52bdac8dbfd1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b124b4-3ffa-40f6-bd37-8f75334821fc", "sighting_of_ref": "indicator--92ba9866-03fb-4184-9162-1425f950dcfc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d3f276e-1176-4b57-8a1b-c4245beda7a1", "sighting_of_ref": "indicator--d2f7865d-64cf-4965-81b7-b9633de179e4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7bac5eb-d281-4628-9d95-fff2d23df6d2", "sighting_of_ref": "indicator--ac16701f-3ca2-4711-af1a-f1fc8dee53a7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb8693a-17db-4e4a-a49c-421a3b53fadd", "sighting_of_ref": "indicator--a9720743-f7d8-4bbe-968c-969c50a1f1a4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a83f77e5-901e-4640-8c28-4e2f84814d2f", "sighting_of_ref": "indicator--5f184364-233b-4849-9e6e-7ca5286b452e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14833345-b692-4e82-9f34-7389f901b0f4", "sighting_of_ref": "indicator--327f84d9-b768-4e70-96f5-5ef1e957ffa0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c03fbb45-3057-44ed-a125-566a06d933ac", "sighting_of_ref": "indicator--d9bf3d67-e1b6-49fb-ba26-6208d9b63e89", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd2bca10-1a22-40ba-bd0d-c56707116267", "sighting_of_ref": "indicator--5019e439-e9b3-4976-9fd4-87363b803c22", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77a2b7f4-4879-4d8c-aa72-5fe0de81c921", "sighting_of_ref": "indicator--880bd52c-1f67-4cd7-b762-7fe9977d61f9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c705aa-13f4-4dab-99bb-7a74ff2620ce", "sighting_of_ref": "indicator--8aa04a47-1c08-4a79-aaac-516cd4f7d4ff", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e096979-7aac-4fa6-b43e-3ed623ab93af", "sighting_of_ref": "indicator--7c205f28-39c3-4d51-9078-2c52064214a2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d07685a-1e91-4ff3-bf6f-e55394322cad", "sighting_of_ref": "indicator--a9a7a948-ab4e-4552-9f37-dcfdbe8ee180", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b47146f3-9aa8-4035-842a-3aede05d96af", "sighting_of_ref": "indicator--48e1bc3f-b9d1-403a-8123-f2a3be37359d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4ae91a6-64ac-45d2-bfe5-db6bbc1293d4", "sighting_of_ref": "indicator--6e59bc7b-3904-4742-9db5-6d0d8ace15b5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33aa2525-fe87-4a06-8d00-bfe9d454c465", "sighting_of_ref": "indicator--647aee2e-abf9-4da9-a837-32eec23454c8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e415d28-1375-4c15-a4bc-fbd5458b5ee9", "sighting_of_ref": "indicator--5c675b8f-67ce-487f-bb85-7ec2ce596606", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd2a0c5-ed93-405c-8806-0a7efe09ec40", "sighting_of_ref": "indicator--a33b3b79-8133-4fef-b120-b4a49c1abf28", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6687810a-b759-4113-b172-7f8148d40c08", "sighting_of_ref": "indicator--017b0e23-7361-4533-9f2e-cb8b34fd6ae4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f026b43f-1e7d-4ee7-9f13-44252557dbfe", "sighting_of_ref": "indicator--31e2dda5-5bb6-4d5f-9faf-7bc35e084771", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e41386f-7ac9-4ee0-bc21-db924266eb6c", "sighting_of_ref": "indicator--ab056762-9101-46c3-abdf-30936aca305d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b45b6e2d-d759-4643-8969-b48433fe0719", "sighting_of_ref": "indicator--bd921b48-8699-43dd-ba67-17f86e750f99", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f9c661-3d26-40c3-8e05-98696478bfb0", "sighting_of_ref": "indicator--92df2682-89b0-4ae8-8948-cabb1386d08e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f267947-3a47-44f7-8145-d7095add7593", "sighting_of_ref": "indicator--8252ee7c-2415-4ba1-ab0f-d6b9383ac7e5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--344c08b3-d2b4-4211-a9c1-394b783f7c28", "sighting_of_ref": "indicator--af6be829-a75c-44f9-8dd7-857b2013eb52", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6fa8c70-8a51-4457-aa5d-50aa1a483efb", "sighting_of_ref": "indicator--e6ff44f4-ea15-4ef1-bf73-6cd11a21a4af", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0878b9f-e61a-423f-9c72-6d41dfcd6f24", "sighting_of_ref": "indicator--8585e484-e2d2-4b85-ade5-87411ac8246a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97fd8373-dbe0-4348-9734-42d8655eed89", "sighting_of_ref": "indicator--af985631-1dcb-4a15-acde-fcb69f09090c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a97ce2f-71b8-4dac-afc2-c719fbaa8703", "sighting_of_ref": "indicator--a73270c4-30a5-49eb-a0be-740ce37eb795", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9948a388-0d74-4bec-bf25-d9853debfea6", "sighting_of_ref": "indicator--61173af8-02ce-4740-81cb-a17b45ff04c4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de4a2bd7-c8d7-41c2-bb81-736c4b58a9d6", "sighting_of_ref": "indicator--abcbd0d7-5e7f-4d9e-97c6-84cc721ba7fa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9366c1f1-005e-46ad-a580-d5d30403ef32", "sighting_of_ref": "indicator--898a8146-7ec1-4652-b712-5226ac0037bd", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca595f2-2c54-403a-9c9a-a16dd0cc8db2", "sighting_of_ref": "indicator--2b7c2542-c55c-4cf0-aed4-53ca33f9db11", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d731fc-f975-4dca-a4df-97559ac7d37e", "sighting_of_ref": "indicator--4be2fb45-3892-4e46-ae8f-5a2ad82f02fb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1af24a6a-0dc0-4ba9-9145-f0f1be3458e5", "sighting_of_ref": "indicator--936637d2-758e-469d-be47-46fc9f8427b7", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--338cc578-3922-4907-a1cc-0719432c17c5", "sighting_of_ref": "indicator--05fe2675-8c61-45e7-8537-46825fa07263", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e523c56-c45c-4f0a-9c75-468ce72b9500", "sighting_of_ref": "indicator--73d540b8-7397-4a60-96f0-282de3dcd2cf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d14a4f2e-7f77-4cb5-9cb7-4d07369693d5", "sighting_of_ref": "indicator--9e4e4529-8f92-49bd-bbee-1018020ece24", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f11f160c-a889-4aab-b68b-61af8268204d", "sighting_of_ref": "indicator--47908583-7adc-4fdb-bc0a-13569b434c62", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68fec353-10b5-4338-b936-8b7e3a6dad42", "sighting_of_ref": "indicator--aa5bca75-94bf-4a04-8ee1-9c6f923d4220", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96cb42dc-9dd3-4c1f-a81c-a06beb5778c3", "sighting_of_ref": "indicator--7ad04ec2-622a-414e-ad7b-8eecd00367ee", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c0dfea-44c4-4e05-8672-eaa5944c102c", "sighting_of_ref": "indicator--1c2982b0-c9df-4bc3-ae54-665c6421774c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bfc03b8-c4a7-4885-9718-51f4af9f1a29", "sighting_of_ref": "indicator--c62bbcca-0617-4b46-a50a-8aeef34e14af", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95bd6273-a9f2-42ee-9509-95c077388400", "sighting_of_ref": "indicator--ff8cca49-85f7-4362-a519-ae2b516858bd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da073a27-c70a-4081-bd78-8a98f7e16b23", "sighting_of_ref": "indicator--c3441e40-8548-498a-a1eb-f89876b7879a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b53036c8-f119-4895-8cee-b1249a8ceef9", "sighting_of_ref": "indicator--39667072-88ee-4463-b6f5-9bbabd372827", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e83296-8ba8-4c49-ba37-69003a833858", "sighting_of_ref": "indicator--6e63fb46-f6b0-4366-85b3-a6fb9e41d504", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d05ee40-5f6c-4cf5-9a1e-7c3c13b9fadf", "sighting_of_ref": "indicator--ae88b823-7fab-493f-a8a5-d5ed66ffe3e0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b8891b9-92e1-4bec-94d2-69f56c3b5984", "sighting_of_ref": "indicator--9e438d8a-b19b-42b3-b195-24ddb870ca91", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b48a89-da54-434c-b4ef-7f92565cd72f", "sighting_of_ref": "indicator--ae13caf4-1e75-40b2-b273-f8ffdad379b8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d9dc4f3-2ef4-404f-a01f-03a1d900c75d", "sighting_of_ref": "indicator--4dd3e417-299e-48f3-848d-7107a7419b8c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df584323-928a-433b-adc8-2436ece3c382", "sighting_of_ref": "indicator--490fc395-ac98-414f-ad78-a5c4dd39347d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2c5649b-4f59-4101-9923-ecd1388997cf", "sighting_of_ref": "indicator--173a4fa7-a918-4b5c-862a-4399af4615d3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68037c37-17b4-4d64-bb83-abe3f20abd4b", "sighting_of_ref": "indicator--254f0538-9b5e-4748-bfcd-b7bfedf30efc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ec0b14-e266-4e1d-9e7a-40206cd256f1", "sighting_of_ref": "indicator--8d635b0d-d1f1-4791-9a61-3ad465d7ad71", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5574b55c-a609-4aa3-8590-1a246e58ff0f", "sighting_of_ref": "indicator--9cee3cb6-4c8e-4242-afe3-6abde48df8fc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb3705f7-be17-4a21-a16d-47c1848ba9b2", "sighting_of_ref": "indicator--bfa1bdb4-a88a-4343-a7ac-4a975b023535", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a04697-5fe3-4532-88a6-52d35a0dc5e6", "sighting_of_ref": "indicator--331a2f82-b550-4726-ada5-fbe5659db639", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc237d11-d30c-4541-8c83-24c28c3d2594", "sighting_of_ref": "indicator--f3e91ee6-e86f-4da2-b518-2a8fda5b9560", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a6191a0-bcd8-47de-b761-58f81d4f62ba", "sighting_of_ref": "indicator--87dab56f-ec3d-4464-a9a3-724de5eefc26", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a3d4cef-b27d-4696-8ee3-d034774b37b6", "sighting_of_ref": "indicator--50f57a11-1700-445a-9804-4ccdb107016d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f73c31b-e5db-426d-b455-398ef07f65f5", "sighting_of_ref": "indicator--82a28819-c864-4966-aeb0-11bb600a872b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2801153-d62e-431a-8f4f-9e3b4483374e", "sighting_of_ref": "indicator--66c481a8-eaf6-424c-9ddc-a85817c898ad", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e52446e1-6a57-4ec0-8cba-32dfc694f881", "sighting_of_ref": "indicator--e8af656f-db93-4033-9ed0-4faca0a5fc2c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6802710d-82d9-430e-acb9-b07dc9a9924f", "sighting_of_ref": "indicator--84dce344-a29a-4b2b-9435-4337f785b18f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec9d0e7f-902c-43a3-a82e-0aca5677e1b3", "sighting_of_ref": "indicator--072c52e8-4379-4bc0-82e8-d891acb98612", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76dedcf9-17d6-4c58-9df1-b2e2fc5308d2", "sighting_of_ref": "indicator--a89ac528-4ea4-423d-9c8a-861fc93786be", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beeda6fe-a2c7-417f-acf7-0db2711708e4", "sighting_of_ref": "indicator--7c6fc715-2243-413e-9301-0c50a4325807", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9972f45-692d-4474-9128-056ee35654c0", "sighting_of_ref": "indicator--0de84ebd-3b59-4479-9939-2c11169b12ba", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed212e1-1aa8-41fa-8c21-a6a42a4358aa", "sighting_of_ref": "indicator--79a2be69-018a-4bb3-a4a2-bb157bfd62d6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ee845e-1ab4-44ec-bc97-9d07d8781f74", "sighting_of_ref": "indicator--9d1f44a3-98a1-40a4-a607-1c4934739f7f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0977cd4a-9100-4f34-a780-88496c61afdb", "sighting_of_ref": "indicator--310997cb-82c8-4cd1-9cce-e613c0a26bf3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44dd6fa0-f4f3-460c-8743-2b0557353f06", "sighting_of_ref": "indicator--66590727-5cf0-4cfa-aa05-df6bad3f605f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6e4163f-a998-43f2-bba6-47eb9e87e0e8", "sighting_of_ref": "indicator--41c8d6f5-c731-4b9a-92b9-a453383c5d78", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c6cbb63-c2cc-4ef9-857d-77fd991c4605", "sighting_of_ref": "indicator--62836e9a-3714-427f-93a9-fb6b43d5d703", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c30b8762-a9da-4f04-a98f-77dbd1d52e0e", "sighting_of_ref": "indicator--026c4c9b-75ea-4416-9920-e0dddcb794e6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--432519d0-b9bf-4ab9-b981-fac053a53217", "sighting_of_ref": "indicator--b34928b8-6a17-45be-aa35-ae0678520ca0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00fd5c58-1571-44df-8ebd-7c7ff3a59da1", "sighting_of_ref": "indicator--81ec9419-17d8-4dcf-8175-04bbcf6680cd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc50e05b-bf37-48b4-a809-73d17916ca9d", "sighting_of_ref": "indicator--1fbae0ef-89e7-45bd-8a72-bc213dd9400f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b23d2c-0eac-446e-a5b2-0a404f096af0", "sighting_of_ref": "indicator--660daf8d-921b-450b-bf41-f7a90fa915ba", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d4a0b3-e27e-49b5-ae3f-1f52524b86f1", "sighting_of_ref": "indicator--3b0e51f0-59e2-452e-8b40-f74e4d3d0c0d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cbd15d7-e951-4538-876e-4764d5328bfa", "sighting_of_ref": "indicator--af52a3ad-c24f-4357-bdac-f930c5a27d1d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f85d224-53eb-4504-a180-920ca77e1a8a", "sighting_of_ref": "indicator--aa3a6524-6785-4fcc-9538-c7cf99d85e95", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40f8fb03-3105-4084-aaf6-4474514d9bf2", "sighting_of_ref": "indicator--f755d29f-fe17-466d-8420-aa4bf4650c42", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e34cda68-f1ed-435e-8fc0-71f475ac384d", "sighting_of_ref": "indicator--ca8193d1-8193-401b-b257-34ad447bde65", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17abc937-dbf5-44da-b147-fae007ae637b", "sighting_of_ref": "indicator--0ffa9ab7-efd8-4401-b2d4-b01230b34820", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aed8916-962b-4e35-b8c8-77e59762bd1e", "sighting_of_ref": "indicator--0ff70df3-877e-4300-b2ac-a546476877bc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c064fe7-8755-41b3-8a61-648e32bae93a", "sighting_of_ref": "indicator--8a3271c7-316d-446c-bff8-30eb0a88d12b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff49764b-43e2-4683-b8fb-35f9628247bd", "sighting_of_ref": "indicator--c3444477-3a65-4c92-a916-cefd9efb47bf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01da640b-1ec3-4fdf-8844-117b723f9ffd", "sighting_of_ref": "indicator--6bf48256-3337-4937-9e0d-5e876b90967d", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94bbf811-3b6b-469b-bdf1-198b86db3223", "sighting_of_ref": "indicator--4354509d-2c0d-42df-acd0-97c882fe952f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--287dd6d8-6660-457c-b176-dcddd1067809", "sighting_of_ref": "indicator--e64d2767-473f-4cad-8e1a-15fee28764f4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--325f1f15-bb02-4126-aced-732e2339141f", "sighting_of_ref": "indicator--d7b2e5bb-7424-49fa-9dcc-c1ba6886715f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909cc7bf-7490-450e-bd50-bf5adb7dce70", "sighting_of_ref": "indicator--b7871c88-d14f-489a-9053-661974cc43dc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--827b32f2-ddc7-4938-82d5-8597458bc39d", "sighting_of_ref": "indicator--f6571cb1-3af3-4dd5-8057-fd284ff89cee", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dfd91ad-5bdb-4efa-ac76-ef50264b0587", "sighting_of_ref": "indicator--1f283ea1-910e-4036-aa56-b27cf4ffa9d7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06294470-e7bb-476d-bdfc-c56451284ff7", "sighting_of_ref": "indicator--ac2398c0-f053-4ea4-9e4f-714ca203ebe7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--937a8e77-ea3c-4ec6-8320-1b247475e487", "sighting_of_ref": "indicator--55d30cd5-6371-43c0-b0e2-84f3e80fdb07", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6796874-6102-4b50-b161-466bb5a0f3af", "sighting_of_ref": "indicator--d4e670de-8239-49e2-abce-6f00f15c0034", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04829bdf-a41b-48bb-b3de-9f689d688991", "sighting_of_ref": "indicator--613e34f8-230e-42fb-8ee2-731a5ecc0d4c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fa0ed44-d299-408f-b911-8666a1ef8850", "sighting_of_ref": "indicator--f9d8550b-c01f-4bc6-9694-887737a6a3a9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--361a2fc3-da96-43bc-ab94-2ed739531786", "sighting_of_ref": "indicator--1e1d3e72-658b-4a00-8217-654b0121124c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--250ab7b2-1708-4666-87eb-b6f0554a2722", "sighting_of_ref": "indicator--973e94d2-e985-4611-abf2-f8ce3c089090", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4e6808a-0871-4c17-95e4-50ff8b44962e", "sighting_of_ref": "indicator--ec982e21-9084-4d31-add0-6030534ba7fc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c34e6a-e9bc-4e18-81a7-d21c301b3d72", "sighting_of_ref": "indicator--33562023-5b45-4e75-af04-d1480275ba8b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db04b795-b963-45ff-8a80-a8955bdb47e9", "sighting_of_ref": "indicator--2cbd4e51-dbe9-4910-bd95-daa5f8ac4d96", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b43770-465d-449f-bee1-4d6d5bfe2fa7", "sighting_of_ref": "indicator--76c5738e-a896-45ae-8df3-7ed9caad5ab4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b54aa9f-926f-468b-bac1-69fa3a143542", "sighting_of_ref": "indicator--572fd4cc-aef1-4927-ada7-fe61e0123a87", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e60043ac-c1f8-46c1-a2cb-350ffb8b5e1d", "sighting_of_ref": "indicator--727a055a-02f3-46bc-94b0-ab2ae4c42ce9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65002335-b281-43d3-b9a6-f6868d45c26b", "sighting_of_ref": "indicator--b3c5c14d-f64d-4166-aab0-cd474d3bf42f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5f5e512-792a-49d8-98c1-868540443eec", "sighting_of_ref": "indicator--c395b492-bfef-447a-b9bd-a3bd5ac73afb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4392baf4-ed0a-4a75-8c97-6f3f5d8a4437", "sighting_of_ref": "indicator--30a742f7-9806-44c3-a581-8edd54f05080", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2334a6f-80b3-40a3-b352-e6b7385f7be7", "sighting_of_ref": "indicator--d7537ad5-4a88-4482-8c2a-028c941f21e2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf9d719-d137-4d19-bfaf-5eed9f8a387f", "sighting_of_ref": "indicator--0a584c2c-5588-484e-abb5-a506ec93c0cd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--285d9c2f-7581-40d4-95e0-28c72ad9990b", "sighting_of_ref": "indicator--2d08d0fb-37da-439b-bcee-4aacd3bfc607", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9346c092-0917-41b1-a70e-5cecbf52090e", "sighting_of_ref": "indicator--e6a8247f-bc2c-4d32-bd2a-e2908b6328d6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d105bdf-ebe0-480d-86e3-eacacd1f4066", "sighting_of_ref": "indicator--dbd74dc2-7501-4fd8-b1ca-325f5d317465", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab10d1f5-07a4-424e-a8a0-c8bcb4f06def", "sighting_of_ref": "indicator--eaf64f5c-c6c5-4bbb-9908-9c9b9d1452c6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d270147-76c9-4c8b-9cf8-e2f6b554d9d2", "sighting_of_ref": "indicator--2e6c4817-5218-4ef8-82a8-2ee632aad199", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85910f46-b366-48d8-b501-445dc3811afd", "sighting_of_ref": "indicator--5b97e8f0-9513-4f9d-8388-1f6e418e2f31", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--285a61d2-d23d-4f64-9fb5-eee19089fdcb", "sighting_of_ref": "indicator--3ac59b67-ff9e-422e-9848-5568280efdad", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04701610-ffda-4d76-ac23-9ce114893e5d", "sighting_of_ref": "indicator--2f5bb888-79a4-4f80-9b22-dfb807a9e89f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c77f52-a84f-49b0-9ce4-9df54a1ce03b", "sighting_of_ref": "indicator--febe14a6-99d9-47f2-a5f2-6f64ad449096", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7968d154-7535-4638-9297-08aa22a5f85a", "sighting_of_ref": "indicator--487ce77e-2c53-44e8-abfa-cd73cea3f4ab", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d54e1c-6737-415a-9af3-43a08866caa0", "sighting_of_ref": "indicator--4b2a2e6f-c0a4-46b6-9bb4-2c1ba4ef4505", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1c83f3b-5b8b-41e0-8a3f-a827cfc38b5a", "sighting_of_ref": "indicator--8730d65b-1e5c-4020-b7b5-6b6d5a528af2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04c95fa4-fdde-4c01-8a77-5c91b980f487", "sighting_of_ref": "indicator--eff1f392-d71d-42d7-8920-6b55c6a2025d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4420f292-773c-45f2-be3c-ae77be3df1be", "sighting_of_ref": "indicator--550d2e9c-5e27-4069-9b88-f8d8c7280a93", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--384b15b6-b5ee-419e-9c1b-9a91c538c1de", "sighting_of_ref": "indicator--abd935bd-e9f0-4343-871e-09ee5c1b8df5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0220a27-4ae4-4df4-b18a-8d6b448c066b", "sighting_of_ref": "indicator--f85872b4-8f5d-4e40-83f8-1a7b385b8b34", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b828cc7-b461-4703-945f-d7f9ac798a7d", "sighting_of_ref": "indicator--9e3c8f0b-cea4-44c0-897f-14e71ea483d7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d0a4537-4d5f-400a-aff5-c9f3807c91ee", "sighting_of_ref": "indicator--12471d0d-c282-4edc-9573-51d85cd91fc1", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--229f0d3f-8da4-4186-b9df-74029eb5c8e4", "sighting_of_ref": "indicator--d535e59b-9569-466c-81cb-74a0e39c20e4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b189d32-4353-42a3-a1fa-f8a7f175862b", "sighting_of_ref": "indicator--9f93e38b-3a74-4cb2-b0cf-808b2b9ca978", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--859570bc-6f15-4174-8fe2-2302027dd474", "sighting_of_ref": "indicator--40f8c9a6-29c7-4d8e-8e5a-176538227c59", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb8f339a-97a8-4a57-999c-00e5ce762418", "sighting_of_ref": "indicator--0c5bc6f2-b77a-4da2-8ec4-2a26989de579", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bee549e-1f3e-4e3f-89ff-79e886ac3e4b", "sighting_of_ref": "indicator--6fb66f73-6bc0-46de-847e-65e8bc87f9cf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2b11df3-5170-4c1a-9b15-53b66b2e2a5a", "sighting_of_ref": "indicator--5fef14a2-0665-4ea1-818d-417339045e39", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3959c064-8676-4dcb-a8eb-5a1bab67b244", "sighting_of_ref": "indicator--bf349e0c-d537-4b57-b02a-b499def8ac74", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da6af682-74ea-430e-a753-ca432ccf1f51", "sighting_of_ref": "indicator--f3d023d4-a12f-4d28-8318-e1f25369a16f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bba9fcd-3eb5-4450-b917-3dded822aafd", "sighting_of_ref": "indicator--bd0eac18-18b8-49c2-92a3-d424732ddd68", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b653f00-f8d9-41af-acbd-2e91ecd8887e", "sighting_of_ref": "indicator--9aae2be2-d114-4726-9792-f8674bb7ee4e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f8903e-72ae-4f0a-95b0-1c20cad55dba", "sighting_of_ref": "indicator--48187780-497a-4eef-b7a6-81921317a48b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e6227ac-edb1-4f47-9b24-295630755419", "sighting_of_ref": "indicator--3667e2d1-3861-42e9-bfcd-5a9d044ae81a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d60ec4a-0f7a-4ff1-a9ff-e8100e368831", "sighting_of_ref": "indicator--86c9edcf-541f-4c6e-991c-795b14ff37e3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c78c2619-bab1-4ad5-9c7e-86c19fc5a8bd", "sighting_of_ref": "indicator--5b5fd322-c78a-4029-a1a0-5a0073ce5ee6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--637b6c66-b7c3-42f3-87ca-9450cae04860", "sighting_of_ref": "indicator--f1ac4c85-fb73-48fa-ab74-1c377a1f0a6e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--765ace1d-1c1e-47ef-87b9-7846d4739317", "sighting_of_ref": "indicator--24bd14c7-61f8-4b85-ba2c-7fabc42e5677", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dffccef-f0e2-4254-a41e-522e8c997d1f", "sighting_of_ref": "indicator--d839cb5e-f5fb-4f7f-bca8-7db81600afce", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d89be8fb-3ce1-4ece-8c56-d0bb013067de", "sighting_of_ref": "indicator--f94a04b3-c9a4-459b-a0db-d8ea7a91d829", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96fdc811-5c05-407b-9545-f613f7ea430c", "sighting_of_ref": "indicator--097e4497-3f86-47a9-bbea-625fa891ca4a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb44357-9176-4b89-b684-092f3066e5a6", "sighting_of_ref": "indicator--29505ed6-59c4-4ac5-a5db-a426d1b9b177", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7599d55-9aa3-4151-9f20-8fc7adcbcdb2", "sighting_of_ref": "indicator--f46af101-644f-4ce9-aaa1-e036de8cb73a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--647bc068-b619-4efd-ba4f-21f9a0d5c32c", "sighting_of_ref": "indicator--64334f66-75b4-4600-9a38-5d856e6f24fb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d8387c9-c3f5-4ce9-bb78-d9822a41e3f6", "sighting_of_ref": "indicator--e34cba69-30cb-4b50-be83-e5ddc1ab4c79", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4683ae53-9587-41f4-bf55-b4fe2ef8ae5e", "sighting_of_ref": "indicator--17fa6c09-d8a3-4636-9a9c-0c169c6d14df", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbfff43a-87d0-4150-a2c9-ea0337b39c91", "sighting_of_ref": "indicator--8728c64e-b152-4087-a5c6-21d9d4b1ad2f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97f2571f-07db-41a7-ae77-9c6ca2326985", "sighting_of_ref": "indicator--75ebf915-36f3-4530-ab8f-6d963e718f5e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2522c768-d4cb-4531-8401-fa734aa943ac", "sighting_of_ref": "indicator--6c2d80e5-5929-4896-bb8c-104993e1287d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d2383a-4b17-4ba6-8a14-b8788426f551", "sighting_of_ref": "indicator--0b5ad636-f3e8-41bd-bcbf-0aca32d6fc2d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c036a7c-fe2d-4de6-90fa-95253b0e2888", "sighting_of_ref": "indicator--c5cb55bb-b96a-410b-bed2-70b67856f914", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57988361-657f-4daf-84f9-173f647ee9eb", "sighting_of_ref": "indicator--b331da2b-8cc8-43de-afdf-4fc73cfa7a28", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b7ba61-dd09-409b-8905-1f192fb14114", "sighting_of_ref": "indicator--3a03dc41-5ae2-4661-96dd-11ca1823d0f9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55fd9b81-bb3f-48c4-bf9a-d0128b23c9cd", "sighting_of_ref": "indicator--51b08248-a65a-47eb-9f01-124dad6d66bc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e289296e-294f-4a20-bdad-b5fb1c733512", "sighting_of_ref": "indicator--f9ea32be-53a0-43bf-966d-ad0e121f059c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27fc6b1b-2223-41f9-81d9-1037090dd515", "sighting_of_ref": "indicator--8b7227c8-7b97-4f2c-97bc-37b40ee9cb56", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40740ba0-34ff-4bef-8a3e-4b644b7854d6", "sighting_of_ref": "indicator--11d2ca56-4b14-450a-bf37-9c61b56a6b2d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c41840c2-8ecf-4c31-bdf5-56d1e41f8b03", "sighting_of_ref": "indicator--e4e35be7-8c9e-4f12-a703-b45189b56e90", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea3cb599-a575-4e48-bb35-6ae5aa28988f", "sighting_of_ref": "indicator--b29dfc7c-71ea-42b2-a088-24486589a495", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7374270-14e9-4eab-8b73-8b23230736e4", "sighting_of_ref": "indicator--50f163b2-57b6-47d4-9dd1-33d4ff78c9e6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21cbb9f5-a3e5-4964-b46d-db1dc141ca88", "sighting_of_ref": "indicator--344301ee-eddc-449e-b89f-587c37f67f70", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--697b0784-4788-4aab-b1f3-3ec3ee18449e", "sighting_of_ref": "indicator--e9b31a5f-7437-44ef-b013-4b0bf0f26e65", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb28f58-cb93-4702-8a30-fcf8afe57a98", "sighting_of_ref": "indicator--78473f24-d6a4-4a67-8133-38114431cbc7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df80de2d-ea30-4447-b711-f7915e06ca7b", "sighting_of_ref": "indicator--7b42889b-9533-47d9-9d81-787179f7909b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1da4b39-8098-48a4-a2a2-3ff08e3f7c58", "sighting_of_ref": "indicator--016974b0-b231-467c-a959-536fdd75cf6d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3303e28-00e8-453d-b13c-04323596183b", "sighting_of_ref": "indicator--547e10b3-075c-405d-b2d3-d3375b224d7d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf17f32-6c52-4d64-9777-e2ef658337c4", "sighting_of_ref": "indicator--cacf67df-6f76-4ebe-8e8d-4ce8e9caa336", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2760e6d4-31f8-4f0a-b2cc-9bc42ab590ae", "sighting_of_ref": "indicator--9ea11213-be75-462f-84f6-e1fabbfff23b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b481e418-31b1-47c3-b5c8-852dec415d66", "sighting_of_ref": "indicator--17774c2b-7041-4903-8a1b-6288ed0cebf5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb15bbc5-7e91-4e22-912b-abd317f41b63", "sighting_of_ref": "indicator--bac451e9-7c8f-4cc4-8ca5-f1e0afacc992", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe197374-1f63-4027-8908-5651e55bed85", "sighting_of_ref": "indicator--6bfc47c2-eb0e-4f2c-b843-eb379fea2374", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec5c20d-272c-4cfd-9075-124cdec257ca", "sighting_of_ref": "indicator--a44c2de9-bcae-44a9-b51d-ff4e2e040d67", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad2a528f-b645-4c0e-95f8-65aafb7c0299", "sighting_of_ref": "indicator--d1ef79fa-f27b-4ceb-a077-b7c0d906ef22", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39dccde4-23ac-48b1-af4c-8421eec54b86", "sighting_of_ref": "indicator--66986404-5595-4da6-be7f-91b1087d3626", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3a3666-2652-420c-ac3b-260269680c89", "sighting_of_ref": "indicator--34a2d552-a591-4d68-a7cb-e57873cecb0a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b40fcad5-73a0-4aa4-8217-9e09a9068471", "sighting_of_ref": "indicator--1a7a6436-b3f9-4dd6-9333-67e7ad935a10", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50abfb26-c47e-4dec-a441-130c99b2bfbb", "sighting_of_ref": "indicator--4e90f182-17df-42d6-b369-9508ebae51c3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4677852-5dc6-4c84-820a-4d369a43afd5", "sighting_of_ref": "indicator--2371fdf3-1199-422b-bc7a-ac00d56e537f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8ea6376-9791-4ef5-97a8-034e0d11167d", "sighting_of_ref": "indicator--8940811f-4bfd-4f1d-bbdd-8a75cff49914", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f18f16d-6d4b-4ba8-a46a-fe01a58813ec", "sighting_of_ref": "indicator--5a8d3c91-8175-40d4-88f3-bf24b0935961", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9970d349-6bcf-49ec-ad76-719ac02020a2", "sighting_of_ref": "indicator--576ebacd-62a8-4ddf-abd9-1f6f746b8282", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb92d05e-f919-4aca-a44b-911055bad9f6", "sighting_of_ref": "indicator--a2a0329b-153a-424f-860b-183ced39915c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--742c3588-cae1-43d0-90ab-bd7b8f129df7", "sighting_of_ref": "indicator--bbd9a893-76fd-42c7-b400-d19b2f6c9e61", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccf478c3-57a4-4566-b38b-3471b8cf1506", "sighting_of_ref": "indicator--7322b488-ed45-4251-a8bc-cecebbd68395", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a99cd3-fd2f-47a2-af6a-c67227f57dd9", "sighting_of_ref": "indicator--de4f4da1-afaa-42b8-ab12-b2b690c63ca0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f8e98dc-5721-46cc-8db2-c373680e07c6", "sighting_of_ref": "indicator--10f7d568-5958-4eef-acca-61e714b27fbc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d02756-6c49-4fa1-ac5a-3bcfa0670cff", "sighting_of_ref": "indicator--aa487677-ad34-4a32-ab7e-2a7450ffe6da", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c30e2394-9957-486c-9cfd-a551f8b6c3f8", "sighting_of_ref": "indicator--96000a33-5645-4fce-9328-cd857b6b22a7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ddd28bc-b7c4-4290-a645-802a8967e554", "sighting_of_ref": "indicator--abc45aab-0a4a-4477-9a92-ca79fa78d531", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd16ac21-e95b-4a3b-b18a-9dc9ab63f5ad", "sighting_of_ref": "indicator--ebe5d22f-4f15-4344-af37-4e08f8c7665a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aade444a-f2ab-47f7-8ab7-18154d11b3f4", "sighting_of_ref": "indicator--36d0e9b2-4010-42c6-a220-beaa87b99172", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acdfbb76-98a4-458a-90df-9d3b7ff9e755", "sighting_of_ref": "indicator--52e22064-e3e3-48de-a656-7ef12c0a1c22", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc61edf-5d02-410f-893d-b6aee0d02917", "sighting_of_ref": "indicator--587db433-7a9f-4b30-b598-f27349641f42", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fe33220-12e0-4b8b-9bc5-6ca58bfbb6c1", "sighting_of_ref": "indicator--59383acf-6677-4cc2-b497-a7ddc5f4f375", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c66b52-0f77-43fd-b658-54b8a0fdb5b4", "sighting_of_ref": "indicator--68afeed8-9ca6-4891-a8ed-faad3251aa19", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9284b898-c1b4-4847-8a1a-ad1ae4ffd8d2", "sighting_of_ref": "indicator--869152e3-877c-4f88-ba75-e3432c7a0a3b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eff841e3-747d-426f-ad45-01438bed99f4", "sighting_of_ref": "indicator--530aa87a-23ae-4e04-bb48-1f058fc77d6f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17402269-8047-4b86-9ad5-b2014c319a70", "sighting_of_ref": "indicator--9a9dc95b-2c0d-4025-814e-80508f1f4398", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a83b012e-aee7-46cf-bfb5-89697b3852fa", "sighting_of_ref": "indicator--2c490d3e-d17d-4da7-9efc-e7cd7b7e5f21", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33e078c4-8d81-4774-b5f4-e72624760c19", "sighting_of_ref": "indicator--39b9c4e1-bb91-439a-acfe-22555733e0ea", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c8d3437-5e0f-4d0f-9efe-133dd8d94053", "sighting_of_ref": "indicator--6044134f-2545-4d2d-8e9e-2652549d0ee4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8eda9bd-8ca2-46a0-9436-d430c55365d1", "sighting_of_ref": "indicator--6fb00c81-123e-43c7-954f-4c58749dded4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71b8a2cf-3fb2-46c9-a4da-f9cc1529f379", "sighting_of_ref": "indicator--f4900f33-219e-4ee7-9b3d-7a431e9a5cb5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ea4f8b0-d542-4a43-9416-86ab93e130b9", "sighting_of_ref": "indicator--d3b9fd11-2077-49f3-90e1-238cbc6e96c5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--831e05a2-6a2d-4534-bdf7-3d7012ef5cea", "sighting_of_ref": "indicator--f58ba573-5459-47aa-8b88-7706aabed600", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eae3871c-d768-4e7b-8edd-87e5884ede91", "sighting_of_ref": "indicator--0802c76b-2d09-4d51-a13d-7ac7fe7780ca", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d922b3-dae9-46de-8330-4887494225c4", "sighting_of_ref": "indicator--48c86987-f4c1-4545-ba1a-eb846529d7ee", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2705775-ed99-4c1f-8231-35c55c1ec06f", "sighting_of_ref": "indicator--1797a5c5-a71c-4e95-9502-ba1e366863e6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81105e84-66f4-41e6-9b09-7f8b49616f88", "sighting_of_ref": "indicator--1e3713bb-b99f-4e36-89cc-81fe3d7c1b42", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e81b683b-63aa-4dcb-89fa-461776bb20e7", "sighting_of_ref": "indicator--8a8ed2d6-e330-47a2-91af-95b52d1e9c50", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02c522f-1318-4d3c-9951-4556d0b09c2c", "sighting_of_ref": "indicator--eea3d8d3-cbb1-4bc1-8b1c-e68a038fc287", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22fe3914-6032-4436-abc2-3e353a555a67", "sighting_of_ref": "indicator--e6d55a36-0390-41b9-b075-7e10f72794ee", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c7787d-2eb7-4868-8efe-72af4426f431", "sighting_of_ref": "indicator--0bb225bd-d929-4b0f-8222-e6c4296eae3d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c8a0355-3e3f-4840-8a9e-38d115d0a4ce", "sighting_of_ref": "indicator--f13fc6fb-f11a-4b8a-ba97-37cf42e2def9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8530ad98-19e7-4850-a434-d9abd92153d3", "sighting_of_ref": "indicator--96d081bb-7e91-4d5f-854c-93f0980c149c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0134cae-674a-479e-a373-8407ba7da6d8", "sighting_of_ref": "indicator--f1b604bc-0ae1-4a2a-b08c-b00fc762f4a5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11827c8f-3d77-4beb-b490-69dcecf6c4b6", "sighting_of_ref": "indicator--e9a96ce7-c1c8-4163-a3a0-1a53436637ca", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e784151e-654c-4ade-b592-9795b8a17dbb", "sighting_of_ref": "indicator--83aa1706-6a89-4dca-8990-b430a6c03282", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93bbf650-8cac-477a-a9e0-ba94450a20b6", "sighting_of_ref": "indicator--bd99d7c0-0e9f-4230-b145-12313b6b3b3e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9da32dd5-5a11-4360-9024-f5f3303d6faf", "sighting_of_ref": "indicator--70533e88-32a9-42c9-8496-9e1a1e555627", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43147b8a-cb9a-4c4f-a49b-a80187c188a2", "sighting_of_ref": "indicator--bbd36eb8-e7ea-47a5-a65d-813fa27929bc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77983b4b-fd8d-4ab7-81b4-29c8e2e1a57e", "sighting_of_ref": "indicator--9d705744-4ed4-4b0a-8047-10a6fdc539c8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c8b0a1d-e0cc-4e17-9991-e0ffa88a90b2", "sighting_of_ref": "indicator--426aaf96-5b9a-4cc0-991f-1773bd688ec7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d762a49a-e46c-4983-887b-2c9269d8cfc8", "sighting_of_ref": "indicator--2d3c2bb0-5e56-46ec-8e37-1b6cff95f28e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f61f65a5-19e7-44e5-9f91-9bc75565c9ff", "sighting_of_ref": "indicator--48ff17f3-92c5-42a8-90f4-32fe588b156c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94d390aa-1c22-4cb6-8fcf-855b6fb51251", "sighting_of_ref": "indicator--3f3fc8cd-c112-4395-8249-b450621c6287", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be492e2d-b522-4c9e-9b23-84dce17ce4cc", "sighting_of_ref": "indicator--5ef255c5-ffed-4e34-a50c-f194dcd25f9c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a6bb1c6-26df-477e-b573-d4e3d8caab4c", "sighting_of_ref": "indicator--42a810b5-71f5-4944-9676-cddbfddede66", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--943b5b86-ab29-4ef2-a1ce-3fb8342f95e1", "sighting_of_ref": "indicator--9200618e-8c5b-486b-be70-493b78c38e18", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75997992-fb60-4922-bbaf-85c7002c3300", "sighting_of_ref": "indicator--726f4059-9138-43c4-996b-ba135eb8d606", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74accf89-fc17-4785-9b67-14473e4591b4", "sighting_of_ref": "indicator--37908995-7d7e-42f2-9921-e690ff3f7663", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cbd9b78-57c5-4c03-bb18-da1f21505680", "sighting_of_ref": "indicator--74b78d9c-e424-49e2-9b7c-55717f5d38bd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acdf0f6d-fffe-46d3-b527-cba4d70e4abd", "sighting_of_ref": "indicator--5ea72e2d-9f87-45e8-bbb3-d2895b9c7bc8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9fc1540-dcbc-419a-a298-5fd277dae200", "sighting_of_ref": "indicator--03b4c099-ab48-47ae-bd9f-cc8bd163fd78", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3f30c45-8570-4e52-a2ad-634bfc6947bc", "sighting_of_ref": "indicator--84e400a8-43e8-4c4e-b538-b5d62ecd0594", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a939f8eb-0f10-42a7-a8f8-fad85c4564a4", "sighting_of_ref": "indicator--0165fb80-d301-4fa4-88db-81e779acbf9c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eda8649d-dd6c-4a82-904b-05fc4a748a4d", "sighting_of_ref": "indicator--e407527c-3175-4e44-b859-b01dd150475d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a7614d9-b225-4a0d-82d8-435807721ccf", "sighting_of_ref": "indicator--5f55a97f-a431-44d9-9604-e8e9b8f85dab", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1bffc7f-a083-4143-910f-ce39ebfab53a", "sighting_of_ref": "indicator--c73c93e3-7a39-4550-806c-afd0ee8595d2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--212fb5dd-63e8-4122-a247-f99c3c9a0de0", "sighting_of_ref": "indicator--c26a23d1-a68c-45c2-b022-260e526eb760", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd71226f-728b-49ad-b65a-6eef97e9159b", "sighting_of_ref": "indicator--5f7e6282-9c60-4a7e-b341-53ea7eeb3799", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f22dea4-9f16-4575-9157-aeb2e55ff40d", "sighting_of_ref": "indicator--12e1fbc1-5a5e-47fb-b43a-82bd3ba82fab", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2da2f0c6-4f6a-4e3d-9137-ef25d79ee798", "sighting_of_ref": "indicator--a8824b39-3236-4b3c-afdc-3730a247e9f7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b302659-2683-476f-8976-b7f08a2b32ea", "sighting_of_ref": "indicator--9368ca51-339c-46ee-a782-f3aaf4a387c4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9172bf04-b397-4bd5-b15b-729a1192ab4f", "sighting_of_ref": "indicator--95019b08-7e36-4183-a582-346aa826cd43", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ae79a2-d2e9-4d7a-9531-8ee33fdcb3e0", "sighting_of_ref": "indicator--1163fdce-1b7d-4ae1-842b-abaa9e9142fd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da2d85d-f09b-475c-90c5-80857fb3940d", "sighting_of_ref": "indicator--8b6d5782-1797-43b0-a6cd-16841aa09629", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54302983-4ac9-4900-a6d9-fa9787f4b409", "sighting_of_ref": "indicator--fdb19de6-e5ef-4f52-85f1-34af3092e7ec", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6d24c1b-217c-414e-b872-2ff7061f2120", "sighting_of_ref": "indicator--fbe28ef3-b3da-44c9-9a6c-696d2499c159", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4bcd7be-c402-4c9e-93c0-36f72b7c492d", "sighting_of_ref": "indicator--727e3eec-ef01-479c-aba4-c7b0e560474d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edfac903-f0af-46c2-8fd5-95d27564efe8", "sighting_of_ref": "indicator--e301aa5e-0683-4b22-a26f-4df094e8cb0b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f81186a1-1187-4298-8305-57c009130ba5", "sighting_of_ref": "indicator--0c88d82c-8369-40fa-b0d0-36f62b3f3979", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb2ed4f8-5cd8-4a19-ac1c-8e2e3b7c8a74", "sighting_of_ref": "indicator--7dfa0e63-deb3-41d1-9eb2-b95f7ed2761b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e8f6614-9a57-4721-9f43-801867ff16f2", "sighting_of_ref": "indicator--6fee471b-e6f6-46c5-9e19-9b9e4a21377b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6749feb-3e7f-409e-ae27-df90bd8ad621", "sighting_of_ref": "indicator--33da3423-3825-4acc-8180-687c154f7b6d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795787c3-278e-4329-9fba-2a4f64e8044a", "sighting_of_ref": "indicator--14e036f7-6711-45cf-b2d9-70008a100e44", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac197539-5cba-409e-b11f-7fc17e434675", "sighting_of_ref": "indicator--798ca5c0-a122-4d77-9fcc-361beec04c0d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--894b2a93-ce73-4ed1-9b0a-de93fbbdf7a0", "sighting_of_ref": "indicator--656df673-7cea-41eb-b3cf-cdfd2e4e42e9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a0ec0ee-500c-4b71-b698-912ce0db5899", "sighting_of_ref": "indicator--8a6226d3-4222-42b1-ad1a-1ee9fdd400fd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d0dfd7-4b48-4c85-82f7-bfecaff59a73", "sighting_of_ref": "indicator--2c6a7747-acc7-4cc0-98b0-a1cab5c9a46d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d41583c5-9c98-4e64-89cf-e0c2b77d3925", "sighting_of_ref": "indicator--997f449c-2849-4eda-b38c-3d2857ba6716", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598aec56-cd38-4e8e-8cdf-efb695d27ad8", "sighting_of_ref": "indicator--946cdadb-6cdb-41e4-b661-04e621a774c2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb7b7804-cdfe-4754-bd42-e1d902dc3565", "sighting_of_ref": "indicator--de69fada-2216-44dc-814f-0396e3c69a53", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5579ba98-8961-4fe5-8bc0-1945f689bb18", "sighting_of_ref": "indicator--755924a7-c2cc-48cd-9060-b7d99a2b93cf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48955097-d822-42d8-b57b-7f3c9fd1be1b", "sighting_of_ref": "indicator--606e5687-747d-43e8-9a1d-4b847e4b11ce", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e2e13a1-d46d-4947-9484-9219104ba23a", "sighting_of_ref": "indicator--0238cebc-eb79-47d3-b43a-2c681ef2e574", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cac6a20-f305-4355-9b35-e0ec62f2a8a0", "sighting_of_ref": "indicator--b51c65ba-d319-48a2-9faa-eb11b834f281", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--666c2515-a090-4071-b53e-470b96c2c2d9", "sighting_of_ref": "indicator--585877a9-31c9-41dd-8f5e-26e1365a88d8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d4e875-0f50-4a90-ae59-c5fd20598807", "sighting_of_ref": "indicator--6e28c205-9a44-4634-ad82-9e4c7ccfea83", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f934c1b8-a25f-4246-99be-5c2f7558b12f", "sighting_of_ref": "indicator--b5506ebf-8975-43b3-aa7c-f810ee1ab3f9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f946c2dd-6ba0-4479-beab-83eef8bf7b0d", "sighting_of_ref": "indicator--d19d3e73-be6a-4c5f-a4a4-e3888a0b84b1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--533c525c-abb8-4074-9633-c8a15aac4361", "sighting_of_ref": "indicator--45b97565-6091-41e8-8845-9064a03a1fea", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3254d2f-c358-4f23-9ec0-baa9d30c6813", "sighting_of_ref": "indicator--7c76472b-9413-4f97-a05a-30e9b8db6e22", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44944377-05c4-4c65-a20a-770191d0d5e6", "sighting_of_ref": "indicator--428518e1-3412-4420-88d4-52e0fc4f860a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d848a18-6dd1-4833-a066-bf7fe240f52e", "sighting_of_ref": "indicator--9e3d8b97-3d5e-4161-b5e5-9bae54f95a54", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3736f217-0fa7-400b-9d88-0709ac5ced99", "sighting_of_ref": "indicator--0a8cc1b9-aef4-4d61-89b3-d33f34a4464e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b920d3fc-dc97-4105-af48-9ebaf6b49127", "sighting_of_ref": "indicator--87ce90f2-b5da-4331-939e-f25e4d916f61", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--954cf4bd-01c2-4159-a848-03c9a7c348c4", "sighting_of_ref": "indicator--91f77d83-1542-4e3e-920a-904db53abff4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80814a7-647a-4fe7-b7c8-52e9bcb2bea1", "sighting_of_ref": "indicator--abc9f965-492c-419c-b9c9-89e0728a27a1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30df637c-dfa8-43c6-bcdb-1ed796eb415e", "sighting_of_ref": "indicator--ad2dbc0a-b02d-4abf-90c4-462756732c8c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--080aa157-00ee-471a-89fc-5e2b946e1e2d", "sighting_of_ref": "indicator--e436fc2f-ce3d-4bf4-a3cc-8b8eb1f56116", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dea6232-2c16-41ae-9620-43e0de4ea127", "sighting_of_ref": "indicator--d30f1f7b-964c-4add-b64f-3270ab79c4d4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26690226-30c6-43c1-a756-24d2284212bf", "sighting_of_ref": "indicator--09d5ad04-e40f-4f26-bb13-5b074a36e3c5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39c780f1-7578-470e-b216-f2d2fde9db4c", "sighting_of_ref": "indicator--617b2aac-4c59-49f2-986b-6237287f2996", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c07c2e0e-134b-42d4-91d6-2e980e210da8", "sighting_of_ref": "indicator--99b6357f-c1da-4106-9f63-2b833388a5c6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc1a714b-07af-4d60-8057-3444f3f7ad6e", "sighting_of_ref": "indicator--b838077a-c879-4bde-8139-eccff3b43de5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--549463e4-cd9d-4dba-881c-588bb03f461b", "sighting_of_ref": "indicator--278f557b-a3eb-4dd8-bda3-1bca22bf701a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39d30bf8-c541-4377-be85-5cc8819e1ed8", "sighting_of_ref": "indicator--efc55ea8-e3f5-4536-aa57-3e238f1b433f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b3f30b7-c1ba-434c-9dd0-429ce9efe02f", "sighting_of_ref": "indicator--4d0cec30-4866-41fc-b165-fe27c617415e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6637c168-6868-427c-89ac-b6c4f2d90ef0", "sighting_of_ref": "indicator--77e0a20b-3380-4164-8f7c-792bd35aaca9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c18894-7a71-41fe-9d09-434fad37a9b2", "sighting_of_ref": "indicator--31cb2ac0-17c4-4f58-8439-6cf9dfb297d9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27e7fa0d-a411-42ce-bc74-65069238e307", "sighting_of_ref": "indicator--d77b1217-acc5-47c8-9afc-122eb200bdaf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f7cd368-12e5-4b10-adc1-e554cbcbe7b5", "sighting_of_ref": "indicator--f27caaa5-1b13-4d4b-ac28-21fc6f5e61ae", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd670c70-21a4-42f2-97a9-274ad72f11ed", "sighting_of_ref": "indicator--656865f4-a6ca-42d5-ab6b-58a05d261b69", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad94888-6498-4163-a510-aa2f11e61d1c", "sighting_of_ref": "indicator--24ceaed9-febc-4889-833e-d83252dc680c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd4c2978-ca5e-4acc-ad4d-4d442175a024", "sighting_of_ref": "indicator--2466efe5-64cb-4592-aec4-8da94b6ab45c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8148ff4d-fc2b-4dc3-83f8-b1aa2a3e1b87", "sighting_of_ref": "indicator--e47918db-b57d-4f79-a467-87125e6b81cb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--315e653b-90c4-4b86-af93-7496f4797026", "sighting_of_ref": "indicator--86c98c5e-ac4b-4a26-8f0c-84dc8895d2cf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--752e947f-5efe-4ded-9095-d67757b3ba6b", "sighting_of_ref": "indicator--75646658-5700-4ffe-9c88-da35ebe196e4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7e194f1-fa94-46bd-809a-dc6498a83d1b", "sighting_of_ref": "indicator--662ef08a-7d1b-4a19-91cf-46033f9f3308", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ebafe8-fcd4-43ab-a0f7-3e6110d4ec82", "sighting_of_ref": "indicator--217b23f7-bf47-4da6-b808-25de12a904cd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ed907e5-f692-4d2f-b9a4-3afb38bbfd9f", "sighting_of_ref": "indicator--28c61815-34a4-4565-b054-23517e21a379", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b7345d9-65dd-4484-b290-a4c73b5768aa", "sighting_of_ref": "indicator--4807796c-cad0-48dc-8fbf-6642c90efe78", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--457d7d6a-b720-4acb-a461-cc4358d11176", "sighting_of_ref": "indicator--a4247517-72c0-4a8f-a198-4c115da19a31", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f63a3b9f-7cb6-4df9-a337-4821869b8738", "sighting_of_ref": "indicator--77f05a84-9144-4203-a07f-13bad58f32df", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85cac4cb-5303-4357-a9f4-492ff171bbfa", "sighting_of_ref": "indicator--8ab4229d-701a-480a-83f7-eed30c8d6fe9", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e4c309f-48a5-4480-b1e2-50c2ea938725", "sighting_of_ref": "indicator--096cddb3-b412-454a-96e5-a404cfa679f3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d979945f-412d-406e-8474-3e18fcf5947c", "sighting_of_ref": "indicator--fd52b7fa-6d99-4d50-bec3-64971302a5b3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2ed3904-5f20-4bbe-a3fd-6781482b08ad", "sighting_of_ref": "indicator--bd758e31-facf-4e32-a0c4-a168faf3ff91", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09974059-cfcf-4edd-91a4-cbbfc802aaca", "sighting_of_ref": "indicator--32b68cd2-5592-47ff-b65f-39988bfd1180", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d41c379-4ec3-4c2c-aba8-3a970f052365", "sighting_of_ref": "indicator--6210b8fa-5e83-4e74-94ea-2e131e8ac29c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcdaf226-45bb-4686-b6ae-bf3463e0f12d", "sighting_of_ref": "indicator--2acc1420-54d3-44aa-b797-da3deb9afc41", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3820c3f3-7e2c-4fcb-aa77-135215caa1bf", "sighting_of_ref": "indicator--6d5bff1c-5c7b-4601-abd9-35054c11f209", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e37fe5-8046-402f-b0a8-f9c3e3c9e3cc", "sighting_of_ref": "indicator--e000ca83-283a-4323-b860-c9fac6e3a057", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15c11f65-61fc-4a7d-9091-e3dd85ee0b09", "sighting_of_ref": "indicator--71f8b468-26fe-45f7-b388-bd875cc61209", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5239354-d641-4731-a132-75277a980bcc", "sighting_of_ref": "indicator--58b03246-af87-4428-9834-13a93de30a42", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86425b0a-a619-4c35-9e43-ea5be849f298", "sighting_of_ref": "indicator--66b2a895-490d-4125-a5b2-84beb55044f2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--088f0c39-925d-4739-b8d2-b3efbc5bdf23", "sighting_of_ref": "indicator--46c4136c-e806-47b1-99a6-0490b8ec9190", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7063a707-2e72-496e-976b-ed01e16aa9a5", "sighting_of_ref": "indicator--c21a18e8-e229-4b47-ae51-97a2c6e1b17a", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ad9df6e-535e-4d7b-bcf4-ec68ae4892e2", "sighting_of_ref": "indicator--a221741f-3d47-4a91-a096-abaf7e736927", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e04e422-a27c-4ba0-b114-c380defa0caa", "sighting_of_ref": "indicator--e9dca897-b3fc-44e0-a1c1-37d595f68221", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c474db21-8fa9-441b-aeff-4cf08dea571f", "sighting_of_ref": "indicator--8c4b5999-6a28-4c7b-a909-301f55f056e6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6b2981e-24ee-4a60-b563-60d55ed9cbe0", "sighting_of_ref": "indicator--8794164e-cf73-44e4-836f-c0ee0473c605", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6265de88-2d78-43f2-8e8a-24ad2e90296f", "sighting_of_ref": "indicator--5ee91081-0f9c-47e3-9f3e-f92f4dfa60ed", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a49e7d5f-5970-4d96-9218-cb4b65163bca", "sighting_of_ref": "indicator--c3afbe55-4832-458f-8c09-90e35fb6df9e", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02fb5df9-565b-4be6-bf67-ed201fce67df", "sighting_of_ref": "indicator--b9e3b1c1-f593-4754-b1af-f8850e1bbc6d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--636964c4-0068-4231-acd5-e88b903d7bdb", "sighting_of_ref": "indicator--67aacffe-7d38-475d-84e8-344ac485a249", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20488f14-be7f-41de-8fac-979de90724f2", "sighting_of_ref": "indicator--5a74d627-bcda-466b-a153-3254b15a8fb7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b82957ed-1031-4436-8a8e-33b0a5d88501", "sighting_of_ref": "indicator--0e13460d-0d01-439c-a3a8-045b637191a4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7dec9b5-7c72-48bf-b7d0-f080843436b2", "sighting_of_ref": "indicator--c99486b4-e374-4080-8fb0-25925f5f9c2b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d66ce318-2dfa-4c1e-9412-cbf9400ed996", "sighting_of_ref": "indicator--a4577f65-8961-48e7-924a-4446f14ae8cb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c3bcd73-1ab6-4feb-930b-6ad0cb9ead49", "sighting_of_ref": "indicator--c84bac80-64a2-46f0-abd5-84adba7a3a02", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec95de53-ffa3-49f1-aeb1-811d22dd1448", "sighting_of_ref": "indicator--6cfa4c4a-61c7-4a98-a923-17da20e9b4de", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a276d541-dbc6-487b-bc12-7e79dc01ecce", "sighting_of_ref": "indicator--1e1fd3aa-9c53-454d-9786-1b6fd3a8e7a3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a625e32-7ee2-40c0-ae25-7276a91dc47d", "sighting_of_ref": "indicator--26dd1dae-87cd-4dad-b267-e7db3e0cddd1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--306ba1c9-acbf-4c3c-84e6-b73c7b2e8a8d", "sighting_of_ref": "indicator--94f3f930-b166-45b3-9b8a-1bc5a9836a91", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8a351da-c49a-4aa4-aae2-119dde925e20", "sighting_of_ref": "indicator--a1d90120-40b8-4643-b976-a74899518d30", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--864af577-5056-487a-bdc2-9d3438449704", "sighting_of_ref": "indicator--541c1468-ff47-4e57-8e90-669fdc501479", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c2d6eb-91c9-4516-8274-e17546257d99", "sighting_of_ref": "indicator--82862acd-0351-4104-8b98-0842e1fb3b30", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ead184-e143-4742-a675-078b0445bac6", "sighting_of_ref": "indicator--053f41d8-4450-410c-abbb-d2d14e5720eb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22aa15b8-3d01-41a1-96f9-e35a635084b3", "sighting_of_ref": "indicator--1649ca99-4c05-4efe-b43c-0664be6351e2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f70f6ed-f750-4555-93cc-10720e8bc688", "sighting_of_ref": "indicator--2ce10b7a-052e-4179-815e-4391b1ff712b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b20858-4678-4582-87be-91c1ef8479c6", "sighting_of_ref": "indicator--df6e199b-9da2-4fca-856b-22ea0a9fc28b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03c0f6bc-df82-4f44-9c93-43fb859f4a23", "sighting_of_ref": "indicator--c770e29d-c5c0-43a2-816b-5b1840a12e85", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc2f2308-755d-4e2f-988a-f8d564ae07b7", "sighting_of_ref": "indicator--9c05009e-ad89-4b74-8f2c-7cfb41262733", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b011da94-8695-4501-b947-693e672a272c", "sighting_of_ref": "indicator--863f13cc-4568-4873-bc22-f2312938206b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--191b1bd6-53bf-4b1a-9c69-d4795ea6cb84", "sighting_of_ref": "indicator--aff82527-e2b3-4e23-b71c-916ecfefaed9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8d33682-3771-4ded-aca8-e143771585c7", "sighting_of_ref": "indicator--fd566370-b1d1-4f8f-9c19-c2b93c55d676", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ce16ac5-f8e4-465e-91f2-3b7e03f08245", "sighting_of_ref": "indicator--cd63df3e-3a65-46ef-8d06-ded852fe7335", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42446254-5d57-4e1e-b061-89b50a1423d4", "sighting_of_ref": "indicator--44d90095-ce0d-4506-b1a4-a5cb538d9b1f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2f68956-b9df-4d2a-86e8-5e60ea423f04", "sighting_of_ref": "indicator--440e5bd2-2143-4cfa-9628-4ab887c73468", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36fe03e8-b97b-4ac0-9915-3d7209769569", "sighting_of_ref": "indicator--8686ec05-a7f5-4d71-b536-f61b7ecb67b5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c104c419-9556-4d88-92c5-d3a60b6f364c", "sighting_of_ref": "indicator--be0a46a0-7e01-45c1-bbf2-30d7e6078beb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04036198-9cd8-4f3b-9bb6-2548e8825107", "sighting_of_ref": "indicator--28d0eb11-30c0-4b7a-ba7b-01727aab8ffc", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45c645dc-496d-4e0b-8761-e11506e94038", "sighting_of_ref": "indicator--605febf0-e5d8-4bdb-bf17-8aba0afe5c00", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e808e256-0755-41f1-af9a-911c152acfca", "sighting_of_ref": "indicator--0ebeb33e-1f44-4745-b626-06a8f05bb54b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d75b7226-2676-4aad-ab15-a2dfa2a2cc3d", "sighting_of_ref": "indicator--7f93f4b8-a814-40fd-82d5-6afbce24d74a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7546659-9e8e-41c6-a22b-bf3b14c5c36f", "sighting_of_ref": "indicator--c7af4aa0-73e1-4fc3-8f99-75c270c1f2ae", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e50bed57-b9ce-461f-a042-b0e5fa8d8348", "sighting_of_ref": "indicator--be91f1ac-831e-4a8f-aeaa-e3e294e4e76e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d463b37-a36e-4cf7-9403-c352fbd21293", "sighting_of_ref": "indicator--1ad5e61d-cd44-44e1-97b7-dfbf45e6ab2c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c541415c-2cf8-4b55-8aed-470be72b8ce5", "sighting_of_ref": "indicator--298dfe0c-2246-4e5a-9e86-f01a11184ce6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9ac9458-fbb2-4d8d-bae9-a0765154f403", "sighting_of_ref": "indicator--54316cb8-860b-4200-8bc0-e5cfbd2cce82", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10d66b17-c3f4-4c00-9a61-5c5345300b8f", "sighting_of_ref": "indicator--89246fa9-268a-41ae-bf19-2576665d89e1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b1085c-acd1-4c43-953e-09375cd07375", "sighting_of_ref": "indicator--1822437e-e0b8-4de8-8118-ce6bd4cb06b6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae0682e-bcc0-4c57-94d4-2b9e4c367877", "sighting_of_ref": "indicator--81eccb71-7363-41f1-8794-2a0034861008", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a0705a-b3c5-4f50-9f79-97432ebd431a", "sighting_of_ref": "indicator--c5374bba-5496-4c21-8697-0a12debac15d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--393b719d-cc06-4d8c-9ac1-84a0cbded2fa", "sighting_of_ref": "indicator--105cfd37-2975-47c0-b629-082729120bd5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b34b98ca-c82e-40ab-9c90-856607808cbf", "sighting_of_ref": "indicator--fdf609ec-bf55-4694-85f0-22643a9ebde0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dc08874-a14d-4894-baa3-32b9d3c85297", "sighting_of_ref": "indicator--ead45d67-341a-4d79-962e-373afc0b596c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e76c56c1-3401-4141-abcd-47e62498722e", "sighting_of_ref": "indicator--1587aae2-ec04-4cdc-917e-4a046c790c6d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e717b6-871f-4e1c-bcf1-5a13a3d9a9c8", "sighting_of_ref": "indicator--d95792c3-b4c0-4c36-b343-b545f27ffb67", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc54a74-dbc8-49bc-aa13-b33e0ae9159d", "sighting_of_ref": "indicator--0184e8c9-6586-44bd-8a2a-031f68b5d1cf", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84dd47b9-8e12-45de-8079-361131dae53e", "sighting_of_ref": "indicator--06a57d94-c84b-45a7-8bc5-75d4424943a9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33681c61-501f-440d-9b29-f7ce7309be7e", "sighting_of_ref": "indicator--2079c354-ca6e-4716-96d0-ac22a7933e66", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1de3ce7-4fd7-4d59-856e-13961a23ad65", "sighting_of_ref": "indicator--bf6490ac-3cd0-4335-bf7a-8ff20fa469f3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a4b20cc-0c15-4226-b67f-c6df6fcf4c88", "sighting_of_ref": "indicator--d003e9ec-fbfe-492c-981b-9bc1d222cd34", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e3625f-3df5-45e2-9b7d-2e652b480c36", "sighting_of_ref": "indicator--d003e9ec-fbfe-492c-981b-9bc1d222cd34", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--543bda6c-52ee-448c-92ba-6c6e00d3c5ca", "sighting_of_ref": "indicator--cf87ce59-b129-4841-b592-47747f1ec8b0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6def3e1-0e32-4a04-9c91-bb3d0dda38d7", "sighting_of_ref": "indicator--2757b28f-d4dc-49ac-aa7e-bc40d692f632", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7fda7ad-1bd8-486e-bf5c-0ccea38921a2", "sighting_of_ref": "indicator--5d4a8456-cd62-4b66-9916-df61c5d609f3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef3877d-9318-4953-b810-162e1b19b0b8", "sighting_of_ref": "indicator--3a99a426-70b4-42de-b4b4-05a0b88084f8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0e97b72-ca00-429e-89da-b28e0b8eaabd", "sighting_of_ref": "indicator--10a14ba0-c6f8-492b-8890-83d0ecc52042", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d6e274-54af-42ae-9dd6-17da083b6f87", "sighting_of_ref": "indicator--7b568345-3e63-4372-9385-15d17f1a9afb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8dd546e-c25f-429f-91fe-8ff53b81e536", "sighting_of_ref": "indicator--aeb94c4b-1e1e-4a19-9e83-0cd9d82523bd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ccae91-dca2-46fc-9423-b1f4dbcc7fb0", "sighting_of_ref": "indicator--779ab482-8700-4320-942b-bd2d05418f4f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--388d288a-cdfe-46ef-a5f9-6685aab9fcb1", "sighting_of_ref": "indicator--f5546954-6197-42b7-8f68-a1eec73cf08d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--267872a9-51d5-494b-91b0-34d5dc37c06b", "sighting_of_ref": "indicator--05ea47b7-6bf1-417d-b417-73aaaeed641a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a1e850a-9885-4cb5-8702-c2c9961fc415", "sighting_of_ref": "indicator--56eec11c-3f9f-4062-a6bb-43a179a1c793", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af0e8029-5bd8-4d52-a7cb-879141fc244e", "sighting_of_ref": "indicator--5defa222-93de-4177-a786-378a56a1ca7a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0922d9fe-df2b-4a0d-b3d2-2b9f9882bce7", "sighting_of_ref": "indicator--ee6e170e-fe59-4d1a-9164-afabd6673400", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d842f966-21a0-4b5d-b98b-350a8f3e1124", "sighting_of_ref": "indicator--ed114102-6340-4dbd-8d62-fc629a16b776", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea98ffb8-eab0-46f2-b5b7-8e768eea12e8", "sighting_of_ref": "indicator--075149af-c2b7-4f37-8d57-5538893c89b5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7edf18ba-9c39-4803-a50c-e0077931f6d6", "sighting_of_ref": "indicator--89552c61-786a-4cf9-929b-30d5003e7de5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdeb873f-5ffa-44fb-acb5-a07d1a0daf90", "sighting_of_ref": "indicator--f8ef6eea-df3e-4d65-aff6-0c349b4d55dc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f9adc2-3c4b-4e94-8ced-c1746cad4a60", "sighting_of_ref": "indicator--1f49594c-4e09-4a11-9785-d80f99d73b57", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd54afab-adba-452b-b761-c21ebf0b6165", "sighting_of_ref": "indicator--3be21656-9880-46bb-861e-9d94d31d6be8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0295279b-0ac4-45d9-a635-dc51f5e25e96", "sighting_of_ref": "indicator--4686c28e-7e08-4b63-a801-d0bdbae70c36", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f5d2d5-665a-49dc-8146-ed4b580007f1", "sighting_of_ref": "indicator--7a669769-be9d-4442-964a-9f6119dd1fa8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55250bd6-1319-4ad9-9a1c-e2536b7cdb98", "sighting_of_ref": "indicator--c0651ca6-932c-4eff-a60b-72acf213469d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e0d93d-21b3-41d4-8645-88ff242364ad", "sighting_of_ref": "indicator--1799d4c8-2358-41c6-817a-43bb17805e9d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be1ede7c-c075-42de-abbb-ef8a4e580e6d", "sighting_of_ref": "indicator--7d2935e6-9a4d-4ac4-bd55-fd78706d29b0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61fc36ec-745a-4558-9775-b6faa478ca66", "sighting_of_ref": "indicator--7235f340-57d3-494f-9fea-adbcf0a4b706", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c0bb01-bba5-41fd-b69b-275b0cf12a70", "sighting_of_ref": "indicator--83f5c6a9-ebe6-425f-a6cb-f4f7fb9d08d9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8152473-2d7f-4a8c-af9b-79ebcb0c1151", "sighting_of_ref": "indicator--0c776299-6733-40f4-b655-628757f4d9c3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b937b2f9-a449-4416-b575-56ae3e50f288", "sighting_of_ref": "indicator--92bf86e1-4ec7-4c0e-8713-642a72a38a83", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c388b59-9868-4a03-a70d-ea7583e97554", "sighting_of_ref": "indicator--b247e1a2-2494-45eb-9d17-5de64b1c5e57", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24846a91-6f42-4749-b181-d446f9d8789f", "sighting_of_ref": "indicator--b5c46295-f33b-458c-b77b-80d44897e6ad", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b4f90c1-52df-4351-b9b8-219a818695bd", "sighting_of_ref": "indicator--ee605b00-0661-48df-b642-20bd8284f27f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd6739d-5ae7-4f04-9c96-e324e0556bc5", "sighting_of_ref": "indicator--31e5aa56-5c61-432c-998d-903fb6f7bfbd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0d23210-505f-47bd-9e20-d9c1d8fc5d02", "sighting_of_ref": "indicator--ca9a1e5e-c73a-4055-8ad0-10b0b2c7ae08", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--992071c8-e9a6-4c5f-85cd-c867f25a525d", "sighting_of_ref": "indicator--c774cb5e-e6a6-4231-a4ef-4a0f9dd484e6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45bc84bb-68ca-4051-90b9-f5e830fe3803", "sighting_of_ref": "indicator--6f499ef2-092e-46da-90d2-5cd0407efc8c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbaae097-4cbf-4281-aeed-d39ff407a9ba", "sighting_of_ref": "indicator--187cad9f-cf06-4016-822b-cc3320f94d1d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c58d6b38-19c9-45e7-9ebd-5ffa4df9d091", "sighting_of_ref": "indicator--c8c974ff-eab7-416b-a96e-f6a7270e5cb6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bae0567d-2843-487c-b0f4-ccdb18297975", "sighting_of_ref": "indicator--81b3a104-2eb2-4e04-9893-32fe12c5655e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--426f705b-deca-4f10-a6c9-b61d06994e9a", "sighting_of_ref": "indicator--8f71c5db-5d54-4bf4-ae94-ecce45f26fe1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba69215-0d60-47b5-b6dd-5e9b273e6325", "sighting_of_ref": "indicator--d8c3831b-17a2-4d91-9cd8-df6c682fc481", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01849330-7fc4-4577-88c0-61da769504ef", "sighting_of_ref": "indicator--8af0f4af-3e79-40c2-99da-dddab0e5bd3c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--511b3106-aef3-48e4-947e-53415b21a947", "sighting_of_ref": "indicator--ade36be5-d27e-4e55-bf62-0624b754c111", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--441bd95a-45be-4ed2-bb26-cdb85f0c128f", "sighting_of_ref": "indicator--8366b24d-08aa-402a-a05d-475abd2980dc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--434ab3e0-82ee-4f02-a3f4-f7f52d47f98e", "sighting_of_ref": "indicator--4afb95a6-21ce-4000-ba47-4e1ebf2d40a1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ebf56d4-f5b9-4b9b-b5f2-13467d5f00a1", "sighting_of_ref": "indicator--455e9ffb-9f7e-4a1a-bd22-51777458677f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9518f4f3-a300-4286-9fa8-c754fda6dae7", "sighting_of_ref": "indicator--57c2d612-68b8-4112-af55-af74e1c880f8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9fae506-f15a-42f4-8784-1f3d84153527", "sighting_of_ref": "indicator--2196bba4-9e8d-4dcf-b9c1-c25e3ff7bfc1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b1e41b-3634-4173-a005-bac3c47b4fb7", "sighting_of_ref": "indicator--698557b1-0c88-4f0d-a3c9-7c9b8db6f799", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a780474f-2f4c-4af6-a4fd-8ee1ababf8da", "sighting_of_ref": "indicator--efbebd4b-ca32-461c-a64a-c82b6257613e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52b362c4-a20a-4a62-b526-1307bed12680", "sighting_of_ref": "indicator--d37852b0-248e-4839-a74c-0b67ae32fe35", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49dafe62-f97a-42e3-8855-a286d9d2c997", "sighting_of_ref": "indicator--f12e2f02-8ec2-465f-a384-94d526e6f90b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7543ee8d-8d51-41c4-ba1e-dee1604e956c", "sighting_of_ref": "indicator--29eb0bbb-961c-4300-99a8-8217afa42813", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cad558b1-a130-49d2-9e9b-14332928a80b", "sighting_of_ref": "indicator--2406e483-0ee2-44ff-a404-eedf3cbe0154", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b4dc343-2221-43ba-acf0-6af3cfd176c7", "sighting_of_ref": "indicator--bc3dd2db-35b6-4a37-9db0-0c3ee84283b4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b7082fe-86a5-4055-8b51-8af709753be0", "sighting_of_ref": "indicator--041cfc7e-a42f-41a0-9785-f198a862c819", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf792065-60ba-4696-9d76-b808cf1d1486", "sighting_of_ref": "indicator--82ddca5c-4a2c-46d2-86c9-c338d074ef8a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5293ddd7-5139-421a-ad19-3564c363c7ee", "sighting_of_ref": "indicator--7acc15f9-b968-4fe5-b268-13b21c6ada28", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee2c2872-de27-471e-8628-b27b7166560a", "sighting_of_ref": "indicator--acb8f71e-12a1-4b7e-a635-f9da46913f4a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--221e6b1b-017f-4f14-b657-757ee4b9b92f", "sighting_of_ref": "indicator--adf80816-9b08-4690-b6ef-bb26c332e1ac", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--920c03b3-cdd5-472d-8163-aa2d665e66f8", "sighting_of_ref": "indicator--fb5f0d23-6b6a-4c0b-821e-2e7d33aa8137", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--008df03c-e95e-4c7a-b0c2-73952e1a4b21", "sighting_of_ref": "indicator--1cb3f6e5-32c9-441d-86d0-659d734c9425", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a21c3c7e-991c-48fa-8d2b-1fd57c87f88e", "sighting_of_ref": "indicator--ec171254-4d97-4850-9040-12f8c44e826a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7abd9fb-323c-41d1-88c0-962306984576", "sighting_of_ref": "indicator--430c7edf-f8d1-4c56-b965-c75d91db9a35", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b0b3033-c7f5-4474-baf9-5bd721a9f029", "sighting_of_ref": "indicator--64ead0dc-c473-4ca4-b85a-f9931e4478bd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26fae839-8944-4485-9c98-c49977a9e340", "sighting_of_ref": "indicator--a28937e9-ee13-41a7-8ee7-895d5ba20dce", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a96654-3bb6-401a-af36-a1cafc4b48c2", "sighting_of_ref": "indicator--6a8e9242-75c1-4d29-8208-f553abbcf8ec", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6517bfd6-043d-405d-9e4f-950747a565cc", "sighting_of_ref": "indicator--632eff0b-aa57-444f-8f91-4fe57220df0a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c92d4a0-9097-453d-9cf1-0d9603c06eac", "sighting_of_ref": "indicator--b84ab673-05ad-4d62-9891-d332fb62dc2b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ae5b824-cd5c-40db-a414-22de2b3b1b6a", "sighting_of_ref": "indicator--f158240b-abda-47a5-b092-24f21b394485", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd2302bf-4561-40bc-a5a4-3cb0ce9e442f", "sighting_of_ref": "indicator--ab0b2a3c-22c3-4f72-b61a-271a86faff9d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63608aa5-3924-451b-90a4-5cfa233a0f4f", "sighting_of_ref": "indicator--9a3fa8d4-7425-4491-8e39-4d741cbed9e3", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c224fc9d-43ca-4e38-937c-f91f2372f17f", "sighting_of_ref": "indicator--d430280c-5d55-400f-b32e-7e8dcf2b062d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e290b157-aec3-4fbb-a3ea-10086e806db4", "sighting_of_ref": "indicator--e66688b3-8326-4897-b7bb-9147b35e244c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5459855-4c44-491c-a02b-e998efe7948c", "sighting_of_ref": "indicator--75d208e9-6bb9-420f-8d42-aac4087c2d01", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4a455cc-ca0b-4cb9-b7f7-c387e13a588b", "sighting_of_ref": "indicator--808e378b-3a09-402c-82d3-acb9cd324fb8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1864d14f-7a4e-4526-81b8-cc459150584c", "sighting_of_ref": "indicator--4a3ee2b2-241a-4a86-ac24-4a0921ce52bc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa8a7da-8b0e-4d9f-a58f-c0d2a398d491", "sighting_of_ref": "indicator--58611627-b917-40d6-aeea-467f1d239b94", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--258f1afc-8c6e-42dc-a418-97929e10974e", "sighting_of_ref": "indicator--e1827f7f-44ee-4211-965f-fb615a34ece5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9059c1d-8efd-4fe4-89ba-8a2185c22247", "sighting_of_ref": "indicator--50951077-4889-40c0-ad04-8d628cabb5b4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--917fff15-22ed-48ab-86e4-5b0beb5d2864", "sighting_of_ref": "indicator--bd222543-95c8-4f6b-a486-48815294fc86", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1512b8d-7351-4126-ac76-80247ceedcf0", "sighting_of_ref": "indicator--99b56663-fb6c-43f2-a312-c60df78386d6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--088de70a-dca3-416d-8096-6a661c3858c0", "sighting_of_ref": "indicator--c4ba20dc-8875-4149-992e-25da67734a68", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab316a71-14f6-41ac-8be9-c776f3574d4f", "sighting_of_ref": "indicator--d4368b04-dc4a-4b94-826d-77ac5086ddc2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8febc2bf-255e-4991-8a1b-f1697e1f75c1", "sighting_of_ref": "indicator--74a5d48c-14a3-4a8b-82d0-6ea3b6ef8350", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22731bef-3a8c-4e5f-b9f2-89f63ae35985", "sighting_of_ref": "indicator--e50678e8-d22a-43c8-869f-4d9cf259e7c0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11a3c31f-f022-43ae-a9e4-a9b517ee55ed", "sighting_of_ref": "indicator--ea1d41f8-ff41-4b30-bc3c-826f21c880d1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3312fc87-e64d-4a76-923c-132b7ca47eb1", "sighting_of_ref": "indicator--2c822b7e-5791-4a5d-be6b-5a901c4f2595", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccaff34d-9dc6-4e2f-83b2-f7fda8ffdbec", "sighting_of_ref": "indicator--7226c379-25a3-449f-8789-ede95d539abf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acda8768-7730-40a3-a379-592e882dcb5a", "sighting_of_ref": "indicator--7af1a9f1-6665-4f1d-90c7-19fdb184dafb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1173e0d8-010f-4faa-8375-11103039ccb5", "sighting_of_ref": "indicator--b21de238-f767-4bd7-9d78-c836f00c5a8e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea6a8dc1-e483-4e3b-8b96-91f6aec23975", "sighting_of_ref": "indicator--f39ad907-d5fe-4f6f-a40f-d51b7b4fb167", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc90d1ad-0aa6-492f-99d1-a2614a81b6d1", "sighting_of_ref": "indicator--38fa551c-7f19-49e1-adc6-ee1bb48d734e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb01bf5-6e48-4163-b7e8-58140e80feca", "sighting_of_ref": "indicator--5b1641e6-5c7f-4f6e-8a2c-6db869b96484", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d71de1b-b05c-4c09-98ec-147484bad6de", "sighting_of_ref": "indicator--12cc076a-0cd9-4a6c-8ff1-50a5f442a3c2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8273db3-c9d3-4ef7-a7f5-0cd33b9e1791", "sighting_of_ref": "indicator--5f5b16a4-cc06-4b78-b0ec-5b950c459bb8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2895f964-d312-4a5c-8d17-8f399306e0fa", "sighting_of_ref": "indicator--df39b742-f5ff-4147-8c78-0ed2b67e32b3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--947809f9-d276-453c-9c26-8833546d174a", "sighting_of_ref": "indicator--e7bde877-b42f-4953-96a9-32d12a25bb99", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--042456d2-5ac2-4c5b-b274-6019f14e079a", "sighting_of_ref": "indicator--8d9cdfb2-e0f8-47fe-8900-c17c306481f7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4c1f651-44df-4ffa-929a-ea1270dab9fa", "sighting_of_ref": "indicator--0150b63b-2136-46b3-9ecd-19b3a63d6d32", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e92aa83-1c4c-4c51-978c-60851a85370f", "sighting_of_ref": "indicator--c35c14c6-b765-4dcd-a561-425fc59c808e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf7b63db-7427-4488-8fb8-1c23482b610e", "sighting_of_ref": "indicator--3b9986da-fa55-41d0-bd9e-b674e09ae492", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4769ca3f-db97-4a58-b002-935a5aedadaa", "sighting_of_ref": "indicator--caa3535a-1e0d-4f42-b45e-2ce7b411e011", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--775a09bb-81da-47f8-a62d-c1f2aaea19e5", "sighting_of_ref": "indicator--5cdb3eae-9d7f-4a0f-8f73-010c85aa8e9d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32e7da49-df0b-4111-aeb2-c17d30378401", "sighting_of_ref": "indicator--ea9cb2e8-64e1-40b6-87af-bafb90a9254a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a1475b1-60f1-42ef-be81-3826cb42c044", "sighting_of_ref": "indicator--ea9cb2e8-64e1-40b6-87af-bafb90a9254a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16171054-cea9-4a76-9f75-8120b62ba4d4", "sighting_of_ref": "indicator--7c7d3c36-1d81-4c5e-b796-5ccb6a21b280", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60350f71-972e-4359-9fa6-80e98fc683f2", "sighting_of_ref": "indicator--022ef6da-e574-4f7c-baf8-d22dc8ca3ed8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8fb2ebc-8ad1-4557-8eee-723ef0254bea", "sighting_of_ref": "indicator--e6f5e283-2291-4b38-b392-e14e8c17a18f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e77e021e-e24a-4a97-8173-c8487b1aad94", "sighting_of_ref": "indicator--399ddbca-ac4e-4a35-8cc5-82f607231421", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07ad71b2-7036-4903-8d03-1cc5e75b4c79", "sighting_of_ref": "indicator--223249d1-a68a-4406-9b30-e34016223023", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95a6c96b-28ff-4ea3-89d1-58687711e724", "sighting_of_ref": "indicator--18d77b24-6940-47f7-9e17-9dc0c3850a82", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d6180c3-7f41-4238-952f-8440403af812", "sighting_of_ref": "indicator--be0fae16-a0f0-4fe5-9c49-7e22a408871b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c485751-3576-438d-90a4-23b5efd3f7ad", "sighting_of_ref": "indicator--be670093-5be5-43d5-8a4a-614102baa60b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0ec6a27-ecd7-4ecc-be8d-a0ca6e24285b", "sighting_of_ref": "indicator--e9eb4653-02d6-47e3-a0d2-5ca18ed04cea", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c35746e0-e10a-4227-ab79-1ec32e475d3d", "sighting_of_ref": "indicator--83a9579a-5eed-4a8d-995a-9b3b538495e5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fcca053-9a05-425f-837e-5b1ba5e0be2c", "sighting_of_ref": "indicator--39540af2-e48d-4e50-8bba-e647ae9f5d7e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98446be0-2569-4d95-bd0d-31b9cf5fa339", "sighting_of_ref": "indicator--db0efb2d-0981-4e5a-860b-61d03ba64a2c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca7845a4-ea41-4564-81e0-2bd1a8efd593", "sighting_of_ref": "indicator--2b78aeae-e736-4448-8802-472b6b96473b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bebcfc83-aa8c-4367-80bb-b3d97c36f99f", "sighting_of_ref": "indicator--654804ce-3c29-4039-9602-08d6043cedff", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9dac180-c0b1-4736-a6c8-375af5ac0ac5", "sighting_of_ref": "indicator--9a6bea1d-c6f7-43a9-858e-3ad713f0b71f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--452ca02f-a0a8-413b-a001-0fd2026b877e", "sighting_of_ref": "indicator--77a613fe-8cba-48a5-bfc2-d7660cbf8a6c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e33ae5f-011e-4440-a120-aa640a4ae327", "sighting_of_ref": "indicator--f3ce51e3-e1e8-4706-b30f-dc0d7d52bd0f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a622223-f247-4f54-9c09-486ecd33bd7b", "sighting_of_ref": "indicator--03c2bc53-2e67-4552-9231-30cb6e70b17f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ac242d-19a8-4394-89d7-49e5a4bec02e", "sighting_of_ref": "indicator--c4cbce3c-f918-49ff-bd68-017ca97b6138", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f7f916d-5a8d-47d2-8cd6-a67138a07b62", "sighting_of_ref": "indicator--e2c3ac43-82fd-4ffa-ba9c-66dfedf07d56", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--035eab83-d6f7-41de-90dc-1dae7f6935c6", "sighting_of_ref": "indicator--db561854-841a-4ef2-a28a-dd8d3fdaf90a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c876a3d7-2e43-48fd-91bb-2a46c39e63e3", "sighting_of_ref": "indicator--ceb6de02-1683-4121-abcf-a27d166852c9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ed4ffc-5fe3-4364-a55d-2b5a72ba3e7c", "sighting_of_ref": "indicator--ceb6de02-1683-4121-abcf-a27d166852c9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b2b012-c12f-4cec-bd17-d3fadaaafd7d", "sighting_of_ref": "indicator--7c405980-dd76-4629-bfaf-de7c9592e9c4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0a8c4ef-cec7-4c44-8204-ba4c6e69c66c", "sighting_of_ref": "indicator--da223533-13c8-445e-813c-bd1e22113e93", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfccb183-e148-4848-a16b-c516a85f153d", "sighting_of_ref": "indicator--4643e75e-d6aa-4192-81e1-5287b025e876", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9a307d9-f684-4f6d-a46c-1c4af07b4504", "sighting_of_ref": "indicator--88b89d07-981e-4ee9-8552-3e4ee19ced0d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7fa1a31-9c66-4c81-b673-a1f36006baaa", "sighting_of_ref": "indicator--480aef1d-507d-4797-95c2-76e026c0f3f3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4371d914-5600-4ffc-a072-7be3c31daf99", "sighting_of_ref": "indicator--7ca16f0b-7ffe-43a5-b0ce-d1261492f311", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a63bc8-fdc2-40bd-b9d4-189ec15b6c9b", "sighting_of_ref": "indicator--4b3c1dcf-13da-4242-a2d9-7fdd34bd70ad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b43ae5e6-2c6c-497b-b747-8041d76d838c", "sighting_of_ref": "indicator--4b3c1dcf-13da-4242-a2d9-7fdd34bd70ad", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a86b94f0-6648-4b38-bb23-900ed07ced09", "sighting_of_ref": "indicator--658b2cb7-0706-411a-8d0a-b0fd3f5aea62", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed269fd2-6f03-4eaf-9b11-06e09dfc4148", "sighting_of_ref": "indicator--8bc1e125-1a95-4224-89a2-69c086908968", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef6eb79-0d08-4306-a289-b4c82b682a66", "sighting_of_ref": "indicator--22f229dc-198b-41b7-8698-165e6cbb17a8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4bca35f-62c3-432f-82d0-bcb9580bc20d", "sighting_of_ref": "indicator--e94dc9ba-428d-4762-bbed-234cac58a546", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1123c40-e05c-4d17-b4c6-92a8f8da308f", "sighting_of_ref": "indicator--397c375e-d358-48e1-9d10-11967ff4c05b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b14dab78-6fd4-4c7a-90ce-5a59b370a65d", "sighting_of_ref": "indicator--ba198498-b706-4132-80f3-4220a5726ce3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c4fc600-21f4-4f07-9257-5511cc0e2322", "sighting_of_ref": "indicator--341f00ba-8c00-4363-a2de-aa106a396f11", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9678e2a-3372-4c31-8eaa-fe1e65b20f71", "sighting_of_ref": "indicator--47cc71ce-f955-4854-8268-b32a0814bc0a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e4f554c-280f-42d4-a851-759307ad9e98", "sighting_of_ref": "indicator--cd68a763-a883-4b90-b71e-8ea42b3e5a30", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e016ed5-8286-4db6-9a48-d8056d28b06e", "sighting_of_ref": "indicator--e62ed265-6d5e-418d-ad99-8f6653652251", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ecbfd10-b20b-4f1a-9db7-cbd2a3c4bce4", "sighting_of_ref": "indicator--18e2c19a-3c37-4cde-8b89-b0f208686f5d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99cf5bf7-fbc0-4e6a-a22e-42caff775189", "sighting_of_ref": "indicator--a21fecd1-a243-469b-b63f-95967faf3db0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--821e6a4a-3220-4e1e-b242-74d724867e33", "sighting_of_ref": "indicator--627cabe1-371c-4107-a896-f194c6f86d22", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af316ef9-3dcb-4d8d-9457-1988a5ece31f", "sighting_of_ref": "indicator--381c8a7f-7166-4592-b55e-343d36668326", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06040e76-35a9-4437-b119-e4d3e600eda1", "sighting_of_ref": "indicator--20b3263c-3aa2-4180-b9e9-01709488db5f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45c6e0af-279f-4734-9503-2a96af5ff171", "sighting_of_ref": "indicator--14af0fd4-edbb-458f-8462-000baace6e8c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9195a150-9ff4-4251-8438-1cfb2646366b", "sighting_of_ref": "indicator--44664314-4eae-44d5-b38e-ebb96a8ef265", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c3f535-80f8-4965-a118-bed62a5ad35e", "sighting_of_ref": "indicator--153777d7-4868-43be-b3dc-be4d8a6d41be", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cd18f09-b488-4c7f-b6b6-5455b9d56430", "sighting_of_ref": "indicator--57c61f68-e980-4181-890d-dfebcc7f5750", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7046cd2-8582-4c5b-9531-00bc8ef90bab", "sighting_of_ref": "indicator--129541ac-7af8-4e6c-b18d-a8377c22ba39", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--433cae3e-7be2-4554-a215-677b52ac8249", "sighting_of_ref": "indicator--4421fac8-aae4-42c9-ad32-4d4c6b2a4590", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac8782a-672a-4d6a-8761-e7b266efcae6", "sighting_of_ref": "indicator--7a88773a-336f-4637-957e-cc9cc516789c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f51aa93-9589-4fe9-8988-b2e8ea90cad2", "sighting_of_ref": "indicator--81a47af6-a872-475d-a6bb-92c8a73876dd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96ea35d3-1cc5-4d9b-a22e-8b11b76d6fdc", "sighting_of_ref": "indicator--0ef9ad55-d5cf-4b02-afbd-4002d5dcee2a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88fe7326-b492-4c8a-bdc8-715e609b541e", "sighting_of_ref": "indicator--25262c0f-86be-4e92-836f-832ff60d4f3d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5194b80a-df55-4d0f-b5f5-28858fd31e9a", "sighting_of_ref": "indicator--561122c7-c794-4cc0-9730-9f3cfb38a3f2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ae2d2d4-01c2-4054-8c1b-1f4ddc9962b3", "sighting_of_ref": "indicator--4b11baef-e203-4e3a-8d26-0abc5b9ea33e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b934a4f6-7e86-4b37-a386-00a54ea3795d", "sighting_of_ref": "indicator--dce886f6-18a9-42d0-b0eb-2742885e33c6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7fd0c3e-3a90-43bf-89f1-f8a58c9050c5", "sighting_of_ref": "indicator--ee985466-574a-4593-893e-11ffd3d40112", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e10c0579-2ece-4b7f-bb3a-b3668ddf1b03", "sighting_of_ref": "indicator--22c4426c-1126-4d92-8e7b-cc266109c6fa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9773192-4e77-4bfd-98b2-33c09ef6e2f6", "sighting_of_ref": "indicator--ddb18844-f45d-40a9-a328-536cf5ec0d49", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93cbc37e-cd96-496b-b7f2-16d660215400", "sighting_of_ref": "indicator--d41923fb-7dca-4300-8d98-ee99f184ec8b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74443f24-4463-4b48-9d2f-fea87f481d3e", "sighting_of_ref": "indicator--973ec6af-14ca-4047-b033-fd0e3e0ab677", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5b7d837-3247-442a-8c7e-34781a4753fc", "sighting_of_ref": "indicator--304fca9d-31ec-4e5b-8610-8b5952989268", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b198a77b-db59-4329-b976-e48c248a0d87", "sighting_of_ref": "indicator--985c85cf-1b10-4bef-8441-a267eb4af983", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe4703f-3723-4c3a-82f0-5658e69ff769", "sighting_of_ref": "indicator--cd67493f-71d2-4309-bdf7-06859ce36ac3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec5f3104-6a7b-4e34-9698-89177c0cd62f", "sighting_of_ref": "indicator--3dbcea9a-62ba-4bae-b5fb-60bac94d43ed", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3f7eaed-17cf-45c3-b3e9-d20bd02c456d", "sighting_of_ref": "indicator--3dbcea9a-62ba-4bae-b5fb-60bac94d43ed", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f350cc2-6df6-4955-82a8-d9030b7e4da2", "sighting_of_ref": "indicator--2be940e9-0863-48ae-a67b-be2f59c67544", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ced6f7d-1431-46d5-832f-73d3e48a1c60", "sighting_of_ref": "indicator--7e68ea57-37c3-49a0-89ab-3d2c1131432b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0d3ff46-1951-46fa-bdb3-a4606cd39c73", "sighting_of_ref": "indicator--a1b678ab-3eca-45f0-9e5e-3cab248ecdc3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d223087-890d-45e3-9dcd-b658529e20d7", "sighting_of_ref": "indicator--62f790f2-4809-46aa-b622-60f455e647cb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d0884ed-a189-4828-8cc3-950bd87352d5", "sighting_of_ref": "indicator--243c8f0a-3835-461d-82b1-bab5fca75a69", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9972ce6d-b27a-45b4-8bec-4b34f115ac67", "sighting_of_ref": "indicator--ec9628e7-eb6d-464c-807e-4f8480fdeadd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd1274b7-6fee-440c-bcc0-ac6bd143b5a6", "sighting_of_ref": "indicator--4a23c8f2-3b61-4f5c-9064-b6f831fa3cc2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd6bd7f2-b96d-4dd3-af97-04ccbd612d38", "sighting_of_ref": "indicator--27798b61-cb7b-44fb-977f-e8653b162f9f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aadce168-e2ac-4f4c-a021-07c97436e2a7", "sighting_of_ref": "indicator--6053f48a-6ad6-437e-b747-dc89ff8958ff", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d383b09-f077-4a36-8dc1-b2269b0ae2aa", "sighting_of_ref": "indicator--18c48e25-fece-439a-a965-3913a44d5717", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd982d1-9198-47e2-bd6a-ca32ecbe9707", "sighting_of_ref": "indicator--3ba82b69-5ab1-4cf6-952f-29b36d301683", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b113644-ab8d-492d-822f-253a600498a6", "sighting_of_ref": "indicator--c955a8d6-3197-41ac-ab48-668b695aa218", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5199404f-340c-4b30-a904-4ae1bf04663e", "sighting_of_ref": "indicator--4206a641-731f-4ec6-984e-7db9a9715432", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba75fa84-a455-41a0-bbff-089dc1ca69ca", "sighting_of_ref": "indicator--ca1fcbcf-0d6f-4c7c-ba9d-deb0d295aaf4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3b80b5d-6a60-492d-ae7e-e2d4b8205ced", "sighting_of_ref": "indicator--c8fe1a57-43ca-429e-a8e0-b1233a58d096", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--357f9f77-e422-4a06-aad4-46692a844817", "sighting_of_ref": "indicator--4562eaf9-0448-4400-8d46-4e4f5d4e249a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fa8bf69-bd55-4ac3-bade-84506e2396e0", "sighting_of_ref": "indicator--5ce6c6b6-a5c4-4b8f-a727-39d52aeae4e3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d436e4e-eb35-438f-83bb-369f193886a3", "sighting_of_ref": "indicator--c1daac61-b2a0-479c-ba18-0196897be1e9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--236b4a8b-aa34-40fc-8c36-01009410ea06", "sighting_of_ref": "indicator--baa35368-051a-41b3-ad9f-96cb7bd0887a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b85727e3-7e69-4f2f-837b-e5b034485365", "sighting_of_ref": "indicator--63aade31-63e6-425d-b19f-5117f0abeeee", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--559a5042-fb73-4b8b-b9d6-66b7fa1ee095", "sighting_of_ref": "indicator--1a361152-d5d1-429c-94f1-8c243b7b2623", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c60f939-db1f-4b7c-bb26-7f267aeac829", "sighting_of_ref": "indicator--61096449-e45c-4287-8bd5-b9c336dd6e00", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bffafaa-4ce8-40ff-8ced-9cbdf5af0ea3", "sighting_of_ref": "indicator--6a7d42a7-b920-45ae-b38a-f72ef3344bcb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b1c036-30fd-480f-98b1-af5d553208aa", "sighting_of_ref": "indicator--5433c6d6-1552-43cd-b1a5-4e7a747889cf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a111ce-9251-48d9-b100-3b785c1d4de8", "sighting_of_ref": "indicator--740e4d39-6372-4e31-a017-f002661b2bba", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58580d28-ae38-4f62-a703-11506356a7f0", "sighting_of_ref": "indicator--39a88d0c-17bc-4382-a04d-382c4e6f7f99", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--475e9e99-6b6f-49fb-88bd-efd3140118e4", "sighting_of_ref": "indicator--0d276003-d79e-4f56-9ba3-b83be13082ee", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7997c69d-2d6c-402c-b554-16f749eae256", "sighting_of_ref": "indicator--30897caf-6ec4-424d-94ae-f7db769df10c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80f5e82-de65-4977-a8ff-11503e6e0edd", "sighting_of_ref": "indicator--56837ceb-e5ef-483d-a08b-21d185069d49", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--806c7a68-1924-4490-b92e-5335dce34028", "sighting_of_ref": "indicator--71be2918-36db-4118-b58a-8b41f7eead2a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a92e0e83-6e88-4070-91d7-5d4fb80134f9", "sighting_of_ref": "indicator--837b0cb6-1f11-4fb8-8d92-dc9442eba699", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--906c0e15-fb78-4acc-b858-de82e4c643b6", "sighting_of_ref": "indicator--8be21160-79ad-47ff-a31a-ced61788d292", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4077140b-0403-4dcc-8fa2-1f00c16ad6c4", "sighting_of_ref": "indicator--dd88c324-5a3d-4885-8690-0994a4e1cb35", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7aa2dab-c8c7-4bf2-86ce-ca6aa427734e", "sighting_of_ref": "indicator--89cbd6d7-68c6-428d-9f5b-043f17bd81c7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--938efc8e-0c41-42ff-9e1c-4bee8aff121c", "sighting_of_ref": "indicator--83b4e3c1-ca05-4fe8-9dbb-c4409ae5c6d3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d8847ad-9d61-4737-8d60-d3117d6b6b28", "sighting_of_ref": "indicator--9611150a-8830-44db-93c2-08cbd28bdeff", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3066d28a-1875-4a56-8a67-66b5f2b2da7c", "sighting_of_ref": "indicator--efb3711a-530a-4551-8e01-d387e3e03445", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ba25709-9ee0-4335-87c3-5a3e0b864f17", "sighting_of_ref": "indicator--1750715f-789b-4681-828e-f7f26277bfb4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d74faa3-aaf6-4c92-81a4-6aa81cc026a0", "sighting_of_ref": "indicator--d52b58cb-090f-4348-bed2-3f0c3874a49f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba970c1b-179e-47f1-8f34-58b305538cfc", "sighting_of_ref": "indicator--f2cdc542-e1dd-456b-8947-ac7458f683ae", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8104f866-0ba0-4b0f-b7e7-41b81f8e3787", "sighting_of_ref": "indicator--d2806330-6ebe-4f4e-a1ec-564ab3d42d74", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac7e3c47-36c2-4e97-ad0c-8e915cd589a4", "sighting_of_ref": "indicator--d2806330-6ebe-4f4e-a1ec-564ab3d42d74", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48469e27-280e-40c2-8331-c5de525048fb", "sighting_of_ref": "indicator--774a0211-35f2-4798-8871-23df57ab72f1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af5ca102-fbb0-4810-964f-5c27e2fd6a0d", "sighting_of_ref": "indicator--45f808f9-7f84-4f81-abd2-4c6aacbc3bfb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3f808c2-5f2b-4b86-914f-c56ee8d5c583", "sighting_of_ref": "indicator--07928667-9fef-404d-a5f3-84fd5db2c208", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2121c72-3823-499d-b29c-d788bf118fe7", "sighting_of_ref": "indicator--f23f4cbd-068c-46a1-b92f-fdaa2caac64d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d3efb4f-d4f3-4a9b-bc37-d9d65b9f999f", "sighting_of_ref": "indicator--d76e10bf-a295-4cf4-9d04-c2be90282fd6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00059da0-9f0b-439f-8517-140fb757bfe1", "sighting_of_ref": "indicator--e7006ec1-777a-496b-893c-f4319dfca7c7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab7e23eb-3801-4ba8-b081-44553d2364df", "sighting_of_ref": "indicator--76eb9714-3fe6-4c47-9cab-95799b6dbc7b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d728ef78-7de0-40d2-8688-cf46fa5b7f45", "sighting_of_ref": "indicator--ef5e5183-48c0-4072-8ecf-cd92bc6c89e0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e494411a-dccc-461b-9409-ba2790a4ba95", "sighting_of_ref": "indicator--b872d1e9-130b-43f6-8e2d-9e4f10826b9b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97c5557b-605c-4d23-88af-e7e789fb4f47", "sighting_of_ref": "indicator--29f9f2c7-d8c0-423d-a394-2f76782d3c3e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e9eb8fa-5d7d-4268-abd5-b3b3f893d4a3", "sighting_of_ref": "indicator--d7fa9cd1-e41c-4dd5-aa2a-d5c6d5579e16", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd6cd412-72e2-46b7-9202-cfd7b9becd5c", "sighting_of_ref": "indicator--472b0d1c-23dc-4324-856d-48df9a68326c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--994604ed-6243-445d-9f00-1f23f74f29dc", "sighting_of_ref": "indicator--c4807c37-c31a-4748-a66f-db272ece45fa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0222fae-94f5-4d17-b819-94a5e84f7dcb", "sighting_of_ref": "indicator--3c4a0932-5097-463a-82ca-b051b1960abf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d060b53a-ceac-437f-b0f6-55ff0f532b95", "sighting_of_ref": "indicator--c89df441-e10c-42b5-aff8-fa7d9dbe221a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1785f823-68fd-41f8-a77b-ec9383819d79", "sighting_of_ref": "indicator--55efafe7-e5f4-45bd-92ab-5f7944cde9c8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18e95fe-2720-478d-8d17-1c05699f598b", "sighting_of_ref": "indicator--01155db3-e379-4eac-aaa7-4366fd566a25", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d79c2aa1-7a79-4aa5-8acd-8e1075af3f05", "sighting_of_ref": "indicator--27c08501-37d2-4277-9e8e-e69d18fe3f45", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fba3fbf1-1db8-4f22-8f3d-5f97a5378e63", "sighting_of_ref": "indicator--223dfada-5dbe-4dd6-a77d-bd63046fb2a2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e62281e3-5601-42c5-9f89-240fe161ad0f", "sighting_of_ref": "indicator--5580489b-8223-4b23-8b3c-aa6ed46d6c27", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1918d39b-4ac7-46b9-89ef-5aaa14562ef1", "sighting_of_ref": "indicator--74b96f41-f608-4c5b-aa7f-a171a2fa9c03", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8f6d3c8-1bfb-48d9-b6b8-7d45d9e981d2", "sighting_of_ref": "indicator--a8a1d8b9-069d-4bd4-af75-eeb9043a6554", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c84fb598-8ec3-4a33-94ef-13d69dcfeac1", "sighting_of_ref": "indicator--22a21ed4-009d-4312-beb5-4044bbf6b2d3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d94ea133-e816-4730-8240-c80221b1a883", "sighting_of_ref": "indicator--d7a03b63-8725-4e13-8305-c613a063ab1f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbbdbcfe-58be-44ff-9fbf-4fb18c379ae5", "sighting_of_ref": "indicator--9f2587bf-006a-4646-a4b4-84be864e67dc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be825333-325f-4e21-a708-646b07fc03ef", "sighting_of_ref": "indicator--1bae1f0e-0ab1-4ca8-b94b-3b4e87824024", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da66a28e-78e3-4b40-ad07-5cd3a93aeafb", "sighting_of_ref": "indicator--d8c58ca0-ca82-49bb-b380-bdadb2759a91", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee4592f-3065-4cce-a471-701f93ecc884", "sighting_of_ref": "indicator--365f1e07-b1fc-46d4-b122-03f72afa0430", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--441121db-0d38-4e11-8153-2503bc065e44", "sighting_of_ref": "indicator--ac4c4444-94f3-4fd5-a4a0-dda443b0a343", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60b8f22a-89aa-4b98-912d-a58e22b55922", "sighting_of_ref": "indicator--59f1d169-75c1-4464-9db0-2ac9d1cdaec1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1737acc8-896d-41a8-9500-63934e79c2d5", "sighting_of_ref": "indicator--35d98b97-2d39-40a4-8e23-769d82ce82b4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6175ce8-e90f-4c5c-a8e4-3f8b552d04a8", "sighting_of_ref": "indicator--96a7d55b-f364-42f3-8226-09e427d18b8b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0affc6af-c299-4726-900e-ae25d61a2b22", "sighting_of_ref": "indicator--0a556afa-bfb6-4631-833f-ea96a51c8ace", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8e2467b-2238-4d89-bbd0-fb45fc6bc5c1", "sighting_of_ref": "indicator--2c368b71-1a63-4bba-acd7-9982a7e614ac", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd6527e6-100c-410d-aefe-5f334bfb726e", "sighting_of_ref": "indicator--ab2870e1-5002-48e2-902a-9c678ee9a064", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df2baad1-3a81-4712-80cc-1b97983d0cf6", "sighting_of_ref": "indicator--9c13b487-65fb-4fc3-8028-bb22efef0ca0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34592fc1-a551-4251-bb2d-e8da0ae269df", "sighting_of_ref": "indicator--73407a2b-b456-48cf-aa1f-973eafb4089d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e02e48-e6ab-4cc4-973a-4c41615f9b12", "sighting_of_ref": "indicator--f0fbfbd4-c117-427b-8bcc-02ebdbb31584", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--753524ec-6b55-4f15-b8d3-42156f919b1d", "sighting_of_ref": "indicator--3b36d80d-b0b5-45b4-bb8d-654bf1b910f8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f3a5fb-dc59-44e5-af42-cf5527f71a6e", "sighting_of_ref": "indicator--346c7a12-1589-46e9-8d4a-98f87b4988ed", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb02dfff-d739-4fd5-b159-2754869fd272", "sighting_of_ref": "indicator--53f58be8-a7c5-44fd-8626-02ed6e8142c4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eb577ab-abe0-47d5-9afa-e90f008f6c73", "sighting_of_ref": "indicator--cac73088-72a2-4dc0-9b63-aa4b11f0a1ee", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--595b57b8-6ba5-4cd3-b48e-98e8a1742988", "sighting_of_ref": "indicator--955f1983-257d-410c-970c-cf42cfa26054", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f9d3c35-605b-4be1-8314-2649541821be", "sighting_of_ref": "indicator--5183b16f-4587-440a-82af-bad9878a44b8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--639ecd13-2401-4b5f-a5a3-639d91748c9c", "sighting_of_ref": "indicator--512e44ba-75e5-4bd9-a0b5-192fd45e2f32", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--103fdc16-97ae-4610-805d-65cfd6408cf6", "sighting_of_ref": "indicator--a1dd3a19-e217-4d29-a46d-8fb2cf78a9bd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--235ee4dc-9f79-4c1e-90d2-b82a8f42c985", "sighting_of_ref": "indicator--4e146df4-4393-45d9-943e-96c581162a47", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--665c72ad-7940-4280-9000-c3e907b287be", "sighting_of_ref": "indicator--4afde212-749f-4ea0-b404-e459fcb7db44", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03909fff-c623-4332-ba04-a4558c1414db", "sighting_of_ref": "indicator--305ec202-0e3a-49f4-8a94-3f4f0e6f95e1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a2aae44-821b-4637-a910-cb21c96a30ca", "sighting_of_ref": "indicator--cd1b9a5d-a0c5-4888-8626-af1f4cfd6678", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--644d3100-edcd-451a-a997-07dc4f686396", "sighting_of_ref": "indicator--636f5c2e-d1e4-4140-a7fe-db70df11dd63", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04d4f091-d4bc-4c9a-a097-760ec335fd59", "sighting_of_ref": "indicator--528b3554-3412-4cbc-8e42-54ac685c9e65", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a48d4cd-4e7a-40f4-a8df-c3ed9ae9e29d", "sighting_of_ref": "indicator--c705717c-36cf-4344-a512-7d0c10a2f4a8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb1a5b44-7aab-45f7-ae22-86c4af8996f3", "sighting_of_ref": "indicator--5a670c38-a79c-436c-a606-d4d1587813da", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f203c235-a1c1-4924-bf3c-f37c69de878a", "sighting_of_ref": "indicator--201e5b9d-bcfd-4051-aa99-29e2071598b6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9176543-b7af-456b-98f5-b37ee3cde271", "sighting_of_ref": "indicator--4c97077b-cd42-4a2f-8f90-c78bb3251ed0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fad361ca-077e-4dee-ada7-40bd070d093b", "sighting_of_ref": "indicator--2e9a1328-1318-46f9-997a-88bb75e6b87b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d6f703e-d863-4d97-b85d-585548282472", "sighting_of_ref": "indicator--6fb3aa81-0da2-44b8-9d6e-21e5a43cd40e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae0c3207-e3f7-4c2b-b260-05578f07c3b6", "sighting_of_ref": "indicator--796c6979-9200-48bb-aadf-f361d556ec9b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d7289a-6879-467d-ad7c-a7b707d1ee6c", "sighting_of_ref": "indicator--45e27b08-43c2-474d-95bc-aa1d2df990b7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6787a58b-e161-4464-94f9-f55ff839378a", "sighting_of_ref": "indicator--f22b4d12-366d-41d1-9a99-d1a43e518dfd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--041ce797-cdfd-4281-80c7-51379d9efa6c", "sighting_of_ref": "indicator--6a2d0161-14c5-4e72-82dd-7e0b17748b4d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd167616-da44-4802-9c96-df1c9dd102cf", "sighting_of_ref": "indicator--cff30fbf-e1a4-4fea-9152-7682fc5a8055", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb1ba442-28cb-4b81-8be0-409bb42a20c2", "sighting_of_ref": "indicator--321682be-01b0-448b-9a95-b1e4492ef6a9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8df122e-6eb2-43b6-81db-c0f3f1001634", "sighting_of_ref": "indicator--843b0ff2-a07d-46a9-894f-ad1406ca3bf9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34ab6fc0-4061-40b6-9ffe-decd70b6502f", "sighting_of_ref": "indicator--2497a1f7-5304-435f-a985-4e8e97da19de", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8815f7a7-7433-4717-9a46-dccfd7578753", "sighting_of_ref": "indicator--52298485-0dc3-488c-9d7f-54407af2c7f0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a024d168-e669-4694-a061-6658405ee87a", "sighting_of_ref": "indicator--35b707fa-9adb-4830-9e39-266477e498d6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c832d468-a8ee-4c95-abb4-99143ce4bb84", "sighting_of_ref": "indicator--3b7a7b49-320e-465f-a12e-7448dcf118b4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58474288-602a-40cb-8937-1875b348b19b", "sighting_of_ref": "indicator--32c9f1ba-93fe-4cd6-9bf0-221feaa2a918", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7785be2e-46c8-426f-b3ae-ce828a85e6b3", "sighting_of_ref": "indicator--74fee0c8-309f-4cbb-bfe4-363d49ac5692", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b19aa3f7-87bf-4086-a001-7d2c777c136f", "sighting_of_ref": "indicator--8e16a4c4-68f1-4738-8f39-afdeb76abb8b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83291525-3895-4ab5-a75d-3a0ef7d6e323", "sighting_of_ref": "indicator--cb1a8295-5138-447c-a561-26ee3cd5df37", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b100a0e-c699-4ab7-a795-bb0e997a10e3", "sighting_of_ref": "indicator--e0246359-9d4e-4ec5-a1bf-01f89d0a1f21", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0fbf9cc-f843-4f85-b423-a2ae8c2f59ea", "sighting_of_ref": "indicator--b3a244ac-e72c-4ae9-825b-397dad55c2c9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d22c08ea-0e52-4cda-922a-e9106868d0bc", "sighting_of_ref": "indicator--6c37e037-91b9-464c-9e28-b9aae775a7bd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5278d20c-2790-4533-a226-6d9a426504e8", "sighting_of_ref": "indicator--3c0e3a54-ad5d-4d33-a61a-c091bedf8ce4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b78aa76-bc85-4b22-9f88-1bdbebdab90b", "sighting_of_ref": "indicator--74283c43-1880-4a11-ae15-f41ff346a6ce", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b2bccc-c522-41a0-a09a-f77cac7e4385", "sighting_of_ref": "indicator--a1fa3bca-7ca8-4abf-bc8c-bd7de1b0bb36", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be488920-8a74-43dc-8773-c96fbc0840ae", "sighting_of_ref": "indicator--46afe75b-ad4d-4281-8a27-5219bde1147e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d8bcd3-28c9-49ee-84ca-6c4ae435bf90", "sighting_of_ref": "indicator--265ce197-f134-45eb-84f9-9fd565da5896", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86110ea3-eab3-4e80-b51f-826ee573da18", "sighting_of_ref": "indicator--d2b01af4-446d-4c33-8fef-ed922502a2e9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ccc93d-ab78-4963-9449-1b012e42ecfb", "sighting_of_ref": "indicator--202edec8-d3b7-4091-a98e-6b76993508ef", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44422aca-3ebe-4cc5-b71c-78778c0d05b9", "sighting_of_ref": "indicator--af790324-6dc3-4142-be92-cf32d93be2ba", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9836a82-b980-480a-8d38-c43660111672", "sighting_of_ref": "indicator--548fa63f-ef60-4691-b0af-61349528d09d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1bcaf0d-a12f-4f87-a16d-a246ac18a94b", "sighting_of_ref": "indicator--bff89579-a8bf-4f98-9f84-249fb6f3a17b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab4576a-2f77-4d7a-aa73-c9d030791e27", "sighting_of_ref": "indicator--39ac3c38-8472-4d63-8426-454320102d4f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--059f6dd7-645a-4869-8e92-3443c68ef8f4", "sighting_of_ref": "indicator--a68cbd24-c715-4c7e-b19f-b185eac5cef4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69140c37-45a7-489e-b0a5-907073efed12", "sighting_of_ref": "indicator--17fcde9e-1772-4212-be08-7b3c1fc0fd3f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f41072a5-96eb-4292-86b0-55cd47a69718", "sighting_of_ref": "indicator--2b920e27-301c-4ff5-9f6b-f1dddd03987c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f72212-e0e4-4d8b-8efd-98cb41d01220", "sighting_of_ref": "indicator--b1aae48b-82a5-4a8e-903a-7cfe7ea8b81a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e25dca7-1703-4aa8-94f3-2b0b505a559b", "sighting_of_ref": "indicator--98931cb2-eefe-4f09-8afa-b191b064c53a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--585e556b-719d-418e-bc1d-c161def0d267", "sighting_of_ref": "indicator--2b82863d-5b90-4650-9c5b-9d2dfdf18305", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93cd369e-72b4-4392-b939-ff031fb7a73f", "sighting_of_ref": "indicator--584b9abf-9390-41e6-9c2d-22a09d364d8c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79b33601-4cf1-4e3a-afee-0e09267e3a61", "sighting_of_ref": "indicator--712e1cbb-ba3d-479b-8817-898bfc82f36e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c214df2b-031f-4a90-86b6-54ffb8ea0c0d", "sighting_of_ref": "indicator--610eed9f-d5ba-4234-9597-158d45dab17d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53f39247-ff62-488d-8146-d1698a46a8a7", "sighting_of_ref": "indicator--8db5e300-27c9-4c26-a7a6-974a01129852", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19de579e-98e4-407a-a40e-39f44a58c201", "sighting_of_ref": "indicator--13f56374-1530-4634-96dc-0ab42bbd28ce", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58850114-a485-456d-b9ac-83a8379c9179", "sighting_of_ref": "indicator--248307ab-b708-416d-a6d2-68bde7c26303", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0160c75-4f4b-404e-9c5a-f8d326a0c122", "sighting_of_ref": "indicator--a38940eb-aa15-4864-ad71-f5e2a9618af8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--666fd61d-64bc-4549-be62-1a7a52f8e643", "sighting_of_ref": "indicator--9686686a-f3af-4630-a3d7-eff6e76865fc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3041a168-4188-4906-84ef-f88df27264c7", "sighting_of_ref": "indicator--84bb5cdf-d8bc-4103-879b-61eb8e721210", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64a2d305-dd6e-43e9-a721-edc76ec894f8", "sighting_of_ref": "indicator--381bb9a4-6372-49c7-b161-40131cc023ba", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6497f768-56d7-4758-8163-9517a5d9e488", "sighting_of_ref": "indicator--a781af61-a739-49e5-b05c-e904333404df", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4cefaaf-fbe9-4dc9-b1b3-0fff7238a3e6", "sighting_of_ref": "indicator--f23a0213-5da6-47b2-9860-f7ba9d160b4c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55e390f2-b2b4-4113-b6f6-077ae8622b76", "sighting_of_ref": "indicator--02fb693b-10ac-4431-98c9-d44fbf4d91d6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f25823d3-7743-48f1-b6e6-cbaed8297500", "sighting_of_ref": "indicator--880c1c82-ab56-4c7f-9076-65a6e80fd7cd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cee7268-3f85-4ad7-b573-74261f60f206", "sighting_of_ref": "indicator--70986f43-796b-4bb8-9f4a-b0fdff9126c5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df7b699b-b3cb-408e-94a7-f0ccfbd30a09", "sighting_of_ref": "indicator--ee0d2968-be4f-4008-8fdb-cc4b4ea3cb1c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f542d6-d066-43fb-9b8f-8dc2f7dbb79e", "sighting_of_ref": "indicator--27db1709-6852-48b6-b0b0-448e0579cc40", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d04d8ce4-affb-4ded-a082-f8ca2259a591", "sighting_of_ref": "indicator--5c8f8c03-7e6a-40a7-be5a-e1864a655760", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56825804-f436-43f8-8527-e481cd69d90a", "sighting_of_ref": "indicator--a62df242-4c50-475d-9893-e51be2f3e5be", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b788bc1-2cd8-4915-b679-9d3f79492de7", "sighting_of_ref": "indicator--b99a42b4-f521-4aaa-9a0a-5b3772619e4b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0611d60-95b0-4ce6-8630-7108a2293e74", "sighting_of_ref": "indicator--84734532-999a-4ad5-938a-d60ec7121871", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--425a74fe-a8bf-482c-b351-50b51605da5c", "sighting_of_ref": "indicator--b4e4bc22-d33d-4567-9e29-08bf73463c40", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de3aee70-b378-4dfb-b3ff-aa3e4cdf5fec", "sighting_of_ref": "indicator--ee30e54f-187e-4dc6-bdb0-96d3f3061ccf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e31ce019-f022-4b32-bd4a-1ec8d727a343", "sighting_of_ref": "indicator--1a0676ec-9990-42aa-86b5-c84958b0e1c0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--514b9fac-95e0-46f4-99f2-55ca2c8dc3ce", "sighting_of_ref": "indicator--2df729b2-a7f6-498a-84c7-cec802904e75", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15279381-fbdb-47a8-8d29-eee311e60e67", "sighting_of_ref": "indicator--84acc5de-9a87-4926-9da3-87d42c4e3a65", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f1043d5-b973-4785-8344-3b2971ea3e8d", "sighting_of_ref": "indicator--7b309607-e40a-4b3b-b58e-9f12a4818fb1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e07ccbaa-e055-4e8e-8b45-a7ac418119b2", "sighting_of_ref": "indicator--f22ad9e2-9eae-40ed-a077-05faf1ad7530", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b3c1561-36ea-467e-a76a-953ab0e9ebce", "sighting_of_ref": "indicator--abd49a5e-def9-4f8d-8cc4-bdfc773ae3de", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1562f82e-b2f7-41c9-bab1-82176990ad88", "sighting_of_ref": "indicator--ff2a932d-a306-4532-848a-8eaa4f666daa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbe61e8e-3a14-4dd3-a29e-72175354200e", "sighting_of_ref": "indicator--886d431f-403c-4449-a084-b505a6d50c97", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc376a8c-d3e4-4056-9f07-43a1b4c3ae4c", "sighting_of_ref": "indicator--96d42889-77f7-4eba-8ffc-b3651d28783c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91b1cd0b-ab8a-4e75-a70b-f57c42b0aa33", "sighting_of_ref": "indicator--f86acdcc-c44a-4263-b650-6b21a4c1d408", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4621204-6e28-4b43-8be8-02535e62e26e", "sighting_of_ref": "indicator--9b4e16a6-eadd-4ab3-9ae7-c2bd36918b75", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57ab4e14-e056-47c3-b109-8c96ace88fb4", "sighting_of_ref": "indicator--de6fe152-b88f-46dd-ac66-b4ccd245ae7e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c873c98-3464-46ed-af51-ea03b011cef4", "sighting_of_ref": "indicator--e42b1395-03aa-4cbb-ae5b-b390835ca56a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc52a752-a546-4976-ada0-ce60e54610ed", "sighting_of_ref": "indicator--b0a69e5b-e5b6-4add-8573-cc73fb1b0e09", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6593e3d8-9ec3-49b9-b13a-0d4414717f1d", "sighting_of_ref": "indicator--6c450e98-f692-4b41-ad82-6b07ba87ff76", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cf4c0a3-380c-4779-b4c1-7584e970caa1", "sighting_of_ref": "indicator--b39ea79a-6248-4ddc-9a3c-353cc857fe50", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12fc7f77-4318-4743-9855-828cd0161dda", "sighting_of_ref": "indicator--9eb96b3f-7a58-490f-b0dc-4d748b52f5c2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f085b3a-58cd-4886-a3c1-95f9c3546a60", "sighting_of_ref": "indicator--33347f3a-7220-4ce2-8062-78c0730a4f20", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f79dc6-ebfc-4218-945b-1df1e99eed5d", "sighting_of_ref": "indicator--156f83a6-8741-4de7-9733-c81cc65b5227", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27165dd8-9972-4bd5-8db3-23bf86e40f6e", "sighting_of_ref": "indicator--a4eed19e-5f0f-4176-ba0f-d94a9c2f1bef", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4941bc87-be17-49b9-b245-17fa31d8988b", "sighting_of_ref": "indicator--b9c731be-9ca4-4739-bb39-9f896c619555", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5231c825-e7a0-493d-8da0-77247b53f2ae", "sighting_of_ref": "indicator--a827a1f5-4499-40d4-994e-1d9855182d43", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b482fc-7c34-45f1-88f2-c7aa3b2d7ec0", "sighting_of_ref": "indicator--bbab6f48-a2aa-48bd-ba8e-5c6334d1d628", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82095a3e-96d2-4c2a-b000-54663c85ee4a", "sighting_of_ref": "indicator--7b30e0ed-7208-4d16-9067-0fed65646030", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a20a8c-18ab-4964-a85c-78a9c184891b", "sighting_of_ref": "indicator--9639d866-109a-4dbb-a0da-586b0152c170", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b177c0b4-23ab-434b-877a-956f743f85bf", "sighting_of_ref": "indicator--9504cbab-8454-4f1a-8705-0a0ec8b5edef", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de2bee8-5e88-4ebe-a2fe-5d74734a1ab1", "sighting_of_ref": "indicator--a9d94cee-99e9-4042-b894-0384c84917a6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cec85a8-b167-42c3-8501-ff2869c8837c", "sighting_of_ref": "indicator--c74a4a6e-c662-4178-a7cd-e572e77e9b45", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6a23965-ce0f-4a11-bab1-a04fbbe89a84", "sighting_of_ref": "indicator--60f31a56-acd2-4bfa-a39f-15f620a37e81", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1db2bee5-13db-41fd-87b5-64947344e2db", "sighting_of_ref": "indicator--bf860356-5827-4567-9fc1-28874b07e29f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--390fdad4-31e0-4503-9ae5-ad5cd87bb26a", "sighting_of_ref": "indicator--951d59cf-687c-4a30-90f8-246b058074ef", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddda640a-8ebd-40f0-80c7-844512331ca1", "sighting_of_ref": "indicator--4d70d451-e019-48ba-a1e0-f721441b9012", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c950d7d-4ab0-4964-8159-7aa61b289017", "sighting_of_ref": "indicator--2d2ae611-ab0f-4cf6-9b94-e050f143f908", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bfcdf86-391b-466a-9927-6f81ce931fde", "sighting_of_ref": "indicator--7c93ed2e-c1c5-447f-a460-d08274c4bb35", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce79e8e-2e28-4a3c-9e36-46c65873c1ea", "sighting_of_ref": "indicator--7235eabe-64f5-491a-90a5-32426346e13f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93707a1a-7768-4867-abcc-4edc95cb1498", "sighting_of_ref": "indicator--64e231e7-ba59-4ff6-b2f1-40bf15945ad3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a47856c0-0308-4e99-a45c-d08928273b1a", "sighting_of_ref": "indicator--46229aef-54a1-4a1a-8161-b4611cfc5de6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50f5c9a1-50ae-4377-854b-665d322dd3be", "sighting_of_ref": "indicator--b4320aa9-52bd-42c4-b9dc-7ff0e0a05c0a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d75b214-d02c-4dfc-b572-9b546533964f", "sighting_of_ref": "indicator--686a607b-c861-4cf1-b7dc-0d300c49712b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9bb4695-bfda-4f4d-9364-c99b7d1f8488", "sighting_of_ref": "indicator--718cd35e-f52a-44a0-8501-d8715fc3b949", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb56c45-b1c9-4a95-9568-e4ebd990963e", "sighting_of_ref": "indicator--ff6e925a-acf1-4144-85a2-ba45ebe5e973", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97a49235-bc52-4574-81fc-f9d938f17eb9", "sighting_of_ref": "indicator--b5e51a37-821d-40b0-aefe-ecbcc24a3ea8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--808023db-069f-4e4d-b610-094b922d8b5b", "sighting_of_ref": "indicator--0fba9e13-5d4d-424e-a4eb-dca46c284484", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ae8be76-45f5-4d4f-b965-a8f6193051e9", "sighting_of_ref": "indicator--b5b46dc3-4081-44b0-8b48-fc9bc734e059", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a018b7a1-e6df-46ed-9f6e-04d055462352", "sighting_of_ref": "indicator--e42b75d8-a272-4d71-a280-13fd4c550b0d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3665e5a5-199b-4f77-bc63-4ed12d0b1a50", "sighting_of_ref": "indicator--0c98200e-966e-4f5c-9c3d-cab966917f99", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--628e6339-3b47-4e18-8ce6-92eca70e1de7", "sighting_of_ref": "indicator--58dfce0c-312b-41f8-a8a3-360eb9efce83", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74c9025d-b3ea-4594-8d09-1b263c0ee832", "sighting_of_ref": "indicator--6c1eed19-351a-4d0e-bbe1-a6e5a25818f3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d185efb-c2b6-4212-aae6-50cd419772a0", "sighting_of_ref": "indicator--b458e906-d618-4fba-9e85-7bd0cd0a9153", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c53fb47-7f9f-4165-ad45-c9e1190faf20", "sighting_of_ref": "indicator--0d5e15b9-284d-4fc4-aff2-8633eb44fcd2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46998256-ef2b-484c-a0ca-35f168395b09", "sighting_of_ref": "indicator--06d1aed0-d06d-4d84-8d35-ce778e1fb544", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03bc6e1e-eb5a-4cda-b353-79f4549e03f7", "sighting_of_ref": "indicator--67984cb0-b287-483f-93b0-57e57a2408db", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e3190bd-aab1-4680-9b4d-0d9a3a2675ec", "sighting_of_ref": "indicator--96c26d77-9f42-458b-8973-490460490299", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24484a88-7ea5-4479-9779-6ae8df310592", "sighting_of_ref": "indicator--b10e7ed1-9149-481f-8e82-63bd7cfb87de", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78f6c0d1-65e8-484e-9ea6-004a05955eff", "sighting_of_ref": "indicator--a243b773-2688-4d47-9bc6-72452c85e564", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902a7fa9-cbc6-44e5-bf93-a2648e542fac", "sighting_of_ref": "indicator--c1dde141-74e4-4a9f-951b-e6c160340071", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e64d5f-2247-4094-abe6-03e5a433346b", "sighting_of_ref": "indicator--51485912-e1be-4b36-b75b-d2da4f5176db", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6954f4d-53ba-4f90-86d3-1e300206a87c", "sighting_of_ref": "indicator--eb5ad428-9598-4d65-a139-44416ce978a4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6c2b391-832a-45dd-acc0-b79fb0c38432", "sighting_of_ref": "indicator--d3e3ecfe-ab01-449b-9af6-cc33ed8e483a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c524527-3120-42c7-8456-22da9672c120", "sighting_of_ref": "indicator--1291a590-fbbc-44ca-99d6-0eda8da1fbd4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4219c6d2-cf3d-4ace-9633-b42e4d0050ac", "sighting_of_ref": "indicator--90f756fa-85df-4819-bb23-bf4a71e32776", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc4889c8-845b-48cc-9818-a6fac56f0288", "sighting_of_ref": "indicator--29015928-e91e-485f-adcd-dd15d4c19c96", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c16048a-78f5-41e9-9288-a1b12cf4f31e", "sighting_of_ref": "indicator--ae47bc9d-012c-4801-aa83-94bed1e80333", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f1a9c9c-a88e-480c-91cf-4476654881b7", "sighting_of_ref": "indicator--c9eb4e05-5fd4-4a16-8cb0-aa00f68091b9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ae2e7df-780b-468c-8dbe-77f4ec3c6a7d", "sighting_of_ref": "indicator--c6a57a59-f949-4897-be7e-7edc657e6377", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a25fc58-e6a0-4d13-80dc-8d025271dcf8", "sighting_of_ref": "indicator--5a637e91-6bc8-4dc1-afc8-e3f534038e67", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e5be58-3e3b-46f1-b8ba-8e02e09d41ce", "sighting_of_ref": "indicator--26bd8201-4f0a-4770-8d08-4ce01a35099e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24af691c-de06-49c5-b3b9-a5fd19d8d5e9", "sighting_of_ref": "indicator--97633d4c-5898-415e-bc6e-64515bf96d6d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1601f8d-e331-4c5e-9a27-e44429e2892e", "sighting_of_ref": "indicator--fd51120d-0058-4c65-8fc4-3db02418d519", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ca20ddc-0ec0-42d4-ad62-b5d4e63aef5e", "sighting_of_ref": "indicator--d1567c07-6166-4e94-a494-12b09656b2aa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee7eda72-a692-412f-8037-06b105ddff18", "sighting_of_ref": "indicator--3fcc0490-d9fe-4fb1-bc61-e557099b841b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--337d05d9-ead7-4028-a7f2-20c68b86a31a", "sighting_of_ref": "indicator--f08d139e-0bb4-4535-bee3-4757517fb76b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7376673d-856c-4a89-a057-222a394f1dd9", "sighting_of_ref": "indicator--f4c89344-ef4c-4cf1-8b5b-8f881ead9a67", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b45ef1a-eaa2-4a96-81b7-549f7a96b5e8", "sighting_of_ref": "indicator--2a572502-2b8e-4d62-b5bf-8de2ee6563a9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--005ea2a9-c9a8-4a95-9944-4ebb4c9b6779", "sighting_of_ref": "indicator--261c7c09-5187-4cc5-94a2-6da971ede7f5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e52b04f8-8557-41f7-92d8-4b0c61c334b9", "sighting_of_ref": "indicator--d8ad9777-f2e3-4ece-bcfe-10f1dc51e2bf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3422871f-5b57-44bf-a0f6-b7d1433fdcc2", "sighting_of_ref": "indicator--5569b4ad-42ab-484a-b202-9ae16bbcb56e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490d6878-315a-43bb-bc40-9de8f45f7cd9", "sighting_of_ref": "indicator--95b3af6f-1168-4d97-864d-52d2790aaae7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d0bdd8-1f2f-4e4d-b4cb-3a3eb3597acc", "sighting_of_ref": "indicator--2a982c25-5a03-43f1-98c9-935a3ac278c9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--893a464b-5306-4009-b179-6d254e0e9499", "sighting_of_ref": "indicator--75a6c8a0-4e24-4b30-b008-d6d60ed26d2a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d68d75d1-30f5-4543-b17e-f399c0fc395c", "sighting_of_ref": "indicator--bf29e0bf-31ae-4e5c-923a-8ea7a91a0a6d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031a9582-84a3-4484-a414-e4a00905bfff", "sighting_of_ref": "indicator--bee802f6-e9d6-4587-91cf-057cb6602b2b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e835a9-b837-4837-9ca3-ecc5c89b62ef", "sighting_of_ref": "indicator--a558272d-e433-490e-ae19-ec28852df0d6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4af36552-c08c-41a1-9ea5-f0fd0fb6488b", "sighting_of_ref": "indicator--8c5bc6d3-f35d-462a-ad62-be480b9fe49d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--821653bd-4b66-4f15-bea1-2d557b3cb29e", "sighting_of_ref": "indicator--c6cea7cc-f970-4c2b-b098-82e9307a42e2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce5547b-a147-49ca-9eca-f055f288bf92", "sighting_of_ref": "indicator--b09fb13d-9e89-48ac-a57c-707807e0e72d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f60f795-1fca-4433-a573-56bdb96f2059", "sighting_of_ref": "indicator--c2ca99ac-f80d-4259-8e7b-5c419d5dcdf4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3faaefc2-d25c-4086-a5b0-93df1fde6090", "sighting_of_ref": "indicator--17948844-ec15-4d2a-ac43-2fd8940a57c1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7d1fc7f-b87f-42f4-83a5-a4f26c3312ac", "sighting_of_ref": "indicator--a7c6ced4-a968-46de-998f-5aee520db8ae", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68844a75-ec4c-400e-9c2b-ec83bdbb23cd", "sighting_of_ref": "indicator--0d81d7c8-2b58-4848-b964-da60cb486991", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8ab25d5-5614-4173-ae8d-f9a09115d5b6", "sighting_of_ref": "indicator--cbb1d4c1-21ee-4704-84d9-7d29ef2bf58c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc3765d5-d743-4fd1-b23b-4371a9d559fb", "sighting_of_ref": "indicator--1f5fdd66-2ffa-4473-a8a8-9908b5abe3ef", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06724aab-afd0-42cf-a1f0-6c171d075d46", "sighting_of_ref": "indicator--e8fcc004-48f3-4559-a49d-050e185a4f07", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80bda388-0698-4d2d-a637-ff6fe1601e34", "sighting_of_ref": "indicator--dc3daf25-3b33-480e-b4bc-867190fcb128", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00526f79-f413-487f-86b7-68844a45eb2d", "sighting_of_ref": "indicator--02f9b192-ceca-4445-aab9-832c6b56d543", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfe7e13e-699f-449f-acb3-8b7bdbda7357", "sighting_of_ref": "indicator--7251d117-2b26-44b4-9f4b-5fcaf0f6d98e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a7e1f2-963a-4ff6-adf6-10dd66070079", "sighting_of_ref": "indicator--332bc612-d630-44c7-acf6-5a471c77117c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--005515d3-8b63-4c71-a82f-9fb453253039", "sighting_of_ref": "indicator--cd3ba30b-b00a-4ee0-9b7f-f0947ba29059", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--770e60ed-da60-46c1-8aa1-188e56361424", "sighting_of_ref": "indicator--355b9c3d-3e92-4244-8d71-603ec64e6ae6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad338745-4ab2-444d-9387-b8e9b11c1eed", "sighting_of_ref": "indicator--67b1c1cb-a26e-405c-ba24-12d1c69c6bb8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cc0d082-c6e8-4644-a659-df3a6a1908ac", "sighting_of_ref": "indicator--abdcfe21-f0e6-45c6-bf99-de3bbcca9e97", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ca5fa7-bfbc-4659-9810-01c6bfc471fc", "sighting_of_ref": "indicator--caa41c15-8e9e-402f-a273-d7ed68d8ea8b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3beeb9ad-0228-4b32-bf0d-375c1ff990cb", "sighting_of_ref": "indicator--44f85da2-71d7-495f-8eed-4f8ea5582881", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--981bb365-30f4-4296-b38a-31626332edde", "sighting_of_ref": "indicator--c44e478a-2e50-430f-ad4b-41595961e254", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7afc3838-1e7c-4e81-8809-4d4927eff6f9", "sighting_of_ref": "indicator--29dcd513-b8f4-492c-9af2-547cf8f95276", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8627286a-86da-48e2-9e28-365cbd562ba7", "sighting_of_ref": "indicator--44c81643-c262-4b31-86a8-365f845497c2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba445841-c2d2-4fad-9ce5-ed200f4418d6", "sighting_of_ref": "indicator--8bfb01b4-0664-477d-a037-a3184f316cd2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--405d709d-9c0f-4abf-b721-b905a9303a48", "sighting_of_ref": "indicator--ccb7a2fb-79bd-448a-b8ef-775c95b87605", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c89721b-0c7c-44a5-b701-5ca702606be8", "sighting_of_ref": "indicator--ccaeace6-923f-430a-9dc0-72f58d046cd8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2de5b14-e236-4aca-bbf5-245947792153", "sighting_of_ref": "indicator--00b6d914-d452-4047-a74c-76614c6f1cf0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51809325-f836-41da-9bf8-fe0bd648ac23", "sighting_of_ref": "indicator--9be1c245-b9f3-46fa-b80d-3034a90d442c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ff5c9f-5b61-4ef8-ae76-1d44bdfa065a", "sighting_of_ref": "indicator--7adbfcf9-ecdc-4239-8db2-71d076c87e63", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3adfb8d1-c864-4c36-b15b-5129550eab06", "sighting_of_ref": "indicator--8c19f86b-2143-4660-a4cf-67798cf2d3ec", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f5c7199-5565-4303-89e8-a869a960a84d", "sighting_of_ref": "indicator--347aa832-ebf6-4199-a5fd-be1e3b7fa682", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598a08c3-f611-428c-8cd1-c93a44f5e8b1", "sighting_of_ref": "indicator--c419bdd6-22c1-41a9-a02c-3bf34b503e7c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccd4f8cb-eece-486f-841f-0fc5266b7be2", "sighting_of_ref": "indicator--5eb12493-2fa2-4072-ab0e-d67c2132b8c7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b801040b-7244-4af3-8176-9385394f57b8", "sighting_of_ref": "indicator--9c508739-6219-4290-ac8d-455b82bedc31", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c6aa701-0ccf-4d80-9927-5d8e492c45ed", "sighting_of_ref": "indicator--bb4fad86-2997-4958-99cd-d97db5480a66", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60320ef3-c469-40b9-b18f-d4b985229656", "sighting_of_ref": "indicator--b6a0bc8b-29da-4188-95d3-bd76873e9075", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b691ae34-05e3-4a2a-9b67-88dc9253868d", "sighting_of_ref": "indicator--1fcb44ce-bce6-4b88-9c1a-41d4ee96d0d4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d333e8d-1fac-4c6d-ab80-f9c33b241985", "sighting_of_ref": "indicator--a7c67686-8a59-4cc7-b6bc-59c7a29d9d59", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e37e48e-a77b-49ce-9a96-808458f3ee7f", "sighting_of_ref": "indicator--9825b47e-332d-4bf8-abe8-15368e754c31", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c694fc2-eb6e-42f2-99c1-ca0d9ccdf714", "sighting_of_ref": "indicator--e73563c9-7f71-4eea-895c-eb86c0a800b5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcd487e2-513a-4c37-8be3-3215f1ac674d", "sighting_of_ref": "indicator--141f8ba0-5823-4323-91f1-0f43e11a268e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3690c0c4-31b3-48a7-b913-47e533780603", "sighting_of_ref": "indicator--854264b8-0218-49a2-a5ff-692d6ca2a6f8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95f1a8d0-69b0-4e7d-a45a-d70da828b410", "sighting_of_ref": "indicator--0df3b2b8-d504-4c09-901e-a3b08ad23596", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4c2effe-3f0b-4bf0-845d-c3b896c2ed93", "sighting_of_ref": "indicator--41e25f7d-8f13-45eb-898e-705c0afebe4a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c1c6949-95ab-48d1-86ba-ddd84d0165a0", "sighting_of_ref": "indicator--29505c2e-40be-455a-88f9-967ad316e15a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--165ff432-2412-4d37-92dd-ebddd4752ed9", "sighting_of_ref": "indicator--81272504-c1d7-420e-ae3d-9c7272289392", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbb1b1c8-74a5-418f-9233-176b109033c2", "sighting_of_ref": "indicator--886fcd43-a049-43e9-ab77-e83c330dd71c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30679d67-1ff4-465b-b5be-cba6c37322e8", "sighting_of_ref": "indicator--bdf954e6-a564-49a8-b5d1-65f7f647aeeb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b4e604-ee5d-4bf5-87c8-87e601b6dc5a", "sighting_of_ref": "indicator--520c5440-d973-42d2-928c-66849d677140", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba55575-a41e-49e8-b6a6-0b8da3f4427b", "sighting_of_ref": "indicator--0efe7e71-7e81-4fd6-a981-0b66b84d4d2a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c500ec4-eac6-4b42-b2ca-1f06d7b3473d", "sighting_of_ref": "indicator--11964b2e-cc15-4d96-bce7-744c2df772c2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd75147f-2c7b-4bd5-9416-88a944cce7a4", "sighting_of_ref": "indicator--093aa6c2-089c-42ee-9b4f-e929760dac91", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79bb6cd3-9589-495d-bc8e-b6e81bb0288e", "sighting_of_ref": "indicator--1dc45a62-1675-43dd-9bee-76708ac461a2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53a42c44-68d7-4fb0-986d-089214a939ba", "sighting_of_ref": "indicator--58ec3fa4-96f2-4cb6-a8ce-1d188de73e48", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--150d0118-080f-4f32-b974-da0011fa4efd", "sighting_of_ref": "indicator--cac29483-1e71-402b-834d-816dbc7260e9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--451d3550-5235-4159-8e86-eaa07c96f8d3", "sighting_of_ref": "indicator--0bf1fb40-bbc2-4dbd-83c7-162df5739516", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5dd2488-085a-45d7-ac1c-492c47f61b46", "sighting_of_ref": "indicator--c4047645-e3eb-4ffe-8e62-b7793906d44f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c2fbc53-fe16-4fb2-a360-da70d4b14c79", "sighting_of_ref": "indicator--019ccd7d-f002-462f-899a-a4c93e4cce95", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5938bc07-a3f3-43c2-93a6-eacd5054667c", "sighting_of_ref": "indicator--a57d715d-2982-470a-aeb0-d7170c302872", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ec874f-2d30-45c7-b6cd-11baec36e331", "sighting_of_ref": "indicator--244105ae-6956-4498-bbbd-853349735869", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acb8f2d2-c4b1-444d-b6f4-38aba88eda3f", "sighting_of_ref": "indicator--3db9ef3f-6058-405a-b6a4-1ab0647e7809", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e86817ef-12c2-46d7-a061-40cbe02dfacd", "sighting_of_ref": "indicator--78d14554-5d57-4fff-9dc0-e71b26a814f6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d31e79a1-d1ab-42ba-9fd0-d65fcc62befe", "sighting_of_ref": "indicator--77f5182f-23aa-4338-8e09-27f9f6d54428", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43daa9e3-7f73-496b-9eb8-9c906d90ea1e", "sighting_of_ref": "indicator--306815e7-f629-4859-bd44-c68c3df356bb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29849afb-8e47-4457-bc88-31b123967020", "sighting_of_ref": "indicator--55e54d10-13c8-4028-a72f-c6dd9e062d6a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e16212b7-2060-4fc0-892d-3c233fe44621", "sighting_of_ref": "indicator--f323a520-d550-401e-b3d7-5ed330199d85", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1e58287-dd0b-4d87-98db-39f700643a5d", "sighting_of_ref": "indicator--17dae2d8-c841-4c53-91c0-f3ac744c29dc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c54d492-2baf-4190-856a-05f6b7c5b955", "sighting_of_ref": "indicator--0dd93593-ba7d-4ff7-8772-f29ddd711118", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b485157c-4e0d-49db-bdb2-0241d1a18e89", "sighting_of_ref": "indicator--6470fc0a-184d-4f99-8664-587a7367c977", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4987ef01-6089-4f2d-bdf0-6e3b5d97c4f1", "sighting_of_ref": "indicator--27742809-6090-4fc0-aad6-764643319723", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24bedc5e-8b61-41da-b609-cfd580b5ee39", "sighting_of_ref": "indicator--2bfe9102-3c5d-4f83-9e04-b5f02ab5c5e1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f60ae95-a497-4603-8a16-1c38f0b9aad0", "sighting_of_ref": "indicator--b7ca1fb6-0f18-4962-bda4-44bded0ee221", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd281f4-44fe-4e8b-9f50-0c16379f52a7", "sighting_of_ref": "indicator--0f206532-3cb8-471c-be47-a0ebdfe254f7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec8689d-239e-4d50-bb6b-9549383490ad", "sighting_of_ref": "indicator--ce6fc657-be5e-4c80-9c3c-fc69cfce0e02", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f039af2e-8a7d-4b9c-a3b8-fff82ac9f334", "sighting_of_ref": "indicator--7724b059-435a-44cb-8bf1-7918dbaea3e5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d274c8-3213-424e-8664-edde3723021a", "sighting_of_ref": "indicator--a382704d-82f0-4402-9a23-d51cb3c8abc7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a9dfd62-1b6c-4275-83bf-7d842c01b4dc", "sighting_of_ref": "indicator--76bffa3a-64d9-4f62-ba73-bf0c752c5246", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b00b907b-88a4-4b50-b31a-cb2e68b965b5", "sighting_of_ref": "indicator--248615a6-c616-4e51-8370-be7a6fd2af0b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa2f27e2-986e-4cb5-a67e-54cd9524980f", "sighting_of_ref": "indicator--79c610b8-372a-4e59-92c0-165a3288ed33", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431b7438-2bb5-4ba3-a7cb-61b6d4492d5e", "sighting_of_ref": "indicator--e6f5d238-9cb0-4b28-92d2-809529963db7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cdc7a4d-cf4e-4c4c-b0f1-359f911c83cb", "sighting_of_ref": "indicator--2f18af18-f31b-4873-9c35-e9d2b4fbb4f0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3437d0bc-22af-4b85-a687-0210402d38dc", "sighting_of_ref": "indicator--e6c96193-91f9-4b82-b12d-62388280cad5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e2296f8-79fc-4b0e-ade6-f1358b15c77a", "sighting_of_ref": "indicator--9e99a620-def0-45a2-aeeb-3f2540b993fb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9eb2199-be38-45ae-9ccb-7facd5922b11", "sighting_of_ref": "indicator--0ebb4d73-3aba-4931-b96c-18c68b1cf236", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d53a7bf2-a26d-4ae7-84a8-c506f14afdf8", "sighting_of_ref": "indicator--283d1523-f458-4d57-aaee-363bebb61f4d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd3a3b37-2687-4d39-9587-886264bf8f62", "sighting_of_ref": "indicator--0fc92962-11ce-4324-b8d5-c3cda8559117", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3fde103-f25a-4641-8565-703be9694e7f", "sighting_of_ref": "indicator--43bf8a58-a414-43da-b9d4-86bca623eeee", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294f2878-93a8-47a1-b0cf-2f868a38a8a2", "sighting_of_ref": "indicator--9234b777-3b94-42f8-936c-2370a469e947", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8c45b97-013f-4034-89fa-52d032837e80", "sighting_of_ref": "indicator--3a50447c-1a71-4f98-a339-c524a2a2b3fc", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--601e9e66-47e6-4d45-b275-8cd6b83cc2e8", "sighting_of_ref": "indicator--0f035037-c843-459b-8bec-b21cb23b5297", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c3e3e0-8f9e-41ab-b830-e69837f6a642", "sighting_of_ref": "indicator--a6b8fd87-c344-4e7b-b3d8-fedb88b068f2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a762985-e1f6-4cbf-9cde-d57e9953b3df", "sighting_of_ref": "indicator--c59b30f3-79ce-4e15-bf8a-c9f7016e098b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a768e1-f9bf-4484-a812-da4f85e980e7", "sighting_of_ref": "indicator--568a2b18-cd25-4902-95a4-13b952bd7ea0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd0dd47f-c5f8-42c1-b8de-662bd4f8a502", "sighting_of_ref": "indicator--6ae56f65-102e-4112-bf6d-785621f5c842", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be04e560-06e6-4bdb-8f95-9c55aa047d8e", "sighting_of_ref": "indicator--b06e8944-8437-4d1f-9424-6d60cc3b007f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efff2ca0-1beb-45db-ae07-5501b094650c", "sighting_of_ref": "indicator--61334f29-30ee-4339-a25b-a91a74eaea3f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63033edd-7e67-4f8b-a61f-e3ac5634184e", "sighting_of_ref": "indicator--6ba5eec7-4caf-4986-adf0-d1a82b851c47", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f15d6c52-869e-4253-9a18-74cc0886fc83", "sighting_of_ref": "indicator--3916d047-9d07-41a3-9c9f-a6c1b89ef082", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29e5f649-fbb4-4ec4-8a79-588ac12a09c6", "sighting_of_ref": "indicator--65297a1a-0b25-41f3-a47e-1ebfa0b7d163", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a5fd087-9348-49b5-b3e2-1b28cc20e300", "sighting_of_ref": "indicator--947373c0-ee99-46bf-948b-d5a78e165b91", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6433c669-80ad-4d08-a84f-4d6225af624a", "sighting_of_ref": "indicator--1cf28ec9-4b19-4a69-9eab-3dfe7b77a698", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d2b4bc-e0b2-4098-b39a-3d97dcdace11", "sighting_of_ref": "indicator--0c080efc-98fc-4146-94d6-cea058369a34", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a180f9e-30a7-4f3d-abe0-b8666dcf3457", "sighting_of_ref": "indicator--e1c2e110-e19f-4f6e-8703-e109908f36bf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1132fc7a-eb5e-4252-8530-82de9dd03676", "sighting_of_ref": "indicator--493d9aea-012f-4731-a77f-ef954de65a53", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d704a0-2dd3-4dbf-aaec-5fa74b855b38", "sighting_of_ref": "indicator--babad82b-9187-4928-8632-14982e6229a4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7292a94-c501-4975-8f80-99f35eb52241", "sighting_of_ref": "indicator--9b37c2e4-c08e-4c18-a454-bce2ad8c1b6f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cec5810-c47a-4c84-84fe-1ef1d82dd5ec", "sighting_of_ref": "indicator--58177460-efdf-425e-b412-a1488eaf9af1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--591bc267-1fc6-4fdd-8989-126b25b1f00b", "sighting_of_ref": "indicator--ff6d044d-61d6-40d9-bfaa-aa02bf9ceb91", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba526f2-43fe-44b2-955d-2d5ae58bb24e", "sighting_of_ref": "indicator--1a64176c-f6c2-42db-a013-79a3dc973f6b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b889c8d5-cf46-4948-8f3c-be7144b597c4", "sighting_of_ref": "indicator--6e9c769a-0fa6-42ec-b213-6fbd2e15442c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfa77961-3767-4638-9557-ec04a24c0652", "sighting_of_ref": "indicator--fbb75ecb-31fb-4274-a7f2-3e5879ff040e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3abac3dd-bdca-4c95-b297-c4b490014cb0", "sighting_of_ref": "indicator--98a09e37-8aad-4e80-84f6-4f964957dcff", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29bd3998-563f-4bd1-9ee1-f097321a06f8", "sighting_of_ref": "indicator--1afdea4a-e0b7-4c89-91e1-9ba7fcc92d14", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83717b4a-a758-4f1b-9c57-a4637b5e17d3", "sighting_of_ref": "indicator--7720e5ce-b665-40ea-90cd-751f912b8f01", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e520705-5df7-428c-8ed5-755eb17cf1dd", "sighting_of_ref": "indicator--bccc9a92-b5b3-4970-89eb-405e4b72c50c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f65e8a0-4f4c-4d4a-84b6-681d23031f8a", "sighting_of_ref": "indicator--200b6bc7-6bac-4b64-bd10-42a87e859246", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8408acb-90df-4966-8448-a0eef27652f7", "sighting_of_ref": "indicator--f2154c17-3db8-4dd8-85c0-eefdfbedb94a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec2b4a0-e5c5-44c6-a88a-c5db521dd9e3", "sighting_of_ref": "indicator--b19b6f98-ca50-4bdd-9dec-0cabb473b69f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3cfd405-1b22-4c7a-aac5-ce1fc5567c9c", "sighting_of_ref": "indicator--13724070-411b-493c-bfb0-7a79e4f0588a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e84366a7-8441-4e7e-90ab-3f3c4ed1040a", "sighting_of_ref": "indicator--d94dfaf9-f14a-4267-943b-fc7efc6e6094", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4f1b26e-afb6-4deb-97b9-a4d4393b6ac9", "sighting_of_ref": "indicator--0ab65fc7-d249-49e7-93d7-f328174773d6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8ab6567-074b-4188-b783-af7ee2c0a8c3", "sighting_of_ref": "indicator--f32bc3b1-e97f-4094-b8aa-f654012c929b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84589e5e-afaf-4179-97f7-2873ca6300c7", "sighting_of_ref": "indicator--5ab577d9-5178-4456-85a5-250ff7178d30", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0cba193-1c57-451c-80fb-f4535d4c79c2", "sighting_of_ref": "indicator--faa48ad0-dd94-469f-b0ea-006b0181cfaa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfbe20c4-1b08-466b-84bd-9348df25bb05", "sighting_of_ref": "indicator--7bd61c33-e626-44cc-9945-732ed3aa9f90", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a4ac16-c8fb-45c5-866e-3e04bd9a0974", "sighting_of_ref": "indicator--9c22e5a8-f841-47ca-8f88-2b1da8737229", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fdcc13d-7d4b-4162-8fa2-26d33d56aed0", "sighting_of_ref": "indicator--54c387e1-361c-46d6-a92b-685438731089", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40ea9ba5-55ce-4fe9-ad39-39d0201f7620", "sighting_of_ref": "indicator--39e3db0f-a81a-4336-867d-db552e25f8ad", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caf2554f-51be-4c99-839d-34e912748954", "sighting_of_ref": "indicator--f693019c-7422-485c-9c2d-3085f1b3428b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee63385-e41b-4533-a3fa-5bdce52aef05", "sighting_of_ref": "indicator--3ef0fdb4-9552-471a-8f32-ba3213308f5e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df6e963-4e52-457f-9bd6-fb2b4f6834d3", "sighting_of_ref": "indicator--b8437d4b-a12d-4afd-8e2b-a21505b18f1c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d4f06ef-6793-4ad1-bfbb-575f919d7c63", "sighting_of_ref": "indicator--41c3f54a-75c9-4666-8bab-c2270630050f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--463c312c-921f-4953-95cc-de9c3fea2beb", "sighting_of_ref": "indicator--99ee1bfe-36fb-40c8-a179-2f48ef561495", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b835694-e1b8-417b-85b4-cd4854b7ad5f", "sighting_of_ref": "indicator--da20069e-12e6-4290-8375-f2a164504185", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c31a7205-c1d6-4c37-90ae-f1b4a7023faf", "sighting_of_ref": "indicator--1169d7fb-4add-4af9-99cc-bf39de626d19", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4a2d67c-86e7-4566-a992-c2495fdf7a50", "sighting_of_ref": "indicator--ea15953d-8a39-4e52-95a7-a26af620d658", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91b6dd06-82e5-4453-a798-e2620174ed1d", "sighting_of_ref": "indicator--4ba8752a-0b74-4844-bed6-35848ce13d60", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f87066-9923-4107-a3be-5d207fd38dde", "sighting_of_ref": "indicator--3b0f2d90-7d1b-4ac1-81b0-f6cbd6e3a52b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa4c7b47-9053-418f-8198-1d816057cdb3", "sighting_of_ref": "indicator--52b13ce1-59fb-4704-a6b1-985dc189f510", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f73bdb-f6bb-4a66-8f11-c0e4646ac504", "sighting_of_ref": "indicator--e315f08a-5528-4a94-b073-621a08bbdd62", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d6be7a8-d110-4c19-95c7-a1fcd14aae9d", "sighting_of_ref": "indicator--3553cc56-5d79-44b3-bac4-a0f2a84b6832", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e248d5d4-70c5-4e3b-9eea-84437f4cc406", "sighting_of_ref": "indicator--3c324459-f1a2-4cb4-a627-07beef9d643e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df8e2f9-f37c-4fab-9b3d-d2051fb167ea", "sighting_of_ref": "indicator--f7e2612a-ba36-4ffc-80c2-3cb4e17668f1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4670ec54-e627-4cce-b33d-d2dbdf8ff4a0", "sighting_of_ref": "indicator--cc02fac0-0dab-464f-8e89-1710ac9568b5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21da620d-647e-40ea-ad86-0205d1ded189", "sighting_of_ref": "indicator--a18c3397-1b91-475c-b99b-c08acd546eb3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99107285-5c9f-4ef1-9421-0db99ffbadc6", "sighting_of_ref": "indicator--1dadebee-5b40-4e4e-a8c3-582e2a17c459", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f064ad7-7b93-4031-9724-09d14e377808", "sighting_of_ref": "indicator--65a4bd5f-fe25-4c36-a913-72a9d53de144", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d800ef-2b47-4d79-88f6-83f6ff9572c5", "sighting_of_ref": "indicator--d08d4113-f9bf-4b5a-bac0-d139267977cc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--219b9b56-aa29-43c0-b79e-f548ad773929", "sighting_of_ref": "indicator--9fc8db40-4596-4cdc-90f3-174674657564", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da563d4e-be83-4874-b824-9ecbbe15b570", "sighting_of_ref": "indicator--b5c11d38-8147-496e-adea-04c4ea7d5a10", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e566ee9-73e7-4910-b669-2b0f34a336b9", "sighting_of_ref": "indicator--706162eb-1ab3-4831-95dc-d78e7c85fb9c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--399809df-294a-4dfc-9085-13a48d72f2e0", "sighting_of_ref": "indicator--a702158c-59b6-4e45-af06-78a23bbbac61", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b5d543e-e695-4b2c-b304-0630ba5b8e23", "sighting_of_ref": "indicator--70ab5599-cef1-4c5f-8798-b83fdad7e43f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb4ee540-74dc-41de-85fd-ebbce2006d1f", "sighting_of_ref": "indicator--da4ac3e5-9b7e-405b-be96-25566a285830", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc47c90c-5bd5-4c0c-9f6b-9408b5b0c97c", "sighting_of_ref": "indicator--bf4e6702-8889-44c1-836a-00d0950c2331", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a614778-93dc-442a-aa6b-9c92d48ac18d", "sighting_of_ref": "indicator--4deedde9-4a71-46a8-abe0-40498a909201", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d2a6263-37b3-4a91-946a-c07221eb30cf", "sighting_of_ref": "indicator--7235cdd7-2589-4e76-ab73-909a73a48db1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c927915-a01f-4ea0-8f44-3dc90bf7a643", "sighting_of_ref": "indicator--be75e290-e8e3-411e-935a-122ed2918d6e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a0bd91-6419-49db-96d5-99410d960abe", "sighting_of_ref": "indicator--cd3ce855-9971-4284-b2c5-dfd015c92070", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c443b812-75a8-4a1b-90de-f88e7235a722", "sighting_of_ref": "indicator--0869e7f2-0d14-44f7-ba2d-0b4980a687e2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80e01003-b37a-455c-a40b-1d6fea2b756c", "sighting_of_ref": "indicator--29932967-e358-46dc-b9c6-d15f84c92069", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbb5d288-e40c-43cf-a4b3-68cccc278277", "sighting_of_ref": "indicator--93d5ebdc-a0f5-428c-a490-7674f714b289", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f50d30ff-b54e-4b35-8442-bbe21a12d523", "sighting_of_ref": "indicator--5fce3413-d3db-4b55-9a85-e4d9d0506804", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d867899f-a052-41a0-8bd2-3b07a400d66c", "sighting_of_ref": "indicator--3f8de789-3320-41d1-a999-610f07d43f07", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7403782f-e5c0-4ba8-83ae-53cc40244a20", "sighting_of_ref": "indicator--27d9ad94-c174-4599-8417-da7402e61540", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d90f2576-46a8-4232-95ad-6e39c43c7c04", "sighting_of_ref": "indicator--3846fe2a-0b8b-470d-8e3e-3bed09d3c5bc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d43f4e5-9be3-416c-afc5-ac944b29758b", "sighting_of_ref": "indicator--00cfa334-35ad-4006-9b68-f3bb2d8f9ffb", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb7795b1-2c9a-4f38-a14e-efa921ac8702", "sighting_of_ref": "indicator--c815b84e-c020-4a20-bc91-988f8910fa28", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15c09272-6fe9-4087-86c9-1a8f36286178", "sighting_of_ref": "indicator--692d7902-1b90-47e9-98ec-ae051c1d3c2e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb2364b5-7fdb-410e-833b-9cdaa7469a8a", "sighting_of_ref": "indicator--8a285553-bff4-4ac4-a2c0-e8ae085220f7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b637e8ce-2b1a-4660-bc58-73d53933f9bc", "sighting_of_ref": "indicator--a54672bd-8a9c-43b7-ac27-070e5665afbf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62072400-d58f-4458-b751-666b283d2677", "sighting_of_ref": "indicator--26f187ee-eaf9-4776-b17c-cf84b0209a6e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0d8ef6d-f796-42e0-8c93-0733ab2c18cf", "sighting_of_ref": "indicator--628dc595-5d47-4856-83a2-272988734fc8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8558eb66-5644-4d13-810b-584debc3a6ea", "sighting_of_ref": "indicator--25ccf1e3-2994-49db-8493-f700a3aa43c6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba13413-f379-4700-aae9-65cd594e99ed", "sighting_of_ref": "indicator--5a5bb897-0bdc-4cb3-9b6d-2942b78e1942", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39de6d3b-29ea-4965-b510-7c751b9d8624", "sighting_of_ref": "indicator--c1916f89-c6a1-4815-809b-ad57db0f5f22", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee5a2cc9-1349-4b24-a650-7b77aa903f14", "sighting_of_ref": "indicator--1ff0ffee-d13c-4a94-947f-b8e46c44a380", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a18c77a-9199-4a59-88fe-9d0db7e6356b", "sighting_of_ref": "indicator--2f66d99d-9108-4157-a654-026a47325863", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c7a8bbb-3386-4a91-9d12-3265c0321f3b", "sighting_of_ref": "indicator--d858ee84-7eb6-448d-a8d2-e39d029fd43f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48a43482-762a-4396-819f-4d69003a733d", "sighting_of_ref": "indicator--80fa88dc-d409-4f48-aa9d-7c78102a43c2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--295f8786-5bd3-461d-bf1a-b93248da4719", "sighting_of_ref": "indicator--c6492203-8a6b-4f90-9d81-8768a6e238bf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d4e88e-3183-4438-ba3b-32ed956f2a3d", "sighting_of_ref": "indicator--155a9644-272b-4c90-94a2-de0f435fb2f0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2142fae-9082-4cfa-9754-7c4b40fa48fb", "sighting_of_ref": "indicator--5f39ab5b-4f89-4dfd-871d-ea2ae0af38af", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--022b4f31-cdba-4f89-a9b9-7c782dd00ef2", "sighting_of_ref": "indicator--4712cf12-fca6-4be7-b302-41afa863fd41", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d39d1115-822d-40f7-9a6c-45cef309b775", "sighting_of_ref": "indicator--aa903f4a-0851-47d8-80c0-b0db2390a62d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dadad72-c8ad-45a2-9533-02ca3ee19b60", "sighting_of_ref": "indicator--4cf1108c-445a-4654-988d-2d786a60d18d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1594a29-687d-42e9-bc5b-0cdcb46fe3db", "sighting_of_ref": "indicator--59461b18-1bae-4c3c-8542-b2fef987a8f5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecfbb005-0133-4dac-ae8f-0365ecb1b261", "sighting_of_ref": "indicator--1b351c58-78da-42ac-a933-e420094698ad", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ffa4d6a-d578-4a52-86f2-ec73d9544b42", "sighting_of_ref": "indicator--52263a29-06ed-4f18-8995-e7a7a35e8056", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fcd3c54-ec7e-4ef1-8b14-087d47b890c4", "sighting_of_ref": "indicator--c04d412f-1bd6-4588-b89e-eaacafc9c4ab", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d75b146-9247-446c-befb-e4f582f5260c", "sighting_of_ref": "indicator--5e62f1a2-8721-4c3a-96f1-5dbf632f4eb2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c30aefe3-656a-4f1e-a35d-c65d8977d2fd", "sighting_of_ref": "indicator--f7d1388d-356f-483f-b14c-20cc03060a9b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6db440e-c2e3-4fe0-a041-4933967948a7", "sighting_of_ref": "indicator--065d92d9-93bf-4acb-a7b7-838ef9fb2eb2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e27e2d0-3b23-4e1a-ab37-b2af1bb4aeb1", "sighting_of_ref": "indicator--3320c82a-20fd-40a3-b5fb-67e498f48a5a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--264c966a-e638-4381-af72-098e08be65df", "sighting_of_ref": "indicator--f7266ac0-fa0b-486b-89a2-6b07bb47671d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a3d99e-3cb5-4227-bce6-62b1c34a2614", "sighting_of_ref": "indicator--48c0a0bf-84d1-4a5b-bf75-fe655892ae39", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--279ff37a-2678-46de-bbd8-5d635f386f1b", "sighting_of_ref": "indicator--f621c93a-261d-4c6d-ac16-12675fabee08", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b28419ae-752d-44a5-a5f7-3fcb7df18838", "sighting_of_ref": "indicator--4372db67-cf2c-441c-94e3-cd818ab4d6db", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b866d61-6e54-41ce-b799-ef2b7c6f8b65", "sighting_of_ref": "indicator--0c625cf0-6d44-4730-8c1d-ff438b2b1ce5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--930439a1-19ac-40a1-802f-dd31e45c118b", "sighting_of_ref": "indicator--a4e30c18-7c9d-4d9b-9a9b-ea3ad962bd3e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b1756ca-9d2e-4f5d-a485-e5bb3547c74c", "sighting_of_ref": "indicator--421edd4e-1d8a-4eea-83d3-65b489bc0426", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f6b357e-cf8f-4d3a-be9f-6388abe3af14", "sighting_of_ref": "indicator--79d66219-dd40-4c17-b99b-bed2463c31cc", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a378f4-e5d7-4244-86c4-961094fb4bde", "sighting_of_ref": "indicator--fd7bf9dd-e813-4d13-99ef-eecd422346e9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4575a1df-8a35-4fde-8ad6-04157e10b5b9", "sighting_of_ref": "indicator--dd4deb9c-7754-45d2-9dee-fdb95db6fa28", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f73c8f-cda6-4810-a53e-b5ac78e7704c", "sighting_of_ref": "indicator--29636f67-ca1c-43de-8570-7f63b58282f2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb5bb78-f93b-40c1-a784-9597b42da73c", "sighting_of_ref": "indicator--37e5c6e9-3209-472e-8d96-d298d4faec66", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eaadd22-49e5-4041-8646-038702479da0", "sighting_of_ref": "indicator--687dfd7b-23e6-4e29-a3ea-0e79031ffe22", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0690c99-5489-4427-a8a2-33493a576ec2", "sighting_of_ref": "indicator--a66b6473-c666-46d9-8190-8dc47b7488f9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2918e632-87a1-4561-b1f0-3891ceb5c59d", "sighting_of_ref": "indicator--7a9c3549-901c-4ed6-bcd0-e21fdbed8c71", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb3bf338-9224-447a-b091-0df5212b095f", "sighting_of_ref": "indicator--f65de444-c666-4ffc-9f21-88c8c7aa28c0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f521446a-ac20-4cba-94c9-10a73cd10b1a", "sighting_of_ref": "indicator--6b487210-66c3-4c9c-abcf-7852b5df1c90", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b41819c-6c99-4e70-ac51-76c6a15c91dd", "sighting_of_ref": "indicator--4f46396a-3ecc-498d-b091-917c4c5f0aba", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f90c0581-c8c8-4844-9904-e517f6c83525", "sighting_of_ref": "indicator--8f922483-33a5-4b6d-b277-28cec9a3c4d3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28f7669b-fecf-4681-ac44-3b37015b113d", "sighting_of_ref": "indicator--3314da53-3238-447f-b6a9-8e7106021a04", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b479c461-b3a9-47f2-b70f-23b9db9a968c", "sighting_of_ref": "indicator--470e1ebc-e147-4f4a-a8a4-eb580201ffc8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976c11b2-5dee-41d1-b5c5-9b5e23a4a03b", "sighting_of_ref": "indicator--60949cba-67ee-4ca7-9df6-48f3224f24f5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--831b89b2-6400-4bdc-b9d4-4b408a912c2c", "sighting_of_ref": "indicator--c6bf8d25-799b-4f87-bab2-2331439e1422", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b13668-961d-445a-b710-68f35cb369c2", "sighting_of_ref": "indicator--c28c8fc2-0c58-4f14-b40a-a5b4a4a94361", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd1a0a4-c2d7-4c61-a6cb-e6775813d30a", "sighting_of_ref": "indicator--2b2cdca6-74d3-48fc-9d9c-cd8179e87716", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eb2ad1e-44dc-46a5-bf92-8091aeaf192e", "sighting_of_ref": "indicator--229aae0e-b73a-4ee5-a48d-f709375fbdf7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e2c4b69-f178-4278-b644-40e656ff7dda", "sighting_of_ref": "indicator--d4348214-0e3a-475f-a92c-99a223813d2e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61e543be-990c-4dce-80d3-c80d2aff33f5", "sighting_of_ref": "indicator--bcbeaf58-6ef9-431e-9be1-74c4b0f4eff0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--162184fe-277d-46ed-9844-51a1e4b876d2", "sighting_of_ref": "indicator--4dc0e7f5-70e9-42aa-a7e8-dda24a28ff42", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c38659e8-1f6d-4ca1-b7a2-28c19247001f", "sighting_of_ref": "indicator--ac6d5228-6676-495b-9ac5-eacc8ba58de0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f0ec89d-82b7-468f-af2e-6d823ea153bf", "sighting_of_ref": "indicator--294edd94-a121-430b-a06f-f12f7d15df3c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0af4959d-42a6-435c-a190-1cc0e3f26c28", "sighting_of_ref": "indicator--44e94745-91d5-459c-a383-738c3c6a1c56", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6e4010d-1f77-42ea-b5e8-5a0d694a81e8", "sighting_of_ref": "indicator--5569b662-74c8-4d6f-996a-f69c464a1ddf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f990cf9-aabd-4720-b7de-fe48251b0544", "sighting_of_ref": "indicator--103d8953-42e7-4b51-a3db-00e15ba7ca08", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e99559bc-1347-4aa7-8309-88ff3394f6aa", "sighting_of_ref": "indicator--401b37a4-934e-4176-a2cb-413de0b80cc5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c60ac220-4d13-4e92-a012-0248a24754f7", "sighting_of_ref": "indicator--773a872d-0128-4be7-8662-71eec5cfff20", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20657ec7-4b7b-4e06-9f84-b703d3d25fc3", "sighting_of_ref": "indicator--740cd608-6d8f-4968-82fe-1ea9e5fb5772", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0de62cb2-163d-487e-bc55-54f24c3572d9", "sighting_of_ref": "indicator--2abcffd4-5d3e-4cf6-96d7-3e15086604dc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81ea3358-3542-4d0f-986e-c30691b0df11", "sighting_of_ref": "indicator--7cec0658-787f-48ee-b0bb-abaa8d8e2b48", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d55cb9cd-0aac-4463-a507-98dba1a20f95", "sighting_of_ref": "indicator--ab5d3e00-5736-4ada-8673-7c75db70c4bc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac9bfd57-d9c8-4a2f-ab03-f513e396c5aa", "sighting_of_ref": "indicator--79a33cfd-00de-4be8-8047-a1c65ff4e336", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4e576d6-a2e9-4482-8e2c-b729c96d88e1", "sighting_of_ref": "indicator--ff6996dc-c9d6-49d5-826b-54f8c8a42990", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e316464-685c-4d69-9af2-dbfd72eb07df", "sighting_of_ref": "indicator--30eeb29e-848a-42c4-b889-2647d62ca8a4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d319793a-f3f1-44fd-bab9-041d854ac50e", "sighting_of_ref": "indicator--b6417544-8d15-4611-acd0-94fb3f53db51", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--154a8182-5d35-4211-9f3a-7b9d2059a655", "sighting_of_ref": "indicator--f976d419-a866-4419-8bae-15f71f7fb3b1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d514dd9-5a44-401b-bd52-3f24d034c7f5", "sighting_of_ref": "indicator--7b62d906-6062-4671-8dd1-5c7d1484e64e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b69b64b-997f-41a2-86bd-6a9f51097a84", "sighting_of_ref": "indicator--1fc61606-9b17-47d6-986e-b6c9f5596ca7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16089578-66e2-4247-b093-37922f57bc23", "sighting_of_ref": "indicator--7fceb51b-21d8-4574-9f70-1f9e309db40d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84babb8d-aef0-4e9c-a9b1-bc4ed25f54dd", "sighting_of_ref": "indicator--da995b51-1871-4588-b560-25e1582c9b75", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd5eac33-3f39-4341-b375-5b3700eae6eb", "sighting_of_ref": "indicator--aa59a3d9-a00c-4ed0-bbf9-d72f78c29d7d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9c95821-1090-4357-9f8a-4994f47a2fc3", "sighting_of_ref": "indicator--eea6bd35-b7a4-4453-bb13-bd358edb1b7b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a523e7-c9c5-4262-b9e6-72086172cdeb", "sighting_of_ref": "indicator--6634e8d1-7e45-47c5-beea-2b8e85434e65", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be6218dd-0c63-488f-94c1-6b91ab20b412", "sighting_of_ref": "indicator--dff049f9-84bd-4d4d-81c6-8999a8e11255", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2be5792e-c285-4f10-8b70-edb58123d82d", "sighting_of_ref": "indicator--53b2b0f1-9505-4fb5-9f20-7f581619ad3a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf444e5-aedd-41e9-84da-adcb1887e19e", "sighting_of_ref": "indicator--f3d326bf-0778-405e-a293-c40fe068f34d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0914194c-8aee-474e-bc92-ad59445d6c8b", "sighting_of_ref": "indicator--c177f586-f115-4637-8b3e-c1bf00cd958a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--331d9bc9-7a58-467e-8e89-2974d2f43d80", "sighting_of_ref": "indicator--fbba49e0-2e80-4d98-b6a7-00987d9caf7a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cfe4c97-3f42-4b52-bfc5-5fa919697923", "sighting_of_ref": "indicator--8aca9f53-0efe-4285-8cc8-a444135038a8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50c9a06a-e9dd-4e81-a01f-b48037057429", "sighting_of_ref": "indicator--e2c0b5d7-dde7-4bbb-85cd-ffeb94336af1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec4a25fe-e452-4498-95d3-b983dee50e1a", "sighting_of_ref": "indicator--5589c174-7f8f-45a3-bf32-5bade4c420c1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ab20260-ae3d-4472-aa26-35dc8cf0b7fa", "sighting_of_ref": "indicator--d29b0de0-300d-48a1-9381-89c9e41155f8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--411122fe-a380-4853-9fa1-c8fae83333d9", "sighting_of_ref": "indicator--7667461d-8187-48b1-ba8e-72615e1bbfdf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--412107d9-9cf6-46e5-99d1-b46c66135bc6", "sighting_of_ref": "indicator--4395795a-2686-4fdc-9cb3-714599649ff9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33b1cdc1-c24a-4e3a-b4e1-4f88b005c1d2", "sighting_of_ref": "indicator--01ca93bd-dde7-4f0a-87c8-15c422533705", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f901f95c-0683-4bec-a6c6-a35c045804aa", "sighting_of_ref": "indicator--28cb4ffe-aa38-4418-8a54-8825f6e450a2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1537b4b7-347e-4cd4-ad5b-262c787f61df", "sighting_of_ref": "indicator--91741543-e917-4514-96a5-524c7bf4c607", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--782fc096-3369-45f8-9001-1b906e09ad0d", "sighting_of_ref": "indicator--c663e19d-5e0d-4e80-b13a-c05b581ad244", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--421b0b21-24e1-4cbf-a5de-8f7571e4ed87", "sighting_of_ref": "indicator--8afc5bc1-bcf9-426d-9a1e-71f2b255da72", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e361b48-b004-4c23-af8f-fc5c59b18a87", "sighting_of_ref": "indicator--88f14dd5-5991-437b-9b19-bd657e891d07", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95295320-18af-412c-bc01-d28b4f35e2c4", "sighting_of_ref": "indicator--b927d8cd-1660-40ab-84e8-71defe627053", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--148f5a77-8c30-4633-b587-eb717fa9892f", "sighting_of_ref": "indicator--2b240559-60de-4730-a96c-615f3d7ee860", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc5518d4-f857-4212-ad67-33f7735b6e93", "sighting_of_ref": "indicator--598c4f49-9db0-4bfb-97d9-61b4bb3eb38b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57d3448c-f76f-4f29-ba0d-66d6a45c58be", "sighting_of_ref": "indicator--143d2060-6cd2-47e8-a34d-3ec957faf3e4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6836fc4-90ed-42c8-a531-e318ece17f84", "sighting_of_ref": "indicator--d855ae45-dd6c-4201-b005-bce8679c4274", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3706dd43-e9ae-46c9-b8e7-b69f60e78ab2", "sighting_of_ref": "indicator--52f6a8f2-d7b2-4ff5-94cb-a75f8905b019", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae385cec-bac2-4bd1-9bfe-3dec6a5dbb68", "sighting_of_ref": "indicator--5eead67d-3977-41b1-a0f9-b949fcd64dd6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27ca0237-cfa2-4b68-920c-310310c57acf", "sighting_of_ref": "indicator--98414749-375a-4477-a0f0-74904aa4a235", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f390bbd-d562-4acd-8109-1c12d5713a1a", "sighting_of_ref": "indicator--49924465-c3b4-4b2a-bb39-11b8164e84c1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfbe9887-f84e-4c14-b9a7-921e476f696b", "sighting_of_ref": "indicator--412f012a-eeff-40d6-8aad-67ed97eeeb2d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca728c67-f035-4d5e-95ac-2cdda17811ee", "sighting_of_ref": "indicator--ed4dcf41-171f-4d43-9959-7a2bd68c0f32", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a921ebda-54af-47cb-838a-6e005cd35c23", "sighting_of_ref": "indicator--34b0af83-e595-4500-8bad-209f2ffb44bc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73641170-8c7c-4523-9055-1c71ca9e8ce5", "sighting_of_ref": "indicator--e655e81f-9f0a-404d-be44-4f519d859514", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d4dbf6b-a229-4f97-bdaa-6c3d8ef5b957", "sighting_of_ref": "indicator--dc4ba0eb-c3e1-44a0-b32a-f16ea02516ac", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86d480c9-e49f-4ac6-8171-a3f16f7ea8d7", "sighting_of_ref": "indicator--5dc1153d-b0c7-4895-910b-d9e9d957eed8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e309e2ce-d10e-4744-9373-f5a9e73fe015", "sighting_of_ref": "indicator--d6590099-1ba1-4a90-a397-c2b2b01e8271", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfe889ac-05f9-4221-b5bf-2afe72977fdb", "sighting_of_ref": "indicator--1647296c-b482-411b-a80a-3698a5fcc6c6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaeecced-ba0c-430b-9e0f-e1637aa7b3c3", "sighting_of_ref": "indicator--3561cda2-0717-49f0-83d2-e328463ba013", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f1f8d6e-27fe-457e-9bc6-723bf55e3cfe", "sighting_of_ref": "indicator--9bb1c244-2a07-406c-9208-c8ef8d0bfa8e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909cf7e0-cd2a-4a30-85e0-f5455a070cd7", "sighting_of_ref": "indicator--c8989a97-18c9-4f77-bcb8-2be6adf9b9d3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--391534ae-ef27-46b4-b7bb-d02bff57b403", "sighting_of_ref": "indicator--3488a600-7821-48be-9e1f-258ad35c7683", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85de16c7-c2bf-4f4e-8727-e8bcbeddcdb9", "sighting_of_ref": "indicator--7da549f2-a66f-437e-833a-0d08ff127a72", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f063e1-1011-46d3-8f06-7fcd8f45b1e2", "sighting_of_ref": "indicator--ecb3dde4-bdac-4bcc-abff-af230e2d9f68", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22a8ecf7-7665-4506-8cbd-fd1d9d3b1aa5", "sighting_of_ref": "indicator--0793357e-936f-457e-9a48-5ff8b57f4044", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8943e586-c5c8-4b57-8971-fd3be62acf02", "sighting_of_ref": "indicator--d0ddb1b1-7072-48ff-bae1-fa3eb47a397e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d089ec-4080-4ee1-bcfc-41e1491a8d82", "sighting_of_ref": "indicator--b34adb8d-a986-4c85-b181-1138a14cd7b1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba6a1e34-1308-4c82-a719-916985bdcc12", "sighting_of_ref": "indicator--f5c9763f-88b2-4a94-997c-a60f19be78b6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79368034-bcf1-4b0e-b780-729ab004206e", "sighting_of_ref": "indicator--7b848fa6-b124-4396-b8b4-89d257e8a8a4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9714de4-d4a7-40fd-a255-fd294d866266", "sighting_of_ref": "indicator--057f9645-fdb5-4b0b-aed8-a327b81c190f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--652dd22d-d42c-4e7e-a659-52d4b11bd69b", "sighting_of_ref": "indicator--22db6fb7-c064-47aa-8b5d-e2664be98b87", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--338d1aec-737f-4820-9803-b09d9245b4af", "sighting_of_ref": "indicator--26ac59f3-b398-48fd-bc45-8f995f5d539f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--021f83f5-7300-452f-aa8a-dce7700a5b22", "sighting_of_ref": "indicator--581cf680-ed08-486f-9fb7-1f1f9237ce0e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb1adeb-0a47-48ce-877a-0015eaf1ccba", "sighting_of_ref": "indicator--74a2e1eb-8736-49b5-a910-f8c146b91eca", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43cf854a-dcb3-4b67-bed8-c974338b176c", "sighting_of_ref": "indicator--3f5b887c-0044-4a18-b904-9325f0387e72", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd169d6-2189-4f4e-9d49-f376aa399e98", "sighting_of_ref": "indicator--a62143a4-6fb7-4255-acc5-9e89591a6fce", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4719ec92-529a-412e-a3ea-7a32564eb910", "sighting_of_ref": "indicator--e5ae8017-bb78-4bd8-84d0-19635db64498", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--618c8888-eea3-460b-8158-77817d01938b", "sighting_of_ref": "indicator--1b127508-f90e-4744-91a4-02142ceac1db", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee908b86-3999-4f83-aad7-8c33cc01efac", "sighting_of_ref": "indicator--c6ebec3b-e529-4def-8ba9-edf13304cc66", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23e94b8f-660c-4736-9063-656ca50744f9", "sighting_of_ref": "indicator--6faafb30-0aa6-4b1d-8e99-476ff016ee99", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69883265-b02d-49d5-91f8-9b3bfb12e8eb", "sighting_of_ref": "indicator--be19be78-e975-482d-93f1-3379d03168d8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a91771-3ac4-4504-b047-cbb40b91260a", "sighting_of_ref": "indicator--e810612a-464d-4982-82c7-a6f423338fed", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e410068c-b317-43da-a593-b95da2eec668", "sighting_of_ref": "indicator--167e535d-bc04-4bfd-92cc-92445f735720", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc8d253-1178-45ee-8513-060b561e878e", "sighting_of_ref": "indicator--b08072cb-da97-4d69-a39b-e82f3604dd08", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02592161-08d5-4790-8686-18a886680b8b", "sighting_of_ref": "indicator--5eef78e0-9301-4030-aa1d-887e19c06869", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38e13453-6661-480e-97df-34d5d6b32e06", "sighting_of_ref": "indicator--0c2ea432-bd3b-413f-a361-da1a3fa8dc4e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8247171-9016-4c1e-9323-8f125d67e962", "sighting_of_ref": "indicator--39d7a66a-6071-4f1c-8b03-e9b567fdc2ce", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--590bdf4f-32b1-49bf-ad2b-924a7746011b", "sighting_of_ref": "indicator--f1a98037-3913-4810-a276-2bcd958267ff", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--389ccee3-57be-4f2c-ab64-e6be0fadd680", "sighting_of_ref": "indicator--926e9e44-e293-4532-825e-0102f1d964e2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b83d507a-cc76-41f2-b296-257c6585daa2", "sighting_of_ref": "indicator--6a63c54f-50c8-4361-92ae-7877d3f161ae", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c460890f-fe93-490f-95f2-9d5e201949d5", "sighting_of_ref": "indicator--9c27fa57-3e03-4a40-99f0-0fc4591f2fef", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dd8904e-2d00-471e-973f-efd2700d71aa", "sighting_of_ref": "indicator--81bea857-9bae-45e0-bfe2-a065ec93667a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e62cc9e-1b29-4cbd-9685-45b49093fa72", "sighting_of_ref": "indicator--b039d884-58e2-4284-8cdd-ce1cf24ef52b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fca5de14-bfbf-4f98-aa13-e339febb45f4", "sighting_of_ref": "indicator--fb54f8f5-8f6a-4964-a466-7d23a9c96d56", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de90ca9d-76df-45a2-8fe4-443c06410bbd", "sighting_of_ref": "indicator--c2c8eed3-44f9-43ad-8cbb-89f1037cb7de", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a63870e1-fdf6-451d-9ebd-5c6877592536", "sighting_of_ref": "indicator--84df701c-17f0-43e5-b672-d9ece0fa313f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b63cab31-9c36-430d-8936-a1befd707a3c", "sighting_of_ref": "indicator--cf025e1d-0c23-4ff3-9f48-c7770a4cee30", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a42639-6a45-44ac-9648-d89bae34ef50", "sighting_of_ref": "indicator--d87ff080-ab22-4cb2-9b69-61b461dca75f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50cf5a1c-3d4e-4e55-beda-20c72d163ab1", "sighting_of_ref": "indicator--ae00d89b-3bbb-477f-8c0d-aa960c810d77", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0628d62-ef7f-4f07-aae6-9d2ec5f5951f", "sighting_of_ref": "indicator--d709ab6f-a7f4-4e58-a696-61b36cded9b2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd11fdb-5f07-47bd-8b8b-fae568210064", "sighting_of_ref": "indicator--2f001859-3e8d-4438-810b-0d9dbf8aae9e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c266919-0f01-4057-af44-46da6b00ad21", "sighting_of_ref": "indicator--d0c29d56-dbbf-4cd7-a972-e840973de88a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd8da9a1-84c6-4f46-a556-119f7b424dd2", "sighting_of_ref": "indicator--3a81cc55-8b8e-4a4b-94de-7d619cbdd456", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--974fc84a-3ae4-48d4-a9ad-c33150960780", "sighting_of_ref": "indicator--b0522b9b-730a-4aab-9437-6951a6d51d38", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b0c5e5e-bdee-46a5-9d29-7661f7b39575", "sighting_of_ref": "indicator--a9cf27a1-46cc-42f7-bbf7-a5f97ac7bb25", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--489e5b1c-57ae-462e-a490-55b323f516eb", "sighting_of_ref": "indicator--773c37e9-9e0a-472b-951d-1e6bd873b8d1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a7ec076-fe66-466a-a499-1581d3e1dc6b", "sighting_of_ref": "indicator--ccbf3661-32ef-42c8-93ad-0cfc5f405248", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19a6daad-9d5c-4d4f-9893-17bc36c25592", "sighting_of_ref": "indicator--137b9626-b89c-4e1a-b742-5c8af0ae9bc4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a07310b-adad-41e4-88d1-4e6a1bb2bf42", "sighting_of_ref": "indicator--2abfafdb-7e8d-4e22-801f-8374659c84a7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e822d8b4-f62a-45e6-94ee-ae4899b73e91", "sighting_of_ref": "indicator--56b3abb1-5b43-475c-9b5b-f2f2fbebddb2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3513800a-51ac-4cf0-8669-90ebaebfa478", "sighting_of_ref": "indicator--6329d3f0-c961-4a7b-805d-738b86032dd6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd7081ec-ab08-44b6-b7f2-8d0c1005c799", "sighting_of_ref": "indicator--940b04b5-5688-401c-a087-f5707f7a55e5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fa5a3b6-0687-4a84-bf48-64e01c9f99b5", "sighting_of_ref": "indicator--06067082-248f-43d5-bd1d-74ff56498a3e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--385682c9-21d7-4f50-97c9-a9921ad444eb", "sighting_of_ref": "indicator--c0822103-6d46-4b99-80a6-0bbd552fe38e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0773ff9f-41b9-44c9-9856-73a1e401d874", "sighting_of_ref": "indicator--4d8742a4-fa8a-4eb8-aa60-40993c0d0d87", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1692c5b6-f52d-4b66-b980-a721cff761ab", "sighting_of_ref": "indicator--4e5318ce-4fcf-4ef1-a187-c2d548eb9754", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d26b755e-3ee9-4098-b271-bc92b47b67e4", "sighting_of_ref": "indicator--df095c63-ccff-438a-a9e1-eaae16dbb149", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--219de668-c27b-4edb-92c6-d2cf18d36583", "sighting_of_ref": "indicator--35fc4762-17f8-47ed-b2ca-e22b374f2389", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e04c6e3-9a6c-488d-b079-5aef33f2a764", "sighting_of_ref": "indicator--851fb682-efc0-459e-bc37-afc09bf55ea9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8d8223c-4106-4c61-a95e-0c6e81db51c9", "sighting_of_ref": "indicator--d993074b-fe8d-4571-866d-b23be0254f25", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d5521e9-8343-4b54-a511-8195b6eecbeb", "sighting_of_ref": "indicator--4974e9d2-b7d2-4eaf-9096-c4adecbb9e4e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e548a6d8-54e0-4e1c-9506-5e4da44fda7b", "sighting_of_ref": "indicator--2325bbb5-3517-4987-9c6f-23bf850282b9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6abde51d-1cda-43ac-bf4f-be21d44c19b0", "sighting_of_ref": "indicator--e00d8914-33b9-428a-bb88-154b73f52e88", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--068d69b3-743c-4b8b-ae09-77e13309554d", "sighting_of_ref": "indicator--2c277c50-70dd-41ee-9b0b-1db01ccc3165", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08026f3d-ae33-4284-9ccd-fbc8526d8cc7", "sighting_of_ref": "indicator--205a1e39-c46a-4753-a8f5-442117db19ac", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e83447-3df8-403e-8a99-608c31823f0e", "sighting_of_ref": "indicator--4a3dee41-8207-440e-9aa6-94d214960053", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9f4423b-25e6-4729-a1d5-194c63f2b511", "sighting_of_ref": "indicator--229e5291-0fa6-4578-8b09-f0360650ff4f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f54b3be9-1ddc-40a8-9887-ba794385213a", "sighting_of_ref": "indicator--993758e6-49a2-4b44-a973-0774a8d5ed83", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede7e7b4-4b7b-439f-a5df-a6b6db40dcc9", "sighting_of_ref": "indicator--82c470b9-2103-4aff-8e4f-931782859f04", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--531344fe-ef65-4f82-abeb-b415e9f25d6c", "sighting_of_ref": "indicator--b19d0633-5208-47b6-bbad-0744c487ec10", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bcbb5c2-a939-48d2-8bd8-48ab735bfca4", "sighting_of_ref": "indicator--57068a1c-d98f-4679-a12f-53ecc330d861", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8383489d-01e6-4d50-a6c4-4a6bdcad4bd2", "sighting_of_ref": "indicator--ff673524-522e-4559-a95f-ad52593b7a91", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe071742-cef2-49ea-970c-12f6731a1710", "sighting_of_ref": "indicator--2f88994f-73d3-48e7-a63f-8093ee3c729a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a658833a-0f74-4690-b03b-999d052dc91d", "sighting_of_ref": "indicator--8ed5efbb-814c-4098-8884-aaa9f214e626", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfacf462-e4a4-420d-bcb7-693a932e1b3e", "sighting_of_ref": "indicator--a54dda7b-ee2a-48c1-bde3-f369196a08ba", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45e15c82-7610-4802-875e-b99cc468b073", "sighting_of_ref": "indicator--97e0236a-626b-435b-a18e-72b01f4e1503", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b10546eb-51d1-461b-90cb-0353e1de0961", "sighting_of_ref": "indicator--853d6dc3-be2d-4d04-bacc-fa7795869c28", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e369978-3bac-4c87-97e5-a114dcd3b69f", "sighting_of_ref": "indicator--4b15500b-77d2-41dd-a7c5-2b47cc2a42ed", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bfed530-a4f4-4569-a6e0-f37dc5151c6a", "sighting_of_ref": "indicator--e42bd401-ceb1-4dab-bb83-761698628cf1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa0796b5-8dbf-4426-adf0-9e2585b7fb22", "sighting_of_ref": "indicator--47fe326c-094c-4c8d-9457-1932b126fd81", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a144b250-ba17-4b48-af23-8fd4cd7739f5", "sighting_of_ref": "indicator--22ae063e-d16a-492c-955f-37cc2908679d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be83086-be97-489f-9be0-c833b0274972", "sighting_of_ref": "indicator--3c559b3c-4ff1-49e2-9241-cdb7098fb02d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ab9c1e9-8ac4-420b-b04b-ca279f485d12", "sighting_of_ref": "indicator--e4476744-0676-4eab-bda5-0b54096e1a97", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7858bd7-5512-4043-aed5-a64a9d09d9e0", "sighting_of_ref": "indicator--0d99ba5e-7a0a-4890-805b-5264e584e8d7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29b9dab4-5875-4415-abf9-8f5a2aca4a2a", "sighting_of_ref": "indicator--2ca27858-d676-49ea-8ef9-820c98e2cefa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc2f53a-a270-466e-ae85-61afed6c454a", "sighting_of_ref": "indicator--25952a87-518e-40e1-99ca-a0eb8d856e64", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b4a98b-470c-42c1-88bc-f34227b2ba8e", "sighting_of_ref": "indicator--bb411ba0-ae5c-4322-bbb0-eb4052a54118", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfe55973-3054-493a-ad59-b0c0539954d1", "sighting_of_ref": "indicator--1d02e2d2-1f66-497e-91bc-ae996a4b76eb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d4b6cf-2dfd-45a9-92eb-2ed7f4a46baa", "sighting_of_ref": "indicator--aa5970be-6463-457d-960d-d78202286b64", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--429c8e2e-2f1d-400f-9fc1-fe8e2916100e", "sighting_of_ref": "indicator--94e18af4-6d89-4cba-9b91-06789f0c098d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c3e8682-0240-4804-b175-71e2c8034309", "sighting_of_ref": "indicator--32883656-b583-4faa-b639-44a041d1079e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae289d7-c562-44d9-b6a0-694045c9e36c", "sighting_of_ref": "indicator--56ed53da-3aca-43b8-819b-e93b783e63f8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9913ecf8-78c5-4387-a71b-697edcebd4cf", "sighting_of_ref": "indicator--735fa838-6bf7-43de-aeab-d85385962ff8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec4187fd-f11f-4b30-b7eb-071f0189098a", "sighting_of_ref": "indicator--75ccd22e-f25a-48b7-a391-68521f092858", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--650d7a99-b6d7-419f-8652-473d4619c1dc", "sighting_of_ref": "indicator--660e505e-8d65-49e9-80f2-b6d1dc9aca6e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4b6389b-eeee-44bb-9f35-a220b35a85f6", "sighting_of_ref": "indicator--e0fdca85-3088-4644-a967-1538b0cc94c7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d56f66-49e2-49fa-94b8-edc6a295d3d3", "sighting_of_ref": "indicator--aea36f9a-22c6-442e-b58d-42a096054d62", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d32b98d9-ccee-4189-b903-c3514d26cbdb", "sighting_of_ref": "indicator--54ab4b35-52d8-4bf2-ba48-62e77c51d3ae", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6af22383-b288-4adb-a7a7-97567b1205f3", "sighting_of_ref": "indicator--775b3dc8-7891-4f21-9f40-6313aef18ada", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57a814cf-a1dd-4f0f-9007-0da844ac60ec", "sighting_of_ref": "indicator--62f9ea5a-acc9-413c-a20c-f3c94dc10eba", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6f7813b-4b4b-4dac-aed5-68037546f613", "sighting_of_ref": "indicator--f68dcf39-ab7a-4227-b7db-ade8676391a3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61502f15-70c4-4584-8d27-a19933032ccf", "sighting_of_ref": "indicator--d7f86081-e12b-4d1b-90bb-92bcdf1591a1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48593279-e3f8-405f-9f09-9a3c23390efe", "sighting_of_ref": "indicator--04c1c110-7fa0-4366-8c47-bd3809aa5810", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a41a2634-ee53-45c4-ba48-37af0a8c59b3", "sighting_of_ref": "indicator--552d46f2-dcaf-43cd-821d-d6526f2c1cc2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc760db6-3d12-464c-aa24-8836051fac8d", "sighting_of_ref": "indicator--9368eecf-638a-4b4b-b751-f49b44bfc92b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9af1aca-18d3-4d0e-9178-bc41bfd1df19", "sighting_of_ref": "indicator--fe86e197-9033-44c4-8c6c-21f4298833b8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5b17d82-a839-4917-b61e-be75f6306781", "sighting_of_ref": "indicator--21105e09-6770-4aef-8650-35dce8ffef79", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17924646-4a1c-40a2-b531-ec20af06ebd0", "sighting_of_ref": "indicator--d9c9830e-c24e-4c46-85e1-9fcaa4c62081", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--088bf8f9-1430-4229-a6ad-2d6d77f3930f", "sighting_of_ref": "indicator--3a5101aa-9b25-4428-84da-f77297a81526", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b10fc6d-57e5-439d-ae95-5f1c4fdbee90", "sighting_of_ref": "indicator--1b6618f2-8509-4a4d-aa50-895c66aebfbd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32c94929-374e-48dc-a6a0-e79e5ed61dea", "sighting_of_ref": "indicator--bc3ac924-f118-4e3f-a5d8-f29de658a888", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d309731e-d181-40a4-a817-c8b17a57709f", "sighting_of_ref": "indicator--872999e3-f77a-4607-be71-13eaf79ac01e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1467fe84-842f-4a6f-9a32-3db719b228c7", "sighting_of_ref": "indicator--41aee4a5-4b60-43ca-8b27-b23c965bfca8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58af54f8-fee4-4ea5-a157-dbedacdeccd6", "sighting_of_ref": "indicator--d31a05b7-9523-432a-ba1c-d56473208ce8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d7a9c2f-5346-4afb-ad9e-f6f3df0b360b", "sighting_of_ref": "indicator--a5ff2bdb-b3d4-4dc7-9c5a-32e67a4c7c67", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48cd76d9-4cd1-4f5c-b78b-f3a08046b958", "sighting_of_ref": "indicator--7d9c37ed-e038-4313-bdbd-6c3d0079e613", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b71f3ff-8416-4a57-83b3-87a6e9ddc65d", "sighting_of_ref": "indicator--b76712e0-c7be-4233-ac01-2ceaf6a54453", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a0dce5-36f1-406a-97bd-1e3d8c3d6f27", "sighting_of_ref": "indicator--ce54a963-4d04-4f67-8a56-61286f1153a5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf0aae6a-ece8-4f09-9e62-5ba19a1938d8", "sighting_of_ref": "indicator--dda97ea2-f335-4e26-a705-25ebd9fe8005", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e53a4c8e-29f9-48c0-acf4-4889061f370b", "sighting_of_ref": "indicator--d8bb6d39-0e30-4511-abe8-c9272d66f362", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5157f4ff-3370-4849-a4e4-6e1f5f756b01", "sighting_of_ref": "indicator--898a033a-5e9a-4761-b326-ee5c106b7069", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a63b3c22-79a7-4160-af5a-5b04b16c8172", "sighting_of_ref": "indicator--88a14b07-4792-4aa7-8ed0-7ebd12be20be", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcf03073-a77f-40d5-9415-3c98209ea0f1", "sighting_of_ref": "indicator--61fb59cc-d45c-4558-9b58-03d533a67d0e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10807afc-f8eb-49a5-af67-cf9455d0247f", "sighting_of_ref": "indicator--0ca4466f-1f65-4999-94ef-8f857f288407", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ecd2d65-cbb2-4ecd-91bf-0701414dbe34", "sighting_of_ref": "indicator--a20e3546-ab8e-47d5-a8f1-40669e0c0d09", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d23bac-5c33-4600-95d7-75452fefae43", "sighting_of_ref": "indicator--bcbe6d68-9089-4197-a89f-faa2c6f8442d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba62259-3c14-45e4-a032-b75f8034d2ca", "sighting_of_ref": "indicator--5d9ea96a-0d46-429b-985e-eeff1e02300f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5be5e9e-930f-4db7-97f5-f5b18f52151a", "sighting_of_ref": "indicator--c834699f-5a67-4279-885e-82f33ed2a455", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2159e4a-974a-4fe3-895f-ca43117e72fb", "sighting_of_ref": "indicator--95253e48-3247-4624-98ee-552e2c6131d4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a91e207-e029-4954-ad87-1a6c8bf004bc", "sighting_of_ref": "indicator--f3d889b9-c464-461c-90f3-3257c14f6e99", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d19251c3-e29c-4dc1-84f0-87d3ed10da42", "sighting_of_ref": "indicator--a2a26358-bdae-45c9-84c8-9b3077d5c519", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5af17000-bc09-4fe8-ae0c-619a4d936f33", "sighting_of_ref": "indicator--b99ade68-1c42-468d-9562-507bc8026759", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e00c678-0ad3-49a4-a3ee-19a07d23418e", "sighting_of_ref": "indicator--a541ecb2-2d9e-440e-8e87-3c1dc0744505", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3969adc-1178-470e-bf49-9e93943840ad", "sighting_of_ref": "indicator--f9ba875f-56df-42ee-ba51-2b9f1525b6a3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ddf734-1d50-4c1b-85d7-b88a101491b4", "sighting_of_ref": "indicator--3a4129bd-c491-4d97-94ef-4c6b920f3989", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad8dde56-b248-4828-8040-bed6e5ea81d7", "sighting_of_ref": "indicator--50bcc1bb-df3f-428e-b659-e53837a9fc46", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88fbd7e1-30ed-4322-9fd7-bafd54e06a71", "sighting_of_ref": "indicator--a079c63d-6788-4794-96f9-9f6d26cc3aae", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff92e4d-5628-48e0-818f-d16eb3fa620e", "sighting_of_ref": "indicator--bce1a94b-2fca-4291-8a69-20d5cca58475", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--142a0b77-b067-446e-8f02-d01a12465ecd", "sighting_of_ref": "indicator--dffb5a98-463c-454e-9578-00b071f15701", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad3e196e-210f-45b4-9ffe-640d8e323815", "sighting_of_ref": "indicator--2a13f1ed-041b-474e-8671-415903be01f3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--824151b3-1cd5-44d0-9779-067e4a8a6e89", "sighting_of_ref": "indicator--a19c75dd-c1da-4cdb-a1d2-1306cf96b7cb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b280c884-c659-41bd-b402-c6fea2721a5f", "sighting_of_ref": "indicator--33a24c5c-e738-4d4e-ae35-6a8ba0daaacb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a50a6eb-0774-419f-a9c3-c37adb318125", "sighting_of_ref": "indicator--f1ff8a51-3e72-4652-a7e9-21ee3474d8bf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--352d7505-5a02-4c53-8011-a06fcb760d34", "sighting_of_ref": "indicator--7350fa96-e94c-4ae0-9b9f-0b89e09cb433", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06feeaf8-9fbb-480c-afe7-8b32f4d2602b", "sighting_of_ref": "indicator--923bb06b-a44d-43a2-b9a9-52205ed0b02f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c3857af-6369-4ce3-a548-ecf9ce0d926a", "sighting_of_ref": "indicator--8cd57707-75cc-4c8d-9f9e-37ce8073e468", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94246ea7-50c7-412a-8a1b-15af1d4de252", "sighting_of_ref": "indicator--8231e11f-b8fb-4482-8967-95af11fdd293", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--999a66ac-0a62-4733-9473-84f87d048641", "sighting_of_ref": "indicator--ab14f5a4-0d41-43ca-95cf-710f5ccc032d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d40e922c-d3f8-40d0-92ce-ac8049d63e35", "sighting_of_ref": "indicator--f1761bf0-d201-40ef-b2d6-3754373ddcb9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d07e12f-991b-4013-a5a2-33140a770131", "sighting_of_ref": "indicator--d159d0d7-26d4-40a7-9b72-0502ff8b288d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--946f0632-13f0-46b9-8b35-fbf509a602a6", "sighting_of_ref": "indicator--d27202fe-5b93-4023-afe8-2ad7fedda9a9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e668ebc5-df16-4743-ae23-e47d7417a7d5", "sighting_of_ref": "indicator--e8b16b24-9fcc-48b2-b5ab-e1e873919e8d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b8bfe3-b245-472d-b76f-5f6d110c543d", "sighting_of_ref": "indicator--929a2c4a-38b2-44b5-b84b-bfbe92d95b37", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2164f212-8680-4bc8-bb44-1652c17652ab", "sighting_of_ref": "indicator--83f5b9f7-b9b2-4731-a4b7-017110a1f497", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b56f35f-bc44-4ad9-a5b5-ab438b74af33", "sighting_of_ref": "indicator--a65baaea-3fbd-4f32-aef5-d4325ab28265", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c40a524e-7156-47e8-89e3-9e1995c82e3d", "sighting_of_ref": "indicator--772f7bc0-6c51-4f25-b46d-7e23b783c192", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d66d13e-488f-4cfd-8f9c-7de4cb57f585", "sighting_of_ref": "indicator--b84d000d-9fea-439d-8aec-5b157bcc9fcd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23d68c3-0514-46cc-b008-145867eaeb76", "sighting_of_ref": "indicator--2dab3941-4658-4f6c-9718-b861472089bd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b9321f1-975a-4bb7-bd0f-f7359e55cd19", "sighting_of_ref": "indicator--06a4f214-1608-43b2-affd-23ada67f8801", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1bd10a4-130a-4cff-8418-9fbdfc82f270", "sighting_of_ref": "indicator--015d5cab-060f-43c6-aadb-f4ca877f464e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daeddc66-e5ea-43af-aba1-7932bce8f196", "sighting_of_ref": "indicator--3eac38cd-69b7-43d0-b566-4730f53ff414", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c3769b7-dfc8-4a31-9738-5615f874c0b9", "sighting_of_ref": "indicator--da5b36e1-7892-45a6-b979-6990feb045d6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f95b3bcb-18fb-4794-a5b7-e90874971b12", "sighting_of_ref": "indicator--246a6cc3-8194-4f07-8144-72ae5ea2769f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4598aee-a9d1-4248-9f4d-ff5ff4adc4b6", "sighting_of_ref": "indicator--2c47bf11-13f8-4aff-b0de-cd458100cf66", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd1c53a-a23b-4ba3-a7e5-d7365817dbc5", "sighting_of_ref": "indicator--11664ebb-0510-43bc-b7a3-01eb10d49893", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3acc9c11-500e-4242-8b58-02b92d7f6d52", "sighting_of_ref": "indicator--d8cf62e9-21c1-49cb-91ed-176e8ebe5763", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d84a37f-8338-4bb5-a60b-20be55229ed6", "sighting_of_ref": "indicator--7bc05248-9c59-43a3-8fc8-458e302bbb18", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a10a4ffc-f23f-4d09-aee2-61fa922d0a0a", "sighting_of_ref": "indicator--199337cc-221c-4613-b3a9-1208411ff822", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87f64341-0499-4214-9fd2-2fcadeef3264", "sighting_of_ref": "indicator--3c9d3d51-5ad9-4297-b4d1-8aec09bbff8d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb9a3cac-7705-4dfb-9f76-5bd9e754bb57", "sighting_of_ref": "indicator--80cc7beb-3cda-4a61-9b01-7d59173ff0f9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce6b74c0-3f40-49cb-b478-1c39e38980d8", "sighting_of_ref": "indicator--458635a1-dcf7-4d66-8fd8-0004aa86c4a9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9565de3-9c1b-4f7d-a935-efa4771e993a", "sighting_of_ref": "indicator--befcf3b5-2343-4aa7-af0d-0a1ddb746d3d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ccab638-decc-4b88-9c41-eaf86a0346a0", "sighting_of_ref": "indicator--9b320896-7310-489e-a5f9-d248dadb99a8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7af9a09-0474-495b-a176-d201714899c5", "sighting_of_ref": "indicator--79aaf005-bc0c-4e97-8289-4f3224f412fa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccc64cc3-1c3f-4c7f-bb1c-8564c1fc1eac", "sighting_of_ref": "indicator--ea2fccf9-01c8-4a47-922c-6665fdf42963", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ba154be-1551-4f79-8d1c-7b5f0438867a", "sighting_of_ref": "indicator--2e02fc8c-390d-4f4c-ba5c-a5cca6f50569", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1814fb6d-a888-447a-92ea-edf7b6878275", "sighting_of_ref": "indicator--f89e8277-e867-424e-b69f-6fbc75e9b742", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cd74c04-3a55-46d9-a2ab-d86efba3dabb", "sighting_of_ref": "indicator--f5bf5215-7994-4926-8bc2-45d5d5f2bfff", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc38e1de-df5f-48a3-924a-e00c3b7b4482", "sighting_of_ref": "indicator--a3b32206-9c63-4a5e-bfe6-bd4d46772c69", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c235120-afcb-42a5-85fb-5eb42ce30a2f", "sighting_of_ref": "indicator--8a31f503-41ff-48c5-98c0-61fb826ef6e7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe66912a-092d-498b-bab4-f86ce67a7060", "sighting_of_ref": "indicator--06674637-3a0f-40cc-b459-cb5113d192c3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d44b55df-0d06-4a49-a82a-b75c994166fa", "sighting_of_ref": "indicator--2c073b15-ed0b-481c-8211-98bb8021c0a6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62900db9-b035-4bea-801d-e835917c45c6", "sighting_of_ref": "indicator--977bef74-54b4-421e-8cf9-4ffe08eb7d5a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--461a0332-298d-4693-9ceb-099056dbdae4", "sighting_of_ref": "indicator--20a486c1-c1f5-4f12-ae15-b5abf0c76638", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d12787f9-d207-4bd2-963c-d2384ba3d0cf", "sighting_of_ref": "indicator--9d0075ad-d6b0-4882-8b71-e1554fc2251d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e40f2cba-9c11-41b5-9a57-04915c7a2b0a", "sighting_of_ref": "indicator--ed7cba57-9d4a-4295-a48b-5a5644f226c5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c553a0f-e9cd-4eaf-a8df-a0c03556d952", "sighting_of_ref": "indicator--5d3ae3de-255d-4e69-8f63-c93941f5b268", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e954b2-4692-425e-ba76-646500190ddd", "sighting_of_ref": "indicator--006a4f42-3cce-4aa1-8b6f-1f41e7cf9466", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b62fef-469b-4295-9a7b-e9afac14727a", "sighting_of_ref": "indicator--a629b0b3-324a-442d-ac9e-b1d435393243", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca4d6ce5-65cf-48ce-ace5-0b537cb323a6", "sighting_of_ref": "indicator--07aa2d1c-b9a3-404c-8cfd-e9e61b905edc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2133a572-519b-4ec5-a9c7-4e700831bd06", "sighting_of_ref": "indicator--7febe577-f8b1-4f84-8cdc-46d32dfef95f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc9340f7-233f-4ed0-8d24-54240be84408", "sighting_of_ref": "indicator--d1a121ea-8633-4c51-a167-0a94bbd651f3", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a46d23b8-e524-49c2-bd0d-209532781fd6", "sighting_of_ref": "indicator--d55eced6-f2d0-4c86-9a65-baffeb1782a0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e10ed420-5349-466d-aacb-e7f295628bf7", "sighting_of_ref": "indicator--e818b2dc-41c8-42f7-bdab-385be243448c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fc35dcc-86ec-451b-b869-db4107af287e", "sighting_of_ref": "indicator--3038c036-b33b-49cd-b409-49ef06ea9163", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4145a88-58c3-4339-8a8e-4a743c5c5472", "sighting_of_ref": "indicator--1814af77-43e7-4bc5-bd39-99d9b243e948", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f90c789d-9e45-4776-9136-720c6a7a74fb", "sighting_of_ref": "indicator--de14affe-7512-4743-92e2-95ff68c77b5f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44999919-e7ac-4d3e-ad1b-91bf5dc65dcd", "sighting_of_ref": "indicator--91175b4b-ca2d-479e-bf45-c46ec5c6efac", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b6885b4-f7d1-4ff9-bc0a-04a52179a0c0", "sighting_of_ref": "indicator--eafb1b4d-76a3-4b51-848c-ca5b1d913f0c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--221197f7-e95b-4fc8-b478-d92d1d9c5fcc", "sighting_of_ref": "indicator--9d91c24e-7f90-460b-b3d0-9700c8e79913", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d600325-4196-41d9-85e7-31275d598208", "sighting_of_ref": "indicator--975d2b23-2477-4b3d-94bb-900e867bec88", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e51e40c-f6bc-422b-a441-a83c12c83bc3", "sighting_of_ref": "indicator--672cb3be-b036-4b69-8031-601159a9aee1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--916754b1-3125-4ce9-bd6d-bd44068683ec", "sighting_of_ref": "indicator--57e8aace-29f4-40f6-899e-4ecbe9064337", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24be83c1-80fb-444e-87e6-1edefea564ad", "sighting_of_ref": "indicator--f9e9ea92-4a70-4717-a859-53844678b96d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb7fcc41-fae4-4230-8681-b6fdd2bb818a", "sighting_of_ref": "indicator--32d1bb34-1b96-4e05-8a0a-fdd323f63bc4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60c224a3-80d6-4767-ab71-f07adb72c5c0", "sighting_of_ref": "indicator--764f540b-5cd2-4672-b27a-0f1730b77e33", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32bfb86b-e94e-4086-ab4b-cb5573d94e90", "sighting_of_ref": "indicator--f833adb8-c567-42b9-9733-c5a319b6e9ff", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ec63842-04ad-4fa6-8293-c2c4110b2249", "sighting_of_ref": "indicator--85855577-1f31-44d5-a227-314235a4077e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25cf7fed-ed95-45c4-9c7c-40bae683737a", "sighting_of_ref": "indicator--4a77bb14-3dac-4b50-8b5c-6e435aaac34d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e90509fc-e46c-4f75-a7bf-d75279464eae", "sighting_of_ref": "indicator--09c6a797-d2b8-4511-9acd-7ad9af1572e9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef5e525-85eb-425e-b95a-549ad17d7744", "sighting_of_ref": "indicator--0e381746-0d09-45fa-b62e-7fcd92393dc9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa737a11-1656-444f-ab9c-c612d3b3f6f3", "sighting_of_ref": "indicator--e5e12d22-416c-4688-aa07-6eb32d526c7b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbdc0415-dbce-4a4d-b535-12a91e10a578", "sighting_of_ref": "indicator--b6fff373-b9af-4c37-9473-652a1f086103", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--171f0fb7-a674-4c67-894b-4c50653567ec", "sighting_of_ref": "indicator--4a4b0089-9931-4284-96ea-ad8c694fb8c9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54971faf-d943-4c1c-a89d-2511f431de2f", "sighting_of_ref": "indicator--a1916d85-09ed-48a8-a142-86b8df9aff08", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f2146a8-a1cd-448f-b41d-42ae52778873", "sighting_of_ref": "indicator--73108af4-ac56-4b9e-9018-33839b1faed1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc772cc1-93e0-4fed-9570-41b2f006056a", "sighting_of_ref": "indicator--28e10dfc-0835-4bab-9248-ed35114a604a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cf25b9f-ed92-4fa7-86e5-bd842ca47fb3", "sighting_of_ref": "indicator--e682246b-809a-4a19-b655-6730da87eedc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32c66f13-f258-44f8-b8c4-e3fa614004db", "sighting_of_ref": "indicator--f221ef2e-6399-4495-a87b-af4c5129b492", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97db5a6d-c7ea-4132-a11c-30281b848c82", "sighting_of_ref": "indicator--894565be-79e2-4d32-af4c-62e4f405b7b2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9bab804-e4c0-4331-accc-a9e35cbca97e", "sighting_of_ref": "indicator--9a19c99b-1b34-4f53-b01d-c24784f4c22e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f36c4f35-e93c-42e3-84a5-f44f9d88baec", "sighting_of_ref": "indicator--02224f23-54f3-4b27-8462-e046e16023ba", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29e75098-17c2-4fd0-ac77-94d11e11a7af", "sighting_of_ref": "indicator--1b9bff1d-c636-4014-89c2-514b2b33c735", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ed1b972-1076-4fe1-a0ce-e728a2bac837", "sighting_of_ref": "indicator--b24ab529-0922-4679-a645-3bf9285d59a7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f04d4cf-b22a-4809-a521-ba89d57ae192", "sighting_of_ref": "indicator--5f0d1b6e-0c35-426f-b954-07ef276b5a28", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e85948-a2c3-4870-a2f5-830dea260c1e", "sighting_of_ref": "indicator--50c2d1ae-4f5f-45f2-a70c-32196edf4bba", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e7c323f-b529-44cb-8c60-4bd2d76f1886", "sighting_of_ref": "indicator--b85fa006-c921-4723-9218-af8d8ed5cc3c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94d642f6-ec92-4197-abd6-37e4e61a6a51", "sighting_of_ref": "indicator--d308f835-6df9-4f3c-96f1-109ef9d07ac8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5799e23b-4ad0-4fab-9162-b53654045e56", "sighting_of_ref": "indicator--fa1317e4-b543-41bc-9dfc-cb4159a5e68c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23c16628-c9de-4bf1-a960-c310f8ce049c", "sighting_of_ref": "indicator--44aa642e-5737-44ad-b9dd-f982d3851cf3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e89dc9-8672-402a-815b-057e53d8d257", "sighting_of_ref": "indicator--2f9a94fa-a533-4d81-bd84-23533d48e7cb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62979cec-7059-429c-9a8e-05f8973be996", "sighting_of_ref": "indicator--cff6b752-1c19-4b54-a72b-5697ab2c62fe", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23038770-30a4-410f-98cb-5818bf2a3b01", "sighting_of_ref": "indicator--d047a498-60b8-47c2-b98b-ea5283d7312f", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f38f2c0b-bc70-4128-8adc-05192ade5a9a", "sighting_of_ref": "indicator--07501707-159a-466b-830b-5dd21898151c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95eae3c8-8806-4649-bb9d-f05be47f55ec", "sighting_of_ref": "indicator--bd46509d-927e-44ab-92d3-eb204f0e1cb5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a19d28ac-6ff7-497b-90f8-351a04e4d0d9", "sighting_of_ref": "indicator--10813637-5ae2-4d2f-b94d-79f43bea70d6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b962296-acbb-46c2-b19e-b6ea088e0e4f", "sighting_of_ref": "indicator--eec0ea13-0a02-4e6b-97d6-99158cdaa6e1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd0c6b5d-6335-4e8d-bdc2-7723894bf5ad", "sighting_of_ref": "indicator--82555cfe-6efb-482c-a4e2-7e9ed8b717cc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4766c328-7874-430d-98df-880dc2c4cbc2", "sighting_of_ref": "indicator--5ed86bb4-eb3b-44a1-9dca-cfc79f0231fe", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba2652ae-8a7b-4140-b534-01b9ac722ec8", "sighting_of_ref": "indicator--661a83a4-c862-4341-909d-0f18eb6f20ba", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc3970c4-073a-466e-92b8-9b7cbbbb7067", "sighting_of_ref": "indicator--de2561e1-9913-4f0c-b6f0-7f1734423388", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb1791ee-b085-426d-a418-e0e56c9119c4", "sighting_of_ref": "indicator--f6d2c41b-7889-40ab-86af-584d3832feb0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6947e36-b527-4b87-9e38-7f3d20823840", "sighting_of_ref": "indicator--d927e2f6-1552-4c9b-b2e5-ff4c90e70033", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57bfcb10-a05f-461c-a787-29add94654d0", "sighting_of_ref": "indicator--f048c94c-ddec-4d11-b09d-d5b458ca2729", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e099821c-2596-4ed9-8590-1b3bafc11129", "sighting_of_ref": "indicator--60fc9190-afcc-42e7-a70e-518ffa00671c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11c1cf42-79af-46f1-b752-11e4a2542688", "sighting_of_ref": "indicator--686cbc53-f323-4400-8e6f-12db4ea82513", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa7def32-bd01-4afe-b5e2-6f407d90e38c", "sighting_of_ref": "indicator--b28515fd-7c6b-4e5e-baab-dc4b4a9b83da", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d3fdc86-d97a-4e58-baff-7eac60a03073", "sighting_of_ref": "indicator--b6721f4a-ebf7-40c6-962a-b62ea1dc8e57", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb7f307-d297-47d5-a174-ce34cc140a23", "sighting_of_ref": "indicator--d1c7ea9c-170d-416d-a840-52544b88bad2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac40bbbf-864a-4965-817c-d2db398d2f84", "sighting_of_ref": "indicator--a2ef5f81-8c95-4ad2-a1ed-c9d89f24c890", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e34b6860-4ac2-4d57-8706-ebc273620d4b", "sighting_of_ref": "indicator--b3f69332-3dbd-4a24-94eb-9a4c8b8a6eb9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1681394e-f6b9-4103-98ff-0c15db135bad", "sighting_of_ref": "indicator--90a809c4-a926-4ab2-95d7-5bb2a8bf7a5e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--065e94c3-1592-4d37-9817-9ed9f8ddf58a", "sighting_of_ref": "indicator--e40a9f69-38a0-457f-b0dc-4d904071df87", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5723e88-fe72-4d3f-a8b3-859187481afb", "sighting_of_ref": "indicator--7f5e6687-8861-4134-8984-18d33b1ab6f0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--671d9f62-0bf9-4de3-9584-dd0f53b38bca", "sighting_of_ref": "indicator--fb3f8971-c3e7-422c-8b38-8c057e3d4b49", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81f8b012-29e3-4d9a-9df3-979022850ebb", "sighting_of_ref": "indicator--b8014673-df72-4019-b1f2-0fa58f646196", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e603052-ba36-4bb2-bffc-229cc4255e60", "sighting_of_ref": "indicator--f1c9cf29-a585-4628-8af0-f5bd10ebbe1d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34bb9319-8dde-422a-aa82-e6493d7ad174", "sighting_of_ref": "indicator--89678228-6d78-4cde-bec6-fd13dc23a4ce", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9185fc01-6ee2-40c2-9254-d6dce9932dd3", "sighting_of_ref": "indicator--e5be72c6-3aa1-4b51-9cb6-f6eaffe71642", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e2ca384-9aaf-48e2-9232-ba59b893bea6", "sighting_of_ref": "indicator--d2f4c31d-03f2-41be-8ba7-4da29d6ddb9e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97472a46-726e-4ccc-8fb4-d69f57900ea3", "sighting_of_ref": "indicator--53ef85c6-45cf-4c97-82d5-347811337026", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f1139ad-01e9-40bc-aa67-52afd444fdab", "sighting_of_ref": "indicator--8475517e-be81-4931-826a-53d4e16f098f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa4b57a-056b-4b0e-9253-330e067c2c6f", "sighting_of_ref": "indicator--b6e09f6e-b4b2-4451-8fc6-10eac7b24dcc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d1dfba-cafc-4e86-a1f9-a6b655e6a490", "sighting_of_ref": "indicator--48b27a81-b9b9-483c-9a20-f063932675c9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f8022a0-eca7-4fd0-beca-5968e8206d21", "sighting_of_ref": "indicator--b1bef858-caac-4b6d-b302-f9e0b103abf6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--013ec70d-4547-400f-ae86-e9fb2d39ad51", "sighting_of_ref": "indicator--c37b2995-6821-46f4-8b3f-20f6213b287e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbb005df-4c54-4dd7-a341-1dc3e1da550d", "sighting_of_ref": "indicator--4a34de8b-ca35-4636-a26e-d84c91d8be88", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8ce5218-caa3-49d2-846f-cca22891fe79", "sighting_of_ref": "indicator--4ef2ce6b-6fde-4d90-b69c-f1a2a09da1a5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1cfc361-95bd-4e10-81c1-c43c180eefd1", "sighting_of_ref": "indicator--771f4050-99c9-4cd8-804a-0c22c2839310", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db9745f5-bc1b-4d17-b4f4-50a76106adf3", "sighting_of_ref": "indicator--38c44e61-770e-43db-aae5-ad48932b04be", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e3aa18-d915-4e71-a8d9-3c4d21035031", "sighting_of_ref": "indicator--e75f5087-d76b-4ae6-bf6e-e391f842f12c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b1a463d-59f4-4896-bbd9-014af3a0c68a", "sighting_of_ref": "indicator--efb068e2-26fc-4cb8-b293-7175266bbf19", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b65dc7-a789-4ef6-8de1-fc2fffd701d7", "sighting_of_ref": "indicator--fc92731c-5112-4af3-984a-deafc3ad6d2f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb66a725-faea-4f6e-a7aa-c4d780eabf1a", "sighting_of_ref": "indicator--7a4944f2-1f6c-4446-9906-1e3563ed4b4a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63f54936-f1cd-44d0-a694-37e842fc95e7", "sighting_of_ref": "indicator--54d4ce1a-7c87-4011-86a4-6ef8e3cdf000", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c77315-9f01-4ca7-a9c4-3733b9c45dcf", "sighting_of_ref": "indicator--ebc1402c-8360-493b-b02e-45e1c7ec5325", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e91787bf-0efd-479f-af6c-a9b5728ab85a", "sighting_of_ref": "indicator--17e69219-3542-4520-bd2f-f59e9460c393", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--439ee553-e0e4-4f9b-8b73-f0ffb9edfd8d", "sighting_of_ref": "indicator--ff9384f9-9a51-4231-9945-9d0d3703a7d4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fb2660d-8956-466a-b960-02b5ac9d9906", "sighting_of_ref": "indicator--9003306c-b9ea-4188-b950-a7bf9439559c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--537e4b43-aa32-4a70-9451-3966bbea978c", "sighting_of_ref": "indicator--430f608f-54aa-4e35-902e-0faa6ec2993b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52506902-e3f3-4cc5-b610-0bd4e1b1a3ba", "sighting_of_ref": "indicator--8141ef87-4d79-4828-89fa-6cc27190ccef", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a4212e-d144-44df-8962-ef3f1ec9f1fa", "sighting_of_ref": "indicator--48204b32-03c2-4604-8f31-8db7ca3457cf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a533baa-e391-4517-b51c-9fd878d9e347", "sighting_of_ref": "indicator--0f19dd30-c0ba-4bb5-bdc8-d46af6321019", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--681805ae-7d42-40d5-a20b-0198a1b3c88e", "sighting_of_ref": "indicator--a6dd449c-f2c7-4815-b4a5-27cb1fa413ce", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a43d8c95-c06b-45f3-be07-ec029166227a", "sighting_of_ref": "indicator--11bdfd62-e8d1-4a1f-bd6a-ccf398679e86", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54b1dc76-0653-41e6-8b06-9e43b21d1483", "sighting_of_ref": "indicator--b815261b-e9c7-4702-93f3-e6ff5d886b3c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ad7020-4212-4237-9a4c-777f4be2ff64", "sighting_of_ref": "indicator--0157fe9f-645b-47f2-9310-8e18adade220", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6449acb-0b0d-49a1-8f4a-adc62476887f", "sighting_of_ref": "indicator--2041e7c2-733a-49cb-896c-fd6c09eb153f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5377537b-231a-4fcc-a022-4ac035d13eb8", "sighting_of_ref": "indicator--6d1481fa-0a50-4c5f-bc2c-6dfb1d5804bd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d252557b-b40c-4fe9-a2d7-8a3718125e59", "sighting_of_ref": "indicator--e5874173-702d-4d0a-b2cb-5f1cc92490f6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7be81b5f-e8b0-4721-b28b-e453cf6988d3", "sighting_of_ref": "indicator--940a77f8-861f-4b48-9806-c3056c29c604", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59ca9c7b-9338-4302-ba41-fe4b05ac9a07", "sighting_of_ref": "indicator--ce80b406-e577-4d44-b514-810c25b5e318", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d020cd-7c5f-4a78-8f46-1ff38e9fc0d9", "sighting_of_ref": "indicator--354a24f4-5a08-4b62-984f-e56d9634f3da", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e8166cb-c2f9-4028-a184-8c9a4c69ad49", "sighting_of_ref": "indicator--8f019f2a-0980-47d0-b094-bd362146fefb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24eea9aa-17ac-4397-80a1-5bcd9108d827", "sighting_of_ref": "indicator--252da317-ef11-4457-8178-3016d648fea6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df9c7de2-dac4-4794-8ef2-67a7164370a3", "sighting_of_ref": "indicator--b53d1dd4-540c-4a89-b487-5015562b229c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0c24cc8-7c78-430a-9912-912cf8caa929", "sighting_of_ref": "indicator--7e943405-7cae-4181-a001-a948f910d0f0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64dfdee-6c8c-4817-9084-ed06aeda07f1", "sighting_of_ref": "indicator--84a076ed-e6bb-4dea-897b-4737ffc145e8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e616ded6-36bc-4b5b-8828-e9445d7fc604", "sighting_of_ref": "indicator--149a354b-565e-49dc-b117-7a3f6b94809c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23e8812-7d13-4278-999e-d70228b33021", "sighting_of_ref": "indicator--89311373-7888-49b7-a652-a6a07cb4587f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f65e1ccf-3132-45b2-a487-965381f60d4e", "sighting_of_ref": "indicator--32df36e4-55fe-4a3a-a3d9-0fa55a38c69c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--825d727d-3c8b-4ba4-8c56-10c68de55a51", "sighting_of_ref": "indicator--d6c8f37c-df20-453e-bcc4-a3561c0f4b4d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da6c24c-6c09-4b54-be7e-69c52e4e12fd", "sighting_of_ref": "indicator--1593555c-aa84-4ad1-8bd9-559c47f9d30f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeeca7ef-6253-4f22-b07e-27ac5f904e70", "sighting_of_ref": "indicator--5c2d9021-994b-4515-875f-48237ea5cf0a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cccb8149-a11f-4c4a-92f7-a6d2369f1e72", "sighting_of_ref": "indicator--0bc919a0-5d3f-4020-9c57-8eb20fafa8cd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--698b63a2-eb31-455e-8fae-cf76358972ba", "sighting_of_ref": "indicator--d0fc9531-3592-44f6-bbea-52dba8a74955", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32599c0c-a58c-4748-8000-b659bc33e866", "sighting_of_ref": "indicator--6c6b27dd-3c42-4430-86ef-ad0f7879a938", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ee22c22-ad35-47bf-abee-dc54fee57215", "sighting_of_ref": "indicator--2a417fc6-7c31-4a17-b05b-dd35a77353c0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6023f2a0-14d4-440b-8428-8ad5d5d4a606", "sighting_of_ref": "indicator--392fd3a4-4d36-4d2b-a639-9a6cb62b44bf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2815f15-fff1-43d1-a4a8-4c81c13d5e78", "sighting_of_ref": "indicator--97d747d0-0410-424f-9bde-0e2ecd466d5e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--697fa54c-eb92-46c1-a610-7e9cfcc5f534", "sighting_of_ref": "indicator--93de6aa3-8310-4b16-9049-87880dd1bcb1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32433c15-a5a9-4b91-980b-3458f8e2bbe1", "sighting_of_ref": "indicator--03d6b112-f1fa-4957-9e51-f24be46b751f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--332f406f-561d-493d-87f6-5dc17ac0374c", "sighting_of_ref": "indicator--0c45550d-58ab-442e-aae9-f3e8de8db501", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ec8318-ab1c-4477-b7eb-823fbddd5b4b", "sighting_of_ref": "indicator--e5490839-1c58-4d4e-a742-56e5d3fde7f7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfc35dd4-5ab7-400a-821d-a9232f803da6", "sighting_of_ref": "indicator--329142c5-2950-4fd5-9d45-2631f70b7a94", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b247b08-48da-4244-baff-2acd1683ba34", "sighting_of_ref": "indicator--cfa0609b-db46-4429-a869-88aaa12ac44a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21ecd03c-6e3a-4f60-b59f-c5afce18d4e3", "sighting_of_ref": "indicator--13b93e0a-6967-47cc-963d-1767ec31f678", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3d70cdd-d803-472f-8839-1e223f5970fe", "sighting_of_ref": "indicator--f5c072ec-5e9f-439f-832e-ba7dc9e4984a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65867f72-99e5-4484-8ffc-ec95d56049d3", "sighting_of_ref": "indicator--874dfaba-ee7f-4224-8e3a-b09389972a67", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aae8731-94f1-40a5-8e4c-2af6b8fe2c15", "sighting_of_ref": "indicator--4c268c58-cf14-4eac-aa26-5e9b4f0c3b82", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2886bab-9d2b-46c8-a042-a6a9ddd94850", "sighting_of_ref": "indicator--2dbb38cd-d9a5-4271-bf76-ce65022fd1c1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e013743-2602-4f96-b90c-5ef6f01a61c8", "sighting_of_ref": "indicator--60ce6b13-4bd8-445f-8dd2-af241af198e9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddbe8386-1c03-4e4b-ba1f-71ba2161ff78", "sighting_of_ref": "indicator--f5e5ba00-3a21-49be-b144-190db7903cad", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c3f00cd-77ba-4875-a121-1bcf8a99843a", "sighting_of_ref": "indicator--697d7637-1cf0-4e47-859e-f65afa6fac70", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c4c3c6-2780-44c9-a606-1f05e4d88799", "sighting_of_ref": "indicator--38c13048-48c2-493f-a3c6-cf91403ebe30", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a47c72d1-6923-4ad7-95cf-846599c6e0c3", "sighting_of_ref": "indicator--402d2786-a93c-434b-ab7a-c65bbce083c8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c84c864c-33fb-465e-a3c5-b1d784128db8", "sighting_of_ref": "indicator--f534fa9d-b696-4b8b-991a-f04eac290a16", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b65ffa64-b9ca-4057-a78f-299bf51d7962", "sighting_of_ref": "indicator--bf41333e-0fb4-4ae6-83e9-0e0058a0f259", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--735a5d45-52e6-4adb-b58f-933d63b09e00", "sighting_of_ref": "indicator--28ee003a-2927-4071-a9b8-dd11202edb3d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b854cb61-7e49-467a-9f62-f287a0c1405a", "sighting_of_ref": "indicator--f5001701-434b-43bb-9c75-b2525783fb5d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98ad113d-59c2-4dbb-af16-b3f7d5827194", "sighting_of_ref": "indicator--a5410259-5550-4636-993d-07d37e95e4f5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bf40247-1933-4c3b-a6e1-4a11f9f76065", "sighting_of_ref": "indicator--0338e22e-3302-4602-ae7c-fa7862ce34a7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7f47e3f-9045-4702-9526-aac29ab7dc65", "sighting_of_ref": "indicator--64c38624-ad04-43d3-a4b7-f17489efada3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6e376af-d1de-4c2b-9e7f-79a27ac567c5", "sighting_of_ref": "indicator--542f0dce-9e33-4960-ab12-2bbb5169a2c7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1751d447-4285-4ec9-a810-d1080aca0eb4", "sighting_of_ref": "indicator--750ed2e7-be10-4333-a897-f4bfe5b3e4f3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--991e071e-aa80-4d2a-a239-d3c4204d7e63", "sighting_of_ref": "indicator--27216e64-3f15-484c-950b-78464aa9909c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d7ba66f-6627-4999-ae8a-15d090932e32", "sighting_of_ref": "indicator--d14967c0-5ea1-4371-979e-7881a0c81401", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17697e67-6dd3-4a84-a0e7-689463f41898", "sighting_of_ref": "indicator--4278c00a-35fc-4f0b-a9d7-df125e9bc4bc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45b3af5a-5586-4346-9067-d9d317982118", "sighting_of_ref": "indicator--6795f4d7-9c29-4e16-a0b9-dfa2333e945b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e61d057-d53b-4bbc-9cb4-6941df8ac666", "sighting_of_ref": "indicator--e608b338-63e3-49b8-b9b2-6017294cadc4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9325c297-515c-438a-ae79-eef7e16e3d54", "sighting_of_ref": "indicator--30c4db0a-b7ce-403f-b6b2-8b1c0f00187c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba5370a2-b63e-48a4-b7a5-1253771e99e4", "sighting_of_ref": "indicator--bcb00966-a1fc-41a0-8df3-b04c0e571cf2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c22c34ef-b9f8-4b8c-b274-82fe0d647190", "sighting_of_ref": "indicator--dd49808e-ea9d-4e96-a92b-dc678202765e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8894db55-3c09-448e-85c0-43119aaa415c", "sighting_of_ref": "indicator--0e34ce7f-dbb2-47da-9900-19ba66e44296", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7892ba80-1b18-4ec5-8012-d541d6914415", "sighting_of_ref": "indicator--a2218066-d8b0-47e1-8e89-3de117933625", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48e8892c-409b-4a53-8aa8-7b49cdf6ee35", "sighting_of_ref": "indicator--96f07644-130b-4f7b-9f2f-87ad46de90b7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd53235b-c954-40a9-9453-0de22da80de6", "sighting_of_ref": "indicator--9b4e5bda-5c39-4002-ae3d-f6a3b4912a65", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cdb3cd4-bc8e-4143-8581-b5b997880161", "sighting_of_ref": "indicator--995b1f97-4adc-41fc-a31a-1bac64dddccd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27c22bb6-bb19-482e-bc95-2025598fd79a", "sighting_of_ref": "indicator--71550c6d-720c-418d-a63a-1b4d5c9670ad", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c5ca9dd-6a34-4197-b821-71fa03a145ed", "sighting_of_ref": "indicator--58af030d-82af-4210-8bb6-849b018a0cdc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d20aea34-a7df-4ad1-a7b9-781fe117bb72", "sighting_of_ref": "indicator--b87b518a-1110-45f9-a130-62b83104b68c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4ede29e-7bf3-436c-9c46-ecaece6cdb00", "sighting_of_ref": "indicator--56f8659b-5677-480c-9989-8ac5fc53544e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f50c95-0235-448a-a62d-1614a52dc138", "sighting_of_ref": "indicator--a0d842aa-a5bb-4022-930f-52bdd2e4e15e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e2a5295-bd78-4e31-8dd9-e4442a4eb59a", "sighting_of_ref": "indicator--425b8574-4d43-4497-8604-d67ef30f9eed", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c066d8a-c639-46c3-a984-79a7e5beea92", "sighting_of_ref": "indicator--83a9a47a-242b-4d24-9a05-53a4a8daef12", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33c77c49-684f-4ee2-9365-ee66b6aab8c6", "sighting_of_ref": "indicator--6f72e780-0adc-4d07-9d63-d875168af0dc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--601e1812-99c0-4277-81e1-dff426c2e34b", "sighting_of_ref": "indicator--65e49fa7-67dd-4ad1-a1ff-1be410963389", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bbbf153-5620-496a-bef7-0de849230e53", "sighting_of_ref": "indicator--22a004cb-e758-490d-8066-9402831d64b0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60d7dd81-ec35-4ed2-b2a7-1635b44634a2", "sighting_of_ref": "indicator--5122666b-4251-404e-b641-f96ba2d2c469", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b04d2f-1741-494a-b546-eb579e1352f5", "sighting_of_ref": "indicator--4c18aa26-56e8-4a11-821a-d73b651b9a92", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e205e675-d107-4add-9098-7e69f2c038a2", "sighting_of_ref": "indicator--acec0476-0120-40cd-9d6b-ba0f57dcde46", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--befeb1cf-f958-4f4c-84e4-f323fdd2463f", "sighting_of_ref": "indicator--c983ee4a-567b-402f-a806-2db23f4ed090", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb8c5a9-9b27-4bd4-a3bf-87200d34f339", "sighting_of_ref": "indicator--bbb32d0f-1087-4d95-ae61-d72362564748", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b00e849a-c28e-4a00-b275-81c10b443b7e", "sighting_of_ref": "indicator--9e4f6a0f-0808-4767-b933-d3c548ceb469", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12809edf-874e-4826-86f1-f02a4d3c522c", "sighting_of_ref": "indicator--845392c8-0153-4434-a26b-a6d056daba93", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b90ac128-1ca1-4619-a737-0e787412d404", "sighting_of_ref": "indicator--a6236624-57df-40eb-bd0d-44cba9f3e3fa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06906e35-aaad-448b-bf5c-895779fb6486", "sighting_of_ref": "indicator--7ef2a1bd-850e-49db-970d-6daa3d40961e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feac5865-052e-4e66-bb3c-d9c48920d517", "sighting_of_ref": "indicator--56aac5df-f710-4fd0-ab6c-96e74c79d09d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ce345a2-da2c-433b-bad2-79c91340217e", "sighting_of_ref": "indicator--344834ca-0def-44fb-a0b7-0467d2aa61b0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0845e32-5e0e-4ae5-9bde-db52af9c6392", "sighting_of_ref": "indicator--8c3a06d7-55bc-4650-a514-a3f9c9bfb28a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814b643d-7f69-474a-84cf-0d4453b404ad", "sighting_of_ref": "indicator--4b60c343-c205-49b3-b3f3-fbecf39d35ed", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b97bb1b5-e84b-4faa-a863-66ddfd85f5a4", "sighting_of_ref": "indicator--207c3d18-713e-426e-875b-8d6d5a553b9b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c2e738-3b93-4c8b-bc21-e4fd631e24cb", "sighting_of_ref": "indicator--6ac39fae-d741-4512-8e0a-6c6d2a72afd4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a4ec7d-433b-47f9-9b60-c058c9717822", "sighting_of_ref": "indicator--e9173a5a-70ec-4ca2-8ad1-d9e64b607f53", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69377c65-fd65-4265-977f-3e1fbd3a8f39", "sighting_of_ref": "indicator--4c2940a1-22ed-4163-81a1-0acc17085d21", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce8afd5-4901-412f-a0a5-71be27472fc8", "sighting_of_ref": "indicator--0c382b34-ff19-4cab-8ceb-e8ca940b1a9a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7412da1-e5c8-4a46-b425-4aaaf56a2b47", "sighting_of_ref": "indicator--d65e7849-b4fe-47eb-b9f8-44540b780a4d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79e9e993-b372-4273-8343-848056d7f9f1", "sighting_of_ref": "indicator--bbf56836-fb3c-4916-b22e-1e837c9d496a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d1e5f0e-8ddc-446b-aa19-6af44bfacc29", "sighting_of_ref": "indicator--ce8184ed-c77b-4273-8df8-12bd21df88dc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee6d1780-921d-46c7-a0c9-5bfc00371ffd", "sighting_of_ref": "indicator--09b0decc-b0f8-4f31-b114-a68f43ae12b5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cc25f9f-ec63-4e93-8379-fdf915147ea3", "sighting_of_ref": "indicator--fd99e77e-bcea-4291-b111-ef8596f9d7ca", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11508b72-525e-4413-a8a5-c3da1f65751a", "sighting_of_ref": "indicator--94ded28b-490e-4137-a8db-4641bf36fa95", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a442fe-6ead-4b5c-aa3b-a35dbe1dc422", "sighting_of_ref": "indicator--99adf93f-e052-454e-b855-3f0591355966", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab4e217-42f4-4757-b2fe-786326f1281a", "sighting_of_ref": "indicator--f4443ba1-b397-4783-a23c-7aa63a15937a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fcf6650-b599-492d-b4d7-c3f7cc43be4d", "sighting_of_ref": "indicator--193f3cbc-f408-49f0-8d2c-c9ba18aef000", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--060e5834-1bf7-4074-9a12-a2a5161b4d8a", "sighting_of_ref": "indicator--07018270-954b-4c57-8f48-0a59d3048d9e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b291299-92b7-46c5-800b-86abfb4b31bf", "sighting_of_ref": "indicator--439b520e-0aa0-40da-a024-2d687920f42a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5af8e84-31a8-4c2f-8a1a-1f7d55888139", "sighting_of_ref": "indicator--8960058e-fe71-482b-b252-1b1a4561230f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--461d3b52-3185-416d-986a-9afb22576045", "sighting_of_ref": "indicator--8664412c-7e1a-4190-94cc-5a082c2c6f8b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b63de3c6-1311-4cbe-922d-322cff1f4384", "sighting_of_ref": "indicator--cbfe2d91-8569-4849-b208-830961534c46", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0c4a46e-dbcc-46cd-9540-f85cc45fa696", "sighting_of_ref": "indicator--23c45bf0-500a-4d87-9b15-dd379bbb1a45", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa028631-b07a-4420-bf03-26cdf3b2d70c", "sighting_of_ref": "indicator--fa9343f3-ac50-4768-a4ef-c72dce212633", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9628b9f3-17c3-4714-96c8-a70b8b14e8d4", "sighting_of_ref": "indicator--be0d320b-58c0-44a5-a400-adb0fa9d3470", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a32b7b2a-95ff-4a60-80c5-883b58970f0f", "sighting_of_ref": "indicator--ea817790-b587-4941-a663-8ed9da9556ab", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf451b8-0df1-41d8-ae03-884a6604d832", "sighting_of_ref": "indicator--0dfff324-8af3-4ebe-8aa6-4bc2ada1d412", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac2d1774-947e-4404-a0b3-fd562544e7ff", "sighting_of_ref": "indicator--9eaa7819-0815-4314-b288-9629a76bd8e8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a711e88-e80d-47b6-bd2e-217d441b9c9d", "sighting_of_ref": "indicator--63a5fc1e-c8a0-42b8-9518-2af924485ef1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c5cac14-3613-4b2f-992b-c5231e2eb16d", "sighting_of_ref": "indicator--5c5bf195-89f2-4a54-9737-794ed68f51b2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa49f720-58b0-46ca-bf3b-14781020a046", "sighting_of_ref": "indicator--acf1cf46-c5e0-44bd-a59c-348a709f4cfc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c23818a5-5a5c-47bd-a695-b1854c06ae3f", "sighting_of_ref": "indicator--98a15a36-10ab-4d6e-8e58-1db2240e40fb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2692e03-eab0-41b8-9f2c-9f73f2889475", "sighting_of_ref": "indicator--3a3c5cb2-f1ac-4068-813f-bb98c5b1b255", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70bb0f36-fe3f-47b5-bac4-889f883a23cf", "sighting_of_ref": "indicator--2ca30afc-e3e3-470b-96fc-f06e57c2c308", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c82c70-f5b8-460a-95b4-6fc5dd3bd1c3", "sighting_of_ref": "indicator--cc1bac83-630c-45d9-ab6c-3d377da13550", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--392402a9-af79-4408-9abb-86de63b5440d", "sighting_of_ref": "indicator--0401d80b-d07f-4712-a381-6086b0c2b51c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--848ae971-c1dd-40c7-af01-35eeff05d428", "sighting_of_ref": "indicator--6964455d-2f86-4697-8af2-882d2701753f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e0b64d2-ab14-4d46-b97f-d9fde63df6ab", "sighting_of_ref": "indicator--ca8f24ea-a9b9-4435-a9dc-b54d1aeafee6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee4236ca-daf8-4118-b650-a97a2dc083ff", "sighting_of_ref": "indicator--cb2e0166-e470-4894-977f-78e0a8e25061", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6866d66-4afd-4869-bd97-b2e39823ad8d", "sighting_of_ref": "indicator--89b30a61-6e57-4ebf-9112-5b35a01b24ff", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d284e27-6d54-4dbf-95f5-eda87363960c", "sighting_of_ref": "indicator--ebd9e195-9a22-4f74-ad7d-48e0167b7846", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4202ce37-d903-4eb2-b9cd-710be95907fc", "sighting_of_ref": "indicator--820df589-eb9f-42ca-8d20-971b0cffa42a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19b11a2-196e-4f01-8681-5db010941d18", "sighting_of_ref": "indicator--04b5acf7-b4f6-402c-8311-97ca06f14769", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90e4081e-bdd2-4966-9cd0-b7c56f4fda1c", "sighting_of_ref": "indicator--53a7cae1-fadf-4002-89d7-4b9841b4ec72", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7425bff9-d7cb-42de-9958-44d39b93cd04", "sighting_of_ref": "indicator--6f9897ad-81e3-437e-8d95-579a4d9fbcf4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7daed3e1-7737-4af2-853f-05efab412c8c", "sighting_of_ref": "indicator--a7c97351-e052-4c48-88ae-bc98a1222c6a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--081f86f8-9483-4548-95bd-c391d065d692", "sighting_of_ref": "indicator--e4c2b5a9-47e3-4ec7-9dce-9070bdc176e9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1779a575-4215-43ce-82a4-7213ef5cd26a", "sighting_of_ref": "indicator--a69647d6-5707-417a-afe8-8173508fbb65", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9422f3d1-4061-4980-887b-ef773713363c", "sighting_of_ref": "indicator--99470506-20f8-4180-a29c-e510b75e1efd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb4bb4b-cbcc-4a06-be09-9fd09e4c301e", "sighting_of_ref": "indicator--2f5370a7-93cd-44d1-904c-84f23ea74a31", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ba4710-66cc-48fe-83fc-70d8b3b3fadb", "sighting_of_ref": "indicator--1b08f12d-25e5-41be-9447-0fc80571ff33", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea94e10-935e-4e1e-aa55-35959cd458e1", "sighting_of_ref": "indicator--b0ddd6c6-9104-4599-bc36-c537a0c9b9df", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c223982d-e44b-46b5-ae26-387f2c249fa3", "sighting_of_ref": "indicator--4460ea51-ca9b-4268-99e9-f84b87c67d83", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d1019f-25a6-4146-83b7-5b5faa32c037", "sighting_of_ref": "indicator--614c8e10-869f-46b7-9641-26e7afb9111f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c664dde-61a8-4cde-997f-5681df1e7abf", "sighting_of_ref": "indicator--219f1078-a8b0-473e-a21a-4aecce123b1c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65224423-fc9f-4fff-94e5-4f9937a097c3", "sighting_of_ref": "indicator--bd1eaf2c-cabb-4b34-bf52-342f56195610", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e94dab-b042-4d9b-be25-500bd8f2ca5e", "sighting_of_ref": "indicator--94c63dc3-04cc-4873-a41d-b90f34db01f1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d44276-18b4-40d9-ad25-223a90811620", "sighting_of_ref": "indicator--21824417-9b6a-4788-b4c6-97f30237f743", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a66666c2-c9d5-41de-8961-69b376a50f65", "sighting_of_ref": "indicator--780bfb84-4425-4841-897b-2c6fb499b1f4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d0e053a-1a64-4632-8a94-26fd520e9e01", "sighting_of_ref": "indicator--792324a8-f469-4660-ac0c-cce8f28301c8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7bb2ae1-5c1b-4ba4-bac3-c2b086a968a9", "sighting_of_ref": "indicator--7ed24073-7dea-49bf-94b1-b32f89cf48f7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2d278ad-90ba-46b3-8979-fcd6fda51db1", "sighting_of_ref": "indicator--f43d4d79-a403-4ffb-842d-9317045ee729", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86cd15ce-e37f-4973-ab4f-ef6fc4498fce", "sighting_of_ref": "indicator--839de833-a754-4fae-a448-19397558ba37", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c346b9c-a396-4993-be02-d91447cf0d85", "sighting_of_ref": "indicator--7b4d3825-1d29-427b-9e92-c11cd64e63f1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7edad155-01aa-4a50-b0d4-8d8e56e3b7e3", "sighting_of_ref": "indicator--aed5c3a2-449d-43df-980e-8c014ff56ced", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2afae088-08d8-46d2-bd69-f6750a4af377", "sighting_of_ref": "indicator--831d5b3b-3e3e-4577-864a-a6244c8b2ed5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a312df1b-8371-47fa-8e47-f39e1c6a209b", "sighting_of_ref": "indicator--d66a9399-af4d-4fe9-8218-1b87ec60bf87", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebfcf573-81fc-44ad-8e16-965c7e382051", "sighting_of_ref": "indicator--a64dfd43-d50c-4c1c-8895-615f6e09dae6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ed786fe-a323-421f-84db-ad61cc118b33", "sighting_of_ref": "indicator--d13a52e1-f4fc-4918-95ee-401bb2bbdcd3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b004491-8a2b-4499-97e5-181019e16533", "sighting_of_ref": "indicator--2e73b65a-f290-4934-8f83-301a9f087d6a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b7d390e-faaa-4d69-b71c-2b7c135746a2", "sighting_of_ref": "indicator--b25ec0fe-1417-426e-b903-ef0ab6ced1b7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6ca96fa-9e64-4602-9e9e-0d4d974f92bb", "sighting_of_ref": "indicator--2f60211b-a6e7-406b-81c6-7bd6ba6a112b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7040f01-0aad-45df-a553-8191a8a79f5e", "sighting_of_ref": "indicator--d6751456-bc45-4be1-91e8-bd2d9e58a1c9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61b83d39-c3eb-4fb2-a3b5-9088e4db7305", "sighting_of_ref": "indicator--509549ea-3eb0-46c8-8b01-c26caed1f1ee", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b378dc3-f6e2-4f1b-bbfd-c127b0eaa896", "sighting_of_ref": "indicator--e0d6a096-efcb-4655-b4b6-c49e507cfdaa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2369ccf8-e00c-4b45-ab3c-467f0d471b0e", "sighting_of_ref": "indicator--efbed071-cf09-4a01-8f5d-2fff8236cc26", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccaa4af9-b35c-472e-bd4a-40875c64877d", "sighting_of_ref": "indicator--ccd5f124-5f1e-4aba-bb61-052c38be1899", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c483551-628b-4a38-ae90-2bc70d8559cd", "sighting_of_ref": "indicator--87b1fa9e-1e55-4df7-9908-9d1e06d588cc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbb9074b-fb96-422e-a2de-7489e655a959", "sighting_of_ref": "indicator--68cf7283-9eee-40ce-9fc6-b99d939765e0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b31c1b25-419d-4243-be8d-e603ead5a9d8", "sighting_of_ref": "indicator--f0133e9c-6dc4-468e-8717-893568ed3e70", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--072633e4-0462-4016-9fab-1b9c63043be3", "sighting_of_ref": "indicator--da789ecb-ab04-4658-b5cd-12d17154922f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce2cc2a-6c93-4d30-aeda-a49fafb50fba", "sighting_of_ref": "indicator--15f86c44-91b2-4fa3-adbb-2ea844e0d6f7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031d3322-1b83-4ca4-a915-429188ff05f2", "sighting_of_ref": "indicator--7012ab10-59b8-4440-b27f-a59935e83be7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--459bafe7-fe59-4316-a5b9-f87531c892ae", "sighting_of_ref": "indicator--77bed559-fe8d-443c-9575-148147ab1fd0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e109ff62-d2a5-4653-a5ff-ed27a94aa2c3", "sighting_of_ref": "indicator--b25c6e9c-5b47-47b0-8a0c-a915c5865d08", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f47c806-2ef2-48ea-b039-7565a25b9455", "sighting_of_ref": "indicator--2c39d2d7-f33c-41ce-88dd-f34ce35c43d0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d17450-3f34-486c-859a-6873649d475b", "sighting_of_ref": "indicator--865c46a1-aa7a-49e7-a83e-5a2a7bf0fbe0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a47cad0-8018-4e2d-9554-5fbdd90297cb", "sighting_of_ref": "indicator--1b5679da-2649-407a-8cf4-277044c03220", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df22dd7b-5930-4a49-b273-1f90d919bd62", "sighting_of_ref": "indicator--f8d0dcaa-5e35-436d-8f23-08f7f3cfd698", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45d05f25-7086-4c42-b3f6-74af2a4463eb", "sighting_of_ref": "indicator--f4078f59-76b4-41ac-a489-6b19802ea613", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29fd1ab9-1cfd-4431-a26a-90384bbc10b1", "sighting_of_ref": "indicator--43ef4372-1038-4451-b59a-f9b8a4fe88b4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--944a5477-3f5f-455a-b1cb-143b2a299148", "sighting_of_ref": "indicator--4d8d2d0f-c6d1-438f-b31c-60a0aab88f57", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd6591ee-4321-4454-85b7-2e9817328a86", "sighting_of_ref": "indicator--154cfcc9-3c11-45e4-a3a5-87ad7971b6da", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c02795da-76b4-49c3-b342-213a8093ec14", "sighting_of_ref": "indicator--5e5086ee-71c8-4555-a212-caba3db99454", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--630dc4c4-4c5e-4610-ac29-24f983aca526", "sighting_of_ref": "indicator--4eb8e9b8-f1a8-448e-86ec-a0a7b28f2b15", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c93d7d43-5391-4b0a-8460-e9b4a2513025", "sighting_of_ref": "indicator--d805d760-157b-400d-92d6-9f13673459be", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49de6bd8-df23-4713-8107-77e5c2eb93f6", "sighting_of_ref": "indicator--4b7cf65d-21c1-45d8-9623-3b0ca586cd29", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33bd331d-2eb8-47df-bde8-39f2509d8747", "sighting_of_ref": "indicator--ba89ae9c-8365-478b-b843-6d4f50765d04", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88f05cce-3810-4e1a-81fa-e691619bbc71", "sighting_of_ref": "indicator--5690b915-5b6c-4066-8b76-a827929ad146", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c4502c7-120f-45fa-aeb5-73d200e7f573", "sighting_of_ref": "indicator--113c4431-62e1-4bf6-bf45-0179e9898219", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af7be601-e973-43de-8b18-c2f4f09c8271", "sighting_of_ref": "indicator--804ae68e-fbb1-4f8c-940c-63d0d137b1a6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29925c95-006f-4225-97be-3a71e8c88a2a", "sighting_of_ref": "indicator--907b9b73-e145-4794-a27c-b0e8f9ea25af", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82375b34-73eb-4129-b176-73cde3d5c4c0", "sighting_of_ref": "indicator--e6f8d879-bf6b-4537-a62a-195a487ecf40", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffed9e5b-4868-4eec-95b9-4eacdff9039c", "sighting_of_ref": "indicator--d8032329-1854-4120-b5ce-23eea00ac278", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf2d5e7-37f9-45cb-b14a-595c8e143feb", "sighting_of_ref": "indicator--fd38f81e-0db2-48ef-88a4-fadf68f7f8a6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1dcab0f-000b-4006-bf2f-e01daf531d7b", "sighting_of_ref": "indicator--99bd3d81-82ad-405a-a32c-9421b9634e3e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a21ab8d-ad8f-4099-a7ef-089d3c347158", "sighting_of_ref": "indicator--4ce7ec28-0537-470d-9191-a54071947795", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf32842-fea3-4998-8a69-beb8c8be2be8", "sighting_of_ref": "indicator--5f7be040-ac6f-4bae-b482-0ea936a0d75e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--221a0352-fd72-4d8d-94ca-982c7ea8bf62", "sighting_of_ref": "indicator--4e1ee822-4bac-47ee-b32d-81e90ba275c6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ba11c7-1107-41ea-9328-cf1288597498", "sighting_of_ref": "indicator--86acdec0-7c16-41bb-baae-3f96e63eb885", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d253475e-880a-48e0-9b5b-50531d52a9ff", "sighting_of_ref": "indicator--f28459f2-ac12-4060-aea4-23b7a0125b9b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4257564-e2a8-42af-be63-de4f1d48431e", "sighting_of_ref": "indicator--a3024c03-1ab9-4ffe-99c1-8cf334bc2036", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1470f50b-db30-4618-91a8-8526318aa89b", "sighting_of_ref": "indicator--b8d1eaec-9e6d-4bc4-bd19-695c924e0816", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3621282b-f068-4169-a9d2-e80dadc5fc63", "sighting_of_ref": "indicator--19f07aaa-6f88-4161-a211-a58aabfe030e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f480bb1-bb0c-4d30-8034-04cd3447806b", "sighting_of_ref": "indicator--f1b8acd1-0682-4827-8287-11cd302ec288", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01eaa244-ebdf-4be1-98ba-d934a3065e2c", "sighting_of_ref": "indicator--21b889bb-9a33-4564-8c20-2cda79c56a4c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d927561-e452-4a13-8f32-30d4b0272eb0", "sighting_of_ref": "indicator--6bb2de39-70d8-466b-a98f-95533cf0aeb3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f0ab3e1-457e-48bb-b79e-6cf4a1706108", "sighting_of_ref": "indicator--6dbe9439-d8dc-4757-a5f4-c88cdebaf490", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1154b950-d99c-4933-9de4-8000d88c65c4", "sighting_of_ref": "indicator--49e73f5a-c694-49c7-93bc-5d3b7cb04b49", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ae261cf-a73f-40c4-8cfd-bf3eb4edfb1c", "sighting_of_ref": "indicator--ba194e8d-e69d-40d8-8b39-52e9bd01303c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5b95476-6049-4e2f-b0ef-65c5e9cfff4d", "sighting_of_ref": "indicator--72f086cb-ec2e-410b-a369-760510f9d02d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c23cffa8-06a2-403b-a4fb-a4b2aecc64aa", "sighting_of_ref": "indicator--81691ea8-38de-423a-9645-1175aebe391b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb49e3c4-dcf0-4faa-aba1-76651051bd8d", "sighting_of_ref": "indicator--b5563972-f178-4371-8261-030a3fc35738", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b506ac3-914a-4339-83db-199dfe8bff6b", "sighting_of_ref": "indicator--750641d7-754f-497b-a0de-0e94b3f66a8c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51ae26c4-413c-48d0-a4ef-23166686c6dc", "sighting_of_ref": "indicator--98174938-dc09-49bf-a93c-037781e5a080", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bba759f-c70a-47e2-8898-59be3f37a2ef", "sighting_of_ref": "indicator--db3b70ae-9fd7-4e92-bbc5-db215583dd6d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3d06945-7c4a-4560-8b1e-709f023a8842", "sighting_of_ref": "indicator--18d500ed-bcae-46bd-bc90-b661987ed03f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6890a777-6023-4312-bed6-96e9f1219c1c", "sighting_of_ref": "indicator--b9aed4d4-8c71-4377-b2a2-dda0ab1200c3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e016c10-1311-4306-91c1-a0d4205f381b", "sighting_of_ref": "indicator--9822172a-22f2-47de-b1d6-c8a289019fa4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dd380c2-17af-422a-9ffb-6e49b0fd5511", "sighting_of_ref": "indicator--8612ba22-99e8-4587-ae70-9113dfb827d8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1fd8e9a-94d3-4cba-9b2e-f1d04bce2e07", "sighting_of_ref": "indicator--e50752ff-0d6f-49b1-98df-81ef25369bbc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1417498-cb5b-4023-aa84-64b973b1eb06", "sighting_of_ref": "indicator--115d5428-4e92-4c1b-9a14-6195cc1dc893", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b859c4e7-3754-4486-b30b-f8fc83760bb8", "sighting_of_ref": "indicator--b184292f-9a9e-4fec-a432-1804ad066687", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02f87d81-1527-4eef-a545-053ae11caf56", "sighting_of_ref": "indicator--3034baa9-5276-4b5a-9011-4a52bbc524d7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fcd5402-4b36-417e-bee1-772bc73810a0", "sighting_of_ref": "indicator--97fc74ed-9246-4601-b71d-8582c87145db", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e377c7ae-c169-4335-bfe0-675b133396e3", "sighting_of_ref": "indicator--e6f88358-1336-4bf9-8753-f0a6fbf69c19", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--884b66fa-412a-4f17-8db4-39eeb53df0bb", "sighting_of_ref": "indicator--8abdd5a9-027f-4b8c-a839-37693de4afd8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e332f1-5192-4e8a-875d-855734d66fa6", "sighting_of_ref": "indicator--9974f372-4304-43af-86e9-528d4fc0f71b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--120f3798-b853-4c6c-a18e-1857673d1676", "sighting_of_ref": "indicator--0dac25ba-f966-4ba3-b4ff-914031374c96", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12711960-e590-45e2-ba0e-9fce66c45ae9", "sighting_of_ref": "indicator--045e4ca3-8ae2-4cda-8ec7-59bafc9f6b35", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--824e95ca-fcd6-4ef2-aa95-83caf176ee04", "sighting_of_ref": "indicator--df885a0d-a237-48c2-8937-318796ce27a7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8656be15-a9a5-4843-b668-01d48ea3b58a", "sighting_of_ref": "indicator--629f9c26-2c15-4dc3-a1f7-25fcd88193cf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52f88b12-e18f-48c5-8ac1-40a491b5606a", "sighting_of_ref": "indicator--a0555031-354e-468c-b8c8-5bc2e48702aa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d15af4a-baf5-4ae9-8bc3-61d9744b3594", "sighting_of_ref": "indicator--754edb45-7f04-4e0f-b885-26da59f6b63e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f27a6465-7e0b-434a-8d34-aa8d101366f7", "sighting_of_ref": "indicator--fab7f11d-52d7-412f-8461-086fb9cb6d8e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04ed8b6c-c81c-41e7-978f-3f1561508bfb", "sighting_of_ref": "indicator--d27bbbd2-75b5-4565-ad3e-a358d1a43f64", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1200135-8eb1-46e0-86e5-0e7563c5f5b5", "sighting_of_ref": "indicator--15e1a7e7-1f61-4112-a3ae-f5440d4ecfea", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7737a64-8dcb-4073-adb1-8c5eeed22e9e", "sighting_of_ref": "indicator--ab8b0fcb-83e7-43cc-a41b-d5acb989a559", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a2fe81-a972-4241-832d-8b8267032690", "sighting_of_ref": "indicator--9893310a-081a-4589-9a88-89068c7a2769", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab02df75-b0ce-45c6-8792-fdc447047c91", "sighting_of_ref": "indicator--5ff5da1d-a695-4f79-8a5f-890372bdce3a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a83b77b-c442-4d7b-87f3-79a19c3f9292", "sighting_of_ref": "indicator--1df8b774-54b2-4d32-921e-1e6f9b583726", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c9556e-f8ca-4b7d-96e7-5ee5058bd288", "sighting_of_ref": "indicator--e8a99c5a-b3e8-4085-9b71-c8f519ccb516", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc89af54-681a-4a22-8398-52de7ea8aa4c", "sighting_of_ref": "indicator--ee22c637-8773-437a-9eb2-a5a294020a10", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--707eb945-08c6-4a4d-bcfa-e2a9feab1064", "sighting_of_ref": "indicator--a2bc8012-fcb0-48b4-9c03-43dde8b646ae", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20e01f3c-efdd-4dff-ae74-0f578ae331e1", "sighting_of_ref": "indicator--4a0fa442-f5f9-411f-bb6c-1e4a13099c99", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94dee6e8-c148-43d3-967b-26056f9891cc", "sighting_of_ref": "indicator--20357055-04e3-4153-95cd-0408dfe03ece", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--935ad068-1b4e-4042-bfec-17cb91e04d58", "sighting_of_ref": "indicator--065dba15-64ba-406c-a1ff-a0813a74c869", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abfe65c9-da51-4cdb-a10c-4b8205747259", "sighting_of_ref": "indicator--7b68a15f-e049-4c26-95ef-b07539185794", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--700b95e0-0100-4578-a5f8-ac7c336186bd", "sighting_of_ref": "indicator--55fe0a16-4a26-490a-bb0a-5da561ceb1a0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bea1003-1cc8-4a27-9d5b-4986f836b1b3", "sighting_of_ref": "indicator--9504a37f-0662-4f6e-9afb-b80a0f6dbd4f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b3a9c9-2d5b-4c0f-9cf8-8823eb7a1c9d", "sighting_of_ref": "indicator--4e9b356c-edd0-4748-b7a8-0af036db35ba", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a8763b1-b68d-4f82-998c-802ecfebe196", "sighting_of_ref": "indicator--12402d45-e50e-4145-8add-7994280ab4b9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64845bd6-6dc3-4965-864a-fd8559ce9fe4", "sighting_of_ref": "indicator--960dbddf-5e16-4da5-8d18-9f028ba05295", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68c3164d-5c5e-42c5-a24a-06054a75d51f", "sighting_of_ref": "indicator--35cba2fc-e7d2-48fd-9da7-ae13a65afc23", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ddd1cb1-12e1-42f2-b95c-ecb508322d2d", "sighting_of_ref": "indicator--073141f1-2177-4ecc-b953-f50e7eebcefc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79623747-62d6-4ef7-bdf6-506505cbca75", "sighting_of_ref": "indicator--733c9404-6f89-4ba5-935d-5f156fd03ab9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc945188-070a-428d-914e-1b6307c67920", "sighting_of_ref": "indicator--1c6ed013-df44-4ab4-8ef8-c645812de58e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e09bd22-a63e-4d7b-bc41-79b2e79d4a01", "sighting_of_ref": "indicator--3d03eae3-fef2-457b-bfbe-5308c69f2cf3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--318a892f-c9f5-4c75-890e-aa8936eae0a9", "sighting_of_ref": "indicator--90973e3d-e0cb-4a1d-93e3-3c2b288c5656", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85cb9518-049a-4163-981a-fb5baeafb89e", "sighting_of_ref": "indicator--0dff31be-990f-49cc-b9b1-dad0bbbce55c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ab2cfb-3f6d-4c3c-b006-6240d4885f63", "sighting_of_ref": "indicator--8ed41333-ca95-40b6-aba1-542d2bd8dcdb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b2a2ef-2b7d-4378-b6c1-9832ed05aa04", "sighting_of_ref": "indicator--52dc025f-963a-46e8-8ba8-2d5cdfc32673", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3225d47-7b7c-41ed-9753-2f18fa7992c0", "sighting_of_ref": "indicator--beefbb4e-d9eb-4525-929b-87feed781260", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb6b5cf9-2360-4116-b045-a272a35fe3c7", "sighting_of_ref": "indicator--3b68642b-f69d-4bab-b7e5-a47d78730d65", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d197691-cd71-4d88-bd09-db5c0aa5b0c7", "sighting_of_ref": "indicator--33c9045a-bc94-42a0-8c53-a48350c8a8be", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f2c5d0e-70e2-436b-97ce-049430a2af29", "sighting_of_ref": "indicator--b9a650a6-ee95-4636-a6b8-90c2804b164c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2034c0b-4e59-4c53-9bec-ca39ff52401d", "sighting_of_ref": "indicator--8612e7aa-bfa1-4681-a3a2-895eebb78d75", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246c1aef-2992-4109-b80a-ecf0479676aa", "sighting_of_ref": "indicator--96128b30-def3-484a-b254-bbb4dda90c27", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4111f7ff-2765-463a-94e8-bee92e3b9a2c", "sighting_of_ref": "indicator--3e482e96-9f10-492e-aee4-7a9eb63f1e9b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d27641-96ab-46ac-aac2-e24810e8cbc5", "sighting_of_ref": "indicator--26c64486-58df-4d26-8571-e86900801a68", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--448544f4-f7ec-426a-af65-09d95d66b8a0", "sighting_of_ref": "indicator--cb9eb89e-6b4e-47d2-8786-90201e7f7607", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--392faa3a-7488-453b-8727-e5a190514b73", "sighting_of_ref": "indicator--7a56261d-2f9f-4563-8add-ae293d8bb70e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dab86fd7-46cd-4865-8b65-08cc298a28c4", "sighting_of_ref": "indicator--24460072-a472-4890-ab48-9a56ea3ef80a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--488ed0c8-b41e-4f99-84cd-20396c29272a", "sighting_of_ref": "indicator--317f1218-b23e-4ac1-93a8-0244d368819d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c8c79c8-adfc-4613-aeb2-11c06829d672", "sighting_of_ref": "indicator--9f8cbee3-98d5-4a95-931a-98b17fb89233", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ae6f848-a626-426c-ad90-c191faa2bdf6", "sighting_of_ref": "indicator--bd7f16e1-b206-4f9e-958b-e54c7de8d6ad", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9665af94-0fd3-4dce-a9e4-e7b04ac7d253", "sighting_of_ref": "indicator--d0edb35e-ca6a-49f6-8ea3-d59902ec4538", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--035a7cc0-21af-4ef4-83ea-d9874af053bd", "sighting_of_ref": "indicator--ff7e32c7-5474-4ade-937e-fbc8d0bcc19c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd356f72-039c-44af-a866-75cad3972477", "sighting_of_ref": "indicator--c6bd1d18-85e9-4fef-bfa0-9a76e5f43d9e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc96c158-4915-4c4d-b439-874802f38d24", "sighting_of_ref": "indicator--2d01c1af-edae-4fcf-ad17-f4ce73edb68b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--600adfcc-f7d6-4bbf-ae7e-3aacdfa8eba8", "sighting_of_ref": "indicator--3ac41aaf-17b2-4ab9-a812-89849a10bbc3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12c23226-58de-480d-bab3-3987476f510c", "sighting_of_ref": "indicator--abc8d1c8-7f20-4fcb-940e-91f2783e833a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f61c9b5c-81e1-47d3-9b58-7ed884fa308e", "sighting_of_ref": "indicator--dacc8762-d2e7-41c9-93eb-1ecdc4691e3f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e6b391b-84e3-4f6a-b898-9c1bfc21e22d", "sighting_of_ref": "indicator--925ee95e-8a89-49ef-a95b-a74f0630d3d3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22fd079f-39c9-4aed-a3d4-3f18475fe90f", "sighting_of_ref": "indicator--b16ec2f9-27fb-45b8-85ed-55498dfd2848", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd177bfa-b464-4e24-b7c2-df95a3d65b52", "sighting_of_ref": "indicator--1669a5f8-aed7-40c8-bd7c-e5ffb840d943", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9cef684-ef3d-4053-9d26-82cd64ea5453", "sighting_of_ref": "indicator--b891f35d-23dc-4508-951b-fa32cab90101", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab7dab5d-4d8d-4bd8-8907-aa2a495c016d", "sighting_of_ref": "indicator--10bf873c-576d-41ea-8616-9f3927b53673", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3402fe12-0311-4658-aef6-f4cc94dba224", "sighting_of_ref": "indicator--e51025c6-4d4a-4bb8-b2eb-ae24d1ccc249", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f7a0924-7f2b-4772-b74b-7b5c8168091f", "sighting_of_ref": "indicator--96b73e7a-bd43-42f2-82ff-88c53a17ff6a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fb6999a-6a39-41c1-8fa3-0da10cbc8d04", "sighting_of_ref": "indicator--4f057d5e-0351-4d3d-a182-7f1dab59031b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6818c5b2-190b-4929-9752-a6084fdb4cf9", "sighting_of_ref": "indicator--6f429623-7254-4612-a95d-3b107238de59", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a5f81e-f5e3-4c89-814d-e7810cd1eeb8", "sighting_of_ref": "indicator--24543b0d-2e42-4175-adf3-178d1f62549d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff4b4fc8-c00f-4aa4-ab41-361b8c67d42f", "sighting_of_ref": "indicator--fb1c6660-bfe2-4958-bb51-652b37f44b56", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d798b94-f665-4214-a806-4bc5d74dd57e", "sighting_of_ref": "indicator--c7b39bb7-ea77-4c28-b476-40f7687ccd70", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cac63d4a-688b-4243-b57b-53729c686fce", "sighting_of_ref": "indicator--2dabe9c5-9558-4f1b-a4fb-8c2aa0c9265e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8560ae11-cd31-4686-a989-b93d2c4a0f9b", "sighting_of_ref": "indicator--082de571-1453-4b45-9586-0d217b9a7eef", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23caeb5f-bf3f-4ac8-817d-0204966613d0", "sighting_of_ref": "indicator--50cb5136-f1a2-481e-aeb3-251edbb36355", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b1e301-1e88-4c33-8d8d-e65e07026852", "sighting_of_ref": "indicator--4273466c-7881-4137-8521-6480f8ffc243", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246cee1d-af3d-446d-87b6-4292a84fc0e2", "sighting_of_ref": "indicator--f03c7c9f-e080-4b03-b2eb-fbd1c653c66f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbc9a976-d213-409f-a871-8e4ca7f1b0cd", "sighting_of_ref": "indicator--a4f5907b-1729-4133-8c96-ea2d7257b5ac", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eca2afe-d4db-477d-806a-9e98aaa9af25", "sighting_of_ref": "indicator--db37aabd-6bc9-41d9-b4d7-b2172463f583", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba43daf7-d94c-4e94-9664-160050dd4621", "sighting_of_ref": "indicator--7fc54fec-1a08-439b-b946-03acf1f641de", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c202bb0-f2d7-4ad1-b920-4c0cba4d4c75", "sighting_of_ref": "indicator--c6d6c19d-770c-4102-b3f1-c7ef0abc4fdc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ca886ff-840a-40e5-ab3c-0fd29712487d", "sighting_of_ref": "indicator--35ede99b-59cb-4475-bb73-81b9e43ffdac", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee4352c-9108-45f2-8ed2-ceb2c2709766", "sighting_of_ref": "indicator--e157a2a1-da90-4d2b-bf99-4e1b9ce13675", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66612b28-6213-4ffc-ab08-436de68ebd1a", "sighting_of_ref": "indicator--15606299-f552-4912-a550-9b7bcbf50808", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97f17885-5509-4e7f-a0d7-9a9b541e1e2b", "sighting_of_ref": "indicator--58387dda-2b99-4151-98f6-e0b11a96500b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd8c6be-6d49-4a17-a963-b011eba76fb4", "sighting_of_ref": "indicator--4bb4a778-b4ac-417d-8aa1-7ea478e75115", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bebbdb6a-b3a6-4cb5-858d-34321d9c411f", "sighting_of_ref": "indicator--41af2378-005f-4d3b-b89c-ca097a9f1c3f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe5ed8f9-504d-4e43-9bd0-f87adea9f322", "sighting_of_ref": "indicator--7d72dfa7-531d-4202-a810-8f2a3ac87e5f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5526089-235a-4e44-b8ad-f8fe8624f9a7", "sighting_of_ref": "indicator--98d30dfb-24e2-4ac2-b555-00f6c685321c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--093fbcaf-f1f1-4d7b-a296-0e4e1e760afd", "sighting_of_ref": "indicator--b6692c69-37bb-426b-8817-bba905b75413", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e37d7a47-4897-401f-ade2-88a2f42be8fb", "sighting_of_ref": "indicator--389c208c-f267-460b-9026-1fe42513b72d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c803de-82ed-4a91-a363-b7e743c972f8", "sighting_of_ref": "indicator--a968856c-598c-4e5f-ba15-4b0200fe25c5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d433fda6-2eb0-4c46-9c34-6773f0ef966d", "sighting_of_ref": "indicator--fe39f2ff-a369-4eff-a891-868cd486bd75", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b9809ee-417c-498d-a4d4-d7d07d5becd6", "sighting_of_ref": "indicator--9a82dfe7-e786-4044-90f8-736615d26f39", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d8311ce-6b72-4c1f-833d-85c55f926cf1", "sighting_of_ref": "indicator--792acc50-f72f-4490-9f1c-f7647d428107", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d6510aa-2c9c-49f4-b351-65c0cadcbcd5", "sighting_of_ref": "indicator--7e64d637-d977-4d90-b6c5-dc9738e88b02", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--497ce973-1da7-48ad-87da-7ec42101cca4", "sighting_of_ref": "indicator--768d898a-6c14-4df9-8a2a-865a290656e4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3673b4c1-9ff3-467c-bc85-5ee68ccf5415", "sighting_of_ref": "indicator--4784c8c9-b679-440d-ace6-1526309618e9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7397f6c4-f306-412c-9f6a-bb567f3d0d6f", "sighting_of_ref": "indicator--483da845-3e4d-4ad9-8ce3-8eebf01c3676", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--234850ca-80d1-4389-9b28-ba503c3a7747", "sighting_of_ref": "indicator--0139fcc7-ff81-43a1-a9ab-7014fc7b1a14", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e192c4e-2e53-467c-97f1-3f86a8312bd5", "sighting_of_ref": "indicator--deb3d389-869f-4bfd-abaf-5ac90dddaa08", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7f3369f-81a5-4811-98ae-691f60431ee6", "sighting_of_ref": "indicator--455133e8-599c-4f1e-9c09-b12f67e31b9d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d5f51a-b17e-4694-99f6-ff05642a1e33", "sighting_of_ref": "indicator--49849ccc-1a8a-4e9e-9f44-18bf129f8ba6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a09d02e5-a941-470f-b354-f59b2555bb98", "sighting_of_ref": "indicator--1beba56a-56f3-49c0-8c42-14b25e6863b9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03344a52-cf47-44b3-b783-8aa597d26e3f", "sighting_of_ref": "indicator--c0d9dc89-2c79-415d-9190-a44c3f9ffda2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d5d527-6101-4a50-8ed2-c327fa131c32", "sighting_of_ref": "indicator--cfd97e03-94af-40b6-9686-2da17b666d51", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42e30a05-75cf-4981-9592-703e14bd7259", "sighting_of_ref": "indicator--3730da7c-2ded-49f3-a6e2-b774296f6b45", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf7a324-6613-4d6b-91c4-35d123751f38", "sighting_of_ref": "indicator--01eedb50-0aeb-4208-bf6f-00fcec4a6e57", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e016fd70-e30b-4037-93ed-b159adb4d626", "sighting_of_ref": "indicator--3d544d22-0d77-48c0-9f94-cd58dd407037", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e1eeb3-7132-46d5-af23-623deffeb306", "sighting_of_ref": "indicator--e7a1eb36-6e2d-40f4-9d45-2bc1d06f224e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f785823-93c9-46a5-9b4d-9de3e04a3e29", "sighting_of_ref": "indicator--153505c3-c476-4847-8ad1-0b1b3f0694fd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--845dc646-50f2-4c2e-b1e2-59fb123d1dd2", "sighting_of_ref": "indicator--81442127-0f23-4cee-acea-20ba67baaf49", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f7627b5-85e2-4f00-91bb-976a10e56254", "sighting_of_ref": "indicator--df4c09b0-ae29-47af-8a3b-f26f7819d379", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f9b8060-fba5-4c76-b820-e6131f20d9d6", "sighting_of_ref": "indicator--925d143f-6e58-4285-aa56-1984e512fc16", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36071ac0-891b-4b4a-ae7b-8a6f4ea83b10", "sighting_of_ref": "indicator--37ee08d2-ea3a-47db-a8fc-bbcd76ba5a54", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18940d3b-1e17-4844-8c76-21aa5facda60", "sighting_of_ref": "indicator--43008c32-b1f1-42f9-b632-f1e6b1829af8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8adebbfd-e61e-45e8-a3db-b0fa0e701e12", "sighting_of_ref": "indicator--41604dc9-1efc-452b-9a11-eb238015a19c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33e74c83-8047-4c3b-8bee-cfc2d16cb9d9", "sighting_of_ref": "indicator--8272059b-80ff-4095-b376-c2f58524fed3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d42636a7-f954-44cc-9b2f-1133e53b7ca8", "sighting_of_ref": "indicator--60d60283-1f43-4adc-a213-662ca8278d78", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7f04f99-8311-4394-a11f-abb27201318a", "sighting_of_ref": "indicator--61c43dbc-7344-42fb-a5f2-efd0315b2ffc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fada8a13-c453-4812-a4bb-d94d0b7f54b9", "sighting_of_ref": "indicator--55541ec8-f318-4062-96e3-a4e76b68094c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e26097-6f31-48a8-9ac6-c80170bf5b77", "sighting_of_ref": "indicator--701d02c3-c3f6-43be-b37c-8895885b04a5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bdcb920-e1f6-4538-b8b6-daf19e68719f", "sighting_of_ref": "indicator--d6fcfe12-4bfb-4990-ae17-d3bbc421ee5e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39cb516d-7e54-418c-af23-6e5549f96e10", "sighting_of_ref": "indicator--7bb60ee3-6785-43e7-925b-b6c6ab5ee3e4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--309b9dfd-2d09-4ccf-994c-6aff631d3f2c", "sighting_of_ref": "indicator--a8670c47-e266-4477-8652-451f36b4e078", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--777dc754-6322-4b4e-a4fd-127611072994", "sighting_of_ref": "indicator--f05a38ad-526a-4365-a403-192f9e43c769", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6fc3ced-38bf-4efd-a754-a6d797536935", "sighting_of_ref": "indicator--59936a25-fa47-488d-9363-2053df262b8a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78a7264f-7676-4119-ad60-013ea9ca9890", "sighting_of_ref": "indicator--74d45aec-762b-4174-88d5-751d67bd06b3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38048a46-d16b-4169-a838-5d933aef67fb", "sighting_of_ref": "indicator--d230aa15-4e18-4e03-b6c9-b6ac1cf43f41", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e107dc7-9b7d-473d-8714-140f401df0e4", "sighting_of_ref": "indicator--fec91f43-d252-4444-93d2-95639198368d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bd54ca3-1e63-4818-9ae9-c93d40441829", "sighting_of_ref": "indicator--6cdfa8e7-23b7-48ab-963f-cbcaa3f169c4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18e8e900-0cba-4d45-90e1-be4f763219d5", "sighting_of_ref": "indicator--23a609ec-160b-4dca-8ce8-96e3cc4c8355", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ce788b-45ac-46e7-88aa-c673e328c280", "sighting_of_ref": "indicator--f6dbe36d-a071-4b0d-a0cd-f0c14ed5ab41", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc13945-c0eb-4328-b259-2404436f970c", "sighting_of_ref": "indicator--d1e6b1b1-0fc5-47b9-89bc-d4669c063f72", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f16df958-a639-4b32-ab3a-5702cd3ba3c0", "sighting_of_ref": "indicator--42bcfd6a-60c9-4fed-a19f-5c0d4ce7ce70", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71438fc1-7749-4b41-a9c4-168fe1ceec50", "sighting_of_ref": "indicator--8b46088b-d57e-476f-9a45-5e2958083fc1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dad202b-81e3-4873-896e-ab9b89b78f16", "sighting_of_ref": "indicator--1954f9ba-803e-447e-bd98-0e70d15adf15", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3381c0cb-aa47-43ec-9cf7-8db94ef1a3ba", "sighting_of_ref": "indicator--f0521975-4d0d-427b-a070-c5c546dd917f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa38369e-a07e-4f61-b957-373dd280693d", "sighting_of_ref": "indicator--bed6105f-9a2d-4c78-b10b-eb61f1cbe497", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ce1e749-baf2-4d77-8bcd-7b4dc4fa5081", "sighting_of_ref": "indicator--1dc09bf2-119e-4f13-87da-40ec0cf2b203", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27feb5b3-baea-4187-906c-943ff1cf8e6b", "sighting_of_ref": "indicator--4a1ae105-2100-4457-a4d5-49f4f263e9e1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fa8ee4e-58f2-40f0-b403-c56aeea4a1d6", "sighting_of_ref": "indicator--6596528f-35fd-460b-824f-32bff7814fc7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b87d696a-dc93-4574-9ca1-2aa8ba148a68", "sighting_of_ref": "indicator--28c112ba-4597-465e-8746-139b7202fbf0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--260d4e52-49d1-42dd-aa9c-9daea81add7b", "sighting_of_ref": "indicator--8fd060d1-ca34-42f7-8059-523303bfe656", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b88b37-2d1f-4847-ac18-ef1265b1b7eb", "sighting_of_ref": "indicator--2be1e9dc-1bf7-4aea-8930-2902ea4ac788", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5e3fee3-2ae3-4ad1-9c8b-addb611b67c7", "sighting_of_ref": "indicator--69b1e2ae-a19b-42f7-a684-0fb10c55cb1d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fe794e2-36dd-4ee3-bc42-1ef26e2cab44", "sighting_of_ref": "indicator--e351d3d1-a10f-4a2c-b454-58f22a0264e8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5988eca-a41b-4e6e-aced-5dff5fdcb93c", "sighting_of_ref": "indicator--78480ba5-0c59-41b3-a5dc-a505b76595b2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71462989-9873-4f4e-b082-7d623aec7b43", "sighting_of_ref": "indicator--33317384-1986-4be1-8b8d-91dde4a0008d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c92ddf61-b61d-4730-9ace-11de4818c6cc", "sighting_of_ref": "indicator--caecbaeb-6ce2-470d-9458-e4f15aa89b02", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e93c355-16b4-4e6d-b994-bd502e3a5abc", "sighting_of_ref": "indicator--0cb91203-0cef-4128-b0c6-0520b6901666", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d71ebf7a-1013-4f21-9ea9-39d8daecab24", "sighting_of_ref": "indicator--f4440f80-50e5-458e-a382-07683b707d22", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e418039-11ff-4777-b8f1-e469c3d29928", "sighting_of_ref": "indicator--994689f9-ea4a-4651-ad05-64ad8ba41403", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bae5c59-0d97-42b4-b2cd-eac433ec3642", "sighting_of_ref": "indicator--219f3ce3-d478-443c-884d-d7088e628aee", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd586e0d-1065-40ce-bfc9-038434519007", "sighting_of_ref": "indicator--a00205b6-82d3-4d38-9577-7d079362317b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f56628c0-e210-4cf9-9e62-f4f34984b9a6", "sighting_of_ref": "indicator--f08ab4ca-4bfe-482b-88c9-d202a6cadc50", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac9244f6-9230-4696-9b24-7dd6ab55f1ef", "sighting_of_ref": "indicator--ad138ac6-3da2-420f-8bda-6b0e09dea6f8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e51b49b-677f-4b3b-abff-e36d5c412e90", "sighting_of_ref": "indicator--841d76c7-6245-4537-a26b-51a7027d9cce", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31e4388e-7da9-4f6e-aebf-00082e1f9d2f", "sighting_of_ref": "indicator--7b45d350-d357-406a-9713-f79d6e1dd6a5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d084969-db49-4cd7-b961-03695de92735", "sighting_of_ref": "indicator--9cc796f6-6585-4460-b2e5-713e8bdab1de", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0273fa4d-21e0-45fd-b35e-932be61e644f", "sighting_of_ref": "indicator--00f2533c-dfc8-464d-bd68-551818f51f63", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddbe2ce8-b101-405d-826c-3eac77043de9", "sighting_of_ref": "indicator--6dfce59f-7dfe-45ac-b801-c93a2b889058", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54775be8-28f5-4fc3-a5a7-a649245d78f1", "sighting_of_ref": "indicator--1236c8ac-b7f4-444b-b0e5-bdd74ae0e289", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a73f0f0-58a8-4283-9598-f611eab5877f", "sighting_of_ref": "indicator--bc583c6a-920d-47be-83d4-45f2261cd6a7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fec00a6-2e7c-4c10-a100-fde3a8ce212e", "sighting_of_ref": "indicator--769f3e2a-801a-474c-9f15-385b152fc6a3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d56bd2-4677-498e-8b52-bd0fdd9c0af3", "sighting_of_ref": "indicator--9eee0c70-69f9-4524-bcd2-e1d75a343205", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d49c4e8a-41b5-47fd-939d-675414f9c582", "sighting_of_ref": "indicator--35db78b7-6b29-4bb8-98b3-94ef4568c765", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--866cf9c4-3cd4-476f-9fef-5b311704c70b", "sighting_of_ref": "indicator--dad194ab-daa0-442e-8a1f-c5024612b8c2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dd5d7be-8b8e-47b2-982c-bfdeff488d88", "sighting_of_ref": "indicator--3e6d4291-0344-4fdc-91c7-29fd4d31cc29", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4684338-0c87-49be-a7db-e208f14d7922", "sighting_of_ref": "indicator--b7bfa16e-cbd7-41e4-8e13-64bf0bd313bb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9497565-2479-4163-acfa-8e16092d52ef", "sighting_of_ref": "indicator--bcdd18ef-020f-43e1-b147-7980efdfdc32", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28cc8d44-e73b-4f74-9673-c97a66f30ce1", "sighting_of_ref": "indicator--0b565048-9405-47b8-93b8-53c67ea1c395", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a655151-cdb3-43cd-9784-ea48725d72a2", "sighting_of_ref": "indicator--d824a719-1b90-4708-8f49-bc1df9b5625a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbeef99a-0bfd-49d4-a6de-d3452027314c", "sighting_of_ref": "indicator--34175b75-2d4a-41c9-b90a-dd84b2fa42cb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d027f1d0-6c42-4245-a0e3-20234ca72afc", "sighting_of_ref": "indicator--92d7ff04-b9c3-4f95-a0a8-4e10ff00d4f7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c285ac59-3eb9-44cf-9e46-153a33365fea", "sighting_of_ref": "indicator--aacead5a-cf80-4616-b6d5-2f482543fa4d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12120be1-1313-4fd6-ab0b-050065ea1ecc", "sighting_of_ref": "indicator--3509a943-f543-40cd-b514-acf4c5e89e8d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb8fa025-7797-4c72-a196-2b2c89748415", "sighting_of_ref": "indicator--6d876fe7-01d5-4f02-9e8e-cd8f04ad6fba", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76701b04-c597-46bf-bbda-32c8142318d0", "sighting_of_ref": "indicator--a1acbfc1-de86-4734-a9c0-19dbcc84cc86", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c91e55c7-6be9-4818-9d61-c6f5d3850209", "sighting_of_ref": "indicator--55e5df21-99d5-4e51-b4f0-c11de84d1228", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeff8775-ab14-452c-9a5c-f41b439182b6", "sighting_of_ref": "indicator--d8ff21e7-c0d3-4396-8904-4c81806dd3d4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--070c60f2-f4b7-4688-965a-3ce0abca8435", "sighting_of_ref": "indicator--190e40d0-1bfd-4a50-b001-2baf289cee3b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12f673ce-89a4-4e99-8db7-542ec37542b6", "sighting_of_ref": "indicator--b2ff14c0-0b0a-40a4-94b1-e697ce7c0a6f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57686744-37b5-4ad7-899f-289a027f22b6", "sighting_of_ref": "indicator--300aee96-eca5-4aa3-9b45-e9198a76be76", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e077eb87-c7aa-4b57-abc8-b0372a80ad33", "sighting_of_ref": "indicator--a6f64c78-08ba-4ae8-bdbc-3bc01f0f93a6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6463a310-2e58-4571-8c13-54694724cc14", "sighting_of_ref": "indicator--e2284222-d17c-4bdc-bd30-e2d2c8311289", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--434fc44f-a260-43b9-8a54-44afa0dc8afc", "sighting_of_ref": "indicator--c4d1fd21-8538-4171-8623-2715db00406f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85c459e8-93e3-455b-a641-56282e14bef4", "sighting_of_ref": "indicator--f716909f-fe13-4d2c-beed-952c81b97ad4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dce73c55-7351-4f67-a595-de49cf9af5d4", "sighting_of_ref": "indicator--9193c799-cbe1-4326-af72-558d6a093537", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b684d13-3f60-410e-90b8-93e0b3948b8c", "sighting_of_ref": "indicator--ddeada20-cc9f-4cd5-86ff-affa520cfa47", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cefd57f-ea6e-4137-94e0-fbd1efb1c3f3", "sighting_of_ref": "indicator--592ec58b-b24d-423c-8fc9-82fa6a8c5bfe", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7861050-c057-4f07-a0f6-9c6985492067", "sighting_of_ref": "indicator--9312d6c2-49f5-4e3a-9082-07e710c3db65", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ea67d1-1cc1-43c6-b7db-b3202e08dba1", "sighting_of_ref": "indicator--b1dc84ce-3eab-4b6a-954d-b3bf99ca7b29", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5e27a22-40a8-4aaf-8b87-92191eb1f5b6", "sighting_of_ref": "indicator--4c9ccae5-d211-43ce-be07-0a5cd3305ce1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1db0aa02-e56d-4ad0-99fe-350c0ddca6b7", "sighting_of_ref": "indicator--9b34c8d2-b9d4-4048-b661-7728a078723b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--130d3cf1-bf21-46cf-8023-caaeefc2045c", "sighting_of_ref": "indicator--0ef1a41f-df20-4123-a958-de80c6afdf4a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b03c38ed-d224-480f-b2e3-19b8bb26f715", "sighting_of_ref": "indicator--2f6f39a2-0ff0-439b-b960-d47258a4d285", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b137904f-4f06-40cb-bc29-74fdb0166c30", "sighting_of_ref": "indicator--361fbf93-9f45-4049-887b-d3a3f94d144a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7efbc346-079e-4727-be75-e0cd08dd7865", "sighting_of_ref": "indicator--f3a21d09-ac8e-42f2-804d-2f86f72c7c0f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ace975-f4ba-414d-8800-0fd5a2dbaec1", "sighting_of_ref": "indicator--7836ce17-2abf-468f-a74f-af78fe6c0cc9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63f3e19c-b0c0-4be5-a4ad-216d5f44cc09", "sighting_of_ref": "indicator--507e1856-339e-4e9d-8bb5-30ddfcc0421b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c2f1938-8a04-4e60-a375-966e31f506b0", "sighting_of_ref": "indicator--7d4a8ea6-901f-4dd0-b39b-a88b20ad54cf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e74a9bb3-a5c3-4466-bc8c-fb23ac8a21b7", "sighting_of_ref": "indicator--1420838f-7de7-48e3-899f-3fc9b411f83d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa327848-0d50-4e43-a5f4-dce770589386", "sighting_of_ref": "indicator--be13840c-b74d-46fa-8144-8207e90d1cf1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a61eb7a1-28ec-470f-af93-ae8ea91f483b", "sighting_of_ref": "indicator--1a00b665-eb27-402c-9372-5a4c38c46691", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45c780ac-c036-4e29-b725-aa74160bfc85", "sighting_of_ref": "indicator--8bb56e81-0d90-4ead-abd2-05a3024fe0de", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ffdbc7-cfe8-473c-a158-b3909167a5fb", "sighting_of_ref": "indicator--ccee4387-ca66-47d1-ae86-7cbaacecbe96", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf0bcd75-1433-4de5-81e3-135be458bdaa", "sighting_of_ref": "indicator--fab9e89c-b987-460d-bf01-200de3b68bb1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87967e8b-8396-4a86-89a3-6120c9217e00", "sighting_of_ref": "indicator--a091e047-b250-4a41-8144-3eb69770fb06", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8119637-0016-4f5e-8c1d-1adfc7b3f7ce", "sighting_of_ref": "indicator--0607bb9c-8a66-462f-8ab4-a55da1e24a33", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40b1612-f1e6-419a-83a8-54621d79cb1e", "sighting_of_ref": "indicator--87e0be9a-72de-4fad-9f20-6f062bc90b90", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b6b085b-5ba8-4582-9653-ddb02b1b7b94", "sighting_of_ref": "indicator--ef58795e-3d19-4b26-b618-b93e51b7676b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a20247ee-04d3-4f74-9d7c-9911d3e37722", "sighting_of_ref": "indicator--f84630d3-0617-4c85-8e52-cb1f7af2180f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d2b05ec-c19a-4654-b013-79bf1da1f5a1", "sighting_of_ref": "indicator--f1b23ef9-bd64-44d2-b620-a3d150ec1ac2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b60aed38-9ee6-4870-9b7c-b50bec364790", "sighting_of_ref": "indicator--74bd9a18-ba42-4077-8aa7-fcbd0776e440", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc3fd39-2a64-48e1-bbe8-a76d1ec6800e", "sighting_of_ref": "indicator--09958db7-9479-4f34-86f2-be592fa41ffe", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--971d7c62-17b8-47ba-b3c9-37ea6a2eb76c", "sighting_of_ref": "indicator--aece6671-8457-4b4c-9e84-3f87a00573ba", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba79e7c8-823e-44bf-9656-8aa48f70c2e6", "sighting_of_ref": "indicator--8f358e43-6a22-47c6-a4a3-c1aeff4d5743", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af96a97d-abef-4339-9343-1f5beb373ea3", "sighting_of_ref": "indicator--616a4bf4-7b61-47e7-baab-e0b8dc08d7bd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a56722-73b9-4ac0-986a-0a9e901885ab", "sighting_of_ref": "indicator--c263b768-a27c-42fa-8cf2-79548a34f726", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5545ac8-90fe-4af1-9c91-003affaa7ece", "sighting_of_ref": "indicator--976a4cac-bc15-4751-8305-d8f8d67d62b8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c3b2a67-c886-4700-a4b6-a2b7ec7fd0e5", "sighting_of_ref": "indicator--4c32e9e0-4981-4e1a-bdf8-93775f9732c1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7449ecf-bb67-46d8-aaa1-c1dfd13be395", "sighting_of_ref": "indicator--478ef0b5-ce3e-4d9f-ae8d-5519d2782183", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bba7d52c-62a5-490c-8221-f8086fb9bc3d", "sighting_of_ref": "indicator--d7b36ee7-3eff-4142-a73f-c0fe43ab82ad", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df08c2d-9f14-481b-a830-f52fa1f377d0", "sighting_of_ref": "indicator--d84af54f-53fb-47c7-b56b-557e5c366dea", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77936b5e-2588-4e9f-afb3-2a201248f15f", "sighting_of_ref": "indicator--0e0236ea-1d6e-4a9e-b591-6349bbed4997", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b560d287-529f-46e7-8771-5c7a707d6091", "sighting_of_ref": "indicator--d61cb03b-3806-4fea-ab97-3ffcac07c1b6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d98cac6-f9b2-4c91-a144-0e86bb5d3b98", "sighting_of_ref": "indicator--de688594-64be-46d2-a158-c4a2554f207b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de2b15a3-92d6-4ab5-822b-b497fde6252b", "sighting_of_ref": "indicator--847d108d-4ca0-446a-b17a-6cc3f72e4e48", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c19a6f5-38e9-48b5-9805-6b60d186f3e3", "sighting_of_ref": "indicator--ac34866c-d854-45e6-9c32-8bc302fbde43", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ba847d-0332-4cbd-bb3b-0f13851b2f2b", "sighting_of_ref": "indicator--fd09c157-60d6-42d9-98d6-7a0e9966564f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9af71e04-a1d5-42be-9bd6-7393c4c6d220", "sighting_of_ref": "indicator--198cbef3-c42d-46eb-bb1c-ac89751c3d5c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4574bce-2590-4bf2-b186-049f751fc1b4", "sighting_of_ref": "indicator--f2483e5a-1dad-4240-885a-0a6ba986dcc5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f62f1e6e-b6b4-4624-a0d7-e9d1732ae7d2", "sighting_of_ref": "indicator--b941a289-400a-44bc-ad3c-2f7e88f9f6ea", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ac41cf-b438-4de1-95d7-b51e6b399579", "sighting_of_ref": "indicator--eb6e033d-bc68-4d47-8a6e-30081cd05661", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f321b95b-a972-44ee-bf66-29698871be1a", "sighting_of_ref": "indicator--b8bc75f6-a851-4807-ada6-28cbf38f56cf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ec5b6a1-2ac4-4788-a30c-0469165e5e85", "sighting_of_ref": "indicator--a5658b90-b7ac-414d-b143-a147a2562bf8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f06b899-fa60-4881-9855-47267ac1bfb4", "sighting_of_ref": "indicator--98091f14-c0ad-45af-9a76-99d0f9de4998", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4194d4f7-2020-44b9-a699-71852125066a", "sighting_of_ref": "indicator--e2a6b656-2f07-47ae-b658-45d8aaaff0c5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c96dea8b-ddbb-42d8-8507-d287e6069230", "sighting_of_ref": "indicator--9437afd2-4975-40fb-adff-894d33dc8664", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9b87753-3823-439c-bb59-1fe54e4935f9", "sighting_of_ref": "indicator--626c4916-660f-46ee-b09a-c140a1661eca", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eaa4c24-2052-4748-b8d0-2b64e580e75b", "sighting_of_ref": "indicator--20c76693-68da-4e14-9bba-754d43f18987", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d33f41-3676-45e1-86cf-b8589af63982", "sighting_of_ref": "indicator--2ead27ad-9307-423d-8091-2e843069f50b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a1a40c-6dfb-41a6-b7ac-8474a55dc674", "sighting_of_ref": "indicator--5f03a985-c43b-4114-88e6-8bf42de76373", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c97b81a-b23a-4a69-8656-3384665a728b", "sighting_of_ref": "indicator--6dea6228-e834-43c5-bada-97ee3218931b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40b61c1f-abd8-4c1a-a82f-9dca3f950d7d", "sighting_of_ref": "indicator--3ad3beb0-415c-44a2-ba78-94fb756b06d1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41a69a9e-ebd7-453d-9f9d-796a2ba7f279", "sighting_of_ref": "indicator--641f9012-efb5-42c5-9e1f-ec5bb107e10d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--647c9c1f-4db6-480f-a60f-44d168aad56a", "sighting_of_ref": "indicator--122702ac-5a7c-4e44-9289-76dcbad2c557", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57173380-c508-453d-8a31-c500111a24ca", "sighting_of_ref": "indicator--d3938984-1d30-481a-8064-eca67bf619f5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d532dff-b0c2-4fdf-9c9d-650ae0b08668", "sighting_of_ref": "indicator--e3385773-1851-4c38-9195-d8136cf994b7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f728cf-68ef-4ded-a20d-a34394332837", "sighting_of_ref": "indicator--2877773e-c6ba-428c-be98-b42149544e90", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--169a33fe-9e24-4c7a-96eb-8e3d3d0d2d03", "sighting_of_ref": "indicator--f5dbd4f0-5081-4276-8c40-30fffc70bc43", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ff39e9-390e-4a57-be54-99e4449049b4", "sighting_of_ref": "indicator--28db9f69-976e-4c44-b6f0-3a515bb3dfbf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66704b82-b762-476b-be73-c02eb4d41c73", "sighting_of_ref": "indicator--074a147b-1702-4761-8698-305dcbfd8ce2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08cd5a38-8e2d-4158-ba5b-e43fe6ea517d", "sighting_of_ref": "indicator--a5bb1a34-2be9-456b-b82a-51ca9e35b63c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b6396d0-5f20-42bf-841e-db2f66320884", "sighting_of_ref": "indicator--4b2954ce-e6d8-4498-a536-c37f8281de5e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97522c0e-079c-4e4b-87c4-3c774eacca4a", "sighting_of_ref": "indicator--22d56fce-0fbb-46d9-a588-2b4294c5348b", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdcf9e80-081c-4d92-b5ef-daa1e193c769", "sighting_of_ref": "indicator--1552e6bc-1728-4a70-906b-f56a8bf1c82b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3363ff4c-902b-40b0-9ca9-035b59ac7f8e", "sighting_of_ref": "indicator--41d88101-ff07-49ce-83ec-4125c38f3453", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4020ccf-ff66-4515-a4cf-70410d360799", "sighting_of_ref": "indicator--cb080594-1229-40db-8481-9f7a3f0afc99", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06624816-0dc1-4a98-95ad-47b0f5bf4dec", "sighting_of_ref": "indicator--79fe66df-2a75-4efe-91b5-200091ec4310", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a7c19b9-196b-4d2f-81a1-f78ed1822d24", "sighting_of_ref": "indicator--a1dfc7be-3704-4fd6-b6b4-8439396d2707", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5eeeb36-1038-46d0-81d0-b3abbe34b0c3", "sighting_of_ref": "indicator--d07c45e6-1090-49c8-aab1-4826f41f1925", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34c171a1-ff51-475b-910c-ba74520fd648", "sighting_of_ref": "indicator--03dfa82e-ad16-4152-bc3d-efce919a3cec", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f866cde4-af69-4f81-81ae-fc826c9fd840", "sighting_of_ref": "indicator--b72a4afd-8cdc-4d15-b8ba-3653262c16bc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25faebca-ea1d-442e-a4aa-b4257a1b2091", "sighting_of_ref": "indicator--5c70d1b0-0bf4-4386-94fa-d08433c461c1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b3ecf9c-4e15-42b8-9360-18425a846806", "sighting_of_ref": "indicator--23aee70c-0fd0-4377-be6d-6ee1b2aec12f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c36e2081-ca81-4738-8513-006e0ef99d97", "sighting_of_ref": "indicator--c245149a-aeba-4d8f-8554-76a6394c37cc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de2d0f42-b0f3-46e9-a506-a791c5b4be66", "sighting_of_ref": "indicator--8cd26291-6b6d-4ec8-bab4-81189c43901a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f8e143-58e0-4752-9f6d-e0de0fba6094", "sighting_of_ref": "indicator--4dd00e66-062e-485b-9eea-32591464ba36", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae2a2586-6b72-43ca-afd4-d2d87683ca40", "sighting_of_ref": "indicator--d52a344b-1e89-42a5-847c-19644b11e504", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8276024f-11fc-428d-b5b9-f14433c86634", "sighting_of_ref": "indicator--21e5af8a-1701-4832-b7fd-ddb92d44464e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac11c3e-e3a4-4f55-82f6-3cefe677f606", "sighting_of_ref": "indicator--dffdb1a1-0502-4f41-b6b6-e6846a612fac", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08cb0c34-5a6b-4afa-afa5-47a972cdf13f", "sighting_of_ref": "indicator--e2510be9-b8d6-4923-ae7d-50d8f96aa417", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0fc8487-49a1-46fd-8b09-2c7ec6ee8c3f", "sighting_of_ref": "indicator--5f63499f-284c-436f-93ec-25ee358a5b80", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a558102-059f-4f3f-8c9c-f9216dd7ddb1", "sighting_of_ref": "indicator--fb97cc96-11f6-49ae-8588-8b83fb178a07", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11329654-421b-41ed-9038-412261042bdc", "sighting_of_ref": "indicator--40cf192c-7932-410d-9033-dc300767d9ce", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b8ce42-a85b-4f69-bd64-afd2cffcd7b2", "sighting_of_ref": "indicator--c66e32d1-6278-4817-ad14-478c04af5470", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cf9c684-c045-4f89-8d48-7e034c570397", "sighting_of_ref": "indicator--f2d4dc8c-f689-4a05-bfa5-0972b675eefc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7b41050-620f-4392-b743-fdaa23c0d636", "sighting_of_ref": "indicator--a50e4527-0b76-4511-9e34-69ac5ca28b19", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--363c8528-4c12-40a7-8d4e-acd09cf5c559", "sighting_of_ref": "indicator--555407ab-cf5d-4c75-bbc7-eb3cffff3328", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da1630b6-f8b8-4a6f-9de5-f8b5201fdc12", "sighting_of_ref": "indicator--b07be4c4-3da5-45c9-98ab-89c974b4358c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3eb6fdf-5c14-4e94-8462-7483fe96d861", "sighting_of_ref": "indicator--47b3e547-28fb-4eae-b957-234d245d9602", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16aa3550-f21f-4cbf-a920-c0e36b978d04", "sighting_of_ref": "indicator--7400d609-a5fd-4a2e-9045-654b74ff65dd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--171cb846-3884-4f69-8eb3-1ce687386ca9", "sighting_of_ref": "indicator--c4660284-4ec5-4cd9-bf1f-a44e4e4e4b8d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8725a70-bae7-4694-9a9c-f89df12056a4", "sighting_of_ref": "indicator--5a525135-bcdc-487d-810a-b67a16d9d448", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e3694e6-2970-4f2f-b003-61e19daae386", "sighting_of_ref": "indicator--57112d8f-d857-4356-ae0b-9fc5ff957ea9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--582c4528-eef7-4066-87b5-68e544aec9a4", "sighting_of_ref": "indicator--93363991-3cb8-4b3d-85cd-6b413ab727a4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3488a5b-e25c-403e-8145-193facabfa9e", "sighting_of_ref": "indicator--012b7b65-64ac-4f56-a3e7-9543f1c74894", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcb3455e-0642-4554-aa0d-a4bff587f398", "sighting_of_ref": "indicator--e235149d-8c2d-4686-9501-404893892704", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f2d8386-ecca-4dd8-aa8e-b31889f09887", "sighting_of_ref": "indicator--898a4347-ea27-4980-98aa-b803bd03cd3a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da8a9d05-0dbb-4d44-b73d-b9cb04a81a56", "sighting_of_ref": "indicator--93550fc6-2e4a-4077-853c-c5c98f08815e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68e44fa2-e0f0-4825-90bc-de62f9100729", "sighting_of_ref": "indicator--11828cec-c23d-4954-a762-2016d5505380", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--284c0732-3c16-4370-a139-f0ff8a706c2d", "sighting_of_ref": "indicator--2b8f8636-98f4-4c3b-8ef2-2aa153a85216", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d655f8-bbb7-4e9c-8d29-2399ca01df6f", "sighting_of_ref": "indicator--9de3eb5c-ddc1-448f-9c5c-adcdd02e746f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c01fee1f-aca1-4f4a-95d3-d6904de3e1c4", "sighting_of_ref": "indicator--6143dcc4-c369-4d9f-a5f8-76c230e6ec68", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91809e66-c4d6-42f4-a740-642432b90f01", "sighting_of_ref": "indicator--72a13f27-4ec6-47ad-8a9b-1bdf1af87ba3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d05ce766-b0cc-41fa-b920-3802efdf4b56", "sighting_of_ref": "indicator--a50b6ba7-e49a-4e11-8328-b327de3e17aa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b96f8999-5a65-4459-ad58-a07913d1ff2c", "sighting_of_ref": "indicator--45fdd4bf-8a27-4cdd-84e2-cd6ddf5846b0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5dc6fc8-4c97-4627-aab7-cf35ab355220", "sighting_of_ref": "indicator--b66c667c-b654-4aab-ad7b-fb1702efc993", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa99bd17-4897-46d1-b4e6-c142c5c4fbc9", "sighting_of_ref": "indicator--6b966079-a1e3-4af9-9042-ba982c42a045", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade5955b-4a31-4a1e-9175-54b4bac14165", "sighting_of_ref": "indicator--53a1ca29-1d71-427f-81ae-fc4ef3130117", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ebd0ad3-e097-4c39-ae2d-15729b8caeee", "sighting_of_ref": "indicator--8ee74937-a85c-492b-a090-f2b75d05bbc2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca8514e-7de1-46b0-bfe5-1cae524e08b4", "sighting_of_ref": "indicator--70fef7a6-65c7-48cf-943c-b94bf2f7de23", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--258d0353-60e6-4a95-99c6-dd01454e099a", "sighting_of_ref": "indicator--bc968414-46e4-4309-806f-e01b10bffb83", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a31639-0561-4d27-99fc-c0779aada373", "sighting_of_ref": "indicator--cd69121b-7ba3-4630-8428-4fc4d0de6b23", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a05ba915-bb3a-4201-9933-d22b4e3198a4", "sighting_of_ref": "indicator--960ec84f-b072-42f7-bdf4-1e162fb39599", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e99f0e8-c2ae-465c-826c-3dbded0b270e", "sighting_of_ref": "indicator--b265a707-f94b-4254-a2ff-c0ae46abaf5d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fbbd01b-d0b1-444e-b5b8-af4a35c3db89", "sighting_of_ref": "indicator--94dba5b4-b773-4565-bea4-4251e6f2f645", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--046229fb-ae7c-494e-ac92-30b1b14037ab", "sighting_of_ref": "indicator--062bdaaf-96e6-450a-a8cc-33b3fa57c3b9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1f3d512-a3b0-4624-ac15-36d3beacba3c", "sighting_of_ref": "indicator--e8350278-bbcd-42d7-b83b-95bdbe4a44e2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5176e70f-f925-4629-97da-19013abca5a3", "sighting_of_ref": "indicator--19f956f9-d730-4777-adda-6b707a5769c6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e63192-e234-4f6e-a3d1-f4f5f67a358f", "sighting_of_ref": "indicator--0fa4a11a-f755-4333-a1cf-0da4e2ad625e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39c1e7ff-38ac-4640-8d8f-20ef87b86cd8", "sighting_of_ref": "indicator--36770b89-b002-4682-a7f6-9ac54e28f121", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e6ac299-18b4-4dd2-b034-de2f1657fa57", "sighting_of_ref": "indicator--cb58bb75-96ef-428a-bd1b-10cbb0e1b222", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdb35143-2360-49d1-a508-508669ac77cc", "sighting_of_ref": "indicator--efc2ef36-acdd-4a62-bdd8-85938b2543b0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f8da82-48ad-410a-a82b-d27b4076efaf", "sighting_of_ref": "indicator--7708cff8-05d0-47e1-8a33-98ac280bae43", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fde6c098-6ac7-42df-b571-49b31979508d", "sighting_of_ref": "indicator--ffcac891-7aa1-45e6-97fc-649f20999f63", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff526563-f825-484f-bef4-226b76d30c0e", "sighting_of_ref": "indicator--a7a7533c-75d1-405d-bcc7-10ebf31bf0c9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24793d66-b259-40c1-941a-e5aa8e3f3d87", "sighting_of_ref": "indicator--0cbc4a5e-beac-476f-aba0-6e2ee0a247a9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7327b59f-3def-4824-b48a-0e7d6c258e32", "sighting_of_ref": "indicator--f07e4968-a807-47bf-bffe-ede5b9f5baa6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d77aa21-5d22-420c-8367-6d17f9749c02", "sighting_of_ref": "indicator--c5ba5613-9600-41f3-96d0-80afcc2d2250", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf7894ae-1573-443f-b114-e0f4534c8ac4", "sighting_of_ref": "indicator--e3d2fc95-58d7-4377-95ac-519388e95634", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--476cfc76-bb51-4df7-94c9-eddaef758a30", "sighting_of_ref": "indicator--73322695-c010-452c-957f-b61f80032def", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc3b4633-3a6b-463f-a6fc-14a0fec77ad0", "sighting_of_ref": "indicator--62a5c382-3fa7-4119-b6a5-3129f11e844d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cfd681f-71ad-4280-9d1b-10352488162b", "sighting_of_ref": "indicator--3ac295d9-cb2e-495c-b057-c78ca13c2e17", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01b11dd6-e799-41ea-82a7-ed70d1ec879b", "sighting_of_ref": "indicator--3267c3c4-e482-4b2d-a944-c8dbe24fe99c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2958c6d4-f2dd-43bb-b728-2029b0537171", "sighting_of_ref": "indicator--c505a3c6-b078-4709-b322-463a45c72f85", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a6b4ebe-84a1-4983-9850-7455d15a1c5c", "sighting_of_ref": "indicator--43d13392-79c8-4b39-9de5-52bed479a853", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--309d27e4-7226-4a43-8a37-c2fdc2633574", "sighting_of_ref": "indicator--610cf1e5-50c3-43e6-92b3-a0c73b93d6ff", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a74348b-617e-4d1a-96fc-2c5b3a2f6c1b", "sighting_of_ref": "indicator--7aff3011-cd31-4a9a-bafd-02be465eada2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b60efba5-9bc1-468f-9b61-e5fa703ce6a3", "sighting_of_ref": "indicator--de805147-1010-493b-8348-f6e5b57ffa94", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b6b32db-8a1d-4300-ac0f-0c28814a6f21", "sighting_of_ref": "indicator--1e4b3629-b915-4630-a814-729dd2965533", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e51a60-c081-48bd-906f-57ebb490a749", "sighting_of_ref": "indicator--090b5676-220f-4e19-9097-95d9f85949d4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5784a01a-903d-4438-bc3b-f6b33f9034f6", "sighting_of_ref": "indicator--cae00fd6-e765-4e16-82b9-c8047a79d8ed", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e08f0a3-15e1-4809-8114-3e9af31b110d", "sighting_of_ref": "indicator--e77569cf-51d5-41a3-b1b4-5bc4b903a899", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99125978-7a42-442e-90a1-c9cdd62420a6", "sighting_of_ref": "indicator--e5eed0d0-bae0-4d9c-8dc5-e9dda7d39f14", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c49501-26e9-49a8-a632-4fa0c26e6eef", "sighting_of_ref": "indicator--956aa005-21e8-46b5-8252-e84036208f32", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79742b89-257e-4605-97cd-948562da6585", "sighting_of_ref": "indicator--3990413b-581d-417b-9aaa-1fcd724a430c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--437ad424-aead-48bd-899c-f7e26bcf8f7a", "sighting_of_ref": "indicator--8fc95bf2-789f-4536-b927-60669fac958f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1953e095-8cfb-4e56-8153-67780ed34c0d", "sighting_of_ref": "indicator--0cb0c303-1a86-44e3-b3dc-9c03b72a18a4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56d19a34-77a6-41b0-814e-cfe6343bcda6", "sighting_of_ref": "indicator--a5fca88b-3bce-4e01-9e50-0b68a8c629d5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05767b82-5ad5-4203-975f-c42fd55170b2", "sighting_of_ref": "indicator--73b83b3f-aef4-429d-a364-58b243fad79a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2091a784-3b83-454a-beb9-e76aba929202", "sighting_of_ref": "indicator--9758828b-fe76-4523-abdd-dc9a0b7f5b67", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d9496a1-bfb9-42c3-b57c-44ee5f6490ed", "sighting_of_ref": "indicator--91f5c970-fc5a-4219-8377-1d4fe83dcc5e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18b1c0d7-8e11-4f4f-8530-e7292696f77a", "sighting_of_ref": "indicator--fbf0505d-6cc7-47b4-b364-cec2cb8245ee", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b43e59a-26e2-4c78-acc5-c2c2beb42c2b", "sighting_of_ref": "indicator--7b36440b-98ef-4ef2-ab07-af8b672d81ef", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10970e6f-605e-4025-9967-6297b453bb20", "sighting_of_ref": "indicator--3be01d84-6686-4b38-9630-11f4b2d3beec", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0c06741-efda-4de7-b63a-7391ba656d45", "sighting_of_ref": "indicator--23b06a19-a671-48d3-beaf-1514e8d97cf0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--350e4ab5-2c26-409d-b014-8a73eeb93240", "sighting_of_ref": "indicator--7f12b217-6e29-4442-bd9c-779b937a73d6", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef8adadc-53c4-44cf-bc54-89db0e2d5730", "sighting_of_ref": "indicator--87e8a9e4-b316-42b0-8e77-f953a20e8aa2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0280707-f638-4b4a-8079-9d84e556954c", "sighting_of_ref": "indicator--2fda30c4-c559-4877-995f-1d1f35da8e5a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1331362f-0fa0-4bad-996c-e40457da1f50", "sighting_of_ref": "indicator--f492f843-88e1-4a49-b1e9-edb383ee2b7d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a43ce7f-c117-4516-a65c-f0974e7714de", "sighting_of_ref": "indicator--7ed7c5f6-b0a8-46c4-bdc7-74b1cfb99123", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8718ec01-1b3e-4753-bd1b-5005e7744e59", "sighting_of_ref": "indicator--b0a3c18b-63d3-46c4-bbdb-9739fe0cd3c1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f350ef53-e952-4bd0-a896-68f957247f0b", "sighting_of_ref": "indicator--e79ec1e5-d240-4765-8bfd-306dfd73f50f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--806a66bc-e1bd-4d63-9ea0-4941848c496c", "sighting_of_ref": "indicator--93ac74d8-6659-4e20-b5b2-1f93f1e580a7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8503fb9-b28b-4d90-ae19-f2ed4a69a3c8", "sighting_of_ref": "indicator--770ab6e6-5d6d-4ad8-85c2-d18039c99f16", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70568ed2-13cc-47b6-b4c6-f1d3fe3a9bb0", "sighting_of_ref": "indicator--e4dc1d16-2c19-45ea-ae13-b12c4842e580", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10af5b84-5a12-4bdb-8698-39e5f5037033", "sighting_of_ref": "indicator--5d991303-3dce-4597-bd8d-ae966646ecfe", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff0d31d0-0df5-43eb-b50b-106691faf91d", "sighting_of_ref": "indicator--a2112103-2b2c-4da6-bb66-7c1711d8ccdb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e124aaa0-0808-418d-8e4a-7002b25500d4", "sighting_of_ref": "indicator--b52ce75d-1286-430d-a489-a88438ce715a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c9d10e-d6c3-433f-ab94-775a074bca5b", "sighting_of_ref": "indicator--203699cc-1ff1-4155-84bf-19d28db71a8b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b113321-9024-4f43-8b48-6a37942aaee8", "sighting_of_ref": "indicator--62eb4767-de1b-48ac-ab8d-f9456a3d7a58", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e5bda2e-9a7b-46b3-809f-bd2c70e6d141", "sighting_of_ref": "indicator--7c675792-1b1a-4519-8f2a-032dad17c05a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aa4ced5-c7ab-44d2-8344-afc87c533b6d", "sighting_of_ref": "indicator--812bbfa1-5ee9-4cc9-a050-816971d175de", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b009c9d-bace-48bf-8058-af67ebbc68ab", "sighting_of_ref": "indicator--3d96e379-bcd7-44d3-bb5c-0c8deceef527", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--841ddb9f-6693-46b0-8741-0c41cb471200", "sighting_of_ref": "indicator--b11d1c97-1d69-49eb-b25f-f2fe7ae82228", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1677e312-f0cb-4e6f-9a60-b429d88141a4", "sighting_of_ref": "indicator--10c5dc34-4eab-4bcc-9dd0-c8bfe4c8782b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70e861f6-394a-4d3d-925b-7e9b480e7e17", "sighting_of_ref": "indicator--7de1cbaf-330a-429a-a272-28c57bf4a2a2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df8adcf-d4d2-4292-9f96-6b3f87e73907", "sighting_of_ref": "indicator--ce4df5e2-8926-43a0-a9b8-0cd9ba6e8c96", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd080941-17fa-4c1f-aa15-405040203792", "sighting_of_ref": "indicator--099d758e-50ae-44dd-987f-427688072722", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b099dced-d9cb-4564-adb1-4a2476d5b1ad", "sighting_of_ref": "indicator--697001d0-b633-4db8-867f-0983509c5188", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed0ade1-900f-4b94-9f7c-6d3c33a4fb3f", "sighting_of_ref": "indicator--3a44cac1-312e-4a07-bb33-56182f9dd95d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36eac407-1450-4aae-ba0a-1826ee0d4575", "sighting_of_ref": "indicator--916d6011-96aa-4256-b8ac-f7ec1f80c013", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ddac975-f320-4eed-8298-7cc1aeee78b0", "sighting_of_ref": "indicator--c577466b-7d5d-4f84-9d94-370df5edb951", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e4ade5b-1e5d-4c47-b20f-20d314a50ed5", "sighting_of_ref": "indicator--6fa68332-e01b-42d1-89c2-a97e21a40ccd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8750a540-4a74-4a9f-9784-00daf4526520", "sighting_of_ref": "indicator--f0a53605-b760-47b0-9d18-b994d0f730e0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b103ab74-ef80-49d3-b433-a29b44926002", "sighting_of_ref": "indicator--9ce69fa6-3179-49ea-abb7-852d00f8e19b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18fa6040-6040-4c73-a120-ae253630a5af", "sighting_of_ref": "indicator--34883b86-8e1e-48eb-87c7-89fa6297297b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1464419-3f5c-4d4f-a87f-cddba8e1fb17", "sighting_of_ref": "indicator--24279d17-4583-480b-8129-146fc6709401", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f7849d-8ee7-43e5-b004-1aae28099d59", "sighting_of_ref": "indicator--e1c08848-fb7f-45b8-9755-94e00663ea0a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--884d26a8-8bbd-435b-b7bc-2cf284c26be2", "sighting_of_ref": "indicator--2f865f32-e46b-4303-ac45-e78926ae7390", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf00093e-9922-4e40-a575-eb10e768c220", "sighting_of_ref": "indicator--a599fb35-0df5-4f24-b604-d3724861de66", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eae33d77-e2d1-4ef5-8bfe-03f2b49543ec", "sighting_of_ref": "indicator--48811a66-a700-4550-8331-4a83828a4d94", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--418a5a58-2782-4d94-b341-5d364497b157", "sighting_of_ref": "indicator--37f785fd-200f-4874-b9a6-d89a59cc6e12", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88bd3db0-2fad-4526-b435-b19c2a4f5d73", "sighting_of_ref": "indicator--5f129919-7053-4746-ae65-1602335af1a6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d488b875-45f5-4ee1-bb98-a47fa2db3d19", "sighting_of_ref": "indicator--78e9e906-cfa0-4ca5-bab3-d0b737e1ef0c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93862e24-d2a2-48f2-a18c-f22e4bae86b5", "sighting_of_ref": "indicator--fa3558d2-7172-428b-bd06-0ea658201be1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51d73a7a-5e73-48c6-8a9c-ba2188783dee", "sighting_of_ref": "indicator--d44eac8e-a68d-4966-a5e2-b14d64fe2285", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05722929-dbee-4a4a-9395-0bbfcf761234", "sighting_of_ref": "indicator--2ca0ce6a-0d70-4618-a0eb-1fe2cb7377c3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af035fb6-a78f-4c6a-a154-57a8d22b7178", "sighting_of_ref": "indicator--219e4233-099e-4cb5-83e9-9bbec94341b0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea10760-c9de-45df-8357-c68f13f8aec6", "sighting_of_ref": "indicator--5f8aec77-8e17-4446-912a-b5a5883fe965", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c79ce3a9-3ead-4908-be35-66e626c737de", "sighting_of_ref": "indicator--8c83e7e7-1249-49c3-9f32-cc3a7141aac3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bda8cca-a82a-48d6-bdd0-62606227c8be", "sighting_of_ref": "indicator--41df6344-78c7-4679-ba7d-23eb87bc4682", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17279401-d283-4a09-a5ce-2ffde27ee111", "sighting_of_ref": "indicator--f2df482a-dba3-44d7-9736-664d00b78768", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de61c160-9f82-4add-87d1-eb0aa0ef8f56", "sighting_of_ref": "indicator--3b00bc72-fbd8-43dd-a634-85b689849e4c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ccf318-cfce-43b8-873b-847bfaf75564", "sighting_of_ref": "indicator--5cbe6999-01e0-40ad-abd1-3678cee1e251", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f841d44-5f88-45b0-a2c2-c6cc70706a59", "sighting_of_ref": "indicator--cf11074c-3da6-4780-9772-71665da8fc73", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e7d9ba-e7c9-4445-b61f-1682f20b336a", "sighting_of_ref": "indicator--a1edd019-5080-4336-be50-7240a1fe5924", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d048e225-e726-4de8-bc99-f5a9be832962", "sighting_of_ref": "indicator--ea65e9ce-02f4-42d1-a757-8200e6bc50b8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc756f60-05ec-49bc-b221-6555c79b417a", "sighting_of_ref": "indicator--53dbd75b-3d78-4832-9e18-70b833635648", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a84ccca4-531a-466a-a61e-73d0d6038fb9", "sighting_of_ref": "indicator--357ccae5-dfcd-4f36-83f6-66fc87da3dee", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ce0838-090d-4050-ba7a-7cb284b793ab", "sighting_of_ref": "indicator--9f2a09bb-4254-4df8-9298-fed0a228f168", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--424676b1-e84e-46b0-9151-179b5b0f279c", "sighting_of_ref": "indicator--d6a3a9f5-548b-43a2-be80-444d933e72ba", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5beeba33-81d1-4588-9771-71d909c34c8e", "sighting_of_ref": "indicator--fe917ee3-e851-4122-a9b2-0624e26e9fe1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bb764d9-b414-4eeb-8ba2-df40252a816e", "sighting_of_ref": "indicator--046c2511-1599-4d5a-bcb0-e5bef77a0d0f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9673f0a8-7308-4118-b417-dac5d6ff2251", "sighting_of_ref": "indicator--22f9cce3-d936-4b18-9028-783098632954", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b6d16fc-11df-4dce-845d-c495ef23e866", "sighting_of_ref": "indicator--ec7ee24a-1e81-428c-9a18-74c0213ffd2d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b36b1ba-d245-4d4b-862f-25be70a89185", "sighting_of_ref": "indicator--f610ba27-a91e-4790-85e5-bf0816ceaa8d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ed2c9d1-b403-4a1d-a2c3-48ac24629d1a", "sighting_of_ref": "indicator--07d26540-3179-442e-abc4-8edfc1ee9a72", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbb234f9-0979-4520-b095-080433fa3b1b", "sighting_of_ref": "indicator--877c61ec-923f-4fde-9b72-8de55bb14f38", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27c70333-a820-4c38-b734-bb5632f75099", "sighting_of_ref": "indicator--22a7dfeb-26df-47cb-96e8-793b78ffc6f9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7f9c78d-b059-45d8-ac0e-e575dac8ed16", "sighting_of_ref": "indicator--d79aeced-1d8e-4cee-9454-9ddb8fc92274", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f95771f4-dbd8-450f-a6b6-0fe82b161627", "sighting_of_ref": "indicator--86d833c9-23a2-4aaa-9e0a-dc082336a88b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c962a551-bc9b-411b-9d25-3e136eda27e9", "sighting_of_ref": "indicator--83689411-5924-4f39-bea0-0cf2ccf5974a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e077b4b3-a99e-4bf3-8764-73aba75ca6a9", "sighting_of_ref": "indicator--7660783f-01f6-4e04-8ed5-a3030c78781b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00bfe731-0f07-469a-b8a2-3594c990f191", "sighting_of_ref": "indicator--e2efbf8d-37a2-4690-b9ba-2920df9ec5e3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--020b5b1c-7479-47c2-aadd-2a12cfe7e6f6", "sighting_of_ref": "indicator--51c7c772-f9c3-4056-938d-0e4d2680d51e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9320deab-522e-4636-b95f-e587120a1d85", "sighting_of_ref": "indicator--5d8a150e-9c88-444c-a32b-36731f2b1e13", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc9b9299-8419-44aa-a6da-c34e3e6b9513", "sighting_of_ref": "indicator--c37ef7cb-1254-4e2a-a790-a3de26b5a9e2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c6a1cd7-7501-486e-a313-3c48c10c0bdc", "sighting_of_ref": "indicator--b389bf6f-bd9f-4ff7-b9c8-522285b14b9a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--717ae164-3f2f-4990-a902-ef9b565b50eb", "sighting_of_ref": "indicator--6787d1be-8b20-4cea-8836-b2d396dcd148", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf5b5cf7-9a87-4b94-bf95-fd2f3e484ec3", "sighting_of_ref": "indicator--cab17ae9-8ac2-48f2-93ce-4b52ad9f07f9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0912089a-7dc7-4480-b45c-563155a230de", "sighting_of_ref": "indicator--ad82bf66-cdbb-4037-b698-d92cc578b258", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18e2a05f-ba34-4b7a-b218-d79df739cda6", "sighting_of_ref": "indicator--cb939865-1d13-47b8-a134-8ebd823f6ca0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eabab685-02c2-42c6-9418-854cc8c6e2cc", "sighting_of_ref": "indicator--339e85d6-690b-40ab-8e68-5c41ae117931", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad09c651-8dd8-494e-ad3e-c3d9c64f02fe", "sighting_of_ref": "indicator--90300594-f360-4b88-8e80-3ab126ccdf0d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0f250dc-a27a-48f2-b624-a0593dd75843", "sighting_of_ref": "indicator--57a09917-b35c-4ee3-837d-d0f7fd5fc402", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cbfac57-2b14-4248-a153-f32f69ebbf81", "sighting_of_ref": "indicator--c02a7655-fdc8-4023-81ba-481d009b18c8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7b76281-e029-432c-bbc0-d3c42dfa800c", "sighting_of_ref": "indicator--66045270-8eaf-4fd9-8adb-c74d6dc97499", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--400dc56d-041d-418d-81b9-383f4bda9e0c", "sighting_of_ref": "indicator--17159dcf-3793-4f08-833c-64e2788722f8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31b5b794-0228-4755-b510-49452b715c3a", "sighting_of_ref": "indicator--d43af1b4-d544-4723-ba03-593e65c6b913", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3945fb0c-2b3e-4b13-a07b-c8481d2ee10e", "sighting_of_ref": "indicator--8d95248a-2ceb-4910-9dd6-0606704e56c3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031cd0e7-427d-4ba6-bdbe-e94391093dd9", "sighting_of_ref": "indicator--ff734c59-26e1-4a26-b3e8-5fd3f12252ee", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eaddc81-79eb-4ec4-86e3-43b7a1ea62dd", "sighting_of_ref": "indicator--85a226da-609f-4b6c-b7cc-6ce148b4e45e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0b78eb7-b2f0-42f1-b5ee-78b024d71d12", "sighting_of_ref": "indicator--212bd041-1a47-4f2b-990d-47436e2913f7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06530bff-6660-4d72-9867-a77d6f65a296", "sighting_of_ref": "indicator--93fa33b9-5149-41af-a52e-0cedffcf1243", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bb02c43-d24f-4ec9-bc23-8ed6ab6b800a", "sighting_of_ref": "indicator--d764b1a2-62d6-4406-a887-ef76f22d502e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18a78e98-2128-4403-94f8-d61ed2e9c534", "sighting_of_ref": "indicator--fd86162d-8631-4bda-9912-7afff2fdf2c2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af90d8f6-b173-4253-b87f-f7d9116fec95", "sighting_of_ref": "indicator--4351f044-1a93-466e-9f54-58ba5ad550ab", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f93f347-e2e7-4bce-8375-3debc61c645a", "sighting_of_ref": "indicator--e9099fe9-590a-48e1-bff2-270ff5540028", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eefa932d-bca8-42e0-a9ed-4ecb5e0da83e", "sighting_of_ref": "indicator--dc3ba3c8-0c0c-4260-a02e-63cc248f9276", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ed36550-644b-471a-a4aa-67fa2d2a1509", "sighting_of_ref": "indicator--cae97e50-3a83-4e7d-8ecf-77a6de5a155f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff022995-19ed-49ef-890b-f437f382f3a3", "sighting_of_ref": "indicator--0e516447-9188-4d13-9455-8f1a4b5a3424", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c25f408c-9062-4adc-ab43-3b991b365b18", "sighting_of_ref": "indicator--d4d9d7e6-6168-41be-a563-315c4710b41e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--893c489b-3221-40a3-aeb8-5e5e96c2eb66", "sighting_of_ref": "indicator--74b721a2-256c-4eb3-965e-cb7374156e5c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18c0be15-2c65-4daf-8c3a-dd1da443e2d0", "sighting_of_ref": "indicator--0bf63da0-706d-43d9-83c0-20ac7657006c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d77e3bd-7a8c-40c9-8d8c-ddc400f39957", "sighting_of_ref": "indicator--8b5e23df-ceb7-4aad-88dc-c0490a0bbb9c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c28bf71-06b5-49fe-aa54-e08cadd7ea1f", "sighting_of_ref": "indicator--40051c39-53bd-483e-a321-47331b36c5a2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98da12e3-00ba-4311-87c2-7e641105bd02", "sighting_of_ref": "indicator--3fe49732-5d90-4e85-b8bf-6abfd255a41c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75fc0a1f-7b4f-4359-aed1-067ad16dcb9f", "sighting_of_ref": "indicator--2f32aefa-f0f0-48ff-961e-269934a038a5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e565d963-f7fa-4bdb-b5fc-445a6ce72851", "sighting_of_ref": "indicator--239f6cd8-f2fc-4194-9999-9ef18ecc3b39", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d590a55-e53f-406a-bc8a-863c04d4a514", "sighting_of_ref": "indicator--ae0315b4-d916-4f4e-877f-477a6b28f953", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b627c65-9583-4cc7-9435-8cec96ba2c3f", "sighting_of_ref": "indicator--2a8ce948-6584-46d4-91e6-a44ae553f1a3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec5d8bc5-e109-4838-8432-4b15137d8afb", "sighting_of_ref": "indicator--cf4b30bf-29fd-45b5-8f30-f521eefa12ed", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9871ccf-45bb-43c8-923b-bd04264dd4d3", "sighting_of_ref": "indicator--79c438ef-aaaa-446c-b82c-f0e9e711f80a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0082de76-21ee-4655-b314-4c739c2b15d9", "sighting_of_ref": "indicator--887067b2-9ec3-4d96-b5f1-aa6b0c6332eb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4a33c25-45c6-46e2-b6ac-84898b8fdcc2", "sighting_of_ref": "indicator--1b8b5b7b-d33c-4737-b22c-f5e8e673c2b1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e35ebc8c-ade0-4c71-add8-d5d2e1a5bbb5", "sighting_of_ref": "indicator--4d2c4b71-ac31-43af-81ad-213f9796184f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57a0a758-0bfd-4771-99f4-8ea8d9fb2281", "sighting_of_ref": "indicator--add5988f-fb9a-4eba-a3b1-d29234144e1a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b255793b-a14e-43f0-bc51-977576a6ddde", "sighting_of_ref": "indicator--a3e1a73c-3b62-4e0a-b2bc-ebf3087ff8bd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa07bb2f-ffed-4394-aa75-032d4d82b7b6", "sighting_of_ref": "indicator--620b9b4b-89af-456c-8daa-fb69a17a4d3a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01cd8181-6ec9-44d7-8e7a-7acf55068d43", "sighting_of_ref": "indicator--c1c528af-3ea1-4529-b514-f035806601f3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c2298e2-f954-4583-b2c5-b70d3648509f", "sighting_of_ref": "indicator--c286bc01-7aab-4a3b-901d-629a5c3c7dd7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--759d2224-c237-4df1-ad29-4bf5d8764d88", "sighting_of_ref": "indicator--36f5c768-ae3f-4663-9670-90b9659edfe9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf96f91-b4e1-4bb2-8e05-116840e39eaf", "sighting_of_ref": "indicator--1b98d703-a3fb-4b9c-87e9-86d4b9b95c45", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5b523d3-4dd7-4e47-bd6c-cae43ac47d35", "sighting_of_ref": "indicator--84acde7d-ad16-418f-80e1-b00888c4e375", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91202376-9a47-4b13-8359-04751de8d06b", "sighting_of_ref": "indicator--edc2b110-d446-478d-b4f9-eb11fc69d048", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d6bba41-601b-4c34-a731-f6b5bbdc7d78", "sighting_of_ref": "indicator--b414a13e-7ea7-49cb-9fb2-eb91688f61b5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--823000ff-d2f7-474c-a9e5-a531b50c166e", "sighting_of_ref": "indicator--81d66ae7-22f9-4871-a338-8948243a6539", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1123e3ed-385f-4aea-9bd8-741345ad6690", "sighting_of_ref": "indicator--6467fdc2-5d17-4206-a9f4-7a05d0a27e88", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd85b494-3d19-475a-a99b-1ca92caf95bc", "sighting_of_ref": "indicator--f7155620-f8b7-4f62-97f6-b695a1431891", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee79a273-55c1-4244-a4db-73eb7ae2d72c", "sighting_of_ref": "indicator--0509b4e5-50e0-48de-8e4d-da2c6fcc206b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d14522a1-1cc6-4e3c-b7a9-71a181dd7efe", "sighting_of_ref": "indicator--c1c8fef8-be7d-4fe4-bb9c-fb79d511bca8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3a44593-1445-4015-839f-f9de6c333514", "sighting_of_ref": "indicator--4604bd07-998d-44ca-a9b1-776fb50c05db", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fbd4f85-ba10-4334-86b2-468b489a080c", "sighting_of_ref": "indicator--49b39a82-0b95-44df-b4b7-9e4bcc9832f5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b159da3-c0f5-4f39-94b9-b56a8722cfb9", "sighting_of_ref": "indicator--a74322cb-5d29-4f27-b282-c8617d81d2fb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bee36a3-c88b-4be8-95a9-0862853dd22d", "sighting_of_ref": "indicator--8c5d6f23-2509-4fd4-bfee-9be263e2fd95", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d62fa11c-6c91-4aed-a3fa-855d386e0c1c", "sighting_of_ref": "indicator--ec07b389-a948-40a1-a5a9-ef4230cea01b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7995531-d6e9-4aaa-b4f8-dc1062b94870", "sighting_of_ref": "indicator--255b9f8a-f802-42c1-87c6-c9911d109b79", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e077b867-47ac-4ad5-9b05-b2b6696968e7", "sighting_of_ref": "indicator--866fb869-8950-437c-bbec-755884e3020b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c1fc785-10ef-4ec5-baef-b3cfc287b029", "sighting_of_ref": "indicator--21c9cd64-93f8-473e-ac29-8a429f179f68", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--315def4a-30ea-480c-bca1-cbb9e402042b", "sighting_of_ref": "indicator--ad5f94a8-708d-401e-a5d2-1d0d2217aa79", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acadd43b-45af-4bbc-a7c7-e50f1fe78870", "sighting_of_ref": "indicator--338c90cc-ddab-4685-9e31-f1e1e80c1fdc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a051dc1-9799-4583-97d6-d5d3b778ff92", "sighting_of_ref": "indicator--a1471749-310b-4b98-9a24-57ca98689b0e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b3293e4-69a4-4ed7-ba27-9c74ccb5dc76", "sighting_of_ref": "indicator--ca6612f4-7dcd-484c-9b0f-3d398a5c80ec", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4decd396-b796-4634-95bb-a6eb9ed00130", "sighting_of_ref": "indicator--26530e7c-4174-4913-acb5-4498056a4926", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dce61b6-7d57-4193-a184-fb73750a3614", "sighting_of_ref": "indicator--b57390e7-2a63-4639-a884-dd6561a0f0ee", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc67abb0-7b64-471c-9300-9f852a808c2a", "sighting_of_ref": "indicator--a4bc8115-4342-453e-9065-11b3e348a44e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b24eec-34b5-4cb1-abaf-306f3ca7ff8c", "sighting_of_ref": "indicator--6e38beea-f469-4572-b80f-900a20802f48", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8f97a57-8d46-4e9a-abd9-1dae147b0dd4", "sighting_of_ref": "indicator--aabcc583-8a61-43b4-8bd2-827c02e106c2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30dbdda1-a420-4221-8e4b-0483181221c6", "sighting_of_ref": "indicator--2761a9db-81dc-4ab4-a5a0-2ca5f96959f6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f2debe1-140a-4e91-aa78-697be7dec3cf", "sighting_of_ref": "indicator--f015be50-4b32-433d-9c0b-230d6e99d9f2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--068546fe-3cdb-4007-b018-ca12ffef65ed", "sighting_of_ref": "indicator--3224c675-29e6-40b9-8772-d9e95a0b2133", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--621c20eb-2c5f-44f1-89ad-90713c105a61", "sighting_of_ref": "indicator--d981798a-db7e-4f30-bbb7-7d5fec9d8740", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--080e657a-cb34-4392-b0e6-2c95a3065832", "sighting_of_ref": "indicator--3e83afc7-b30a-4e2f-ba8f-b95533d5ab57", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65f6b8f5-d38b-431a-a6c3-6d1a4c0e2304", "sighting_of_ref": "indicator--908828a9-6deb-47e6-a016-68d600139b9b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3903a149-d5e2-4a1b-8144-497330474d45", "sighting_of_ref": "indicator--8b51265f-8215-40ba-864e-3c90060c97af", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faf839e0-300c-4faa-a7fa-bdf539f2b32f", "sighting_of_ref": "indicator--7d8ed744-0c13-4fea-8eee-ac983aa455c9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31d7f4ee-221e-4b53-830c-b8b43ebeaffa", "sighting_of_ref": "indicator--51c9b4e9-0c26-41fa-90f1-79fc029885db", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24ed5c0a-f308-44eb-a727-140ded86354f", "sighting_of_ref": "indicator--780991ca-298a-49f5-a9fd-3671d1eb264a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94758a2f-7722-4056-8817-337b137c8a98", "sighting_of_ref": "indicator--809a655b-8576-4de9-82fb-538f1549177d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59a64c14-4670-40cc-a8f9-90f08e848205", "sighting_of_ref": "indicator--e849e087-9f31-45b9-a641-fc7ee53de996", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c7113f-6d6f-404e-8867-07d3ad103df2", "sighting_of_ref": "indicator--7ce6b760-58f5-426d-8f22-cfd002734508", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--667e19df-1b3b-4a5f-af32-346f2d261601", "sighting_of_ref": "indicator--2181893a-c7fc-45cf-b833-a97c0143e4c9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49be9667-ce26-4f9d-a181-7337183a6374", "sighting_of_ref": "indicator--d4f72229-3106-4384-bad4-fe5763e01f35", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b43094-d603-4bcc-9b1a-224b1cebd304", "sighting_of_ref": "indicator--e0554c0e-8c48-413e-9101-79572161f594", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfba2780-8743-44de-93e6-4e18ca572ffb", "sighting_of_ref": "indicator--25b9690b-bcf5-47dc-bbf8-9b0ac678f1b4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d09f597-29f0-44cb-bca4-6c5ce99b1ea9", "sighting_of_ref": "indicator--8404c274-350e-4b08-9422-3d35c51c86e9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--772b6f25-024c-4c48-8a57-56e51afbff88", "sighting_of_ref": "indicator--acc0d653-bc89-4090-8874-6bb101a5c868", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7676349d-3b0b-495e-bf04-de5c8588fb54", "sighting_of_ref": "indicator--bafc5a86-90d9-4648-ac33-efc76dc9173a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--873b3d3f-5d46-4233-886f-da4c03f6ac32", "sighting_of_ref": "indicator--8c84fdd9-4456-4c07-aee8-acd7a8aa89d1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd77a93-716e-49c0-8235-4eece400b5c1", "sighting_of_ref": "indicator--dddb1eb2-ccc6-4c6c-8477-2f11cd7816a0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d514d48-d9bf-4dbc-8956-046085331c28", "sighting_of_ref": "indicator--b1aaaffa-539c-4e8c-8425-bd46eed987f7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87eed245-463c-4d63-9754-b6bcf467d9e0", "sighting_of_ref": "indicator--cba30e7b-ee30-4d3c-b570-e303706362d0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd0bdae2-4c4b-4bf9-8a4c-0c6b8e84859a", "sighting_of_ref": "indicator--a555e487-40db-4b5f-a6e2-fdde46661c4c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d49cccbf-46ce-4ead-b283-35852e81ae6f", "sighting_of_ref": "indicator--d74b1579-7e50-4734-94e2-9c5c630a40b9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7678420b-e3a1-48e3-86ed-f4e55c18f005", "sighting_of_ref": "indicator--2e5426c8-99a3-4d3d-a5e4-18972a9a2290", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41084867-156a-42ca-921b-691b1bbb235a", "sighting_of_ref": "indicator--a6164e34-ee4d-4099-8bfb-8f95b15805b2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--196cca47-c734-4e57-8de9-2a6a9ac9e9a9", "sighting_of_ref": "indicator--b71fd003-8e37-42c0-9433-969c8361776b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93287a18-cf13-4e66-aa6d-2fecf0896371", "sighting_of_ref": "indicator--a89d81d4-7944-4841-babc-4521a17ec637", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b64ee2c8-1713-4aa0-88c5-bfe5b392b1a2", "sighting_of_ref": "indicator--7094ffa4-0061-48ba-b09e-ed673f004dba", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8166237-fb51-4326-8bcb-b506bc510ebf", "sighting_of_ref": "indicator--ac38a4e5-5dbc-4962-96be-a71208d1ad36", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b55ce0-abf7-4c47-84bf-3e60cda758eb", "sighting_of_ref": "indicator--5cb964a1-da02-4cfa-b473-e38a3c28d8c0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e537b1a-cd90-4f14-a874-5c0f6947de1c", "sighting_of_ref": "indicator--682f04fb-6257-41a6-8583-b959c8719ed4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cf27cc3-69cb-4650-bb0f-a476cbbc75aa", "sighting_of_ref": "indicator--d93592ee-b167-4646-a869-c2cc08157e63", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3648a86b-acae-4831-b74b-68c4898b8db4", "sighting_of_ref": "indicator--9adebe31-55b7-4d93-919d-0d5f119698f5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c8f8ea6-a1ed-4b2c-b8b9-1f2dba1b09e0", "sighting_of_ref": "indicator--f1cac365-9540-4ccb-84e2-431518ba472c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4417b017-8b64-49fc-a915-d5a76678faa8", "sighting_of_ref": "indicator--ae390d6d-cb6d-4672-a426-9241ca8c6704", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7483731-adf1-4389-aac7-1a67d5fcacbc", "sighting_of_ref": "indicator--ee10615e-fd57-49dc-82a1-cd00fb5d1ee6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b891bc4b-91f3-432d-8d4a-ff65dbc46ffd", "sighting_of_ref": "indicator--84f50693-3e39-41b9-9c3d-07cea7401117", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96626a9a-27fc-4753-aba4-1423d2ff90e7", "sighting_of_ref": "indicator--7ed39eda-68cf-4ae9-8704-bc5b33d77bd8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f688ad1-5e38-4cd7-95ce-567778b5b57b", "sighting_of_ref": "indicator--a72db2da-0412-4e7c-b933-10cf4e751201", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23501a63-bf86-43ad-b754-8f16872164ea", "sighting_of_ref": "indicator--505f01fc-1645-46b3-91cf-84027383b2f0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f090a1db-7082-45e4-808e-a1496d644ae4", "sighting_of_ref": "indicator--69dc1299-df77-426e-a6ff-5171d5a4213e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef6f773f-cb11-4a56-8911-2b4b7a2ca437", "sighting_of_ref": "indicator--15be110e-6f78-4918-925a-fa199047186c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--033906d3-4e11-4741-b645-c4f79734dbd3", "sighting_of_ref": "indicator--98dbf205-91b9-4b22-b1bd-b3bb8fe83a89", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d549dbf-09d5-4bfa-b668-cc2b0e1bc37f", "sighting_of_ref": "indicator--e82f3a9c-9c05-475c-b097-1a2ea61d8df2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f91887-1f70-4dd4-abb9-e4a44bfb1c69", "sighting_of_ref": "indicator--4735393f-c155-40ce-b2c3-ac694c5fd567", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e8aff70-2fad-4853-b1fd-27b057005253", "sighting_of_ref": "indicator--11e5f6ce-60a9-4d71-b3ca-b5d0615ff6b8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83eb4c83-92a1-4d92-a11c-bb3592637da5", "sighting_of_ref": "indicator--9ee357bb-efeb-4cc7-b55f-65c5860a4d31", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8518d55f-cf95-42a3-bef0-5d202b4edeb7", "sighting_of_ref": "indicator--f3b96217-29dc-4462-9075-11b3131da337", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d5cd25-90d1-432c-9163-419baad67e22", "sighting_of_ref": "indicator--790fb370-bdd4-4922-ba4d-8f604246b4e5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a5960d9-9862-427f-b5d7-202963bb618a", "sighting_of_ref": "indicator--33af6399-9cef-4f3f-b2c2-9bd5c0ebf5ba", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace2ff90-1d06-453d-869c-9cf4681f409a", "sighting_of_ref": "indicator--373be59a-11fa-4a09-995f-5f82a54426b2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--357bc62a-8959-456e-a2fa-a48336eec631", "sighting_of_ref": "indicator--62503ad1-b09d-44f9-b363-f94633826d64", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e476994-b999-45dc-a3d7-2edc3a781543", "sighting_of_ref": "indicator--3480e4c5-144c-43eb-96c4-a1f64ecfcdd5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e2e131b-60e4-4774-906e-80a230c42f70", "sighting_of_ref": "indicator--8b6c90f7-b747-43c3-8422-cfe97248eed8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e8b560e-d238-41ed-a914-8ef4ddcc0e7d", "sighting_of_ref": "indicator--133a274c-a230-4a24-922a-e4d92508be81", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2da14e9f-8ae7-4f2d-96da-486b468b162e", "sighting_of_ref": "indicator--953d73a8-dc42-4370-bdc8-6eaefc2091eb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7361a1f-9b22-4702-a745-11a84875ea05", "sighting_of_ref": "indicator--07e4a989-a90f-4d85-b2b6-c2b9edfb5478", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46854ff0-1486-4ea5-9812-914754a3ce9e", "sighting_of_ref": "indicator--f11cfa90-4d96-4f7a-ad90-4ed4634356a5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--108681bc-9139-41c5-be4a-0bf778463f0d", "sighting_of_ref": "indicator--860619f3-a6ea-494c-8b5f-776305294336", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f791dd9-5535-49b5-9c21-8fb1d1f5baa3", "sighting_of_ref": "indicator--04b94fc1-7c58-4ebb-a78c-9b11ac232b64", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe8de346-4688-498c-8415-d8fa32d95bcf", "sighting_of_ref": "indicator--53775225-852b-4ec4-9a95-f526af3ffee8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6489992c-18ba-4301-88d4-087f886c34da", "sighting_of_ref": "indicator--b5b70dc9-2e59-4076-8a65-e39422a31576", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7287e1f5-97ec-4529-ab6c-8f9e517ac90f", "sighting_of_ref": "indicator--8b4be39a-fe35-49e9-bc34-4c46fa3371d9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa1b4b2-7f4a-46e2-af90-04dfa4f42a64", "sighting_of_ref": "indicator--aad3675d-1da7-4102-bf54-395ed523b4ab", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df1fc905-d45c-43fd-a3fe-60e9a46394ba", "sighting_of_ref": "indicator--c8948603-fec4-4313-adb9-ae99f9cf2c9e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1795ae88-943d-472c-bbdd-c7955559c213", "sighting_of_ref": "indicator--8d40347e-2f02-42b6-8238-849d55775963", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2febbbc8-d27d-44da-9a73-3682c9ba4720", "sighting_of_ref": "indicator--fb90a017-7e74-4547-ae7c-9b25ff5b793d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd64ff8-fe04-4be0-b236-a4117f9035f0", "sighting_of_ref": "indicator--b1cc81e5-e93f-4523-b7fe-2e1d5379aa49", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3abf572-7311-41ed-a8b6-973eb4cf8746", "sighting_of_ref": "indicator--43e8e263-bb92-4329-8088-338ef5a745f6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80005c06-69ea-4270-96e0-1c39b5b244e1", "sighting_of_ref": "indicator--9394f766-1b08-4a91-98a3-0ec4b8247333", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc7f76ec-082b-4a22-b2c5-cba3a3b68762", "sighting_of_ref": "indicator--44cfb11e-4ce1-47f9-a1c9-9fe438796c5f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b2baef-5319-4c82-9f7c-09445447bb8f", "sighting_of_ref": "indicator--7ce43ee3-aa6c-4cca-b0e9-bfdc4dcf7e2f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d81cd049-adb0-4f5f-895b-b38c8cf4bb23", "sighting_of_ref": "indicator--78406f08-cfc6-4652-b79c-2d951262cf11", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc29278e-4924-4a26-bb0e-104f63864220", "sighting_of_ref": "indicator--a82baf9b-971d-4943-9893-b272405be025", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce0cb188-e7b1-4938-81e2-234f0b7e4300", "sighting_of_ref": "indicator--69fd091a-5510-406c-b670-1b072e28da6b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ab4dfba-d928-48ab-ae4d-c4bd5bc856f8", "sighting_of_ref": "indicator--29ff4a67-34d3-4b83-a858-136c51a090c4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e0b1052-5476-46c5-9c34-a60a2792092f", "sighting_of_ref": "indicator--c9fd60eb-b452-4b43-92fc-bc1d6e71bec3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc149c72-75c7-462d-b988-aadf4fdb6cc6", "sighting_of_ref": "indicator--d5ff3b65-383e-4207-8882-ff894d6ad337", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f82b99-26a5-494c-9130-0bc2de9b4744", "sighting_of_ref": "indicator--38586c90-6f2c-4374-924d-f01f87a93273", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3fb6ab3-2a6e-4fe2-9c40-da7e0def1f28", "sighting_of_ref": "indicator--8509191c-da3c-4910-a84c-f0d0045b1c55", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6c43e43-5345-4cb5-84d6-325508004938", "sighting_of_ref": "indicator--9f7aaf7c-19cb-4dd4-b6bb-1946f8368f9d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee68d074-fa21-4964-8466-9b4e8051ac8d", "sighting_of_ref": "indicator--4c5da825-b724-4c11-b72a-14f04c9ba77d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a78138-2652-45b3-aa9a-0d5a72266f20", "sighting_of_ref": "indicator--9669f934-5c00-4062-b62e-c4cc470311fa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1daba681-a45e-41be-8b44-d9abfd748778", "sighting_of_ref": "indicator--5aa900dd-cf31-488d-8a8f-1d53c8631ae4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9294ff86-a1a7-42a7-822b-27aad4670ddd", "sighting_of_ref": "indicator--e085a9c0-ce1e-4862-934f-836f726854ac", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6dc1a2-36d5-462d-a009-4a0cdc4986c9", "sighting_of_ref": "indicator--47ecdaff-f6ca-4d34-bbe7-9d37e20ee0a0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e4b463-87bb-4cdc-894b-5e4e6298b636", "sighting_of_ref": "indicator--2002c48f-8c7a-4ce3-90cf-bbdce7fe23c0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4635c27d-84dd-48ec-8163-be553012fcbe", "sighting_of_ref": "indicator--5f9fd1b7-a534-4f5f-9be1-14c1370a64bc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae88e85d-b6c6-4e4f-8479-1dcddf83b2a9", "sighting_of_ref": "indicator--5adaba22-9bc5-4289-b304-a6887595e82b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb9dc483-8ba5-4198-bf62-02fd81631b3d", "sighting_of_ref": "indicator--bedf1e94-87c2-4725-8e87-58a40a5b3068", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a7b39da-86c0-4f61-99d3-02186faed957", "sighting_of_ref": "indicator--4e946e70-1960-41d8-8118-e02e5c24f316", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b8e284f-3685-4108-9c47-63ca3a25ec3d", "sighting_of_ref": "indicator--f4cdfc15-441c-4e8e-982f-712e11871f06", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3900e481-5217-44b7-a9c5-140097e67cfc", "sighting_of_ref": "indicator--0827783e-4cc5-4c19-a1c4-c8ffdd31a578", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76821a3e-a618-430c-a0b1-4f143cbcb0b1", "sighting_of_ref": "indicator--00ccef70-5486-4fa4-9824-dbf165e3e4c4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a827a9-9eac-41b4-9cf4-4c4596f3e690", "sighting_of_ref": "indicator--7c91aff2-2b92-4f6b-b588-a99b9ee4bb93", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfe717e6-9afc-4826-a250-2a849e3cd13c", "sighting_of_ref": "indicator--58e9039e-9b5f-45c5-865e-f1dbf870027f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed728df-0e69-4b17-9efc-2f7706ac3839", "sighting_of_ref": "indicator--e7b99d6a-2a59-449d-81c0-0f554165d4cc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a0505c6-f3e4-4e8c-81f4-4d2db667f626", "sighting_of_ref": "indicator--b494769d-cfef-4113-b7e9-f7bbd59b9909", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d5a4d7a-01a5-44fe-834b-1f38d7afb859", "sighting_of_ref": "indicator--a60df3a4-7e75-4572-9d67-801584bfac10", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ae60f09-2040-4333-af7f-cb87d6adafcb", "sighting_of_ref": "indicator--64c9e1b0-ac3e-4923-9bef-7c612691b32c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe67119-571d-471e-8e40-7bf0ab801934", "sighting_of_ref": "indicator--978f9fd1-3f76-4a24-93f3-61192e06ac28", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e80931a-4791-4d59-bcab-14b7401cb788", "sighting_of_ref": "indicator--32845782-1f05-4b08-b17c-49b43242996a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef6af3d6-df5d-43e2-9082-bebc8e418f7b", "sighting_of_ref": "indicator--6a859df3-8e92-4491-b6d2-4666ce93f5c5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd2c654-3d39-45d4-96ee-1c5162cb41e6", "sighting_of_ref": "indicator--e396ca44-1c79-47e9-b355-722e98c450dc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6bf45ff-22e5-4b6d-be34-03bd6117189f", "sighting_of_ref": "indicator--7cf7add0-8275-4059-a301-0283d1811229", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46210b37-fb5f-4f2c-995c-dd131d8a1a65", "sighting_of_ref": "indicator--f7ba4611-41d7-4737-8406-1121752ccef5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a4fe94f-c05a-48e1-8e6b-4cee95614dea", "sighting_of_ref": "indicator--a99b11dc-637c-4237-bcc3-0af91ba19010", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06db808d-d2cd-4a00-b70b-b57bb68196b6", "sighting_of_ref": "indicator--1b3b70ec-0f1d-4ee1-961b-42449562c315", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1797c65f-8d9a-45eb-ac2c-fbb51cccd5c6", "sighting_of_ref": "indicator--b9a48b82-2dad-4d22-ae60-4ee022d57288", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a854c1d3-564f-4ab5-866b-a0606a63f461", "sighting_of_ref": "indicator--0c7e9e2f-ab3b-4281-affe-2a2a86ddb322", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e439854e-6cb5-4430-a658-0f5a3cfe9226", "sighting_of_ref": "indicator--0f8b5c5f-13b9-4cbf-8051-f6231bdda96a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8af9aed7-af64-4c23-80b4-4145c64a6def", "sighting_of_ref": "indicator--5d1334d8-a465-44e4-9a90-c6d5efbed1f4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc5e138-52e3-42d8-9786-0b8f6799b4eb", "sighting_of_ref": "indicator--479518b3-04a2-47b0-aa67-745ec5471ccb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81584176-0fc7-483a-99c4-bf80708de5c9", "sighting_of_ref": "indicator--267ca85e-9840-4c57-b6df-121a12dc55fa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b497329-b7af-4436-aa7a-e5fb8ecb1efa", "sighting_of_ref": "indicator--d572bf73-fca9-4a61-ae3e-a1e9d3e7e613", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c391956b-ded9-49d9-b851-d899cfdbf1fa", "sighting_of_ref": "indicator--6725983f-2c3d-4f42-a1ad-9ae33b41ea36", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b331ce8-34aa-4432-b120-e93234a87a22", "sighting_of_ref": "indicator--ab805d51-f582-4978-8788-7c37f01732d8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a15b3f69-91c8-4235-8a98-1970126044fc", "sighting_of_ref": "indicator--286caed3-06fa-484c-86bc-b21cfe860ede", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73aeebcc-9836-41e9-a08d-d2ba5a6ec57e", "sighting_of_ref": "indicator--2cd5b5fb-a5a5-48f2-a287-31cbe7a8d9d6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--442b5198-6afa-4ebc-8269-7dfce20b96da", "sighting_of_ref": "indicator--bae6c7aa-9431-494f-a890-2d487f46dbb1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d10685-3f34-4023-80e8-6b553fa6993b", "sighting_of_ref": "indicator--d4d03e5c-f9bc-409c-9858-a71f9ec8fc4b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57c0f189-0c63-4a8f-8fb7-34978c9a76ed", "sighting_of_ref": "indicator--b395af29-423a-4b05-9291-3ab664ad3c8d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47ef0f51-b316-465f-9222-9124a916b2db", "sighting_of_ref": "indicator--5588ab3a-c372-4296-bb78-43fb0c537924", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56e7712c-98da-49c3-93ff-56e54f83afc3", "sighting_of_ref": "indicator--deeade3c-c78e-43ae-980b-ab135cb2065e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa566b1-338b-4d47-a8ff-dd02b5fda29d", "sighting_of_ref": "indicator--7a39d68e-56b7-4721-bb33-113a1bce3f34", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4955c354-392e-4ad1-825b-3d36548989a8", "sighting_of_ref": "indicator--7944cbb9-98d5-494f-937c-026d8b338d4d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be678d1d-fc05-4152-994f-98f568d5e7d8", "sighting_of_ref": "indicator--5d7a62f9-5e29-4c78-bcab-64c06bab490c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ae84d6c-9260-4dd3-99b0-c22690444f55", "sighting_of_ref": "indicator--899c6ddc-65de-46ce-8a45-44c9cd042f52", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b1febb3-8bc3-4eb8-b959-889845251e50", "sighting_of_ref": "indicator--eefd10bb-29e4-49d1-90d4-52e50ac23fd1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bee35936-7f10-43ab-9afa-c99d1695b0c1", "sighting_of_ref": "indicator--4f89441f-a6ff-4d01-bbbb-dbbeee86ed64", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c30b555-f88b-4030-88b3-744a9fdcc52e", "sighting_of_ref": "indicator--850dbae5-fe7e-4f11-8c90-1cda11b368dc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ebd4f11-3124-4089-a6a1-db43283e3963", "sighting_of_ref": "indicator--1fc91859-35b1-42b2-9ce7-e92cf187aa1c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d457f8a3-c4f7-4e1f-b760-63d944c83579", "sighting_of_ref": "indicator--75d384f3-83b1-45c8-b10d-21392d401c3a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--802a8b3f-48c4-4442-a17b-f78e804d24e4", "sighting_of_ref": "indicator--38c9a502-6e6a-435f-a34c-19ef088c08a0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff0883a-8f0b-4fca-9329-de29c937759e", "sighting_of_ref": "indicator--8297eedd-0dec-4386-97c3-0ca1b66ff2af", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdac6e6d-2e40-4a3c-8e39-c3c4e12ec34d", "sighting_of_ref": "indicator--569ac02e-93ee-483a-accc-5a776cbbf8d8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b780e8f-4101-45b3-b3f1-156ee8e3a170", "sighting_of_ref": "indicator--ec6c7157-99ba-461a-806a-9dc97975e6bd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28326579-84c0-45cb-b320-0c63ab2dccc4", "sighting_of_ref": "indicator--c8cdc1ce-ab3c-432f-bbde-640b59e0bf28", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1463aa5-6265-4304-ad3d-120f4729535c", "sighting_of_ref": "indicator--5485641f-fb6c-410e-a059-303f2af91186", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a963e3b4-d300-4fdc-8d84-04f30705447c", "sighting_of_ref": "indicator--dfdc41f4-c47e-4598-8ae1-8b52bd7ed150", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7898b99-54af-4bea-bf03-a98c73dfec9c", "sighting_of_ref": "indicator--951d3b78-2e61-45ff-963c-41b8fa16a8d7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8cb23e7-5bc7-4d28-872a-b40566ac1064", "sighting_of_ref": "indicator--90e18c7b-bd51-4fab-bfb7-fb4cec875846", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2023ef38-8233-4ed9-9a91-05fa1dac931b", "sighting_of_ref": "indicator--50c4ec86-6958-4bc9-ab3c-2cd6257ffa86", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d6a121e-1ae9-4a9f-88fa-232929bbad14", "sighting_of_ref": "indicator--e3beb73a-fab0-4be1-b843-d74c3ff0d4b5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec9622bb-0a6a-4cbf-a40c-fa6ece8a4d4e", "sighting_of_ref": "indicator--4f3c4eac-1690-47a2-ac6e-8686a9d6f4f7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76359e50-7eb8-4399-af60-ccd3b78ace32", "sighting_of_ref": "indicator--a923e38e-210f-4932-a928-cda10b20716d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cfdb4d0-8488-44b9-9f53-146d352a25a3", "sighting_of_ref": "indicator--0030702b-44e3-4730-b1e5-eb34441e9b68", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc35284-ea5f-4075-9a81-8de49371a9d7", "sighting_of_ref": "indicator--22f59941-9958-47c8-b178-1cae1367492d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe6a8f89-26da-43a1-b812-37a30b614db7", "sighting_of_ref": "indicator--f4b4a78e-f041-46d2-af03-a67743617c91", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abe773b0-3722-4897-ad81-571d3dfb17c4", "sighting_of_ref": "indicator--25111066-b3e9-4446-bb7e-db5c81ff0749", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef772e77-b5d4-41ff-9334-75f1a768d864", "sighting_of_ref": "indicator--fe1a94cb-3a9a-4d59-9543-8a3823cad51b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab8cc7ec-035e-4b59-a2fa-51072099cbe9", "sighting_of_ref": "indicator--fa7c53cb-2924-4a73-86ed-7fe7d7fcdc16", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f27841-a254-4882-aea1-f4c385822684", "sighting_of_ref": "indicator--26e8da21-31c4-4d7c-8b26-6f4b5ca923e8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc35e45-df4e-4c8d-9380-751c3af7efc9", "sighting_of_ref": "indicator--45fedfad-4fd6-4386-b355-7d6461f3b2e0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4751eb4e-7cb4-46e3-ab6c-65606e2b79df", "sighting_of_ref": "indicator--895fcb7e-70fc-46b2-984a-bc17dd1828fd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0824ba0f-47bd-44d6-9cb9-ab59ad133050", "sighting_of_ref": "indicator--12eb1661-fb9f-4c62-94f8-f3b7eca27922", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e4e5370-e603-4d56-a0ea-42c75ebfc447", "sighting_of_ref": "indicator--e840b4d0-18ea-44ee-8b98-4c14da906a4c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e9796e4-d45c-4a8b-b009-0fd69e3d688a", "sighting_of_ref": "indicator--9adf3212-38c9-4f6b-8380-b5be71f9600d", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--457fa1a7-e049-439a-a921-0e95519310b0", "sighting_of_ref": "indicator--4d48b720-5755-4bb0-96ab-c34c3520e5b2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--056ebf8b-45c4-4537-ad77-a4fb4eacbf64", "sighting_of_ref": "indicator--d6b6b96f-5cd8-4090-8258-fe87ec857586", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a47bbe5-526b-4c52-978e-53740e1e33ef", "sighting_of_ref": "indicator--3fd7b71f-15b9-4daa-a4aa-5cd205af641d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e790cd-54be-45d4-a4f4-d6d4207e0e01", "sighting_of_ref": "indicator--a951f4c2-b3c3-4abe-ba47-c24a2c19b2ae", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b90e14a8-f4f5-428b-ba9c-f200b656b2e4", "sighting_of_ref": "indicator--48ec7e94-9d54-4510-99f6-44f30e066146", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e0a964e-39a0-452f-ae58-3e1d4be3e241", "sighting_of_ref": "indicator--e10a5eb1-1f02-4524-a5b8-f8e9ea63716d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e72f1f5c-1f1f-4fee-aabe-405f38d07805", "sighting_of_ref": "indicator--abbcff73-1750-4d4f-b0b8-d62bdce41338", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36603a41-7a19-4e1f-a1a8-4ff28f85b85a", "sighting_of_ref": "indicator--9bc00ea7-2e7e-468b-9938-085d38fa8ac0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ff35d68-61aa-49a3-9238-058e564c5f55", "sighting_of_ref": "indicator--37f4d1f5-9f9f-4b7e-936f-1f487fda5517", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7e62b9-2d69-40ae-aa81-e5375c073aa3", "sighting_of_ref": "indicator--05f6221f-adfc-4b5c-bcda-46000155b5b0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90a8525a-38cb-4135-9783-1729b5467aba", "sighting_of_ref": "indicator--5cbe3fa8-d57d-4df6-89f2-1d5b18f1c446", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c6a87fd-4088-45f9-a8ef-f555bdb17551", "sighting_of_ref": "indicator--ed0e18aa-2e1f-4789-946a-d8f47e1fe274", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc444285-f840-489f-9c5d-cbef08c42d80", "sighting_of_ref": "indicator--6d8abb25-533c-4dea-8a28-f90aab9f4890", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92997314-46f4-43f0-98e7-2c5b850f95e4", "sighting_of_ref": "indicator--0c1676a1-1b0b-476d-befe-9c158286e588", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c09a1993-7987-4104-b08a-53867679c4b2", "sighting_of_ref": "indicator--d4d6d143-f93c-494a-9b9d-47804895f107", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c43ecfc-8a15-4b15-a3fb-aae225175540", "sighting_of_ref": "indicator--8bdad292-247c-4d29-9c03-b1fbcee29499", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b99be6d3-d6a9-459a-921c-2c9c6b5e7da9", "sighting_of_ref": "indicator--60faf2a9-6a28-4beb-93b2-c7dde52bec5f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--101382b1-f78a-47c4-85d5-3e4bc5db9bae", "sighting_of_ref": "indicator--106dfc55-acff-4de0-bf64-46436edbbbc6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4260b2ab-0117-42f2-b1c9-93fa9e9a2723", "sighting_of_ref": "indicator--4a6f1484-7208-4f59-a55c-5dbba8d80611", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6324bc0d-a80a-42fa-bd9b-8c8d8a073183", "sighting_of_ref": "indicator--efab2b15-3e37-4ac9-ae00-91e27f06f5f5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ed0691-2ca3-4ae9-85de-f0b63c6db14e", "sighting_of_ref": "indicator--cbde9052-7c09-4cf4-9bd3-46b1d3859add", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3507505a-6a62-4f7d-ad3c-7703265fa914", "sighting_of_ref": "indicator--13e4f92c-9f48-417f-98f9-bc39a7f87db0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb65c00-8d31-4c6f-bacf-f4f39982d9c4", "sighting_of_ref": "indicator--65904aa6-c323-43af-b6b5-030329f73571", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1e8e24b-ba1e-4eba-8323-d2581678520c", "sighting_of_ref": "indicator--8b93f985-c1f7-4ac0-b967-21ef7d5a87de", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--087366f2-9880-47e9-8d98-ecb7186c1486", "sighting_of_ref": "indicator--1a8871a0-bc82-4cd7-a9c7-8d4e5a4fc3b3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfa63f5a-73ec-49aa-b1df-0b7a09153e1a", "sighting_of_ref": "indicator--375bbfa3-1bdb-4ff3-bf5f-976c022384ba", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e02b32e4-4eeb-4826-8022-af4e96e91cdf", "sighting_of_ref": "indicator--ec05d98d-a742-4cf8-b91d-ee40cf5423e2", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e3904fb-9476-48a0-8289-b5fb5dd875f9", "sighting_of_ref": "indicator--05885d38-b86f-4675-ae5c-4939a6f658c8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21bdacb7-f8e6-49f5-b129-adbdc1f76413", "sighting_of_ref": "indicator--fc366de5-0815-46ff-9496-957716405fd7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b3b6c4-c0b8-4d62-816a-8c33daf163d7", "sighting_of_ref": "indicator--be6a8417-02b1-4811-a55f-585de141d166", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99efe614-d20e-44e8-8924-a2d5d9bfb07d", "sighting_of_ref": "indicator--14427250-d8da-47ce-ae95-b5f27e8b1079", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dda02016-e5c8-4ce8-b465-3f1f8c09c444", "sighting_of_ref": "indicator--dd5c00b1-177d-4ac0-ac4f-4fbb005bd268", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b3442a6-8ed2-4d28-9ad9-fd470b48d39f", "sighting_of_ref": "indicator--33182a3f-a864-4dbe-8110-7e307afd7967", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69856c5e-8447-47ee-a909-40ee1a93ad66", "sighting_of_ref": "indicator--d109266d-606c-472b-bd6a-f9a41d226128", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ba3e5d-09df-44fe-9e7e-51ea52c21695", "sighting_of_ref": "indicator--6857e232-9e23-4e4b-9d5f-ca47a6c617ca", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b657b9b7-ae5e-4639-a9fa-15b7770410c9", "sighting_of_ref": "indicator--4529ed41-8051-4a19-98ec-255b5095be58", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce08aa9-45f6-46da-93dc-266e4a4e0075", "sighting_of_ref": "indicator--ecc061cf-c5cf-47cd-94bb-de5eb13ea06e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c8aa8c-3d42-44f5-8dab-26d6418895ce", "sighting_of_ref": "indicator--60c71cfb-1680-4b7d-91d0-d0499c765fd8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d63de7bd-6b1e-4874-a958-bedd3bfbf9a9", "sighting_of_ref": "indicator--0dfc09a1-9236-4a92-8725-3302690bb836", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea033d80-0fba-41da-8e62-9f818e02a5d8", "sighting_of_ref": "indicator--3ec1a698-98c4-4774-9677-646fbba64507", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe5a7a8b-6bba-41b3-b94b-9c179db222be", "sighting_of_ref": "indicator--50f5e844-df4c-46bb-9f04-a57c326d4dc8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--507715d0-627d-4067-8280-99247cc4d4bb", "sighting_of_ref": "indicator--feb69ec1-a312-4bc7-ae36-8a58e5dc72d9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2820f424-e3c0-458c-bc03-09dcb6dafc42", "sighting_of_ref": "indicator--7948a94b-52c9-4d77-b1b1-365256af3513", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8860a07a-38b2-418a-9a2d-189507a0d79b", "sighting_of_ref": "indicator--36ddd715-7c6f-42b2-ad38-f827fb7d1ccf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec1a4d7-0cf8-460f-b19b-4c5a445dc776", "sighting_of_ref": "indicator--742eba39-7497-4304-a243-bd28d662633a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77640934-6c93-43d9-9961-4c35af1fb1ac", "sighting_of_ref": "indicator--f4d240e7-7ae8-4e3a-90d5-866df60fddca", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae83c8d4-49f0-471f-ac87-daf253ec79c0", "sighting_of_ref": "indicator--e0a0dbfc-4104-440a-972d-5e2aa3ff2b79", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--701dff20-ac35-4d14-a17d-5e6f8e274bb6", "sighting_of_ref": "indicator--66f029d0-042a-4e5b-9459-0f1fcc6badd2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdb62d4c-8df7-46fb-bda2-6ee3102a8dfc", "sighting_of_ref": "indicator--8a5f87d0-f3f1-4a88-8c1a-06a5a9c43705", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0bd3e7a-06df-4d7b-962d-f21868ea7cbc", "sighting_of_ref": "indicator--12bb94c6-c187-4a90-8872-a9371e64e961", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce2a282-93da-4e81-a9d2-feb1227ae732", "sighting_of_ref": "indicator--b1cc9df1-e12f-4b2d-b69c-af560d1fa55d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab3fe6ab-a488-4712-b5a5-97d8eaae8124", "sighting_of_ref": "indicator--39690311-a907-4ec5-9804-402c8c4851c3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd292c3-cb28-4884-a5fe-96ea9cfddb3c", "sighting_of_ref": "indicator--e281449a-41ee-4751-9c6f-5db50da81db3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c30cf94-1081-4e44-9e16-d73d855c1b02", "sighting_of_ref": "indicator--7cc448f0-df16-4cfa-aeec-31ab0fc68deb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--463dbc7f-a6a2-42ba-a6f5-d35ff9990baf", "sighting_of_ref": "indicator--2ee5880e-70e8-45a9-ad92-c0ff28525abe", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43415d2a-18a5-498f-bbd2-034db1f2159c", "sighting_of_ref": "indicator--e18ba06c-d3c1-4ac4-aded-814d1d3cb759", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5bc3035-0e40-4409-bb70-1e2e141d7fc7", "sighting_of_ref": "indicator--bb9ea043-a50c-426d-a2ac-416a62939561", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8661874d-03ed-49d6-90dd-12100b2dfbf8", "sighting_of_ref": "indicator--be7de187-1674-40ab-83f1-b9f88279edb2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff279a9b-46f7-4b3b-b53a-0da319957a30", "sighting_of_ref": "indicator--5920482a-3c8f-4b75-a585-e37c053536f7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--575691c6-1182-465e-b14d-1386dbff2ef0", "sighting_of_ref": "indicator--6a7bc1a1-cab1-4595-a79a-a79b83884ec8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2db1925e-03f4-4080-bb13-35481cba400e", "sighting_of_ref": "indicator--93be5bcb-002b-434a-9d3b-e9de2d14c80d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60367c94-d0a9-4f44-9f27-50330328d682", "sighting_of_ref": "indicator--b8e05dc4-c488-43a4-8cfa-2a5e1e9b049b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e57d49b6-a3bb-4e89-b59c-501aaa55f971", "sighting_of_ref": "indicator--b4c3004f-62a0-45bc-9f98-533d69cd201d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aabe9a7c-1931-4dce-8ce4-d658cec5b491", "sighting_of_ref": "indicator--b56f0515-de45-4d07-be0c-47d9aca97b7c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df2a4345-c76a-4e39-b15b-11f0ec294d83", "sighting_of_ref": "indicator--d94fd0e8-f03d-46e1-848a-55496e27433c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--266b67f2-d74a-423a-990b-c82347b6dc7f", "sighting_of_ref": "indicator--c3c5ca39-2ac3-4672-ad76-a0a699ce57f4", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b30cda0-86bf-4b88-a0ff-4061a36fa1b2", "sighting_of_ref": "indicator--c3c5ca39-2ac3-4672-ad76-a0a699ce57f4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bae36b3-d44e-4df3-877d-dcae978957ef", "sighting_of_ref": "indicator--bcf7ffe1-abf4-4bc7-afe9-eb777ce8f6b0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b70a0a93-5f4a-43ab-9ea8-4c1611d8cb6f", "sighting_of_ref": "indicator--770fd026-91e8-4af6-af5a-b89ff038444a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f2c3de4-9f21-4ec6-9b5d-c44fb5148e05", "sighting_of_ref": "indicator--04d91550-f4f3-4075-ada2-5221f926d4f1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2327c4c0-d1b4-40fd-ad24-552f2e4e5142", "sighting_of_ref": "indicator--222f51a8-278c-468a-8cef-077d7a5037e0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6327591c-162b-49d1-8821-56fcef42a02b", "sighting_of_ref": "indicator--89cc188d-3190-4117-a1f6-4319b7313383", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c3de28-cbba-45ee-a365-07cdd5554b1e", "sighting_of_ref": "indicator--938ac525-34ce-4782-bbe5-9d0619590d39", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5df9cdb-9deb-43e0-b77e-155d2434bec0", "sighting_of_ref": "indicator--83d5931f-7865-4c25-9b67-48f0592b5b79", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73298f1f-9cce-4ed0-971c-a3d05f5782a7", "sighting_of_ref": "indicator--19d6b486-14f6-411d-af18-da41d8f13402", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06f19118-6fb9-44f2-99f1-1f2fd0606132", "sighting_of_ref": "indicator--faa259a9-3a33-47e5-aa4b-1baecd32a88f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0807cdbe-a36d-46f4-94c9-44f4bb6d1fed", "sighting_of_ref": "indicator--f03e3f88-4ec7-4091-ac4a-636884d56566", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bca39b2-c88b-4b5b-a279-7664de89b1d8", "sighting_of_ref": "indicator--8034ec59-642f-4358-92d1-f03344a2db48", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3f4fec7-babe-4159-ab6a-1a2edaae0f46", "sighting_of_ref": "indicator--c2801c20-0a38-480d-a812-e0ff1529f397", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ab24fef-4aac-48f0-88b9-4ebb37035b1c", "sighting_of_ref": "indicator--f08c44bf-31b0-4f50-9ff4-3f76b6b7c171", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef06ffb-9756-4e04-b201-f3b1ce3b9c9d", "sighting_of_ref": "indicator--4b86043d-0724-4025-afd1-6802b1b97619", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d9a4a0-bf91-4ead-87dd-a7cd1be38bad", "sighting_of_ref": "indicator--ad79a2d2-cd3b-4b32-854a-da2649696a3c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a5f0249-82f2-45b1-9284-489bb61165ed", "sighting_of_ref": "indicator--4b30da2b-7fda-4193-a513-de3bdd92f856", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a45308-00b0-4f28-b489-a75057b9159d", "sighting_of_ref": "indicator--807d1526-a998-4f21-94fd-954678a1078c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66d4dd90-a565-4abc-9445-486040e31e07", "sighting_of_ref": "indicator--786ee3ce-7a21-497e-a544-53a5db3da657", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f7b2f21-c82e-418a-936a-2ce4475c2f17", "sighting_of_ref": "indicator--0dff765b-fb7d-4022-bf37-8aaeae32c037", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f2f943a-d1ab-4b39-9a09-4c27abc62164", "sighting_of_ref": "indicator--e703e8f0-5482-46d6-ab58-e98e7af4b785", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2223ebcf-faea-4543-b8c0-6e7f3a3119a9", "sighting_of_ref": "indicator--85e5739e-7b1b-466a-8cbd-1d234366ebda", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb658e2-2dbb-4c64-8db7-e79a01888e65", "sighting_of_ref": "indicator--683aaa53-70c1-4378-a3b6-b79030c6e18b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c3c5aa8-84fd-471b-8f01-7bce5d4aa9d4", "sighting_of_ref": "indicator--2ef5be5f-1a73-4420-b222-5864b41969c7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d146886a-e72f-49c3-88c3-3e507e40b24f", "sighting_of_ref": "indicator--a9a2846e-8a90-47b2-86b8-af8e395a6e70", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd935ce1-9437-4235-b181-439e23948ce5", "sighting_of_ref": "indicator--4e1e4b08-ad73-435d-b0c0-c822120700bf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--665aabde-c8cc-465e-aea4-4551def23efb", "sighting_of_ref": "indicator--44b9463a-aae2-4183-8822-cb7ff7f8780a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1a473f2-1b34-4ed6-94d0-6083ca9e61ee", "sighting_of_ref": "indicator--91d796b1-b7b1-44d6-93d7-4a183ad41254", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c6969a3-6a5b-4c41-9e20-296032143b2b", "sighting_of_ref": "indicator--a113f066-c2f5-4379-82e5-7d6ab5d261bb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efde1aeb-76cb-41df-abd9-4e6e025bb2c1", "sighting_of_ref": "indicator--0685df4a-f595-4ae1-ba0d-48b25f96944f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e766696e-1b29-48c4-860c-ffd8d1236333", "sighting_of_ref": "indicator--5bbf0051-c9f9-46c4-81c0-50b0b8bd9b5c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77b91af9-e209-4832-a404-381a0dbd11de", "sighting_of_ref": "indicator--73f797f3-1376-4bd7-a543-b93a67d38454", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66df040f-6394-4667-895e-7b4a1bb82baa", "sighting_of_ref": "indicator--9f1eb23b-e886-4974-bc9d-0a29762fff70", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66bde0d4-a14b-4f67-85f9-b06a3e724cba", "sighting_of_ref": "indicator--e73eccad-646d-45e8-84a7-0f259ea910f5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39e89e35-bc8a-4715-9999-f492391141f3", "sighting_of_ref": "indicator--47a3c49e-8d0b-4ae5-9367-8b111659bceb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5487145-efff-4103-8a90-760285816f74", "sighting_of_ref": "indicator--2647db7e-383f-46b5-88ce-b2f884953fdf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cafc7af-3131-4c0d-8ac7-a6d6d48e3d4c", "sighting_of_ref": "indicator--9fb94098-709c-4906-9d1c-9bd280fc661d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9199b238-a806-4103-bc4b-b0135de60086", "sighting_of_ref": "indicator--385171ec-41e4-4d35-bbc0-f8600f5158f5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5fbed83-bfe7-49f4-9578-a717a8565f31", "sighting_of_ref": "indicator--8cf8ca86-289e-4975-82b7-fd41dc400ed8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd46237c-4977-4fac-a185-9c88177d8546", "sighting_of_ref": "indicator--1fb01cab-1fd3-4b88-b8a0-3b7841538f7d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac579088-2840-4a58-864b-df3799922fb4", "sighting_of_ref": "indicator--e7e47acf-6031-4814-a086-429e7804f147", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a259b1f1-accd-4dda-88c5-8f28976b25e8", "sighting_of_ref": "indicator--0c97d96f-cd33-4b6c-b7e4-43279bd957b2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc0d7142-f81a-4393-a664-1aba6acbac0a", "sighting_of_ref": "indicator--f837b4be-7303-429a-9239-9a3214b7b0db", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c21ab67b-c311-4118-8f29-cf9b8f5e5edc", "sighting_of_ref": "indicator--aa822ac2-fdde-4b47-9413-a41f5bd3f3b0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09b93192-5b63-4d88-9145-c48744318a91", "sighting_of_ref": "indicator--5938a9ba-c1c0-41fa-8f5a-a944b8315a27", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba758b4-321a-4fc4-ab89-4ec7516ac7db", "sighting_of_ref": "indicator--aaa5e0b6-2924-4c8f-9a41-10b23441b75e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--093985d1-ed88-4b5e-8e16-2393117794e7", "sighting_of_ref": "indicator--d9f86f18-33fc-49c9-bf79-5777c1900503", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9782a0ca-808a-4667-acf9-0e13f3d7aad6", "sighting_of_ref": "indicator--1f827fc3-d597-4661-9e5a-ca729a610b3d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a05c71e-7cd3-4b89-a9cb-9aff4313246c", "sighting_of_ref": "indicator--96ab1537-0782-428a-b243-20b354a2a79f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b622256-602b-4309-a341-3d86e9e78f31", "sighting_of_ref": "indicator--8c7f8d89-8311-4d91-ab26-e8e6bdf59d14", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--917902bb-d4fc-4cc9-945a-940c4ee82811", "sighting_of_ref": "indicator--89fbe8ef-54c6-4f5d-9748-74f2fbe8fb97", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5731e63-3f4c-40fc-934d-0b0d85bdeb83", "sighting_of_ref": "indicator--2e7903a7-ead4-4e2b-9dcc-4b786ca51dcb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbace752-2d43-4416-ad47-8f2eed6036fa", "sighting_of_ref": "indicator--4ad0d9df-0462-4e68-b567-93bf0dde324d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a41c10f5-9391-41c9-bd89-dee11af3fb74", "sighting_of_ref": "indicator--f3d6544c-72ae-4d12-8505-bb267f6b3651", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--616e1b73-8dab-4538-b106-c30c8d06e7f0", "sighting_of_ref": "indicator--bf223bbf-6e11-4586-bdb9-211e7e786198", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27b4295e-b695-4202-b029-655d9bdf6600", "sighting_of_ref": "indicator--e212d78b-b769-49b1-9702-dd7c1776421e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56d40f86-acb7-476f-98ae-15177475b882", "sighting_of_ref": "indicator--0d11a562-2d2c-46bb-8cf1-cf9d21ceb116", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fc6b26f-f101-4c6f-82df-3ceba61e095c", "sighting_of_ref": "indicator--04c98a0d-64cc-4441-a76e-24bca6569823", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--188ff817-1ccd-4b97-a1ae-c1df9e70b086", "sighting_of_ref": "indicator--bc336923-35eb-451d-a3e4-cc372d5a9c36", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fedab7a8-1ceb-4924-9a0a-29ead41885a4", "sighting_of_ref": "indicator--fc4055cc-557a-4df4-838e-c384cd7c253b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a59f2fb-2056-48a9-b0b9-3a36f4504ffe", "sighting_of_ref": "indicator--f4762119-271e-4758-b1a2-a9c7a18c78cf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a88d928-755d-482d-953d-26774147d5e0", "sighting_of_ref": "indicator--8743ce17-52de-416d-88e9-b6f01a441ade", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3147377f-d432-48d6-8a75-1aab2eeaaf1d", "sighting_of_ref": "indicator--952731bb-c941-46c2-a869-62f2d0c3f794", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc32b0f-4f5d-42a0-8745-81a82282782b", "sighting_of_ref": "indicator--b6d13711-6424-4182-a48f-c55854bb0ad4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd07a80f-be83-48f2-8596-51791c592b21", "sighting_of_ref": "indicator--49716454-b1d2-447d-a322-b55ba94df87a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6818d83e-3119-4bff-911c-7837027bb60a", "sighting_of_ref": "indicator--a707dfbb-4277-48da-b5f5-21466c998a4e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4f345f3-ee60-4625-8d61-8a24b79354d6", "sighting_of_ref": "indicator--3689ecb7-dd9a-4507-b463-e6b5341c0496", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b49ec2b0-2639-48d8-b182-1f7ff8d83a93", "sighting_of_ref": "indicator--e5530c01-2991-4f8b-9691-657e2eed2f1a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--563266bf-f939-4804-bfd4-fa30ef0f77c7", "sighting_of_ref": "indicator--16dc23fa-9e8c-4922-bd84-a4755ac57771", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a649d42f-9b6e-43b0-bcc0-d423a5ed6832", "sighting_of_ref": "indicator--a57e67ba-1ec9-472e-a872-b632b27b30c7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28970c58-7628-4659-92e0-d35fe75de0a7", "sighting_of_ref": "indicator--f10b91e4-b1ac-452c-a642-13714332d253", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e8baf6f-b791-4fea-bdb2-aead5cbe33b4", "sighting_of_ref": "indicator--9aae3c13-9c2f-44ac-a0cd-eb82eac446da", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--384c2ee5-6f64-48c3-bff0-01d4c7c4ded7", "sighting_of_ref": "indicator--ac3ed08e-571a-425b-b5b6-0deed41266d8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1212885-ec83-42d1-bf18-850a136f0741", "sighting_of_ref": "indicator--4d45974c-6edd-46ef-b404-acd058227e5b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f68e057b-eb7b-4ac7-95da-78dc1c24b686", "sighting_of_ref": "indicator--db9a9093-d50b-4653-98ef-9c0f2469f4f1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9104163-c934-48d7-b8c7-136634673aa5", "sighting_of_ref": "indicator--2f10edc6-b855-45fd-8d0a-3bf33a2d70c2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bfac76a-2262-468b-b578-358f79a94bb5", "sighting_of_ref": "indicator--9c6369ec-7448-4b0a-bf26-64e565c11802", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd7d912c-93cf-4f9e-8cd5-a893e1bd16b7", "sighting_of_ref": "indicator--daf6c733-2704-493e-912d-6bf3314e006b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22ccbb54-0287-4ede-9e18-dc0d2dfa47f9", "sighting_of_ref": "indicator--180b99e1-bc42-4a48-8b4e-84981e32836d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ca1f33-fd9b-4f1f-94ce-9d38c2c03514", "sighting_of_ref": "indicator--858287bb-b611-4b0b-b03b-8b761d160b96", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--127685fd-db3a-49d5-8cfb-d5e67eaa9cdd", "sighting_of_ref": "indicator--302c8a67-68e8-4884-abd9-6f3d227c6368", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dbab2bf-af4c-4e67-a6e0-bf37e64fe92b", "sighting_of_ref": "indicator--67cffcd5-4445-4df8-b3f9-3ebb2b6b5794", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74c4f423-dcb1-4b43-baf7-544fddd603a3", "sighting_of_ref": "indicator--82b9133a-55ed-4fdf-9dc6-8ae6d79ffef0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e3918e-22f0-4c5e-b47b-bdbb6555f7e0", "sighting_of_ref": "indicator--08e18682-ca6c-44f6-85b6-e297ebbaf45b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28a9d2c3-8caf-4857-8865-a829767b0360", "sighting_of_ref": "indicator--bfc499b7-b83f-4446-b62c-d136df1a46f0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f2f7682-ed47-4421-ac8f-a15931e9727b", "sighting_of_ref": "indicator--1db124ed-a2c9-4abd-b9b5-1cf9381b8e38", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f03afd-163c-4c5b-9dc5-c01a11b9b9fb", "sighting_of_ref": "indicator--e71da58a-299d-41be-88fc-9068137f4c6a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1378b7a4-3136-405b-8b38-5b5c5cd08ba6", "sighting_of_ref": "indicator--1cb6cde1-4dc0-41c1-bb4b-bcf5a7569fe5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a1d4734-7a43-4651-97dd-489d7097bf05", "sighting_of_ref": "indicator--28e9a5fc-7d5f-4ade-b14f-8b7994f7f4e1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--113152c4-d9b6-451d-afc1-46509acc96c8", "sighting_of_ref": "indicator--4d65675b-5070-4670-ad5f-c2d5acb35e5d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f4bd578-3ee7-4f6a-a255-8e6b20965d7d", "sighting_of_ref": "indicator--3fcef0ff-6093-4435-823f-0cc950f1085c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ba8556-cec1-45bb-9ca0-a761ddaf224c", "sighting_of_ref": "indicator--00cfc65e-dbfc-4a67-834d-6834ecc5c31b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a5c2fd0-e0c2-4ad9-b2d7-19d558058b1d", "sighting_of_ref": "indicator--c7037d52-35d6-45dc-a19a-a6b1e08c1f3e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--255ebd74-6865-4882-915c-8bbcf7bcd3f7", "sighting_of_ref": "indicator--5e5cdc41-b54d-4322-9252-1edc945ff7c8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e961ee08-e9e4-4f83-9c65-7fbf964e137f", "sighting_of_ref": "indicator--2bcbbe92-35b3-445a-ba1a-f0c634ee5e5a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aea08b1-c067-402f-a006-9b5e8059aec3", "sighting_of_ref": "indicator--b6d4295c-26d0-4e3a-a1e4-af13e83133a6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10888199-e333-465f-88e7-5fdaeb207f60", "sighting_of_ref": "indicator--1adc2504-dc64-4713-b36f-37159c0f404e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--823c3801-0a75-4979-bed5-e4cf61eba7f8", "sighting_of_ref": "indicator--a3eebd66-1773-449e-a2f5-9e61c671c458", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--435f830b-5be9-4b3d-80a7-b6ad9f852226", "sighting_of_ref": "indicator--50a2a0b4-9b5e-4417-a57d-9f4f8c5133ce", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a93ba8-d320-4466-90f1-84c7cb6004c4", "sighting_of_ref": "indicator--2224391b-f884-4127-a827-e7bc936a4dea", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6efc16f8-a832-47ab-bf30-50aa66714010", "sighting_of_ref": "indicator--8a5f80eb-ae4b-4784-8ca8-62859c4b7477", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e2eecb8-7841-47f4-a395-94bf4a2086b0", "sighting_of_ref": "indicator--0bf59737-1917-4df5-970c-a5652839fc7f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3276b75-6895-415f-94f4-5174a898c4e1", "sighting_of_ref": "indicator--c58765ce-5734-4378-8585-9d2bda673a41", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e85b3db5-7f38-4976-9fc3-2f907ad80ac3", "sighting_of_ref": "indicator--a402075a-47a7-466f-89ae-02abfb3d17de", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e59167-ad42-4dac-a313-14d025533c31", "sighting_of_ref": "indicator--3773812e-f88d-4458-9370-1c209a4b6f0f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36e4d588-1afb-4941-acd7-e0884081451b", "sighting_of_ref": "indicator--5dd27646-e412-4cd9-9ec6-cc0f72a3dd73", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d571da2-b41a-465c-bdf3-2735702e670f", "sighting_of_ref": "indicator--f34ce8d8-e375-4f51-8854-1870d5cb477e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98b1a4f4-2f1b-480a-8d7f-4ce3fef3a439", "sighting_of_ref": "indicator--a3f14af0-83ef-4ee7-86f0-811498e2fb02", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e1c82f8-b0fc-4c83-982f-aec0c9985aaa", "sighting_of_ref": "indicator--14526277-3107-4791-9b2d-c227bd493319", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c17a2c-add4-418c-ab07-bfe6a68c47c3", "sighting_of_ref": "indicator--89253891-f326-45b6-a030-1ea9566da7d4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d10058e1-b838-4856-a2be-ebb849c4fbde", "sighting_of_ref": "indicator--baf3a9d4-ad0c-4a4b-9db3-c8f66253b372", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e2e316-453e-4c4c-b918-1ba5a525b363", "sighting_of_ref": "indicator--55f34f90-798c-4cbc-ad08-13d9f90af9da", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a8785c1-2b4e-4d24-a8b4-d1291f68ea6b", "sighting_of_ref": "indicator--8e57b320-21b0-487c-86e5-fcb2f91a4b0f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ae6d0a-619b-4f7c-9530-55d195e994cb", "sighting_of_ref": "indicator--a69578bf-5e4a-400c-bcf3-d80ec987d703", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f191ae1-e388-4a9b-b8ed-3c6984ff41bf", "sighting_of_ref": "indicator--fe9ced13-446f-4f12-a8c1-58fe3fd6b600", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba2cfa82-e6e1-4b6e-b067-4813b6a81f0a", "sighting_of_ref": "indicator--e8965715-885d-4932-a07c-1e91ed3d1ce9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad41497-48df-4d5a-a536-7ca3d9b1733d", "sighting_of_ref": "indicator--b1ae1328-76b5-4758-af4a-aff220a3facf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f4a68a8-5f31-42a9-b59a-0bc3f538f4da", "sighting_of_ref": "indicator--74bc4c3c-1bac-484b-80ba-e25618d1a741", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c061b1f-44cd-45db-be36-5d1004141b7c", "sighting_of_ref": "indicator--19925a9d-eaac-4ed1-b6ab-2a87720da32d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c3e8afc-4ee3-4329-8b2a-edc86f73ff65", "sighting_of_ref": "indicator--c2fbe086-cdf3-408a-9f8c-8e5cc9b1bcb1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dbf47fe-f5ba-4e1e-a3bb-79302942f86a", "sighting_of_ref": "indicator--8b83b3a3-2e76-4905-aa29-b2ae7cd50ddb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--439f9fc5-c1cf-44a0-84a5-8b418b615081", "sighting_of_ref": "indicator--2c48b8fb-3ad7-4b0f-9300-201303354918", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f2096f-d4a1-4323-a865-b9e733b47a5c", "sighting_of_ref": "indicator--c9342b2c-1930-4115-933e-c63ccb3b6865", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf2f554-9dcf-4a04-84a0-1073f281d21c", "sighting_of_ref": "indicator--87909c0a-5e83-43eb-a8e3-39a2fb39dfe1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--702b5d11-1c24-4839-9340-52848587cfce", "sighting_of_ref": "indicator--6a2b087f-5a29-4979-9b3c-4d8da2eca8e3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90b24e2b-e0f4-4ed5-a2fc-6f932a43320d", "sighting_of_ref": "indicator--53904fe1-0813-476a-a0b9-b06ca55820d3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb81b04a-b547-4993-b2de-313636cac1b1", "sighting_of_ref": "indicator--96a52326-2a21-4b78-ac38-e6fb85b26131", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec080b84-30ee-4eee-9621-a4706d724549", "sighting_of_ref": "indicator--349e6b7b-83dc-4b47-915c-9a02504e0321", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f743ba2b-419e-430a-b391-a152de31c493", "sighting_of_ref": "indicator--fd4445bc-cb75-4e9d-b50f-9d33bf1545dc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20602b4d-a24f-4b11-842e-88e70c83c5af", "sighting_of_ref": "indicator--3afa3f05-1679-433f-a9b4-ee5fb9f2145d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67dd4860-fbb2-4ae5-b947-e0247c710353", "sighting_of_ref": "indicator--36bac67e-131b-4865-8df6-8d1dbf07de28", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ffb3efe-01b4-4dcc-9d32-b7211e4cebb3", "sighting_of_ref": "indicator--fed34257-b1c4-43fd-ae4e-32c429e5c72f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3e3f2cc-7cbc-4b9d-8eec-2ab60d827e74", "sighting_of_ref": "indicator--de8a3aef-9c97-4d8a-a258-0928c120f151", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e94f0d74-8a6b-43b5-98b7-eb9d6856feed", "sighting_of_ref": "indicator--f8db5121-b27a-423f-841a-dc31550d6b32", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c14d385-74d3-487e-9487-2efd30111bc6", "sighting_of_ref": "indicator--98027c1d-3fed-47a2-bc04-3671727196e9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c20cf09c-3e2a-49e1-9994-53d22bb1888a", "sighting_of_ref": "indicator--ca47a5df-cb7d-4c8a-896d-70be4a880718", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38662d42-28df-4bac-91f0-12a25b6b768d", "sighting_of_ref": "indicator--f19eca41-9303-4428-8ad7-db0c647165a8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba8f8e11-25ad-4d1d-aeeb-207b8a9c4491", "sighting_of_ref": "indicator--c4ae7130-57e3-42cb-8b0e-0f9c2099946e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aedbfdff-d0a5-4958-9739-30870844174a", "sighting_of_ref": "indicator--833a0cf9-3b22-4f9e-aafe-77602e40b55f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a222bd-6293-4154-b82b-54427cf62dad", "sighting_of_ref": "indicator--cd5098e1-d218-45fa-b911-db5ce764777b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b117d51-e340-4a46-b142-7640defc18bb", "sighting_of_ref": "indicator--875fc936-5bb4-4e1a-bb73-05ada4093e7e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c4120e1-d344-4fbc-a642-a1459b856571", "sighting_of_ref": "indicator--1c1d12c7-ec79-4d1a-8d18-bcc7119e9c8d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--931df49b-13d6-49b8-9a7e-21ac3cce352b", "sighting_of_ref": "indicator--75a70ee7-a383-4cda-8895-30f802e02232", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--424581eb-bb65-4d37-aa2c-65f19d9e4244", "sighting_of_ref": "indicator--8bfd4b63-8e58-451f-8a9d-97607b017923", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8863342-133f-4d00-ad1c-e7e916d7dcb4", "sighting_of_ref": "indicator--5395d407-664b-4870-8b7b-c500636ea1ee", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c70f274-2efe-4bde-8433-85aed2847126", "sighting_of_ref": "indicator--0acf01cb-c093-4dfb-9324-a986e06ebaa9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80cf4adc-b68d-412f-aed9-419b22dddb03", "sighting_of_ref": "indicator--0ef0e02d-755e-496c-951b-78f18cb131b5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daf578dd-ee41-46b1-b624-8fe7df4c40c5", "sighting_of_ref": "indicator--48a1bc9a-f764-4e4b-9304-8b9cb40a44ae", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2391128a-53a7-477d-91f6-2041e6d2eb3e", "sighting_of_ref": "indicator--f9df582b-bc88-4579-a98f-d9fe76beeef3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c8e9cf-2946-4905-977f-fcbb00d6df51", "sighting_of_ref": "indicator--75d06fc6-1074-4941-b11f-31aa05da3039", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f5e5186-014e-4bb1-a575-896ff0f79bc8", "sighting_of_ref": "indicator--7f77244a-37da-4872-9872-5481ee6ca713", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--596c0047-f226-472c-bff0-6322320da6a4", "sighting_of_ref": "indicator--77f05b7e-130d-41f1-ad73-adef6a788eb7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e920add8-0d8c-4fe4-b401-58d8396ac3b6", "sighting_of_ref": "indicator--eb1af239-862a-4173-a83b-08692c69bd14", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fbdf7bc-c7ba-4900-80a9-e061917f5747", "sighting_of_ref": "indicator--f29f6098-690b-41a5-9648-55b8b0b69809", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dc21c3e-1dbf-4e99-a450-125a7e9fee3b", "sighting_of_ref": "indicator--75bfcf4a-b863-4ea5-9f9b-3ccd975c5a02", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d66ef6f-0000-47b9-bc0b-d3a64cc8d0ff", "sighting_of_ref": "indicator--67174d80-7408-4231-956b-f3dcb26ae281", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed59e292-e741-4b2b-873e-573b8cfac45f", "sighting_of_ref": "indicator--f157f9a0-916d-4ab5-b8b1-3098c6aeaf7b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b42c90-69a7-4136-8a9a-82fb100cdb56", "sighting_of_ref": "indicator--b658990a-2782-4f9a-90f6-002cd1cababf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b1fd24-b008-4f17-8a20-031b502d4654", "sighting_of_ref": "indicator--2b488a82-9c59-452f-8d23-76c20b8d2423", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16642bde-faee-43ff-9504-db247025167b", "sighting_of_ref": "indicator--ca92d05f-e16b-4dc4-89a4-654daff943e8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a12f58af-b8df-4c3d-9f23-6be3ebb153f0", "sighting_of_ref": "indicator--a567a0bf-0995-46c0-afca-6758f0c28344", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74a0112a-ff03-4dde-ac17-6e6b638d44cb", "sighting_of_ref": "indicator--ace1013a-f6dd-492b-95a2-39ca1ca7095d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d660284c-90cd-4f7f-b903-eaa5c28bd9c7", "sighting_of_ref": "indicator--98511010-3128-4ce4-9fcf-af30899539f3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b37d85-2a80-4359-b376-725267e10270", "sighting_of_ref": "indicator--3cc1b7be-ed64-4031-87ab-f0dc3258d516", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--624f75d2-c071-4881-bdc4-cb16103b2714", "sighting_of_ref": "indicator--0b66c7a7-e40f-4ee1-9b8f-f6ac5ff22636", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--367a64dc-6bbe-4f1f-bd9a-1261b6484333", "sighting_of_ref": "indicator--50b6bf12-e355-4367-b157-47e484ae68ad", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--666d76e7-665f-48f6-9bb9-094179686d73", "sighting_of_ref": "indicator--6e1475c1-9ccb-436e-a5de-c16aa93ef477", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--519d1ddc-677e-4c24-bdd7-c922aa8dd5b6", "sighting_of_ref": "indicator--06ad5137-2e02-469a-9acd-1cba3de81a8d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d86fce12-74b0-436c-b075-ddc616c1b0f9", "sighting_of_ref": "indicator--cc5145c3-a0db-4d92-bf43-cf464671ca2a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb0f5b44-ee74-4ad6-83f0-c9e469edf1a6", "sighting_of_ref": "indicator--1cff37e3-66a4-4dda-b1f4-9860b0c413a4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60579e48-fa9e-4ce9-b05c-3a6131b3cef6", "sighting_of_ref": "indicator--8643b6ed-8bbf-45b2-9cc7-0469e560e3f9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd78841-a6d8-4e6b-9219-4e3ff8ad97ce", "sighting_of_ref": "indicator--bf83cf69-85f5-4a95-97f2-0a70a6790733", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a004644-9a32-4b05-90f8-00d245708fc3", "sighting_of_ref": "indicator--d1177535-240b-42ac-885f-f2cc62895a6c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d60d90-0f29-444a-b2e4-13785e115e67", "sighting_of_ref": "indicator--e486f06e-e816-4a09-9700-4e7f8f9e1a33", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77f07ebe-4e46-41d0-8046-ca6869bb3736", "sighting_of_ref": "indicator--a91f86a4-6360-4a30-bf1d-50f47307011e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b76b94f-fd3f-4905-b7f9-bd3c1cc1b379", "sighting_of_ref": "indicator--33872dd0-b9a1-411f-ad28-680618df1467", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b6951be-bb3a-422a-9629-799f7da8969c", "sighting_of_ref": "indicator--06dcc5ed-fabe-48a4-bacb-42a3b01033f7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79f1c6fe-a4a2-4302-97d7-75940b95d064", "sighting_of_ref": "indicator--f33a8041-5f52-4b2c-aabd-97bb3c46edfa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdc1f077-b02b-4bb9-87ed-498f2cd5ffbb", "sighting_of_ref": "indicator--219c5259-8db6-454f-a77f-942309bf21fd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71125ca0-bf69-4984-bc1f-c8e389f22a33", "sighting_of_ref": "indicator--3423ebe8-303f-4ab3-98ff-f6e77c473b9e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--461abf8d-8b0b-4ed1-8f49-8f9d8eb9ac9d", "sighting_of_ref": "indicator--e81ff6de-6124-4495-8caf-93ff374584e4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88a912e4-8c5e-4852-a59d-163a6adeca86", "sighting_of_ref": "indicator--657a0815-6555-479c-93f7-7ce589323850", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbf2fdb9-b14f-4e10-b7d2-8a57b32292a9", "sighting_of_ref": "indicator--9335c712-0d32-4fa9-a71f-623dea23824c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86d53cd3-e9c9-4be7-ba8d-569707444b96", "sighting_of_ref": "indicator--9d9b33fb-bdb1-45cc-b83d-3fe18f13f1df", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--203c3876-6c67-4d71-afd6-6e9ae517ad3e", "sighting_of_ref": "indicator--c451cd3a-4edc-4309-88d5-980bc27a5679", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b509b007-dd9f-4e48-b73f-5a4ca8f350a8", "sighting_of_ref": "indicator--40789757-873b-4fc1-beef-ea245e285b5e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80f3b3d4-d239-4050-8ddc-faea68fa8aac", "sighting_of_ref": "indicator--6f7759cd-c38a-4502-96d4-4a133eda8c1d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a28dd1c0-40a6-4355-b570-43e8c3b3be07", "sighting_of_ref": "indicator--d8a1f5c2-7dd8-4d4c-868f-62a9bc7de5dd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8daa59c2-41f0-48c8-9a27-1f486c0aaf6f", "sighting_of_ref": "indicator--049093e5-564e-4579-b4bb-cde641a97819", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d2155ac-8078-4feb-8788-5f4be7e405b3", "sighting_of_ref": "indicator--2301c076-e4fb-4227-ae25-ea710f346fb9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--033d731f-aede-46f1-9dfb-84c85f6fcb15", "sighting_of_ref": "indicator--232e5aaf-afae-474b-bf49-939998b7b335", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a6f305c-c238-4694-8c4d-a2ab16a99d4c", "sighting_of_ref": "indicator--1b1e0a2e-3418-4925-91be-5598021d66fd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a76e16-5859-4075-8e31-77aad59ea175", "sighting_of_ref": "indicator--e869ba01-234e-4e84-9ef7-80d4a938b932", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e33ca4f2-7883-469a-9edf-18a81e974ee5", "sighting_of_ref": "indicator--4b24816a-4550-483b-b352-37c9b55925f1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c37eb22-23dc-4e1f-948a-ccad08139272", "sighting_of_ref": "indicator--d77fe2ca-073c-419b-8612-3856e77c2b12", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff23f7cd-c8e7-415e-bf02-bb32103e28ce", "sighting_of_ref": "indicator--7321718f-5a1d-4677-a72b-0cb7f8ccb045", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--738d86cc-1547-4751-8b17-e1deb9b500ab", "sighting_of_ref": "indicator--d06a1955-493a-43cc-8d0e-2ad269f5d40e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80713af9-0ee0-4e16-8cc0-c37706b6db43", "sighting_of_ref": "indicator--1af3e2b3-e417-4a21-8d7b-d2289c842aee", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef45432a-c3df-4172-a6e9-ab983a433f36", "sighting_of_ref": "indicator--5c786240-56e4-46fe-9637-331304871dc9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2842aa6f-3fad-408e-a49a-a703367bf99e", "sighting_of_ref": "indicator--f02a2cf9-617d-4b97-a836-f55c4d79619a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99891dd7-5d8c-4298-b63d-de8792d265dc", "sighting_of_ref": "indicator--de5acb8e-9e67-48c4-bc43-f15e305b151c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb731d22-1467-462b-b1f4-3ceb023b72c5", "sighting_of_ref": "indicator--01c5d900-6740-449b-bed8-81d5287fed0b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f02843-b16b-4b1d-a7e7-5cec0023d397", "sighting_of_ref": "indicator--5bcb449b-263b-41d4-973c-cb137fd74f90", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f296be3-8ea4-478f-ac16-cc49f84e63a4", "sighting_of_ref": "indicator--238d7e2c-e280-4fd8-95f0-c52105cf67b7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c312e1d-7a98-4ad6-b801-98760a023fdc", "sighting_of_ref": "indicator--7bfaca57-dc17-44c0-a5f9-28ef44e9f366", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86cbf2fc-6e22-420b-9554-324ad2925767", "sighting_of_ref": "indicator--26eb25a5-9e1d-4631-8c4a-8a9b693add08", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6657726c-69c4-42ab-90bf-6b4cb3f4c7ee", "sighting_of_ref": "indicator--dc49a85e-9fb4-4d5d-a795-f88a2cf1d3e2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c59637c9-b968-4ef5-bb28-b13f5a7a3c03", "sighting_of_ref": "indicator--618ae325-5d53-40a6-83f2-5599a8a16423", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40308a7-43ab-4806-be22-6fb04962fe49", "sighting_of_ref": "indicator--7cfad612-2f64-4e8a-be43-eef6a1287e4c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06afc8c3-ee4d-422f-b1dd-eff2c70c7845", "sighting_of_ref": "indicator--23734cdb-1a51-435e-9f6e-382078ac831d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f456b28-816d-411a-83e0-2152a76e1d87", "sighting_of_ref": "indicator--60e6de3a-b404-4ae6-91c2-2fdfa29d082b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad6f5033-80a4-41c0-a8a9-b83501a06ae1", "sighting_of_ref": "indicator--66cd3214-6ebd-4280-abac-bb0fae5509bc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--917e1f46-8c22-44d9-99d7-0992de0dad43", "sighting_of_ref": "indicator--3c766f52-623e-4859-b580-83e6c20bc49e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34da1b4c-67db-429d-a08c-bf19e11837e9", "sighting_of_ref": "indicator--d79dc0d3-ebbd-472b-b680-b796f7a91de5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d86cd06-b1c5-46a9-9646-9223b4cb8a93", "sighting_of_ref": "indicator--e35c96a1-52b1-404a-b472-86b47c3d7d44", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd9c8696-1472-4d51-aee2-1c807a815edb", "sighting_of_ref": "indicator--75cba1d6-bf79-403f-8869-770d7925cce6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7df117e-d343-41f2-b4bd-4831894d2950", "sighting_of_ref": "indicator--66186d9e-966c-4de4-b42a-17250b7d525d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c1987d9-6626-41eb-893a-a658774a9efe", "sighting_of_ref": "indicator--6cd8db29-1675-4f6f-9a05-c0c0b3d5a2df", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95f5a425-ae06-4b4f-af28-a73597e287e7", "sighting_of_ref": "indicator--602b7e1e-7354-4446-a06e-9fb7aaf48c38", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95886af6-9b6e-45fc-9eac-22c9deb2ef5e", "sighting_of_ref": "indicator--c823910f-6a41-4b65-b5f3-7602cfcc18f7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a525d31-a30c-4079-88c6-f5873ab39edd", "sighting_of_ref": "indicator--21680ec8-8501-487a-9010-b6e6753101a7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e51066b4-8366-46e3-8016-cc5aa22888dd", "sighting_of_ref": "indicator--d771fca7-f73e-4a41-abc9-11830821ace5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b97be946-a8f4-449e-b881-67a843d2922a", "sighting_of_ref": "indicator--17de9e9c-6739-4e61-a38d-c092f2b72ca8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9961942-2517-478d-a6c5-d66df79d1592", "sighting_of_ref": "indicator--e996eeaa-6558-461d-a005-b56e322a1cc9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f069a1d-f245-49c8-b494-095b6f35d8f0", "sighting_of_ref": "indicator--b0cbd334-337c-408b-9774-577c2e26a251", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70009371-cab1-4b6c-9d1c-908db39cf117", "sighting_of_ref": "indicator--08c91e1f-6a4e-43a8-b29c-39277b37200b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c42f9e5d-9961-43c4-a97b-99d20d3e09f5", "sighting_of_ref": "indicator--1148ba61-9470-4133-81d7-d631909de109", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a27c3503-a2f1-4ca7-8bf2-a3ce4fa11c58", "sighting_of_ref": "indicator--9f14fb77-3c6a-46e2-80d1-9bbf01c593a1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c46ce45-9a4c-4e78-ba88-5e2115a060ce", "sighting_of_ref": "indicator--d6707c6f-7ab7-469e-884d-6964c321ca5e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--686269d5-9e4b-45f9-83fa-141850aca86c", "sighting_of_ref": "indicator--02355c59-b2f3-4e75-8cd7-113693f2685b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e892365e-4198-473f-a47c-6223f1ff461e", "sighting_of_ref": "indicator--0d24120b-45ec-4170-814f-970127c10aa0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--120b9e1b-cb9e-461e-a682-431abd6bbeb4", "sighting_of_ref": "indicator--9cc78735-8767-4c81-8337-74485a183a9a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b97f1ed9-4b70-49a8-b6c4-8b772c8e1dd7", "sighting_of_ref": "indicator--30634d1f-1caa-4ed7-a012-6b2a1cb631f6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52dbb169-0881-4bc1-9cc5-542864dddab4", "sighting_of_ref": "indicator--44fe3510-a96d-4100-a7e9-f76a2d1982fc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--102724be-abc9-4b76-9098-0439a53c6ea4", "sighting_of_ref": "indicator--da680b98-5ebb-441b-a354-f7c7e81b1a98", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5622bdae-ee50-4965-86a2-0a0695cd4503", "sighting_of_ref": "indicator--dd6933de-b038-49c4-a066-b9ea284a3007", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df7f86eb-c7cf-4920-bc7b-76228795edf2", "sighting_of_ref": "indicator--4bbe710f-534d-4a5c-b143-2a1916b0c5cd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba8adc7a-ab4a-4b31-baa4-a21e466f4d79", "sighting_of_ref": "indicator--a19b0eb9-bb10-42fe-9b67-e6160c8c3d08", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc9630f8-9fbd-4b96-b4dc-e8c18ffe583a", "sighting_of_ref": "indicator--2ada97ef-6e9d-4f8a-ba91-4e7d86597341", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8332d06-c961-4f04-8b12-29290b407717", "sighting_of_ref": "indicator--7466f276-66e0-4bb5-aeb6-5a406e5ebae5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcded5fe-1025-49ba-8d3e-1606edb1e02a", "sighting_of_ref": "indicator--50ab8a5c-5de4-4727-8749-c17022387e66", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d038c9a-7f31-463d-a9f6-814dbe1d2dd3", "sighting_of_ref": "indicator--7b17adb9-adfb-4518-aa6a-9b891c02fa2f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8130761-14b7-45d2-9b5a-1278e18d229c", "sighting_of_ref": "indicator--c9676530-03f3-4b9e-9135-c701115f582b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cca94692-cb58-43f2-9d47-9f9d14ebfe8f", "sighting_of_ref": "indicator--53588566-8d01-4fa1-bc4a-75dcf9f00d62", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e7ea459-386d-4609-8341-9210b6341f77", "sighting_of_ref": "indicator--b58da060-79be-48e2-8de9-4ad33c1d0b95", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f7a7763-d491-4af1-ae9a-877a8b53fee8", "sighting_of_ref": "indicator--ed65abc5-0c0e-4bfb-a89b-e9649a3cdc6c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--520e0248-a35a-492b-a700-d4c5afe240af", "sighting_of_ref": "indicator--d0d4cae5-4c41-45a2-9f76-b5cea039f106", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54c8e822-30e2-481c-83d9-2a1bd1c8fcd7", "sighting_of_ref": "indicator--ff4ae58e-3f3d-4aa6-a770-24d488b4c439", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54531245-25c1-492b-8aa4-65ef9f8c66e0", "sighting_of_ref": "indicator--c24f6412-81bd-4b23-8175-fd1098bf906c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c251611-6a00-4bb5-b4d9-82558ca54c7c", "sighting_of_ref": "indicator--5e0eb99f-312f-41bf-81f2-b2ac0536f526", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6d5cb86-b372-4053-bb31-99c48954a11a", "sighting_of_ref": "indicator--50190d7f-c280-4658-9483-f992b033daaf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23d5e60e-0846-4086-a3bf-d2222c65b414", "sighting_of_ref": "indicator--eb3b6082-8a91-4406-9e62-ed7e7c33b1e3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b81400-c919-4878-8a6f-d473ccccbe46", "sighting_of_ref": "indicator--4febd2db-9536-4fdb-be0d-8147da2757ea", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d2cd6c8-bdae-4e71-b923-45178336dc80", "sighting_of_ref": "indicator--16ed8dfd-3ec7-46cf-9b1d-846fe5e07d5f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16b675ec-12d7-47a1-ac06-0a768cd00657", "sighting_of_ref": "indicator--fa114ab4-4530-48ea-a3a7-64bb66621562", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a25580f1-1f40-4daa-b289-9af28d167ec9", "sighting_of_ref": "indicator--67073ab1-8ee5-47a2-aea6-267df8645967", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7772f9cf-c853-4d49-925c-7751228d594c", "sighting_of_ref": "indicator--77bf4fd6-4a1d-44f9-a902-9809b46484a8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a400ef03-f1b7-4a61-b31f-cda635929e1f", "sighting_of_ref": "indicator--e46a6780-1082-47ba-9a6a-f98fa2fec191", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--881e1d08-ae30-4c07-986f-939ad1d76f12", "sighting_of_ref": "indicator--b99bc24f-2a2a-4de3-bf52-05c40b499f0c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5007c219-9eba-462d-b1da-f364dd23a732", "sighting_of_ref": "indicator--a969c881-a5ff-4dbb-9534-82597b187cf5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0703cb42-2d87-4604-a174-5e36e0e7cdbd", "sighting_of_ref": "indicator--edb814a6-934f-45b6-895e-0247c73a4065", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f62062-c883-41ca-b83f-184670d70775", "sighting_of_ref": "indicator--83148a82-612b-4797-b6e8-6c3141efd1cf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d11e244-7da8-4379-bb0d-decaede2b2cd", "sighting_of_ref": "indicator--b923df12-2f95-4faa-92d9-37985c7d7422", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75f73c98-7a87-414b-b43e-6e08b40c1141", "sighting_of_ref": "indicator--00168e68-c074-4be9-9ccf-e8b43b004f7e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48026719-9979-4dcb-bdb1-c94e1851f6d5", "sighting_of_ref": "indicator--e8a28aba-1608-4a8a-a264-eb61bf991f52", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8d24d9f-d064-40c7-8525-af106678c6e5", "sighting_of_ref": "indicator--9f27c4f2-2e77-4394-b195-25204e543d8d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0c968e8-1892-4033-bf11-4f7564605758", "sighting_of_ref": "indicator--b990166e-fcbd-4db7-9f4b-1cb9fc138336", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77ff7a9c-2f3c-4ad1-b15f-c5f086c988e9", "sighting_of_ref": "indicator--bc0a00dc-8895-437e-b8fd-27f546a6e9e7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b139b7-a9e9-4c9e-b9db-9ba86f631fdb", "sighting_of_ref": "indicator--c73a376d-0b8d-4973-a503-cc9ca6ce7ced", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cee445a0-7850-41ed-849a-f15498519583", "sighting_of_ref": "indicator--30e5f18f-e3f1-4fc2-9e3f-81620d5c9310", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e52acc57-3a53-4d63-a20f-dd25c0e0a1be", "sighting_of_ref": "indicator--b1842252-917e-43d9-8429-fc94ac90f835", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd5ff61-93e3-40a6-a0ef-86e184c4777c", "sighting_of_ref": "indicator--69227575-d664-4c01-af77-37135cfc1dac", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b332c70-c7e3-4126-a72f-e8ccb6936370", "sighting_of_ref": "indicator--0a1c9a7e-8bfd-4e46-829c-db38db370e06", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e11ed11b-5b5d-4f3e-a627-fd273110782a", "sighting_of_ref": "indicator--727fa862-0ff9-45a5-aad0-8f5bfd168417", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80b2bb1b-7c87-4064-a2e3-1dc1da79f248", "sighting_of_ref": "indicator--73946654-ee28-44a5-9b15-23212cb87e9a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--920329df-181c-4c9d-8039-107af2492712", "sighting_of_ref": "indicator--ab42575a-aff9-4832-80e3-4a25353a9a61", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd4def0-32f9-4bb6-bdd0-9f6b5e6f5f99", "sighting_of_ref": "indicator--4d4354d7-7cc9-4db3-afbe-6c6273d5375e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c14a05b-86af-4c46-9155-77d83c9e6b3f", "sighting_of_ref": "indicator--3424afc4-7050-4d5f-9f52-f05662952862", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abab95cd-3897-4e4d-aff8-621dda18a31f", "sighting_of_ref": "indicator--7a7395bd-4e79-44f0-a55f-08eb05e5f755", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--563322b9-71f9-4174-8dc9-b7a76adc81cd", "sighting_of_ref": "indicator--065e3dcb-203e-4ea4-b918-d54fa9271e4a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ece6d9b-c75f-4a54-9129-0d37666c4a45", "sighting_of_ref": "indicator--ec48614a-e0ec-45a2-842d-ae1742d683d3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--393a76fe-cba0-445d-9925-03256baf9cff", "sighting_of_ref": "indicator--6048e439-98b2-42f3-bf81-f5bcdcfd0688", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a9b30a-5c48-47b4-9761-6c08bdac91a3", "sighting_of_ref": "indicator--2806d2fb-91da-4310-be40-0594f9f1e840", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98d07a5d-7e71-4e4c-9b8f-a3e3d50da869", "sighting_of_ref": "indicator--87d45093-52fa-4340-875c-9802f4d3c529", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d9a0e51-bb90-4d6c-9a80-28b09126e303", "sighting_of_ref": "indicator--3adfdbf5-d872-4ff9-9837-439a0cb93720", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d496625-eb7d-4c1e-9d87-49c753aec055", "sighting_of_ref": "indicator--7b7eb5bd-1ee6-452d-964a-c66028bda4fb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e492355f-f503-43e1-8c09-f1e5f75c07b0", "sighting_of_ref": "indicator--c2e4d732-c724-4a21-bf57-e4b57955e857", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b938884-d1c3-4333-9b44-270310f617dd", "sighting_of_ref": "indicator--e6a3ace2-56f7-4f06-b8ca-198b9fad4492", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab207e17-d919-4976-a0b3-f86c3b5a83b0", "sighting_of_ref": "indicator--ad9d17ca-99ff-42ab-994a-67f501aad7fc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--025e1b6c-ce47-4f67-b230-eef77f7a7405", "sighting_of_ref": "indicator--7b9cbe0c-2d23-4d96-8d15-74b8a26afb7a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d6cb9da-53b7-4b91-b32a-a4dbd10ba769", "sighting_of_ref": "indicator--cf435805-ae1e-4431-986e-fdcec271995f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b44d8e10-60d4-4a1e-95e9-6badff300313", "sighting_of_ref": "indicator--231c7af6-f850-4b2d-a964-0dcd40e0e3f9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e37477-fa7a-42b9-bc1f-db85e92f1dd6", "sighting_of_ref": "indicator--1843c5a1-5912-4c1c-a7db-11f4a4514249", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--326a2234-d87e-4953-807f-a59275350fa6", "sighting_of_ref": "indicator--8803daf7-1a4b-4ce1-8ea3-5de2015d04b6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87643444-61ba-4234-a0b8-79abe2add912", "sighting_of_ref": "indicator--493ff95b-feac-43d9-b68e-a59b57d6356b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e2f6d1e-cef1-4e86-a7b1-f3bac4a836ca", "sighting_of_ref": "indicator--88ec8365-afd1-4d9b-af84-b6322634494b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bc9998c-7241-4308-b9dc-f328afcbfa17", "sighting_of_ref": "indicator--b5bc1429-5e91-4737-b7b3-0a668f2e5114", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8abab67f-d685-4049-830f-b007d4cb1144", "sighting_of_ref": "indicator--3d1a9b23-b55d-4100-a0c8-300258fe7c39", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ed4339-ab77-4b64-8a30-b4c1f3883672", "sighting_of_ref": "indicator--d4e6ddf4-d355-4509-b340-c73e8964dcd5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5cc5988-768e-4dd0-8f44-dd6438069906", "sighting_of_ref": "indicator--1b438baa-309e-4efd-9886-3f6840695f06", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c8aa32-1955-4e2d-8ae5-b8a08c8222d2", "sighting_of_ref": "indicator--3d3d5099-e3d9-4087-a563-5eb6e64f61aa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--016012db-750e-4da9-bbb8-ad82130ac52c", "sighting_of_ref": "indicator--ea102b84-75d3-4763-a151-3d1b8342df52", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de3831b8-2f8c-4cc1-9764-5beb3c2eaf3d", "sighting_of_ref": "indicator--4e2b5999-baa6-4999-9ba3-85883f63c0db", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c81d207f-cb0c-4574-b285-abed80fc1652", "sighting_of_ref": "indicator--b7babc61-d367-47c4-847f-f44efea2c858", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea5cd9a-53bc-4517-a910-ae6407c29cae", "sighting_of_ref": "indicator--f2e4de3c-037d-424b-8273-f48314d21ded", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8922b757-111a-449a-99c9-8a7542fe65ca", "sighting_of_ref": "indicator--6bd099ad-5878-4d8f-aa59-0819f852529e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06cb1d83-aa4d-4c2f-9fe4-dde64733a6cd", "sighting_of_ref": "indicator--ab2a22a3-dce8-47c9-9440-0548781beb97", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f275b7-7969-4739-99c9-dde4521e3ebc", "sighting_of_ref": "indicator--b929938b-2157-4e96-9f7e-5eded5ca3825", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96cdae16-96d2-4ba3-823f-d430f664726b", "sighting_of_ref": "indicator--4794b7fe-61f5-4b4b-ae6d-34c090677153", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d35d8b7e-04f2-4fee-bce0-087b56bb1889", "sighting_of_ref": "indicator--e12a0bee-3c44-42ed-9f6b-b63c925825bd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee51293e-3331-4042-b852-fd37ac98b412", "sighting_of_ref": "indicator--3180e22a-b13e-4153-8829-1debe86b7b82", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--880bd234-a52c-487d-a322-e4ede69862fc", "sighting_of_ref": "indicator--b21400a7-675e-43e2-b56a-95a7a81fceb0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a206daea-329c-48f6-846b-5c18e6568ebf", "sighting_of_ref": "indicator--a5ef170d-0917-441e-a250-5d9e4168f011", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbbc2e77-b1f6-4d15-8996-f3b14eedc6f9", "sighting_of_ref": "indicator--882d160c-7411-40ee-8957-b2c1c8a4e5c7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a53602f5-258b-4f10-a520-c15e1ce8e8ef", "sighting_of_ref": "indicator--0342d6ec-a5af-4824-803e-a0a93d52a6d2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d71b55a-8863-4061-a41a-fe6d4c0a582d", "sighting_of_ref": "indicator--4ab29ce0-4678-40bc-acb9-63aec89ecb7e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b96118-af33-4173-90ff-6c1a3c5d5257", "sighting_of_ref": "indicator--5c361720-6076-4ede-bf91-ab9eb7c21d84", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d039b0a3-56ac-4c74-ab8c-ab2087b20b80", "sighting_of_ref": "indicator--58972b55-e7cf-4a3b-8d24-dc488c71ae8c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b1404dc-e02b-47ec-8dce-452d24f3eccb", "sighting_of_ref": "indicator--322ad84a-d960-45f4-a137-369ff6ffdc9e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8986e197-0372-4cdd-b408-b655638c7f8a", "sighting_of_ref": "indicator--e304d30e-85c9-4e2e-a161-663f74e715d7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efdcd19a-ebad-4409-beb9-fad98830d1a2", "sighting_of_ref": "indicator--47cace5c-1211-4820-b188-f64f74bdc456", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ddce25a-592c-4b50-88dd-198d7950e0d9", "sighting_of_ref": "indicator--fa1307f2-fa03-44cd-ab59-0407adc054d6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88197ffa-790f-4b57-8471-aa901178d6bf", "sighting_of_ref": "indicator--4eefc48e-6005-4efc-a1c4-42d6291caeef", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfdebb5c-5182-4e98-9924-882481777181", "sighting_of_ref": "indicator--81afd630-dc57-44d2-8988-85fc659fbe18", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d97f1243-d0a2-4272-bf7c-1ae87e854fea", "sighting_of_ref": "indicator--8e6f19f0-b2db-4d1d-821a-cc99f3cfe16e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeab9fc8-def1-41a1-8146-976400cd79cb", "sighting_of_ref": "indicator--1ef40609-a666-4b99-82e2-d1b106b6d99d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96da055a-c3b1-4099-8f72-dc0efbed4563", "sighting_of_ref": "indicator--9f85edae-af4d-4357-aca4-4f3e135861bc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4449095-ba23-4671-a377-dbb677dab22e", "sighting_of_ref": "indicator--7c071ae1-ed8d-41db-9903-d407024794d6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b592b75b-ddbc-41cf-a044-caaaf88338a2", "sighting_of_ref": "indicator--b7e23175-14c2-44d0-99e9-c6e1fb861ece", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--168ef561-845d-4630-b05e-05ad8ae071fc", "sighting_of_ref": "indicator--d487075d-dc23-4b3c-8785-978798ab2d0f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80938161-537c-42c2-bea2-e5b9bc0e7f4f", "sighting_of_ref": "indicator--03b0301c-b6df-4fcb-be6a-aae954ada485", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ba0c608-efa7-4901-a66a-38b8b43b3092", "sighting_of_ref": "indicator--109dc76b-dfd8-47ec-996b-379879889315", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--344360b7-94db-4c09-bd74-aee186436c5f", "sighting_of_ref": "indicator--1524098a-f88e-429d-aae3-5eb5fd9c38c3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b61ef27b-39e4-4bb2-8893-fb151566e221", "sighting_of_ref": "indicator--6348c951-0a6f-4f70-a469-658b11212c0a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f744646-35b3-4d0c-82bc-6d5cfa4c6cce", "sighting_of_ref": "indicator--14803cfd-bae6-40f0-a476-a2d78c712a29", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--168ca749-5ed4-4c22-a75b-433efaf18707", "sighting_of_ref": "indicator--e39cd601-411f-4044-a1ce-673ee8470fb7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bad8653-af25-4895-8db1-90738054d52a", "sighting_of_ref": "indicator--996b4569-a6f5-4980-a828-3a848251def3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9de7823b-b204-4671-a227-9a604d4e162d", "sighting_of_ref": "indicator--d8867501-e285-4fa4-986b-53f70ead3f59", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fde22782-193d-4fee-b8cb-aa6e42599d3e", "sighting_of_ref": "indicator--60e39fde-6e43-4fe6-9fea-b8e4bb40eea8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e30772bb-319b-42a0-aad3-563133a73df7", "sighting_of_ref": "indicator--69b273c3-6260-4288-b569-b62b53f6bd67", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d078d030-24df-4f4a-bd0e-f5c4b479b5b1", "sighting_of_ref": "indicator--678bbcbc-3030-48d6-a202-f9cb5934cf7a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--436e1ad9-5fbb-42ec-b437-6b48684e560c", "sighting_of_ref": "indicator--c0090707-8776-44e1-9f71-9c2bbd92867c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6425675-8707-423b-8575-10f5ff83a77c", "sighting_of_ref": "indicator--b1aa87d3-5753-48b7-aa41-727f7a30b49b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66de70c3-dbfc-40a6-88ae-118bcfaee869", "sighting_of_ref": "indicator--0bb789e1-521c-4d9d-aa7b-d23165a92753", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67f580fb-dceb-45c4-8a6a-e9f95c73d51f", "sighting_of_ref": "indicator--b979de65-daca-464d-af62-5d330d5ab131", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fabcc1a9-2131-4e9b-a31c-1021f10d4c2d", "sighting_of_ref": "indicator--e2b6ae63-c6e1-4ed2-a80a-2890ff11f534", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd83008a-db75-4838-ac7f-317d180a37dd", "sighting_of_ref": "indicator--a8c54558-0d56-4f38-8687-57c0ec4f0fe8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dcc90e8-2375-4d97-950b-bb7ac7518bf1", "sighting_of_ref": "indicator--c0ec9c4d-5058-4c39-b2f2-6625001d394b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5557dfb1-c271-42b5-b9c1-2f2c7da53148", "sighting_of_ref": "indicator--f701cdbb-31ac-4385-8bfe-e73875cb4062", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84e5293f-c270-40ab-bbe2-ccb7b97a49f4", "sighting_of_ref": "indicator--de7a6df4-3093-4b30-a40d-d96f46c37028", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee67cf46-60eb-4824-9a65-271bb91b22c3", "sighting_of_ref": "indicator--cab45e3c-10ac-4d24-8a01-aed65855e0dc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca326fa0-4faa-4c46-ba44-43d0034f1301", "sighting_of_ref": "indicator--e287f9ca-e654-4b69-99f6-93ad9009ac78", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ded84408-df3c-4a7f-88bc-d5c36566c8c2", "sighting_of_ref": "indicator--03709287-cae3-4067-886f-5863dcaf9ab1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ad78a9-2857-4724-a521-69693a2edb42", "sighting_of_ref": "indicator--658b0760-c835-4736-941a-707f4a561fff", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5232e3d9-1681-4436-b991-fb3b5f0465cb", "sighting_of_ref": "indicator--00eeb298-9f5b-47e4-84c8-927e64922adf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--611f8380-291b-49bb-9653-cf4be9a4d7f0", "sighting_of_ref": "indicator--745ea425-3e4e-4fd6-bdb9-46ca4cb5482b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f69ce53-de8e-4e52-9201-884e6f4f1bbc", "sighting_of_ref": "indicator--5aca2826-cc7a-4cba-befa-3db69c6067fc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef316a1-842b-4293-b57c-00624dc39122", "sighting_of_ref": "indicator--3c46982c-4e87-48d3-80f0-6f4513ee8e5c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a471ca6-228e-4267-880d-589d5bab4d0a", "sighting_of_ref": "indicator--41abab6a-a52d-4e79-b246-72cbe9211c9b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--276a78de-35ff-4c9a-a03d-8f4d90fd2f04", "sighting_of_ref": "indicator--1050603c-571f-47fb-aaef-b59a36c5db4d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01b5a1d3-bc10-4248-861f-2477a5d2112c", "sighting_of_ref": "indicator--40d41e0b-6c04-420e-8575-79ee6afa3074", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e22811c-24a1-4571-a44a-985525595ec3", "sighting_of_ref": "indicator--3cf8220b-699a-4ca1-8f47-07085cae31fd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8470f7f-7d14-43df-bbfd-ea43f3ba9370", "sighting_of_ref": "indicator--1e41f64a-bcfd-4b03-80ab-fdff3cc4d45b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8afcf1c3-89c3-4d2f-824b-728d006d4be5", "sighting_of_ref": "indicator--7ef0b1dd-a896-4ed0-a612-83c184c0763c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a5a170-1404-464f-995b-9863343bba1d", "sighting_of_ref": "indicator--3c915fdd-43b1-410e-80e9-53618ff0f450", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c66d42e0-7798-496a-83e2-9bb859f2c69e", "sighting_of_ref": "indicator--0d5955fc-aa09-45b8-b443-b0312908f396", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a7c2586-ccc1-42a9-95ec-ebed6e45c2fb", "sighting_of_ref": "indicator--bf9cc08f-3e42-4305-a8e7-568773e08b3f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6175d63-30c5-498f-8c42-8fbe281aaa8a", "sighting_of_ref": "indicator--b32c2cf5-7c66-48bc-b4b4-f635c0fd3845", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c6882f2-40fd-448d-82f3-3884c5a70e94", "sighting_of_ref": "indicator--79e3233d-7503-460a-85d7-9edc4bc5e163", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3602a98f-b7dd-4250-88c0-ea01d5cadb5e", "sighting_of_ref": "indicator--57fe72a5-c520-4767-a445-b2a8260c1314", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60c493f2-e9b1-4d5d-81ff-e2e2ce7ba24f", "sighting_of_ref": "indicator--2abb1556-b89a-4a1a-b8b2-1a374aaa9616", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d931463-b9b7-4349-af8c-d69f196d3eb2", "sighting_of_ref": "indicator--289b4b0a-8153-48ed-ab50-c30c0151fa82", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebafde79-c485-4f51-875f-0d238e8db94b", "sighting_of_ref": "indicator--e6d300a6-bbc2-4bd9-a428-d2fc66ef0af6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d0df2d-39d6-4475-b977-f1f056e9df18", "sighting_of_ref": "indicator--7e763e49-195e-475c-93d5-618286e1ef9e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--212bf7d8-71ca-4437-b1b1-5de0a9e0404b", "sighting_of_ref": "indicator--491309a5-513a-4560-a14c-09bfad2bb0fc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf340c67-e8f7-4320-a0b3-592a67eb4b32", "sighting_of_ref": "indicator--1b3f9ccd-9b1a-4a2a-8cf2-4e1f8bb3b9f7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28514e40-8775-491e-94fa-655ddd1286e8", "sighting_of_ref": "indicator--f85505ab-b68a-40eb-a4ae-022d79f9b8c4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db70eb7e-43c2-4722-96c2-cc0d43aaeba1", "sighting_of_ref": "indicator--e3c508e6-b0f7-45af-9829-ef11cf34e6e2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--298ffb59-b2d1-4195-9bbe-4125efcf8c6c", "sighting_of_ref": "indicator--f1e3aad7-4080-482b-ac4b-9e486d694e39", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7c76bd3-8dc7-4fa3-a1bc-2c15b781d2b6", "sighting_of_ref": "indicator--15920abe-93eb-4fad-a367-c712509c5462", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a20b8777-ec2a-47a1-8be0-79a9ef4194f8", "sighting_of_ref": "indicator--77e71fc3-139d-4c72-8fbe-006687745366", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8396a04b-9df7-4c5f-8615-9ee17d84dd95", "sighting_of_ref": "indicator--ec89a46f-17ef-403a-bb00-60443c23084b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b2c0a0f-2b17-4c31-88c0-68550cb906a0", "sighting_of_ref": "indicator--279be7ba-b1b9-48eb-82ae-32d5337dcfe5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54793eba-28e1-4df8-9181-4f85f9cb9a2d", "sighting_of_ref": "indicator--c345d6d3-6767-4602-a147-b0830b4b5f1d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f246c93b-7238-4c33-97aa-30b6c9a69892", "sighting_of_ref": "indicator--190358ed-a6f5-46bb-a231-c24e2f80ca56", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf60c8b-635e-42fd-97b8-2512b7df46f4", "sighting_of_ref": "indicator--320809b9-a3fe-4335-adbd-c7f789d93054", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1c2f0c5-4d7c-4663-a432-caed2149419f", "sighting_of_ref": "indicator--0be14da3-fcbf-409e-bf36-587d4ae2df0b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--718c7df9-d926-4f17-9b9b-85115b905eab", "sighting_of_ref": "indicator--4deaba5f-60d2-4085-83a8-3ee015db522c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a28e27b-c9a1-41c3-8e08-5e8ca2f92084", "sighting_of_ref": "indicator--f6d6c3ac-0bb0-48f7-b469-bd81417499fc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f62323d7-284d-4d45-8b28-38ae52bd75a3", "sighting_of_ref": "indicator--96cf55ac-80b3-4bf0-be42-2e07904c467b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d98bc98-142a-404d-8b63-dc67c3792a04", "sighting_of_ref": "indicator--61468131-9841-465e-baec-e423127b3ec9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bdf834f-2755-410e-8051-4e2c6165061b", "sighting_of_ref": "indicator--7f1cee21-484f-4626-b7d7-7ea7caab11db", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f3a37c3-3179-4102-840b-364c69bf3d4f", "sighting_of_ref": "indicator--a358568d-aea3-4283-bc05-eb8b1ef8b414", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ee1e99-2b6c-4a13-b5af-10dd87ab98d8", "sighting_of_ref": "indicator--a9f55124-94e2-4420-ba27-16bec9d0862d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3088dcb-494d-4f23-810b-0355f7200451", "sighting_of_ref": "indicator--013d2f91-df94-4731-89b3-6a7157df2fbd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef19edac-84df-4703-b621-643ec392810e", "sighting_of_ref": "indicator--95fcbbbd-12c5-4379-9904-98581e28bf4d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f031ab-b3e1-4c5c-892a-060d6f39364b", "sighting_of_ref": "indicator--1e6c14c8-6ac0-41f9-94ec-97c8975e60c1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--946d8aa0-fb63-49fc-a279-1d3f2ab96c8e", "sighting_of_ref": "indicator--7e53f15f-25dd-471c-b9e4-935dbccd885a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d7301d-bdb6-44c5-afa9-04ff84b93845", "sighting_of_ref": "indicator--78c6ac86-15f3-4b22-b206-fa2a96a39c47", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5792cc94-4329-462e-a34e-5d61cbcdd026", "sighting_of_ref": "indicator--081cd0b8-f02f-4a81-a202-356d4892c91e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b4de21-c463-4a25-99dd-193fd84f596b", "sighting_of_ref": "indicator--151856af-47fb-4c89-b35b-7eedcd909440", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbdb6a37-0afd-40ef-a470-3042174656af", "sighting_of_ref": "indicator--ca7c671d-1e26-43a1-a101-5257154ac2ae", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--159c9282-530d-4f27-8618-bff229d75912", "sighting_of_ref": "indicator--b829bd21-afcc-4cc2-806a-6759f9b4b7c3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2110d41-597a-4d3c-820f-ff18b98a790d", "sighting_of_ref": "indicator--23651547-9027-4990-91d8-00b74cd347b8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd3dc4d-da6a-449f-be05-c2b43de67d32", "sighting_of_ref": "indicator--2917d22a-34fc-48ac-b7e6-702e65eabcc5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba6e02dc-fef5-4868-b358-c56b8388cf7e", "sighting_of_ref": "indicator--ade6d26b-9adc-49ad-90ae-91c3b37aef6d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--201806a3-28d9-4371-b7b5-044a5e312027", "sighting_of_ref": "indicator--44cb2e22-b67d-4b94-8f65-a09487885e8d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91e918bc-e069-4d53-b2bb-c4d2fecf8396", "sighting_of_ref": "indicator--ad134b78-c983-44a0-bd0f-eff809967ac6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f3923cc-2e48-4214-bbaa-0b5cb15afe20", "sighting_of_ref": "indicator--8d4b356a-95e7-43ca-a439-3c259c7f5b09", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24388add-c87d-4702-a4d9-d376e88728fd", "sighting_of_ref": "indicator--61ad79e8-16aa-459e-8a18-8e2a3614cb83", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bc4af02-c711-427a-b010-19523bc03cf0", "sighting_of_ref": "indicator--68d69f08-5cf4-465c-beb0-af30113b4612", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c650b5-385a-4b6e-9475-dc639e3633bf", "sighting_of_ref": "indicator--4b1ef2c4-6afa-4b18-bf43-5f5137f80c6f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e80988cd-55da-42f7-9d27-97ce23108eea", "sighting_of_ref": "indicator--b1c5ac23-51c9-4ab5-9e1c-efa90dc53006", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--754d0979-3d32-4e6e-b060-b5225d9e3844", "sighting_of_ref": "indicator--888ee9b2-1890-4413-911a-eba3a458bf65", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--475048e8-fc66-45a9-9f9b-e45f9b765671", "sighting_of_ref": "indicator--1fa1efd5-1a84-462b-b6f0-edd6a51afd29", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f69577-9d1d-4b39-8601-2ed8ae624fe9", "sighting_of_ref": "indicator--336f1401-5913-4f44-8891-f9c9f8ea0667", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e66a2278-94e8-4b11-87c2-d2d98ca3b0d9", "sighting_of_ref": "indicator--35e9a4fa-b8a5-4e27-beb8-02cd2cc5aad0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea91ab44-62bf-4758-a3bb-562d517d10d7", "sighting_of_ref": "indicator--a2704abb-1a4e-43df-9618-2071631f9717", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f568b12-4feb-4c7e-bde8-7b5a4deb8f1b", "sighting_of_ref": "indicator--f35eb663-8e6c-496c-a290-053be9ded3bf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bcafa55-6ac8-4e95-865f-fdede6cafaaa", "sighting_of_ref": "indicator--a3c2a416-698b-4baa-b1ad-9fe695421552", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db9c6207-3de1-448f-8dc8-2e8d8eba7d37", "sighting_of_ref": "indicator--ebde2c86-f6da-47b7-8f51-867333a91b77", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--900ac4e9-ae9e-48d3-b80f-70ac04dd68d4", "sighting_of_ref": "indicator--9a012382-fe87-4d10-a4a4-cb58093a6463", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d94ab0-fb97-4c94-9e66-bed5b4d598f3", "sighting_of_ref": "indicator--32ea9cbd-64a1-45cb-84ae-6af3f9f87342", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41bf56b0-0318-4d68-9216-58605e093584", "sighting_of_ref": "indicator--db2b4876-a5b5-47dc-91d1-72728b4c32b6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--208de857-31e6-422c-b712-ccf7e0560737", "sighting_of_ref": "indicator--c6652840-8380-416b-a9b2-ce16f09a6e95", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af95c239-97cb-4569-a330-207cb712c7f8", "sighting_of_ref": "indicator--2cda9d19-ec37-41d8-ae01-b0841f0bf95c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ad2025b-3a1a-431d-939a-7f28790ef6ed", "sighting_of_ref": "indicator--bd2abe37-d947-4a34-a8d2-47ea9be3969d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--402745af-9bec-485e-b340-f46d90e73a5a", "sighting_of_ref": "indicator--2dcc1f57-2f32-4008-a0ef-4fb9bbbcc3bb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e8bd9d-b0af-45b8-8b26-e411717f1741", "sighting_of_ref": "indicator--7cba1d81-0271-4e01-836f-f269a6f2be58", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f81226a4-edcb-48c7-83cf-ae4e3176ecc9", "sighting_of_ref": "indicator--108beddb-a6fe-4755-923a-adf0ed289438", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7478945d-58a5-42ba-af18-be8d4cac17cd", "sighting_of_ref": "indicator--36242bda-0e0b-44a7-a298-4ae6bc79c94a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--763b4639-4926-4fa1-a6a7-51ea1159945b", "sighting_of_ref": "indicator--91df7626-4a6a-4f68-99c9-1e02151748b9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9079bfc5-738f-493f-a58f-1b741f6bdd8c", "sighting_of_ref": "indicator--be9dcc04-987b-41c6-95ea-aff61c22c727", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ced7fd7e-ee46-4a77-8216-35aacbe19fe8", "sighting_of_ref": "indicator--897d5c6c-6b8b-4744-8e98-7119a9f5a433", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4680b05f-5ef9-4973-a8f0-b3a45027d6e4", "sighting_of_ref": "indicator--eb48ee2a-70c9-45d0-b429-5b690d3d93bb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8181fba-95a8-4ce7-8b72-b360ad7e1106", "sighting_of_ref": "indicator--a259653a-7efc-423e-9a6c-e08ffe6651a6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d22f5e-5e3c-4754-92f3-7c1d82cb4c4b", "sighting_of_ref": "indicator--dd4e1532-11ff-4ef0-acaf-b17671f95ca3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3576e2b7-4736-47e3-8a95-4c80484ba8dc", "sighting_of_ref": "indicator--e0c4d51b-07df-4959-b083-b3094a1714fb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7956b387-c498-463d-93a6-d32c301d1268", "sighting_of_ref": "indicator--1822c646-cac9-4b3a-a617-b164f9cce5ae", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95a5b16-43b0-48b0-8a2f-dc77fec965a5", "sighting_of_ref": "indicator--640d26c5-6c52-4880-9d96-dddd5aa12ec4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53633f87-b03c-4d1e-bdb1-f13339016ced", "sighting_of_ref": "indicator--6b48b3b7-a0fb-446b-adf5-0369cae3e7c4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18d20a06-aeb8-40db-8393-cd1a93a9b86f", "sighting_of_ref": "indicator--4be1bd6f-2d5d-496f-925e-af6e3717e452", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee714fbe-2a8a-4927-9db6-40b3556a7888", "sighting_of_ref": "indicator--0b53dca8-3d91-49b1-a906-20eb24166c32", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb2aa651-f18c-4c18-bf7f-a517a42868f7", "sighting_of_ref": "indicator--28e65191-2448-44d1-b9bc-a0b8fd82d258", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01a7d2f9-6743-4f1f-8813-6d83a1bf9b98", "sighting_of_ref": "indicator--f775b9a0-9330-4d70-b228-3127de588e51", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e14d9e5c-bcb8-42ff-b49b-7ffcd8510437", "sighting_of_ref": "indicator--4088eb39-3e70-42c2-a23a-3258f315792d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e01f87b-6acf-4d10-83fe-d7030d769f01", "sighting_of_ref": "indicator--095278b4-7cb5-4441-8315-30f8b75bbd7d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--105aeaae-0155-4e7c-9bd9-661100ee63db", "sighting_of_ref": "indicator--9ce0523f-9d80-4438-8ce5-6a54f6a887d5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bbc99f5-a83d-4ec1-9843-9946036e0b8a", "sighting_of_ref": "indicator--263803e9-70ef-4fba-a44a-e925850c9374", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dd57333-dc5f-4707-964d-5fae85572ef7", "sighting_of_ref": "indicator--a45e251b-c84d-42f6-a491-f380ecbd9b71", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e5cac5a-3fde-45fb-b009-b5bbc61c3def", "sighting_of_ref": "indicator--efa5ded0-e460-4d4c-9287-70532676abf2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c7652c-44f7-4267-b3a8-866066316d23", "sighting_of_ref": "indicator--12ff4609-8dc8-40a8-b2d3-12e9cd550c88", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a62ec05a-db40-4fae-ab39-d1b55b15a36e", "sighting_of_ref": "indicator--537a59ba-ebe8-4d5d-9803-1b8c03089afd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--150480cb-b07a-49e5-af20-c82871b7bbe3", "sighting_of_ref": "indicator--66b47e74-1ddd-4a6c-9d97-b9d1b8cdbf6f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2eb3ecc-462b-4063-a8ff-b756db07a9dd", "sighting_of_ref": "indicator--2bf1e209-850e-47fe-862c-6df4b46e234b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d9e0ab6-64e6-4354-b58e-d8bb4d366be3", "sighting_of_ref": "indicator--dfa4367a-0080-4285-af16-1c3ff7de41cf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--325ca6b0-49f4-4102-902b-0bec56639438", "sighting_of_ref": "indicator--a45466e9-c622-4ecd-bc73-eb7289786981", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d6a6c20-fadb-42cb-ade6-31f7fd524a1f", "sighting_of_ref": "indicator--70386952-4e18-496f-b320-958f4a018f2c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--821de6c6-25fd-4961-8564-3429daced93a", "sighting_of_ref": "indicator--d20f724b-d4a6-4884-9226-b5989c6de968", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed99aa39-fe70-4fc6-bbe6-6c87b6311914", "sighting_of_ref": "indicator--5b9b792c-e32c-4df4-84e8-3c8a9d133197", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4430596b-e2e2-4132-8d82-c36798e78e74", "sighting_of_ref": "indicator--2771b1da-e4df-4af9-bdba-b0b4b077e12d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--877f8b28-db53-4245-ad44-d7e49e97f3f8", "sighting_of_ref": "indicator--ad0671f6-618d-4e67-ad3f-865b0dcb7e12", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62d12295-819b-4276-8a53-5e9729d5d0a5", "sighting_of_ref": "indicator--e0f646c0-051b-4ffc-8836-e293368eecd6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49a4b470-ef6d-44c7-a9b2-640d28406a5e", "sighting_of_ref": "indicator--685ed66b-c928-4419-bfea-ca07b1625fe2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea0c0b4e-832c-45cd-83ad-f790bd610dc8", "sighting_of_ref": "indicator--2fdf4bfa-7b04-49f3-9ed6-ff7a9045bbdf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3614854-257c-447e-8402-b6be877c8c1f", "sighting_of_ref": "indicator--170eae93-5598-420b-9074-dcdf454bbf0b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37c30af3-7a11-43ee-bae8-b9e52df6feaa", "sighting_of_ref": "indicator--72442efb-db3a-45d1-baff-4ba908c9187e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9371b1d2-20b3-4304-92d9-af13cc250cdf", "sighting_of_ref": "indicator--a4a70611-c516-40f5-8ff4-8f8789a0401a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2367b4d-28e0-4355-aa69-afab05e22d6b", "sighting_of_ref": "indicator--969b012d-0635-4501-b901-b0a56754c34e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbb57a6e-3e29-4cb6-8689-3fd512da6f94", "sighting_of_ref": "indicator--007d151d-bf08-4411-a3a7-9e3920cdb822", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55d7e0ba-c126-454d-abd8-67460fe78b0c", "sighting_of_ref": "indicator--e020adb0-7515-4b1e-b5ff-c5e063a47002", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e6d4684-1b40-4306-a802-6eb8ec68fc37", "sighting_of_ref": "indicator--ee4f9e5c-f1d3-47ca-a56e-ba211e2adb45", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--605aa92f-c446-4f88-988b-48ebc6023886", "sighting_of_ref": "indicator--6a441cb0-04ed-4322-a835-964a0acbf7ec", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b679c3-d3ca-4300-836b-4f5f5f23c2ca", "sighting_of_ref": "indicator--6a015f28-2895-4d4f-9578-70673bc865b5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--196913b9-3fa1-4acf-a78a-e8571b21c599", "sighting_of_ref": "indicator--4a4a3864-4016-4132-a908-110b49965ef5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c768b261-c355-4072-a1e8-02ea11b91ce8", "sighting_of_ref": "indicator--442c4c1a-ee46-4a34-bf0d-331c406a0547", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c994c6-3850-4c87-b345-c087b091b66c", "sighting_of_ref": "indicator--77443d6d-5910-4fb1-ba98-23e6ab49d18b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71908bef-27ef-4b47-8514-6268abc5de6a", "sighting_of_ref": "indicator--b1f6abda-febe-49c0-a643-b21d913c0fdc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--076619dc-0b88-4b8f-80c6-8c4f54f4043e", "sighting_of_ref": "indicator--3a4ae032-8c7a-442c-91cf-f90e55328bd6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fec0fff1-4587-4a34-8f17-11daf3fb60cd", "sighting_of_ref": "indicator--407c3116-0ce8-4863-a55b-90c4350fab07", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b41cf77c-bf2e-4483-b312-ae5bfe9baef8", "sighting_of_ref": "indicator--660daeb9-b97b-4acb-82ed-6877fb7ded0a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f113f1-30ac-486b-9bf8-8272d9725a45", "sighting_of_ref": "indicator--24103ead-2c8a-46ab-9b7e-ade09ada6b28", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a8b2b93-7032-4345-acad-3a196da66d95", "sighting_of_ref": "indicator--33c6c91e-cb44-4fce-9c6d-c8ad092ff1d3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e507a45d-663a-442b-beec-171ad4060472", "sighting_of_ref": "indicator--52f13bad-af39-4384-9291-baffc59b55c9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--541881ea-7666-4cb1-9201-eae3524c16da", "sighting_of_ref": "indicator--33cc5a1a-1670-4628-b866-6c13dbca8188", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--704a239b-1220-4a48-8a0f-f586dc383003", "sighting_of_ref": "indicator--4a92d758-1178-4067-a6c0-61194a6ff64b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4cfb81c-29cb-4017-b7c5-08b90a62a1bd", "sighting_of_ref": "indicator--79c63deb-e941-4497-9f6d-64812dd6a86d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97c4718c-1439-4f73-a47f-e8e1a61e4044", "sighting_of_ref": "indicator--c56adad8-eefe-4984-905e-70de608caa69", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ac9bcf-ab37-49ee-aad0-8d121fd14768", "sighting_of_ref": "indicator--7a73e39f-63a0-4f00-b39d-f9afb7ac2771", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5037a26f-cc92-45ba-a700-021faad7ab6f", "sighting_of_ref": "indicator--d7e40107-c68b-4020-bfa4-b0b65eca79bc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92b4562f-0275-4bd0-8637-7f396ae1b710", "sighting_of_ref": "indicator--34280a51-f3a8-4325-a706-6869323dbd7d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de20a238-212c-43c7-a70b-c97541a8c09e", "sighting_of_ref": "indicator--48b07b44-ac90-4616-b2a6-65bfc1d1b266", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27ad25aa-fd63-41e6-900b-876ce36556c9", "sighting_of_ref": "indicator--21a5d7c3-f78a-4b46-87b9-53a27ebf0b53", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3926090e-f3dc-464d-9962-284b448e4768", "sighting_of_ref": "indicator--43df22cb-0503-4438-ab12-8a8938b6dc01", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--632e98f0-85c2-4de1-bc47-f87d44479402", "sighting_of_ref": "indicator--c4f2ba34-3957-47c2-bfb3-eb09726ad5d0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e18d720-8881-4904-9de5-6032ebb061e5", "sighting_of_ref": "indicator--a38101df-361d-4edf-9683-3448eee51d9f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12031e3b-a8e7-46f5-890a-a0dea10e4967", "sighting_of_ref": "indicator--e703c587-8a9a-4f71-a325-0710afcd9d6d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebfa53b4-62f9-4450-9ba1-02dd20703e2e", "sighting_of_ref": "indicator--b6e9926f-3bfe-4d51-8506-eb264120768b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b5fb24-ebaf-4670-9ce3-01fa45f343f7", "sighting_of_ref": "indicator--8c95e528-1062-47a1-bf42-0255f384060a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ec812fa-1f47-4e03-8504-1e59103ebbb5", "sighting_of_ref": "indicator--d0473741-73cf-4244-a711-700261c4f49f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b7169b0-aba9-4d46-9262-7366d90b9438", "sighting_of_ref": "indicator--ffc40d41-ed7b-4e71-bc46-2dd63ec120b6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--317df834-34a9-49e5-9cdc-c56dcd0b27ce", "sighting_of_ref": "indicator--bc09f36e-f955-44b1-b7ed-d28be777ca00", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a689fa86-1f68-432a-a844-3cdfdab0e8b4", "sighting_of_ref": "indicator--2b7505a6-d993-4de1-b1e2-75f13e12271f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fe048e1-6a5f-44eb-afe2-7020488d1bd8", "sighting_of_ref": "indicator--cb7d2bb2-33db-4193-b218-cc9d40a1c5f0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--920c07c9-c035-44f8-83c2-3942fdacc30f", "sighting_of_ref": "indicator--4dfec439-5354-4bbb-ba5b-81c47cb96ee1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a8ad80c-fa0b-45df-9c5e-5fefeaa618c7", "sighting_of_ref": "indicator--d1b4c458-d6e5-4d74-9bac-43434f96f08a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88a17da2-1613-4794-bac1-d762eb208063", "sighting_of_ref": "indicator--fd23617e-5a0f-4ab6-a899-7decbeef27bf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e89d98ab-9d75-433e-ac1e-8b761486163a", "sighting_of_ref": "indicator--064c8e6c-3f09-4a54-9e98-f424bae4d667", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a9fa331-2d66-45d8-b439-c0131a555397", "sighting_of_ref": "indicator--d8cf1b91-fbd7-4533-8ff3-627c86997240", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--404019ab-de2d-4217-9492-c9c6bab80980", "sighting_of_ref": "indicator--584305c3-e2e0-45ec-939d-2ae52107d80a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--211610cb-78c9-4bfb-898c-40bcbf56a821", "sighting_of_ref": "indicator--23151d85-91d6-4c05-be9d-811e868badff", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec639ea-02af-4d8f-a189-8740c9c15264", "sighting_of_ref": "indicator--63fb3bbb-61f2-40c0-a38e-d2eb8ed79ae5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--949df8ff-c462-469b-aa12-3e9076dd1b5f", "sighting_of_ref": "indicator--a202deaa-a1a9-4317-9cd0-169fe1f25dd2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b134e7fe-9bc9-4f41-a38a-7a93059b89f1", "sighting_of_ref": "indicator--cb3ff7c8-0da1-41c8-9f81-d1aaf4ed8e8a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a702b682-f1d3-4dca-92cd-6570b5ab6aa6", "sighting_of_ref": "indicator--7c9cb156-d6ab-49b1-b146-244f823762e4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dc91c76-fb47-4bf7-8466-d0ce83c5c8ff", "sighting_of_ref": "indicator--42de523e-56f4-4873-ad96-7dc09dbbdc67", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ec6686-0ab9-43b4-bc6b-c9b574ba3eeb", "sighting_of_ref": "indicator--57119476-6a41-475b-994e-0b01a983777b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd2aac1-4663-4d2b-a478-cc86e952c8b6", "sighting_of_ref": "indicator--ff6fed53-6eaa-496d-8df4-f5b634fee848", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a11ec7b9-fc92-454c-8481-d25fda543c8d", "sighting_of_ref": "indicator--c1a5e0f0-9b57-4f8b-9840-45d34fcaee3f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92f47f28-274e-4c47-9fc5-156f90f33cf7", "sighting_of_ref": "indicator--fc34cad3-ade1-4221-9180-08b39e3f504f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff0c69d1-9187-4130-9b6a-39b80f96145f", "sighting_of_ref": "indicator--b5e71200-9800-4973-8199-495b4cf82537", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48669cf8-19f2-4d02-97bd-a138a0cfa8f2", "sighting_of_ref": "indicator--ac93c469-ae23-4c5d-9246-fe65d17509f9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--256c99c5-5d39-4f8b-8a9d-0e0404aa0b30", "sighting_of_ref": "indicator--7eadfa5e-a833-49fb-b389-3a0c4e1bb71e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ea077de-3917-469c-848d-961955a17ce3", "sighting_of_ref": "indicator--b090bd3f-a6c6-4feb-89c9-79e48668fe3a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeae8549-2dad-4c66-9a8b-bb0ff73a137f", "sighting_of_ref": "indicator--e32eea76-8773-4861-b094-3e6af913358a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e7ad18c-3126-480b-b505-86a087eed714", "sighting_of_ref": "indicator--c2f731b3-5863-47df-a07d-15afefd3704f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69357cd3-28ce-4196-984c-b37e53b86001", "sighting_of_ref": "indicator--88b1e4ac-e9e2-4324-b17e-3b46858bf59c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f061d144-c80c-48ee-bf0d-5453aa840c50", "sighting_of_ref": "indicator--e0edae72-4137-429f-abc0-e52a540581d6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebe247dd-df0c-4624-b3a5-a9cb85f6a3f8", "sighting_of_ref": "indicator--7814be4f-a4bd-407b-a537-b41dc7bc8f94", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25311571-a9d1-4b4d-903b-9a631abd725f", "sighting_of_ref": "indicator--df5e7a97-7d34-4eb7-a4dc-92fee9e6202f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83724315-67d7-4299-a910-74e28b7ea339", "sighting_of_ref": "indicator--0594c86a-1097-4bde-83ff-44eaba3fd4fb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1f411a7-a816-4bb3-9b25-6b571ef78af3", "sighting_of_ref": "indicator--0928015f-497e-4e91-b290-2c0444f56a05", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c455262c-19ea-4b25-9e8b-1362000ca549", "sighting_of_ref": "indicator--3d321e43-e432-4e19-a611-9405a328199e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a9b06d2-d242-4739-b5e2-5c7d51972661", "sighting_of_ref": "indicator--055828e0-29c6-4d31-8485-97d7390ca774", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab070387-ff07-4be6-ab0e-45f7401ea580", "sighting_of_ref": "indicator--11683871-75dc-4dfe-9540-ab809e0eb86b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb484801-9ca8-447a-8718-56bda729e20f", "sighting_of_ref": "indicator--a0d2e3cb-e062-4612-ae2c-d7b929d167a9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03feb9fd-9aff-442e-b764-eb99dbcf3a12", "sighting_of_ref": "indicator--9194d8a6-930c-48ff-950e-b691ab8ac5d8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f8a455-6fad-4079-920a-33d2e8a98781", "sighting_of_ref": "indicator--7d3c5bad-a286-4864-a94e-06cead7f20f7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ee3601-c375-4840-a7fc-1af44cce2d3d", "sighting_of_ref": "indicator--c45aecb5-07cc-4c8f-a50f-8a9e156ee85e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68587d34-8a2b-4fbf-8dd6-56b82a006d69", "sighting_of_ref": "indicator--04514721-d188-4a74-ac97-e4c95b19b1d8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc73887-1248-4a16-b6f1-b0970e79bfe5", "sighting_of_ref": "indicator--133d78e5-8502-482f-b54b-92a4804a019e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b174fac9-189c-476b-b93a-575e1e974e82", "sighting_of_ref": "indicator--3a949dff-e60d-49b3-8f38-6694ccbb4d74", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ee91375-2989-4e60-b28e-f1a22c4258b4", "sighting_of_ref": "indicator--02e3480b-5755-42e7-9d23-238bcc20abc9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b317a893-65f5-413e-85e3-e9842fa6cf51", "sighting_of_ref": "indicator--103eb0bf-4555-48c6-8a3a-55bbd68ffd90", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ae70088-4eb7-48f6-943a-f49ea8e32658", "sighting_of_ref": "indicator--95e4746c-0d97-4304-88dc-4dd89064dd8a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb3462c7-8643-4b2f-b6d7-5263108fdd42", "sighting_of_ref": "indicator--22035b69-a87d-4d05-8dae-a472a03258e1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--605f6c29-c968-48d6-8977-0a362bf97099", "sighting_of_ref": "indicator--02d7901a-8cc3-4705-83c9-61ed41aca55b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13e19394-7ec6-4750-91f0-44bb7624ed77", "sighting_of_ref": "indicator--f809276d-b010-49da-99c7-fc3bec9fb2ba", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5e1c667-fb53-48ee-8323-6bb21b01f1ff", "sighting_of_ref": "indicator--6dc02f3f-b4f6-41f3-9c60-580b3ee476dc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03e64d10-dae2-4973-b49c-3b9611e62e1d", "sighting_of_ref": "indicator--36992486-07a8-4b7d-8287-c8a4594160fb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e50c608-a0ad-4123-bebb-ff24ea2fc0c6", "sighting_of_ref": "indicator--da267406-87be-43b8-84c6-f46fb9860a73", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe32fc12-7ad7-4857-9ce4-d16eb49a19f0", "sighting_of_ref": "indicator--7e56660c-1deb-41ab-8fd9-ffed81cd6081", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7cbd4b7-3774-47cf-bbb9-c6a24a4bfef2", "sighting_of_ref": "indicator--2a62e20a-a51c-4357-8f90-ac611b89d0b3", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f037bb6d-8b49-4a2a-8e1a-586c23cfa9fc", "sighting_of_ref": "indicator--87641af7-8007-4ca8-9129-2cd0a0f77eda", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad59e0c-c94a-455f-bba7-14762b787687", "sighting_of_ref": "indicator--264eaa96-9b98-468a-8c70-e4231c0dc3d5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d188f08-f9d1-46fa-afcf-511db1fd724e", "sighting_of_ref": "indicator--26e15bb7-8fbc-47a5-becd-bdc4196e95b7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d243fe91-a007-43d7-ba97-5c67fc55b7fb", "sighting_of_ref": "indicator--10899300-9d34-469f-ba25-7a1b020576a5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a04870f-a297-440b-a944-bc4cb2e99ed4", "sighting_of_ref": "indicator--495ed0f1-622c-474c-a395-b6480e0bfd60", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d349f255-8e26-4bee-888f-ea758e28835c", "sighting_of_ref": "indicator--ab903cdc-6f72-4a29-aa03-1c8103edd805", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee33f3ba-5c30-49ad-b1cc-cdf34fc3da0d", "sighting_of_ref": "indicator--9f7d6874-ce25-450a-81f7-806b07804121", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8205b5bc-7df4-41f3-aa34-6f1423c07ee2", "sighting_of_ref": "indicator--f04165c3-900e-4d5a-b023-c416e172581c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30d1d534-da4c-44b7-91ba-33e74e1a7708", "sighting_of_ref": "indicator--823528f9-a070-4d32-9b19-acdc0a78abe3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de60fb22-715b-4a83-b25f-0cb894f8a6ab", "sighting_of_ref": "indicator--b4ca630c-40f6-4320-b8db-f193ebd4ec88", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--413e59d9-5f17-4102-98d4-62fdf3059ea1", "sighting_of_ref": "indicator--915b9303-8795-4806-bdf1-c30b71e99fdc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--392639da-d882-4cb3-8af8-098b602db37a", "sighting_of_ref": "indicator--fa287359-bfbf-42c9-97e9-59451fac0735", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad489f43-075a-4d53-baa2-de5abc55a962", "sighting_of_ref": "indicator--5a3e49ea-2b4e-4e7b-929a-941857ba901e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb4552b8-2da4-40b6-9a42-3cbb626be3f4", "sighting_of_ref": "indicator--70fdff92-6362-444a-9090-ce5350ec613c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bedb622-6949-4d01-81f2-2baaeaf9a0a8", "sighting_of_ref": "indicator--b43bc9f4-5aef-4b41-ac71-36db7682063e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9c60886-7f81-471b-b80a-77efd40430f0", "sighting_of_ref": "indicator--6422a64d-92db-4d98-8d72-fb2807336043", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bda0aee-d9f5-4b8a-a484-0e0fad560805", "sighting_of_ref": "indicator--c7c473e3-e0dc-4804-a6a8-64f6099e2437", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feeb4552-0051-4d6f-83c2-82af53472632", "sighting_of_ref": "indicator--5155d973-57e9-44c6-94e7-d961261d1c86", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d509013-4c18-4ab1-bd05-8ea18ac3a10e", "sighting_of_ref": "indicator--eace7585-4a48-4180-8720-83d99b52c29a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d67445f9-5e81-453f-b6a1-85b9dae41274", "sighting_of_ref": "indicator--60e1a009-31b7-4889-8ab9-08e9f24df085", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--418cd718-2761-4d68-ac5a-511ed059fb87", "sighting_of_ref": "indicator--99468dee-c755-4b6f-990d-b283b9875115", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d63157be-dc9e-435f-ac5f-f7519b4fc351", "sighting_of_ref": "indicator--4fc62bc3-b3b9-4aed-b764-6762adefd42f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55eb439e-710f-41e8-81ae-41949cbb518c", "sighting_of_ref": "indicator--6b0a830c-ece0-4799-bbc0-2ae605b23e75", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf6649e-f2a9-4917-a393-c9be47265550", "sighting_of_ref": "indicator--82dbdfa2-6996-42d0-bcc0-eddfb6a9def4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96d24e03-c09e-406e-b46e-f521ee80d241", "sighting_of_ref": "indicator--41e48c69-d126-4a37-8b46-3371d6261149", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34622e12-e44e-423a-bf2c-66f50991b338", "sighting_of_ref": "indicator--81327027-0cbe-4529-ac52-67dd3a94e5b5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07583595-d94b-4b8b-a97c-0c610bcd8003", "sighting_of_ref": "indicator--a25f57d4-8812-43a5-a54d-79fa93f3fbe7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29ed1be8-e685-42b7-a98e-8cf48e07c2ff", "sighting_of_ref": "indicator--a2889368-29c3-485a-b51e-cd6a7b911de5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4706f61-04e5-4cdd-a9be-104d60c4e853", "sighting_of_ref": "indicator--2e38ec8e-4e68-44ba-9139-e6fd28737297", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6535514-1f6b-427f-bd03-b7caa73c2b51", "sighting_of_ref": "indicator--fa40d39a-53db-4082-83c4-c8d3e959063a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe6e9c35-1aea-40b3-adc9-bd0fb75bff9f", "sighting_of_ref": "indicator--f30394bd-9deb-486b-a924-22eaa149e123", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2e0976d-8ad6-40a2-9821-cf131c497e48", "sighting_of_ref": "indicator--6834bf66-e900-4ae0-8f3f-608e2c8a4fdd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7b088fa-c922-4cfe-a59c-182fbe46d4c9", "sighting_of_ref": "indicator--ab75ba37-a61e-472a-bbb0-2ad49f0cfe73", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5999d746-23ad-46e8-8acf-4a2caab6524c", "sighting_of_ref": "indicator--503fb2ab-6df8-40e9-98fd-63b42326685b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e9a9f3-0e29-4902-81c1-dba11a1d9a33", "sighting_of_ref": "indicator--4d647a8b-a808-4aad-b540-f9f55fc09f01", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca2144fd-8545-49bf-b062-bf2da00b3736", "sighting_of_ref": "indicator--fbc93dc4-3712-4f4a-a7c1-f8cea1d2b55b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ec81951-ad2c-4cf2-acff-b65aeb6104fe", "sighting_of_ref": "indicator--857d726b-3510-4234-a2ab-e126269a8e12", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8103605-0268-4abc-9e9c-b61eddcebe5f", "sighting_of_ref": "indicator--0e9921f3-29b6-4d0e-a76e-8843dcab9f3b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f433c312-b7ec-4b2e-a193-678a982f1832", "sighting_of_ref": "indicator--8ff94284-2078-4349-b180-9511c1a6ffb8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--230af4a6-1055-4181-9518-eaeaaee35237", "sighting_of_ref": "indicator--c3384370-194f-4923-96a1-eb0a602cdc22", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2db5a557-6d74-411a-ad32-07d63b570f33", "sighting_of_ref": "indicator--af10a367-8104-43fc-8f6f-6e96a453069c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c508ceb7-fca4-450e-ac65-5d567e65a62b", "sighting_of_ref": "indicator--aa27c3be-5250-4332-941a-a0e07f088b5e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f94359-2462-464b-aeb1-2259e83e54fb", "sighting_of_ref": "indicator--ac00dc90-b01b-4a47-9fa6-3582ac3442ba", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--299ebdce-afc8-4d6c-a8d1-075b166fd709", "sighting_of_ref": "indicator--4932e392-cdd3-494c-9686-8b42145a9249", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd32934-759d-455d-b317-671ffab286ea", "sighting_of_ref": "indicator--3d655739-4ec9-4aa4-bfbb-cc155515ba99", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--531481d8-c15f-402e-bb86-f30d81dd5000", "sighting_of_ref": "indicator--2d85b594-03b1-4662-a258-f333d940c395", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43c673ad-bc9f-4949-9d7f-7be1adad89e3", "sighting_of_ref": "indicator--faab9ccf-9931-4376-b2ea-37a6d6cf8a08", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd311bef-8d7f-4e23-95e2-de2bc66611c0", "sighting_of_ref": "indicator--9457ee97-5355-47d0-8b2a-ca23f37e85b8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae9c07c0-8ed7-4ebf-b9e9-e2ee4fbfd098", "sighting_of_ref": "indicator--71a423f6-062a-4a54-bb01-b8fdb332923a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3027acff-7956-476b-94ef-80f938575490", "sighting_of_ref": "indicator--3484ebb6-0021-4b59-9492-bf37883ed853", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--471c2b8b-8002-4a0e-945c-5f6018d36f6e", "sighting_of_ref": "indicator--6bc2cccb-a477-49b8-9a6a-27738c1e42ea", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9d4bb00-11f7-4a79-ae6c-4042bbb472a0", "sighting_of_ref": "indicator--dcb9b0de-7aa5-428f-9d9a-2b4b25a1ccaa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88db4f7b-c3a5-488f-9f84-62d83bcd101f", "sighting_of_ref": "indicator--5bdfd4c1-36ff-4731-b0fa-2a2340da84e4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a21ebd42-3e7b-4469-b864-4792a4fed0ca", "sighting_of_ref": "indicator--9e6e324a-96a7-4ce0-9dc9-e68435cd0d4d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76386b53-f629-4bc5-bd7d-160b44a1ba73", "sighting_of_ref": "indicator--174fb6d3-2723-428f-afe3-04cc369c4b65", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9f64eb9-3474-4218-97f5-d771299a2606", "sighting_of_ref": "indicator--a15fba99-1143-4352-874b-6fb651624e5d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e596f1d2-ec03-419f-b346-7cae468914e2", "sighting_of_ref": "indicator--9636df54-a74f-4299-bf35-1f20ee0f4ac0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d15fbe35-d74e-4ffb-b5f4-3d5c5a80a199", "sighting_of_ref": "indicator--e17e61bc-0c0a-4ff8-a319-6338983e8a1e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf536353-a000-4081-a956-e5af89ba1003", "sighting_of_ref": "indicator--1ba71f3c-3978-4136-ab8a-1f09432df0f8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee15c057-8600-4f73-bff7-b53c61cd6336", "sighting_of_ref": "indicator--99948963-2887-4a70-bcf0-8945cc8c8b6c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84c1b5c1-24b7-4484-a684-15ddddf3a504", "sighting_of_ref": "indicator--b582a6bb-ac29-445b-862a-183dd9a3eb57", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a36c40b8-39ac-421b-8cf3-020301a42136", "sighting_of_ref": "indicator--16ce0da7-4b4d-49a8-b1b0-ec80015313f9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9077556-3f2e-4a5d-a975-ed738d1f5742", "sighting_of_ref": "indicator--84fd8b5a-50f0-4ac1-8d03-ed685791c482", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61f27ff0-0de4-4bca-9573-9eca8fd67e68", "sighting_of_ref": "indicator--98f0d703-726f-43b2-bf16-23784b914a0f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22a4f87b-9239-4ead-8347-250560cca787", "sighting_of_ref": "indicator--bd928294-6685-4b11-a6e9-70dd7e03449c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29d23580-09d6-4bd1-a383-4734e3d7bb49", "sighting_of_ref": "indicator--052a5128-e426-4588-8b13-da70722579b2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dc914f3-950f-4ef4-88d7-d19e26a1af88", "sighting_of_ref": "indicator--96d4f28b-e8f4-4eb5-9056-969f325557f0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d8b5d0-c0f2-4476-acdf-c719a99c8904", "sighting_of_ref": "indicator--33516fd8-ce85-4014-9ffa-6a7b746ad3d0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb52659-1f76-4dfa-a118-1178d1f0fd54", "sighting_of_ref": "indicator--1c8b3159-44cc-44f1-9f65-c9012e7c0f9c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b30db95f-bb03-4eab-b0c8-502a2355e8c6", "sighting_of_ref": "indicator--beba5f30-de7c-405d-a489-a44ade07f368", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9dab3f9-e275-46ef-b164-7569a5c27b69", "sighting_of_ref": "indicator--9003ff96-f52a-4e55-bc9c-ba30f301a1f8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4d84ba4-494f-4ead-b99b-bf423c4ce3a6", "sighting_of_ref": "indicator--bef9d59d-e6f6-49d1-b60c-569feb2858f0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07398c35-2f30-402f-b26a-389abf05df18", "sighting_of_ref": "indicator--9fa7ee0f-d33f-44a8-b81d-a69470d76a91", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e237f4bb-4e67-4893-99e8-bbe098d82d86", "sighting_of_ref": "indicator--d89b697b-a156-4ba1-ad18-5d5300c79a8d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--052a6c69-c77f-4929-9d36-4c8146ba7888", "sighting_of_ref": "indicator--44c89f04-90a7-4e0b-9177-6cb32d0cd017", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e28d9294-e613-418f-ab32-aee596c5f1d9", "sighting_of_ref": "indicator--0335a7fc-1c32-41e3-ab30-221153eee4ec", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bbcf311-6112-4da6-b81f-9589b4f9eb27", "sighting_of_ref": "indicator--bbd4645f-1f9b-40b8-8705-0f91ef15766f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a41b6e70-7186-4d34-98bf-8b0626a27d91", "sighting_of_ref": "indicator--c4901951-8220-4a66-80d3-4365a803b61f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81ca1565-1aad-455f-a0a5-58e87bc79dea", "sighting_of_ref": "indicator--b5f89ef1-9c81-4bf8-ad13-9ebb81fb67c8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aba9ff4-5454-4cc6-83b3-969c4959a5d2", "sighting_of_ref": "indicator--f81b8178-de02-4872-a9cf-be9cae7ba697", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67fb81b2-8458-4b75-bda7-7c0458917201", "sighting_of_ref": "indicator--a6ae110b-d0b1-4f58-9ef4-b7b7fdd58ced", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90956163-2543-4bfe-b4aa-0562418994d9", "sighting_of_ref": "indicator--74ffe2cf-30c3-49dd-b676-823f10a4f9f5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5edf8d30-16ad-47d5-bd79-b113dd40b89e", "sighting_of_ref": "indicator--3d8441fe-4e5d-4609-8767-82ccbedf8b1e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b228459-046e-4162-b204-9438531f5b40", "sighting_of_ref": "indicator--b72e507e-bd65-4a2a-b4dd-f87a8317e81d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5515c3b-2970-4ad7-a138-dd8fa386508f", "sighting_of_ref": "indicator--0b23c62d-985e-442f-b6f2-6ef5bbbd09d4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba0a3046-966a-4d7c-87e1-065409c89714", "sighting_of_ref": "indicator--1369faef-62b3-4be5-85a3-8f234bcf5f9e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9608c761-be7c-4064-91c2-2b7ab46ffbc4", "sighting_of_ref": "indicator--6a87991f-794e-4642-bbaf-b7e4a225d032", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f285f462-af0e-45d5-b258-3d3a7c0306b8", "sighting_of_ref": "indicator--e0c4f30d-750a-484a-adfe-2a94eda8ebf9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8af89bbb-4cf6-4705-82a4-fc4691ca1c1f", "sighting_of_ref": "indicator--f33c377f-4e4f-489f-9812-0a2039722a0b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcc5e8f3-6bd3-454e-b5db-53c7726d13b7", "sighting_of_ref": "indicator--5a055ed2-8245-403e-adad-5f52ab305a6a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34041b3e-f8ec-450b-9833-f1d52d55c85b", "sighting_of_ref": "indicator--b3335b09-5143-4f74-815e-1385e686eef8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd79b668-2b42-47fe-a866-f8982a145bbb", "sighting_of_ref": "indicator--ecccb582-a6f3-45f2-ae80-ddf986e44b24", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50acb0a1-ae9a-4a81-8395-f51876e1fcff", "sighting_of_ref": "indicator--0c8c7c27-2c7b-430f-8657-b872978c013d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a7b10be-8ee7-4d3b-b997-b32558b4bbc1", "sighting_of_ref": "indicator--2140f4bd-eb85-4a2f-b5e0-e62d013cf49f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c6913d-c537-4e19-bba5-e645af5601ea", "sighting_of_ref": "indicator--4d0963e7-c3bc-4139-a151-0c88711f62b1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a1a130-775e-4236-9e63-5453faf9edaf", "sighting_of_ref": "indicator--c937349c-2e4a-499c-bcaa-a7a5df475678", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1c80165-7285-4460-a0a3-6c55c644c597", "sighting_of_ref": "indicator--a61523f0-8572-40f5-95ab-2565375e9223", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28dea521-31c1-40a1-9a3b-fde6e8254e5a", "sighting_of_ref": "indicator--1ecd2a7e-1b3d-4dde-b549-0e8f33417230", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f27cf4a-082e-4eb8-85a9-c12a72dfd004", "sighting_of_ref": "indicator--6fc3463b-f20e-41b5-8571-a42073f8a16f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8aa1f8e-6a65-41f3-ba26-470c880beeea", "sighting_of_ref": "indicator--d49c3749-3853-481a-8ec1-10e772b8cc64", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--666ee800-ee2e-4027-86e3-b2a87f1e740c", "sighting_of_ref": "indicator--5538e5df-d7f7-4a03-8fff-4d95b9236b22", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ea24432-c6ef-4583-8e25-ad6a923c69ab", "sighting_of_ref": "indicator--df048e99-39b6-440a-98b2-385af81ddd20", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8211b655-46fb-46d8-b2ba-03a849d6dfbf", "sighting_of_ref": "indicator--e017c807-197c-4830-9b55-07a0b961db78", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ed55db9-cb5a-4a6b-9f0e-32e5ba5c827c", "sighting_of_ref": "indicator--5f4ff4e3-f131-4a86-a0fe-b2535dc04980", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0e25e95-ac3e-4db4-ae7e-120e7727e9e6", "sighting_of_ref": "indicator--fc32b103-f4aa-4829-8bcc-9d0481e90979", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72553ae4-6abc-4ddb-8834-f6ab89a2a83c", "sighting_of_ref": "indicator--90498f46-5355-402e-b66b-21eab28e8769", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccca7e37-e8cc-4b4b-be94-4e6d8a070c41", "sighting_of_ref": "indicator--48685047-90fc-4ecf-ac1f-4da9f2dd1760", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14fda7d0-73ef-4820-8273-dcacc81bba02", "sighting_of_ref": "indicator--dd121fa3-5b2a-4e4e-a027-18277243963c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c1de8b0-d970-4705-b33d-2e18221224d0", "sighting_of_ref": "indicator--5ab7e3ff-8c39-493e-bb14-3890534e203b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f52acd28-d462-4f2c-8360-3dff96bc019d", "sighting_of_ref": "indicator--79fd0a8a-b32c-4cc4-b825-0ce99c4d6f71", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1ef0f19-3dac-462b-a702-31009ac8c13a", "sighting_of_ref": "indicator--7e791db8-b075-4cf7-bcfc-6a3f15f9c42c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7047eac1-69ab-4c4e-81f4-e61de1f4c73a", "sighting_of_ref": "indicator--27f5af0f-5001-4008-9e0d-1a6386419c22", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c6a869d-2e9d-47cb-bbcf-fa89c0e24d36", "sighting_of_ref": "indicator--195ccba8-65cc-4325-becb-a0e46fb0504e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0dee198-8b32-4793-ba75-225e1c8b986c", "sighting_of_ref": "indicator--44dbea92-25d6-4f7c-8015-ac4a1618c77e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71a31660-9b17-4b96-8c93-6c8c10e66c7a", "sighting_of_ref": "indicator--d726ab67-d247-4494-b7f0-b175e554daa2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77726158-77ed-4811-bbee-d2227b88db12", "sighting_of_ref": "indicator--f45dc868-f83e-4854-9cbd-66287c5ce7e0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be183688-6119-41d7-bdb6-e16f2a4cc188", "sighting_of_ref": "indicator--1a6ea402-58cb-439e-b0c0-a836cfcffa82", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d049d6f3-8814-4e4c-8aa6-7c8b652ab6bd", "sighting_of_ref": "indicator--05f84321-c8a4-494f-a583-ad10cf69904a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc9714a3-5fa4-4740-87af-efb876ef07c8", "sighting_of_ref": "indicator--266603c8-42f5-4e0f-ba88-07e575de37fe", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29b62635-1174-41df-93f6-1516074798da", "sighting_of_ref": "indicator--1f56fa8f-58dc-4946-94e6-a60e15b8f9a4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a748bfa8-cf3f-4d5a-aa8d-07ae04424304", "sighting_of_ref": "indicator--a420ae10-21c5-4b75-a5a9-5e27e3d32845", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8132fb6d-3e59-40a3-bd50-0e85653f0330", "sighting_of_ref": "indicator--6a766c01-3e1f-4465-873e-d1effa11e424", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5fdf487-b851-43b7-8455-74af20e75290", "sighting_of_ref": "indicator--33f1e1f9-1aad-49bd-a5d8-0c7d2d9aad80", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79dd7a6b-1310-4434-9d05-31d1e41dec13", "sighting_of_ref": "indicator--a4b1ad87-2d17-4557-a790-9ff812901369", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--026d0df0-7ecc-4cfc-81f0-e5e25acae99b", "sighting_of_ref": "indicator--501d91e4-1d44-4506-96d6-0f59483481f4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82d1cfbc-cc3e-40cc-9c07-1eae425c07c5", "sighting_of_ref": "indicator--36a8a6d9-cb27-41a5-af3f-03624e0d0062", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8b19918-04d6-425a-9582-e896276bf9e3", "sighting_of_ref": "indicator--837735ad-bf08-462b-b505-9ad7e6328222", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a260d11-81fb-4fc5-84dc-b8b9cf2dc9e3", "sighting_of_ref": "indicator--5794ed00-e81a-43dd-a056-5be44ba78569", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--265c0acb-71a2-4b00-bf37-9d51c1a5c084", "sighting_of_ref": "indicator--7197b4f0-9486-4b5f-8bf0-0d3acfbac0f1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf07544f-cf5c-47ad-9882-63ed9a89c51a", "sighting_of_ref": "indicator--3fb10882-7429-4e10-a942-bf9b99d6dd69", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62436f0a-156b-475b-9567-f6dbf8769b94", "sighting_of_ref": "indicator--73197c5a-a62a-47fc-8c6b-198ffb687062", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71f87535-d2bb-416a-b4bd-cb1b9ec3063c", "sighting_of_ref": "indicator--e63357e1-32c8-447f-a939-4aa0a1d0fd24", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ab25522-fb3f-431b-a799-f7dd8015aa90", "sighting_of_ref": "indicator--2f54bff3-1c9a-4a2e-9bb1-f365984002fe", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48277f24-e726-46b2-a6fb-a554ae94e4c4", "sighting_of_ref": "indicator--8579a878-d657-4820-9602-8e14dec5be3d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dedf4ab8-f452-4f1c-8a5a-85cccaf2d893", "sighting_of_ref": "indicator--5c3aefef-3ea3-480f-b828-284038547b0e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66f8970a-80ba-4053-9318-b208fc9d1071", "sighting_of_ref": "indicator--04e502ff-7440-416c-b686-daa1d5314277", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31c7e2d7-d834-4e3e-82e6-80349001a5d7", "sighting_of_ref": "indicator--bdd7d746-4d01-48c7-a892-0ee8c4cbc901", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c36920a-5bbd-4aa5-98ac-a5327bfcd0f3", "sighting_of_ref": "indicator--24bc0325-8718-4187-84f5-03d9c764cc68", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f2a67a-98c9-4b46-a42b-b14cd726bb36", "sighting_of_ref": "indicator--7a6ebf4d-970b-4c8d-ba41-01a1e9a7f75a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88f9286a-ca48-435d-9115-6cdb84d62a41", "sighting_of_ref": "indicator--1a9cc0a0-680c-4c46-b945-2738e5c32c58", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f18a56-5d1b-4545-b62f-92225315bc08", "sighting_of_ref": "indicator--44577d10-238d-4c9c-a4dd-79d73ab52c6b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d975781f-5d4d-445b-bf06-6b1da8bf597e", "sighting_of_ref": "indicator--178764ac-1b25-471f-a5d6-7e7765b5bdbe", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--684c15f4-1b83-4c84-b220-b946bdcff553", "sighting_of_ref": "indicator--ed0363bc-f23e-4802-8adb-ccac19cea808", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ed2501b-d7f9-46de-b13e-a88ed6fd40ec", "sighting_of_ref": "indicator--5c1153f4-3527-4222-aa49-493c05ebb14d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e4a62f-fe61-4f5b-9a91-b93d4e3c750b", "sighting_of_ref": "indicator--add12a24-8afe-4edc-81e2-ded13406a18f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90c03812-2a29-439a-a708-639397ce57c5", "sighting_of_ref": "indicator--d58f2fb6-97cc-4cbb-b48e-7521e7f94670", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1910f2f8-a1c1-4dfd-b97e-3e3f8b01863f", "sighting_of_ref": "indicator--7f6f1976-0eca-4ff9-a0f3-18c86bc9c7ba", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1367170b-03c1-4c39-8c2a-827829f80cdc", "sighting_of_ref": "indicator--0e5d2dc3-3850-429e-8b2f-5950d8b0f9da", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--785b547a-adc9-4ab2-ac6c-7f4ba6dc35ce", "sighting_of_ref": "indicator--da7ada57-4700-49ec-90eb-dd8c6a33b234", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee6d65c-35d0-4ac3-b48d-77b93c0b332d", "sighting_of_ref": "indicator--cc7e883a-029a-4d3d-9f1c-0034081d324d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9614d89b-cb32-430a-b615-76ca87534c1b", "sighting_of_ref": "indicator--9bb2eb54-c008-447d-b628-c60880b65ba2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--760e28ac-dbdf-45b0-b91a-b5b0faf3efe1", "sighting_of_ref": "indicator--79e95df5-3a81-420a-8abd-7eafb81b29c9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb9e712-3257-48bb-aa32-d5b6ff20db21", "sighting_of_ref": "indicator--4a360a00-ec0f-435f-b2bf-f0dc94dc7e4e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b822ecf7-176a-4ded-aed5-0af8bbb9b6b4", "sighting_of_ref": "indicator--f3b4584d-96b2-4ef4-8fd0-e312887fe07c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--872a8cf1-326e-4bf9-abb3-e4e6994c2d17", "sighting_of_ref": "indicator--2385e3d1-4236-4461-8172-ba714d716f9e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91004ae3-b276-441d-9ddd-adb806743a39", "sighting_of_ref": "indicator--552c9dcf-7ed1-4a95-8d74-cc187cc418ad", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c39112ce-25a7-4d35-abe5-02e216e0d481", "sighting_of_ref": "indicator--a22bc00a-a8c3-4e5e-948d-6581a04c6945", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ddc2d7-2abe-4199-a6c9-609f788227f3", "sighting_of_ref": "indicator--4a11a6c0-4fd6-4bc9-827d-6b8ea437eee1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3993b0fd-996e-4232-95ed-d929bb32069c", "sighting_of_ref": "indicator--38a66343-bf49-47d5-b2ca-37bd3c070b93", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8fdf606-9dd4-4992-b766-561951f7f101", "sighting_of_ref": "indicator--9b645cd2-0061-4c7b-9695-910f196a3a31", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f87ef02-82f7-45b1-acec-2c02c60c1347", "sighting_of_ref": "indicator--17f6aeb1-0abc-40a6-a79c-b2a329345acc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63081b5f-422e-4928-ad70-714b7d0e405f", "sighting_of_ref": "indicator--981246d1-407e-45bb-97c2-f7c03e7c0215", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29eea0cf-e5dd-4421-88b2-d230012906e2", "sighting_of_ref": "indicator--f97fd375-6553-4e08-8ae7-38c14a35a63f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c00cad-3188-4069-a6f9-6b1821ae0638", "sighting_of_ref": "indicator--7c67bd82-fce3-4dc6-8e9d-8f3305f2ea14", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71357ced-42c2-435e-80b0-fa669c7aec01", "sighting_of_ref": "indicator--943071fd-2d1a-46aa-800b-7f2b2e86f843", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ebe26b8-e6f7-4ccf-8ff7-498d099c40db", "sighting_of_ref": "indicator--8ad20431-d0eb-4afe-afed-f49e600d8b9e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0aed7a4-30fa-45b7-b907-236fb76d1013", "sighting_of_ref": "indicator--57e02c60-2ba6-45e1-bb46-7db07f28a075", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dc6ed03-b502-48f1-a1c6-234aafdc3f5d", "sighting_of_ref": "indicator--641d1f5d-ebb8-41ee-9222-a0eee474337e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9138c293-e33d-497e-b8aa-b0a3a24333db", "sighting_of_ref": "indicator--eba34d72-e211-4279-8b12-e5b1212423a3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4cbc6b8-f605-4572-86bd-0f55b28b66d4", "sighting_of_ref": "indicator--639e154f-1897-4ebc-969a-2115bb842869", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3684602f-0837-4553-8061-1a42b855312c", "sighting_of_ref": "indicator--fd9b05ea-f55a-4e62-846c-7a9893bdc967", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ad133d0-73f6-426b-b17f-aee3da071fae", "sighting_of_ref": "indicator--889dd985-43f7-427a-b480-3c5a2d75e46d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b954f75-0ace-4bdf-88d6-988af02ed055", "sighting_of_ref": "indicator--24870ae8-d598-460f-8010-9d795596abca", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e6abcc9-2f79-40c3-a401-81c6501c462f", "sighting_of_ref": "indicator--1dafbd0b-f571-486a-8f03-3baf4911a8a6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fddf5928-ef34-494b-ba80-ff554366ff1c", "sighting_of_ref": "indicator--98f33a9c-7aed-4f3f-bb21-e6359617342a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1329910-8db6-484b-b169-0abe89d39642", "sighting_of_ref": "indicator--326037b4-11fb-4827-8bd3-c67662a3d788", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc35d36-9e80-4e26-8b8b-491fa31c8168", "sighting_of_ref": "indicator--7ac1240b-fcec-47dd-86e6-85ae4a9fa877", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8893b84-7eb1-4097-a762-bbb270a0870f", "sighting_of_ref": "indicator--330ada46-1496-4ef2-a251-9f3b5e10c7f0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c55eaa23-8a51-4d21-8333-d745e871dab6", "sighting_of_ref": "indicator--7dfe2ec3-42d1-4762-912b-fc00b907c4c4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ba8aa76-89f1-4757-9ebc-868091bbe892", "sighting_of_ref": "indicator--d28fd6b2-6d8c-4cae-8877-cf38bcf90a58", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b71c8d2d-c42a-4cdf-8c6e-cb3ac5bcd0f5", "sighting_of_ref": "indicator--54b32c3f-7f9a-48bc-b76f-5fa4b1b15696", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd165dd-8841-4384-94c7-67727a04c90e", "sighting_of_ref": "indicator--b8561f8d-40db-4371-8cd4-2b4a15143535", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28edc571-acc8-4879-97ec-17e7ee183b7b", "sighting_of_ref": "indicator--0315dd8b-5b96-49d6-bb5f-3a9a74ec2a34", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ced891-efb0-4a0e-9f17-1722be46e3dc", "sighting_of_ref": "indicator--cfec6454-6e15-47ae-9072-67a8eeb5ca74", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b78bcf7a-e452-43eb-8be3-32023cb1b961", "sighting_of_ref": "indicator--a888748d-d8ce-401f-9010-8aebfa7ac27f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a220bc-49fb-416b-a5e6-1193c89ddd71", "sighting_of_ref": "indicator--89e13058-2471-484e-9090-c9a83ff7d078", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0575a87e-b520-4484-b0cd-d01c214afb85", "sighting_of_ref": "indicator--3bc431ff-86ac-450f-90d8-3c2ec5c7fc8f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9870a438-f351-4824-b9fb-b9f0dcdd9bd9", "sighting_of_ref": "indicator--c3c5e00f-ce03-4db5-8a98-dad3221b038f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dfdbb72-ea9b-42e7-936d-fd4fbfc07ae3", "sighting_of_ref": "indicator--352b114f-ba10-432e-90db-52e7cc84d1ec", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d977745b-4b68-4f5e-ba09-430f217862eb", "sighting_of_ref": "indicator--a3bdfd12-8218-4741-be83-6345467fea71", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1897ec-65f6-402a-a102-5c334aaeb8ab", "sighting_of_ref": "indicator--bc2bf09c-d3da-466b-a4f5-e884744e0376", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce88f942-c834-4852-a474-6ad8c60832f8", "sighting_of_ref": "indicator--06f5e52b-e58a-4086-8701-4dca96411ed4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c57a19-a718-4685-9527-85c4e4183820", "sighting_of_ref": "indicator--30fd3745-6970-4f8a-93a6-4d3430d30b60", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--231b5503-466b-45fe-bedd-fdd472647d2e", "sighting_of_ref": "indicator--cfe50c48-c8ff-4ddc-b586-9d521ce94db9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9dfd714-25c8-4cde-a677-9515290eb983", "sighting_of_ref": "indicator--38f3cf43-0824-4fd7-9cac-5fc6310b2af7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb08b234-56cc-4a44-b2dc-b7f26a08d1e2", "sighting_of_ref": "indicator--2644b97f-c21a-44a0-9f7c-de0fe28ab60f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd8cdb7-9866-4e6d-86b3-f08b4d7af9c9", "sighting_of_ref": "indicator--5c5c7d8c-ae1b-49c9-bfaa-6eb1051d956a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fa7bc0d-1f7b-49cc-8a4c-e4a47828671d", "sighting_of_ref": "indicator--cc672345-5d42-493a-a6e1-b02f82399d4f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f29af450-b9eb-49c0-8157-89921b938bd6", "sighting_of_ref": "indicator--4def9808-ac96-4d84-9b72-a374cc43ac68", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a09a09ec-14e2-4f1c-8969-acf6c19ea5e8", "sighting_of_ref": "indicator--90099f8a-9418-47c2-8e92-b2da71c6727f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d9fea85-3ddc-496d-b0f7-ebe3c3fd94e1", "sighting_of_ref": "indicator--1f4fdcb1-b2c3-4f02-b831-ca62eac9b8a5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--615b88b4-361d-4e6e-9b8c-e0cca3dc34dd", "sighting_of_ref": "indicator--2e68c4cd-c08a-4c38-9e89-1d792b8dc7b2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f49420fa-cc43-4017-b9cc-b3a2d222dd2d", "sighting_of_ref": "indicator--29b8d1f6-8958-4b12-b201-b4f3a63793dc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86300045-d74f-42e0-bf48-5a4ac7f0a0f9", "sighting_of_ref": "indicator--bb9ed80c-5f6e-4c26-993a-717af6699a8d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9beef08a-c2bf-46e0-acad-9bae3ba2af87", "sighting_of_ref": "indicator--86371877-14a0-4317-944d-2ba705759829", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe0ac3f-eeba-4b62-ac56-d5c919d9d7e9", "sighting_of_ref": "indicator--15b28c02-008f-46d1-bcab-fb76561f1ee3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b80860-ed97-4da2-9f8e-c0e9bec5cceb", "sighting_of_ref": "indicator--75bb19ad-adfd-4b2e-ad22-dcaf3aa2a112", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--515eca99-964d-49a4-869b-fa8858eafa12", "sighting_of_ref": "indicator--e709d9f2-d012-4a17-bd90-3e050fbd65d1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99c6c44f-39f0-4b38-ae02-1314dba11e15", "sighting_of_ref": "indicator--d38892d6-f304-42b3-90eb-3107190eed8f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61580790-46e5-4354-815d-419d19d658ce", "sighting_of_ref": "indicator--3efc23ab-ffce-4b38-a92c-f853db154439", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aca6f59-ce6e-470f-bea8-167e496fe9f9", "sighting_of_ref": "indicator--dcec0f78-4d53-41b9-801f-58b002440c58", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34848b3a-8c9d-45eb-b1eb-26eeb75a4cc2", "sighting_of_ref": "indicator--fd300dc9-9dfe-479f-962e-56bc6982c72e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb6c54a5-ce69-404b-a623-b23f2865ea8d", "sighting_of_ref": "indicator--caf27b73-1642-46ef-b102-7b2b7b41c7fd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac8ab962-0667-416c-937d-c49d00457e16", "sighting_of_ref": "indicator--9c8a916d-97c8-43b3-b3db-1dde78f3e89b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b93af1-ddcc-4364-b0b4-01f11ae1556c", "sighting_of_ref": "indicator--8bb6685b-2117-431c-8d72-3d21db8f2785", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7bae987-dbe0-4926-88ab-2154c89c2b3e", "sighting_of_ref": "indicator--ada12bed-1566-4980-8b0b-b2175877e6c5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20bd15c6-3be2-48be-ab94-b85566b13013", "sighting_of_ref": "indicator--4f267d87-20e3-4414-9b4c-402b64a0cc06", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e5ba1ab-d9ca-4a3d-904f-96588d29bffa", "sighting_of_ref": "indicator--83d6cf65-9f44-4423-8f00-07bd88cf4fd5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8be3fe5-6f8d-438e-92d9-ad246f765b00", "sighting_of_ref": "indicator--6c0c2d7a-9e66-46be-92f7-9da34cb10fc0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5d7f2f6-735a-4f84-b160-348cf8219353", "sighting_of_ref": "indicator--3177aa5d-1ee6-490e-b83d-08bb46b03b5b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7cda58c-57b1-48be-943e-f3947a712cb6", "sighting_of_ref": "indicator--906ccf95-6ec5-4dec-880a-c460c8d4a242", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e30c0a6-4a38-4a7d-86b3-567c86992f1e", "sighting_of_ref": "indicator--d8f8bf0f-ba24-46ba-aded-26a07ef71c5c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1664de9a-35e7-4872-ae82-a66e5dd809a8", "sighting_of_ref": "indicator--99751c7a-1821-4411-9f0d-c1a9e7934e38", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f84615c4-df27-4168-8e06-1d3eb8c927e9", "sighting_of_ref": "indicator--dab80d45-1c41-4a8d-8b98-5a9c9eb54d92", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb761d49-75cc-42c0-9f94-2c739e9bd526", "sighting_of_ref": "indicator--40068cfc-a02c-4534-b41e-f100df360390", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5ca9f5d-a8d9-432f-a8e9-ef56b9bee200", "sighting_of_ref": "indicator--291edfa6-e219-471f-a42c-c001ef89a8ea", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69819b14-adce-4d48-9e9f-e6df33ee7c91", "sighting_of_ref": "indicator--43fc9844-043f-4183-947e-f37088017590", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d18760b0-cf67-4d22-bf83-b7a6310ca7a1", "sighting_of_ref": "indicator--0393319f-c395-44ea-aa98-756ad341f736", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b91ee445-a2ac-4e7e-bb40-651925ddde25", "sighting_of_ref": "indicator--1856b063-d557-4a73-8e4c-13585c7756a9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e234cbd3-7101-4a47-81ab-7c93b89a4e43", "sighting_of_ref": "indicator--59396f21-66bd-4b66-82fa-4c95964999ab", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51cf30c7-2c02-46cd-bdf9-07dfa89436d3", "sighting_of_ref": "indicator--f7038495-7d38-4b93-ab20-d5acb2248c28", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc7e3f12-e0f8-49e4-9006-67c303f3933f", "sighting_of_ref": "indicator--4082b4fd-f2f1-4a1b-8c3c-cd703414f6a6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a964d804-ba5a-4ac8-852b-8bb7c69859e2", "sighting_of_ref": "indicator--17569b33-64d1-4d98-b710-a5fb80a54bc9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfea37bc-e54e-43fe-ab65-b1199b1c6d27", "sighting_of_ref": "indicator--1794dcaa-4176-41c1-89af-90ac42e46cc4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b3ebab1-a9c4-40b0-b3cb-5953be78319c", "sighting_of_ref": "indicator--67e48852-82f6-490a-8599-dca9f329ad6d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd2b3033-e5ab-4541-9fca-ff3db0032990", "sighting_of_ref": "indicator--b50cf724-3917-45cf-85c4-50313cfa645e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbc5a689-6707-492a-b735-d59163a75154", "sighting_of_ref": "indicator--53790313-e154-494a-97bf-55b6661e8c94", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8d71d52-da6c-4335-b2c6-3f8a941b9742", "sighting_of_ref": "indicator--404a55e2-7abd-48b4-b648-e72323f61a8b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d47569-4184-42fc-ae10-ad516f590c28", "sighting_of_ref": "indicator--65322cff-01fa-46aa-b721-1f053e72f1ef", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f64e5f-a832-402f-ac8f-a6970a6671a6", "sighting_of_ref": "indicator--6a667535-b2d9-470c-bb2a-0f9d8d22b9fa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b2b35ec-9a41-4662-981d-76f46f31d3b4", "sighting_of_ref": "indicator--9a211641-135b-4b78-ac49-4dec8e47453f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b5755b4-ae85-4867-823d-a0c97e2c82d1", "sighting_of_ref": "indicator--3c31b247-e983-4f90-8d68-43168e01c652", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01aae9e7-3850-4a52-bc62-8edfb96df4b6", "sighting_of_ref": "indicator--ff7bb23d-3e1e-46dd-a455-f452e1f681fe", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d38eaf1-4db7-4714-a6f9-16c77d30d7d1", "sighting_of_ref": "indicator--5c704d6a-e175-493b-baba-8a378dbcc1d9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d8682b6-35d9-46f8-b141-b061781785f3", "sighting_of_ref": "indicator--a3368da5-f0d2-4654-9797-560a4d8c5f60", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c94518c-49e8-4eff-9650-cbea5fd1e062", "sighting_of_ref": "indicator--fa280628-edc4-4f90-96df-d001a2fc5d18", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f3492bb-3a38-4e07-981f-6e23be1b1be7", "sighting_of_ref": "indicator--fa82dbc0-29c4-4c5e-9429-c60a67c6b70b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd0c582-b03b-4d26-a91e-25533367dd4d", "sighting_of_ref": "indicator--ea016070-1a3c-4bc0-92c3-7b75d35569d1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2994c549-fdc8-420b-976b-e4ede5c7bd29", "sighting_of_ref": "indicator--a205d3fb-e6b6-4aeb-9358-81272e92574b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b72eedf-5635-43f9-b7da-b0c6b862694f", "sighting_of_ref": "indicator--ac20947f-f8d1-49e2-afa9-a808d86cf54d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e00c572b-2d59-4e29-b98b-62d73eca1e50", "sighting_of_ref": "indicator--3ad55b9b-284b-4214-ad9f-01b8783b632e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ff19ea-935d-4765-861b-c6e58eedb9ec", "sighting_of_ref": "indicator--380ab746-630c-45f5-afad-80bf4f022131", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f411f63-f17c-4c50-852d-6500d29ced3c", "sighting_of_ref": "indicator--ceb4551a-0c76-4fad-852f-934c04d548cd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6c93dfd-7a8d-409a-a85e-7c6b38bf6bb5", "sighting_of_ref": "indicator--5ca7cc92-9447-4201-9e84-1242633ac7f2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c65d85a-fde1-4da7-8a31-e4f8caaa836f", "sighting_of_ref": "indicator--9e529b25-71b3-4083-8e0b-54ca8a85a3b0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65689dfe-109b-4c8f-a32b-14c95ee7ef57", "sighting_of_ref": "indicator--9c834ee6-bd8e-424c-8f82-fa0810a4bacc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0711d770-0b50-49ec-98bd-ed6d51d72593", "sighting_of_ref": "indicator--931a7115-4449-40bf-86c0-f31a5c74b927", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b65472-3963-4ffc-9b26-37843844c6fe", "sighting_of_ref": "indicator--93f46a6e-bff0-4abc-b225-84db241b8131", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9eb7e79-1ed8-4a46-a212-f827942344c7", "sighting_of_ref": "indicator--4552ba7c-43be-4ed8-b4cb-3cff96274673", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33663485-b21c-48dc-8be1-a7cc59853222", "sighting_of_ref": "indicator--da7352fe-da35-4293-8677-e4c802f54bb7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--755435c8-5e02-4def-a1b3-b19acfe0a0d5", "sighting_of_ref": "indicator--aeeb5226-324a-4782-a5c2-b3465ef92821", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4130b7b-d944-4f50-a5a1-cc19f77c56e0", "sighting_of_ref": "indicator--b7d1c09f-2074-4895-a046-f5364564b304", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb7d052c-3d24-4222-a0c9-045fb442d918", "sighting_of_ref": "indicator--a020adfb-660d-4b6e-87a2-752879285cd6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a95beb11-a78a-4c25-a25c-7605de6c7a8a", "sighting_of_ref": "indicator--776e9f5a-3087-4518-ac41-2d43e5956374", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f45cdc2b-d342-4a18-a1cf-878701aefea4", "sighting_of_ref": "indicator--e27c6dfe-0fc9-4e22-9179-9c0080606bb5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa337bdd-10c6-4f05-a783-8c16fd710ceb", "sighting_of_ref": "indicator--f1062cdb-8960-4be0-ba9f-1347bdde43d2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--552b2e51-cfea-493a-80ae-358d51d5e940", "sighting_of_ref": "indicator--acb67645-bf7b-4c29-b473-ffcf3718b58c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f88876d-fee6-4fb6-ac8f-043569df6f3f", "sighting_of_ref": "indicator--26e2fde6-0fd7-42e8-9dbb-ab7929eb88e2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ba7de2-376c-4dcd-928f-7395daed5dbf", "sighting_of_ref": "indicator--d7025456-db12-423a-8e4c-2ecc2b05f533", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb6bca2-72c9-48e9-81da-9a241c534cbf", "sighting_of_ref": "indicator--f1ce66ed-3f6c-419f-b5c4-05b67159d9a1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca915cf2-b32c-49a0-bdc4-226cbbaadc01", "sighting_of_ref": "indicator--ade63e45-ecff-4217-9bd3-0869dc6a00a5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b03a353-1b26-41f6-b035-e585dc958ca3", "sighting_of_ref": "indicator--518f233c-bb58-4699-855f-6a0f60484d2c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e69bbcc3-5eba-40e6-8eea-a40ab1146a57", "sighting_of_ref": "indicator--4e3196f1-979e-4c58-9827-a6b17f14e2aa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6f39b4f-b421-4afe-b7eb-475abb424c7f", "sighting_of_ref": "indicator--c33b8a33-47c7-4fc7-92f4-e74e7308dbff", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bab2b23-cc51-4178-9a76-02a2806c8d0b", "sighting_of_ref": "indicator--2c91f7fe-e831-442c-b1c8-efb16733b8d0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e6d0d0-cd17-4b52-ac46-233f36e054ff", "sighting_of_ref": "indicator--56869f4a-6b3f-4944-b3ef-83e8f8662188", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf356ae7-09c9-4d6e-be9b-0d5f8ab2b3da", "sighting_of_ref": "indicator--d76b2f0d-9080-40f8-b27a-dd2b0e44248e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a8173d1-31df-4b29-9395-0fb12b8a75b8", "sighting_of_ref": "indicator--6c78c840-f4dd-41db-b025-089f40802b11", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5315967-4dbb-4b1a-ab8e-5d94485e09ca", "sighting_of_ref": "indicator--034aa563-4aec-4545-a06f-d5d0439c81fa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b6670a-843e-4a07-a0ee-2ea900160aa1", "sighting_of_ref": "indicator--721a30fd-6206-48fe-ab3c-7d234436f9a4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce0309c4-95a1-45af-93bb-2f365f38986e", "sighting_of_ref": "indicator--e6e3b83b-1e8e-4696-8849-6df82732d1b4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01d2474b-3e93-4183-b4a7-e9ffcbd84500", "sighting_of_ref": "indicator--86f6d7c0-3c83-409e-90b6-27a9adecfef4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fcdc189-cdc5-46f1-b1dd-51d9d29e3a08", "sighting_of_ref": "indicator--fe88da26-65d2-4c49-af6b-9a654fe95c0b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbe882e5-8c07-4fc5-9fc8-1ede83672b70", "sighting_of_ref": "indicator--cc683c24-ea09-45f2-b641-884c0039d888", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10502813-2ace-4cfa-8dad-b9f6cf0395d7", "sighting_of_ref": "indicator--3e2e5a40-9eff-4e3b-861e-cc548016af42", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a329214-fcc8-4317-afd5-10638d1925b7", "sighting_of_ref": "indicator--107fda91-0944-477d-91ff-3d1d11e343b2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ff897ed-6b6e-4e59-a634-eff4ed55df83", "sighting_of_ref": "indicator--163768dd-051c-40b4-81da-6d98f7383477", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56d83242-ac03-434b-a4e5-b24a2baf621f", "sighting_of_ref": "indicator--79b1c639-42f5-4e9c-8d68-b7498a89cbcc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83657845-f69f-4bef-b85e-237474634e58", "sighting_of_ref": "indicator--7c1d47f2-41b4-4505-9f6f-142f41d9b200", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39f84d2a-ac1e-466d-963b-272df1993f06", "sighting_of_ref": "indicator--f39ca83c-853b-48bc-bf25-36b5e3b22733", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24abf943-1cf8-4937-abf2-c7452de2c680", "sighting_of_ref": "indicator--18ad0870-7ea4-49f7-8f50-82924f61afc9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6df06112-b701-45da-9a94-fb17040e6ac1", "sighting_of_ref": "indicator--e6c79688-acbf-4b9f-b2ba-3604f9429e4f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c863bc2c-4ad4-42bd-a117-836fb70d8a1b", "sighting_of_ref": "indicator--4dc61cb3-b861-4465-845d-1173244b25c2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d4e3a70-bd12-4bcd-a879-ce5c79864d36", "sighting_of_ref": "indicator--e07b393f-c043-4883-8472-d795cc86ef22", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4206506-bda7-41ff-bcd1-46494200f54f", "sighting_of_ref": "indicator--b6e51bc2-1b24-469d-931f-35c09b0555d4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93a21823-3072-4f16-bad8-1a564b71a4c3", "sighting_of_ref": "indicator--3b8cca01-8225-4eaa-8bb5-6740819c9955", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6b2bfe9-bae6-45ac-9cff-918ee06679dd", "sighting_of_ref": "indicator--ff089aea-083b-43d5-b4db-c335d10f63b8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e5fc1a8-af4e-45fd-8cf9-f62cba32b713", "sighting_of_ref": "indicator--ae15f83a-c617-4838-976e-2534a6d0237b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--241227e8-8a47-49a8-9af4-482a732b8dc0", "sighting_of_ref": "indicator--86af9769-d6c9-4453-999c-ff0d18888933", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63d21458-8b93-4d9e-8668-6d40d8e2a9b9", "sighting_of_ref": "indicator--f540d9b9-7ac7-45e8-9f09-6a4e0e1e56fe", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c85f3bb-3ce8-4441-b36e-620c6b3abd5d", "sighting_of_ref": "indicator--0b6fc1c6-7c66-4909-ab23-8f47ae25dba1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--599940ed-f1f9-4c11-9569-3a050bb75e61", "sighting_of_ref": "indicator--c663f7a0-98ef-4e98-be61-b3aea9704607", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--247a9fc3-2e4b-4399-a979-147d77c806fd", "sighting_of_ref": "indicator--b9ad44d1-b7df-4bf4-bac6-34e6b77bf12b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--774172ee-9ac1-48a0-aed7-39c0ad2a0254", "sighting_of_ref": "indicator--f19fe3bc-bcb4-4d9f-a8fc-734212046e9a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c1e3c03-ee3a-4286-b662-6544ce43aac5", "sighting_of_ref": "indicator--eed31f4b-ba4f-4fa4-ab0a-6e96f1fa1c67", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c48cadd9-d1a6-44b9-871a-0f74646c630f", "sighting_of_ref": "indicator--6a1d7315-c8cb-457b-9768-b0b39096a625", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6860a60d-2932-4f98-a1df-887b26955ea4", "sighting_of_ref": "indicator--d671a70c-b923-404d-97c3-bfed0e8a980a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f007a1b-7660-4c64-a617-bd65fcb50fb7", "sighting_of_ref": "indicator--f2a938b7-06b0-4c56-adcf-b10a5ccfb036", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7377b4d0-b9cf-4cd8-b315-a6dd13b4cf8d", "sighting_of_ref": "indicator--2160acd6-6bf7-4d85-9719-ead98189e039", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e4f9c53-4433-4f06-bdc8-cce38e85cd78", "sighting_of_ref": "indicator--523be2eb-7227-4f22-b3df-7f2f7f7beebc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c10a77b-def9-4fda-a760-1b992e335f7e", "sighting_of_ref": "indicator--3e3811c2-badc-4f26-a36b-caf139ea842f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5596b66-89bf-4496-b8f1-a641713f92dd", "sighting_of_ref": "indicator--f1e60124-d901-4a5d-818e-82ea387f3678", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a6a219-43ba-4bce-8916-cf40a6b023c3", "sighting_of_ref": "indicator--48934287-48b1-4c4e-be04-ed9473abcd74", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf1d0f9-9e9c-49c6-b5fd-d92c3357d3f0", "sighting_of_ref": "indicator--d3e3f729-d9df-47d0-b80b-2de6ca2e969f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3166495-429a-4913-bee6-09010a79d222", "sighting_of_ref": "indicator--504ba599-0ad2-4c38-bbc1-a91cbaabe6dc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d60724-7101-4280-9eb0-284b4d9a267a", "sighting_of_ref": "indicator--08d678ab-6161-415b-a525-31508285c658", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c69d64e4-c4a6-4626-8a49-11140d5e91f3", "sighting_of_ref": "indicator--7a0321ee-98e4-4418-98aa-c9ffdb478651", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e5095a-c9f1-4e22-8a4c-52f0696090a6", "sighting_of_ref": "indicator--b4023f4e-beca-4ce6-986b-812adb0da60e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f081602-2103-4215-83a0-bd0435876d94", "sighting_of_ref": "indicator--fcb2e188-da53-4ea2-b3bf-2323f3b15747", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c639238-22db-4102-bc5a-2c2cee6ddeab", "sighting_of_ref": "indicator--d85a3795-9d87-4b3d-9033-b6ef42e6c163", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f892844-0a7a-40ee-945d-044f04adf8ad", "sighting_of_ref": "indicator--7e84fe0a-3fca-42ac-9d55-e0eff1115831", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7237eb23-95dc-4e92-ae63-04d669c03047", "sighting_of_ref": "indicator--e08f784f-47d0-4884-b25e-a33a2c3e553b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a178b9a-0a00-4886-a328-72e72ecf425d", "sighting_of_ref": "indicator--b214e205-a9f3-4a05-bf39-c2ae22ba2f0e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97eb7876-94a3-4081-ac7e-810d0c9db280", "sighting_of_ref": "indicator--af204326-944e-4d8f-b68b-03fe05bebcc5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e903926b-7192-40ae-9cd1-fb63eb809926", "sighting_of_ref": "indicator--7be4fa9f-6738-4b8b-acf9-d3b80a9f13f0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5db8544-a081-4a44-a721-b6342a4b9332", "sighting_of_ref": "indicator--ca63930a-c507-4f8d-b680-3ced1f74ecb9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0511cd44-e85e-4040-b527-385bf33b94d9", "sighting_of_ref": "indicator--3d65d7ae-5b19-48e3-9ce1-3edc653bb7ca", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--802d29e3-0f27-469e-a6da-c3aa3e3df6a7", "sighting_of_ref": "indicator--baaf7e69-af5b-491f-975d-5f160a96f2b3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c782298-2ce0-476d-bb5b-e41f912d74dd", "sighting_of_ref": "indicator--868957c8-7826-4934-8e20-0ee1d9523943", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba5d0d4e-5672-4a22-acad-323a326b4400", "sighting_of_ref": "indicator--28293cd3-4541-4130-96a1-c757b5e5b1b2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a97ae1-a652-419d-b484-cf70daf456d7", "sighting_of_ref": "indicator--018e209e-b8a4-449e-a9fc-80c03844c9cc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c483be5-93d2-44dd-8597-9e4bab849f22", "sighting_of_ref": "indicator--92f28c5c-eef6-42f4-a593-3e8c62f75295", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93452a95-9509-4203-9c09-c2afb57a52d6", "sighting_of_ref": "indicator--742a6c3e-b614-4541-9c69-a01370e79fd8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a4aed5-b3b7-4d74-bb56-c4f415b3bb13", "sighting_of_ref": "indicator--0a8ad5a2-0097-48ed-84c4-3d50bfdea157", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b65f75f9-2102-4601-9d78-49189a85391c", "sighting_of_ref": "indicator--8ae595ca-8740-461c-8ebb-ee91a4d73bdf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c11c214-74f5-4e0e-ba30-7f61f951abc5", "sighting_of_ref": "indicator--7453b0c1-53ea-4aac-aa98-3596b43e4fb1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfcfcd8c-f0dd-447a-9185-4b2281fa22e4", "sighting_of_ref": "indicator--34059bb2-7414-49f0-ab9e-c9d62d0f62c6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91518f65-c462-4004-ab7d-1033ef39ad20", "sighting_of_ref": "indicator--7e8969fd-8288-4435-a9dd-1c2823a4c6cf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79c76836-f594-4774-a994-6e77fac587d8", "sighting_of_ref": "indicator--41836ce8-b653-468d-a996-268dac9899dd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc4a9ff9-7c9b-451d-868e-def498bc0b34", "sighting_of_ref": "indicator--1e95f242-2b75-4d52-a744-6f28135eb6d6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f98dff5-1d43-477c-b962-596a1636b019", "sighting_of_ref": "indicator--6633bb1c-e49b-49b5-8332-0dea584c1469", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3659479e-7ffb-4f45-83ba-95d00bea98eb", "sighting_of_ref": "indicator--5b055b75-c973-45bf-8686-fb56df8dad3d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5943d5f0-b6fe-4eda-b249-515252e63716", "sighting_of_ref": "indicator--d4083763-5645-493e-a224-c8aa4515b574", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32a198eb-74db-4d81-a9c9-55d73bc9bb15", "sighting_of_ref": "indicator--d1649846-3a55-40b4-bf60-4100a966eca0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a3fcf6-4ffc-4400-bb37-a41f07ee2bc7", "sighting_of_ref": "indicator--daf75e75-b35e-47db-a0bf-4f1286358c2d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe30d7c-8688-4559-9acb-e6235e348703", "sighting_of_ref": "indicator--231715f7-d2c4-406c-a4fb-ea67f633373f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f8b184f-f445-4109-b0a6-777990f5fbf2", "sighting_of_ref": "indicator--70dff808-1055-45bb-9752-7be2c28d36e7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8925fb30-53f1-4706-a602-2f3e1d752892", "sighting_of_ref": "indicator--5c75c18f-d7a3-4484-8f78-ed3793dcf995", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cafdd5ea-c8e5-4fd6-b3dd-55d5d9063a37", "sighting_of_ref": "indicator--68e6e436-e6c9-4971-b757-141b3860271b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89fba5fb-2592-4a7e-8047-ac6c50d00207", "sighting_of_ref": "indicator--e8acff8e-f2e8-4768-b4e8-bb50fee571e1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63003e55-debb-4ec9-b576-c0626e6661dd", "sighting_of_ref": "indicator--5769c524-025c-41c8-a64e-eaf1236f4b23", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f9b7e8-783e-42c7-bc4e-b312747ed5c5", "sighting_of_ref": "indicator--170fe939-e792-429e-99cc-652e48862cbf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e27bdad-7e4f-4070-b8da-366d9e04412c", "sighting_of_ref": "indicator--38cd00bc-a057-415e-bc6a-e85f437dd0ea", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fdaacb8-4416-477a-b0fe-eb0406755640", "sighting_of_ref": "indicator--280cc643-d102-455b-bf6b-b330dc35844d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3664c468-51da-41d6-9f60-1bf78c46c069", "sighting_of_ref": "indicator--abf3afe6-43b3-467b-b8c7-cabe1506392b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7264197-82a5-457a-8b1a-19ce0f298650", "sighting_of_ref": "indicator--f29bd187-ab96-4411-abb9-b90c458b6368", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8931aac3-f241-4de7-9b14-c8a618904060", "sighting_of_ref": "indicator--79dd10d1-cba1-450c-8ee1-f558785e3ab2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c0b9845-6464-445f-a9c6-7872b997005f", "sighting_of_ref": "indicator--979409d3-d209-42d3-a5d8-2dec81c7ba72", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55fbda14-83c1-47ca-921b-2923dcfe3ecb", "sighting_of_ref": "indicator--5d407806-f894-43e0-a9b0-cbfe41578268", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c72af7f7-a4b1-478c-83ec-bb9e7b574c5e", "sighting_of_ref": "indicator--853fe346-3c1f-4710-bf71-252a2ded621f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bbe7255-26d1-4ee1-b6a7-b356b5f8b298", "sighting_of_ref": "indicator--250e5c0a-f479-4899-b55c-23ce17251603", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b50805-b071-4631-b724-1ee07b6776cc", "sighting_of_ref": "indicator--7e264e64-8585-4f59-9f6b-661ed3d77a8f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c056ef-a76e-4664-b6cb-2da854791593", "sighting_of_ref": "indicator--08fa3866-d5cd-4d2c-a52b-0a1ce264dc46", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe24b8b8-eb96-4700-ba2f-523c26fc14a1", "sighting_of_ref": "indicator--cce8484d-d4ea-4736-a7dd-52fc4fcaa958", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6534ac5f-c506-4dd5-966c-552c9b690413", "sighting_of_ref": "indicator--a3724219-27d1-4acb-8e3c-d6b31d3ccfa8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85bbbb86-88b0-417d-a3cc-7f853567a145", "sighting_of_ref": "indicator--996c217e-b000-4f18-88d9-b03f4f201bed", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8db0b32-d551-4c7d-b49a-52f0506336ed", "sighting_of_ref": "indicator--13d18959-c2d7-4ea0-bbff-261b02137258", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c3ca331-c5ed-4a0f-a122-8f80b20710b7", "sighting_of_ref": "indicator--6906bf3d-09c5-4dd3-8a7f-7a7ad192f0d6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f634f938-4a7d-47b5-901c-f15440309198", "sighting_of_ref": "indicator--e0de438a-c965-4bdd-a1a4-6b7a216af85c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7fb90a7-2dc6-41af-b767-dcd0dfd0958f", "sighting_of_ref": "indicator--f898739b-e846-47ee-9e47-8ee20b3ad4ea", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf31016e-57d1-42f2-b085-e9770ba8e72f", "sighting_of_ref": "indicator--897093bb-76ed-4895-b7f1-5b4a7aee730a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d960d720-3117-4ec3-ad3d-04ed313f38d2", "sighting_of_ref": "indicator--6918de85-866b-46b7-9243-a88b04a20423", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49d3baf8-e627-4d20-a774-922950c5db55", "sighting_of_ref": "indicator--6cc1e80d-a827-4a9f-a046-2a8ddb9c2473", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--335e120b-43d7-41de-9ff2-d7762b3aa8dc", "sighting_of_ref": "indicator--ecc022bd-1a51-41db-a443-468384b725ee", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb9d234-2650-4c03-b408-6c0d7489c801", "sighting_of_ref": "indicator--d450a345-7dd3-4431-8826-63354aad94e8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35a7ef71-c442-4ddb-8f7a-1b9e40668f24", "sighting_of_ref": "indicator--8c04358a-9e9b-4a78-aed1-3a763c9e9988", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b72a3d-777a-4aed-a7c5-c55a9bdc6a25", "sighting_of_ref": "indicator--2f174d83-bf82-460b-9418-9dc339ac869e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--500c1f94-592a-4d79-9744-0bed4bfc9fc5", "sighting_of_ref": "indicator--92a91ef5-8ddc-4ba1-9750-2c30e02f33ed", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67f8d29c-e9c1-4304-961f-c5bc79166e4b", "sighting_of_ref": "indicator--54b7215e-f74f-4a27-9276-97b41a76ed97", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e31940a-70ca-4114-95f1-67bfd1259ca4", "sighting_of_ref": "indicator--b1e912aa-0b29-414a-8120-b8a40c23328a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc1ca479-b582-4624-80a0-99f4d2415ab1", "sighting_of_ref": "indicator--fd2d723d-dfbf-410f-aaef-3d1eae2d6a31", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2938987a-092e-4a21-a3c8-41b373ea570c", "sighting_of_ref": "indicator--c43a214f-23d1-4842-bf44-886eb5b11aa3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbb009f1-580a-44e9-9e2b-2e96801cb682", "sighting_of_ref": "indicator--f48ead07-fb21-46d6-ab4a-ee45f1b08da3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6327541b-f571-4e6b-bc53-343c20428a32", "sighting_of_ref": "indicator--9038629a-a06a-48fa-8bc6-dce5ad048af0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e3cd76-1ea0-4d43-9ff7-77e3cdce5551", "sighting_of_ref": "indicator--83a70f45-0a34-44dc-af9d-92f9a959cfda", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f7ef06b-732f-46c6-8dd5-2f5c07e6b398", "sighting_of_ref": "indicator--d9051ed3-853a-480f-9870-a8a58516cfea", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a07c0ab2-6816-4349-b919-17e2a84cadab", "sighting_of_ref": "indicator--5ab7218d-1458-4e76-b244-889ab539e215", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2255d40-6f69-4c62-81b8-9e3dd494ea0b", "sighting_of_ref": "indicator--439f7fc5-b7eb-4a7d-b7f5-ca3bf86d4bc5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af2d8aaa-082f-4ad6-9519-da6aaf39826e", "sighting_of_ref": "indicator--bac2a54a-cc76-4e79-b1b0-fd6f6e1ec98a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9a65847-5cd4-462d-bf8a-d43491a800ba", "sighting_of_ref": "indicator--df19ccac-6b42-4f64-b85e-dd7bde3dcd07", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6052d474-2479-44b7-afe2-eedf43a37344", "sighting_of_ref": "indicator--b8f2c1bf-1eb7-48a9-8fe7-1bc576d6158d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4beda7cd-c283-40cb-93ec-6a42d39ec05f", "sighting_of_ref": "indicator--d3ae078f-1faf-4165-98f8-40293045018d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6ec2e5e-29f6-475c-8db5-4cc2585bedcb", "sighting_of_ref": "indicator--2ac66381-066e-4158-8b77-34520c616710", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1acb794-1d3a-406f-ae80-ba0db463c16b", "sighting_of_ref": "indicator--895bc284-77da-463c-935a-3604d0b8242b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f256444c-053c-42d1-bb50-f1a5b0ea3897", "sighting_of_ref": "indicator--50583266-8575-4e8f-b5a0-d9734aa19665", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a91796-4421-4041-ab24-361c851baa39", "sighting_of_ref": "indicator--6f56432e-2b07-48a8-9a5c-ba91dee76179", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ae77a5b-ceff-423b-8ad5-9c9b39f47559", "sighting_of_ref": "indicator--780b0210-b319-4efa-8b3c-1f2a5f6b186d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e145490a-75ca-4d20-b2ac-b92e31c1dbba", "sighting_of_ref": "indicator--88c037fd-89df-4858-9287-9dcc839bbb39", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d74fa15-145a-442f-8720-86f7aa1a30bc", "sighting_of_ref": "indicator--9353c25b-f254-4c63-a541-2d39a06acc6b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8374440a-560d-484a-81ca-7337c7448e2a", "sighting_of_ref": "indicator--f60d0913-94dd-4aa1-9b31-c3f7efc85cd3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70c9dfa1-418a-4ca4-9b9c-0c9e9d1c1c72", "sighting_of_ref": "indicator--93bdd1e9-f19f-4e89-9605-970181a26299", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--129d3503-7371-47bd-be9e-41392c2099ae", "sighting_of_ref": "indicator--6dd1f037-26c4-419c-8f5a-222079a8d0a2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c850627b-40fa-4414-b900-fa7cdc8e4975", "sighting_of_ref": "indicator--2c40b90a-cc99-4576-8c2f-d7bd04118e3c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aeb540a-6f73-4a96-85ce-5fea9b66a681", "sighting_of_ref": "indicator--4356ae5d-b944-47ba-9cdf-6e0a99d8ff43", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6540ec10-14e8-4170-9505-46ac636e63c8", "sighting_of_ref": "indicator--86cdb19b-4156-48dc-98a1-1608870f0ca5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e7d1513-494b-4ff3-9f01-7744bc62b3af", "sighting_of_ref": "indicator--ea3ba893-7001-4984-9f7f-efc82f9bc209", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfa20059-7406-4aab-905c-caf4ad8b6a25", "sighting_of_ref": "indicator--7343ab40-dee2-4485-bff3-0700b29183fd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--762cbb03-17e8-4e27-ab9b-44cd9aa824b1", "sighting_of_ref": "indicator--cedb5185-b517-4bed-9046-71e7c61c96b3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12540a76-17f6-4526-bfbb-59fb048afe85", "sighting_of_ref": "indicator--76f81a3d-ef79-4e24-91ac-c56cb3de7c59", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4545dd18-3900-4c2a-9162-32b8edd431c4", "sighting_of_ref": "indicator--780414b3-9c29-4a12-89c1-85140ac2d417", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--028d20e1-5a84-4d24-8f1a-b5b82f0dd5da", "sighting_of_ref": "indicator--880b87da-715b-4b82-b5c1-c950b24d6202", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a3adf1a-83d8-4d0c-90c2-901d20ffa31a", "sighting_of_ref": "indicator--d8bedba8-c1f5-4f1b-86f3-1f94bb892e23", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5a5b0b6-bc09-4375-b8d0-e1ec681196c7", "sighting_of_ref": "indicator--4049543b-2621-46d8-b928-e17e5691a3f5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b5b9a21-ceaf-46de-a36b-d6ac74a26ba2", "sighting_of_ref": "indicator--fe4b4b0b-2173-4184-9cac-41718affa238", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bebb0524-9035-4644-a500-54c1e96f3a94", "sighting_of_ref": "indicator--281ad78f-b241-4903-81c3-3c91db59e58f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db4d323-2e26-48e9-8e83-8a898fc56ee4", "sighting_of_ref": "indicator--97182802-8e4d-41b8-a7a2-af4cdaff782d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05d13105-5c74-4541-b9cd-f9b4e9a55611", "sighting_of_ref": "indicator--6bf64050-84e5-4562-a22a-7e301863d259", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21031e0f-0f25-4d74-8249-e3376f0ab291", "sighting_of_ref": "indicator--88f849e1-7ea8-4da6-ae97-c5c308bd4a75", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb4b65c-f50a-400d-8872-3ac0ddfa96e0", "sighting_of_ref": "indicator--f7801909-6467-47ff-b5de-d6d3ed6c227e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ec3af7-bce2-4f3f-a1d7-969767415908", "sighting_of_ref": "indicator--9618c4cf-28de-4623-a8da-042e1bd032f9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ca477d7-5711-4dca-b8c6-fe36d4248b21", "sighting_of_ref": "indicator--5b1c143c-f0aa-4634-b38d-a0693d352846", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f993beb-5ab0-48bf-99ec-00abe620468e", "sighting_of_ref": "indicator--1c52c7e6-b725-410c-8d55-a4091c49ccc1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adb8ea5c-2c73-4586-8ba6-7dc98f8dd969", "sighting_of_ref": "indicator--ed59b450-57c4-427e-b3ec-2539bb99b477", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e993c4-14be-474f-82d4-109792535b15", "sighting_of_ref": "indicator--38028dd7-8f4b-4c95-93da-9c22ab888006", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8158d6f-2969-49d5-8abd-ab7a5300bc09", "sighting_of_ref": "indicator--200fee4a-c802-402b-8d10-2729b571973c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fff83a1-8700-4264-b19e-30a8d51aaf0c", "sighting_of_ref": "indicator--7423caa6-ed10-40c6-8756-28f808ff257c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cac1890-1ac5-4b30-952a-ec115ac3ff28", "sighting_of_ref": "indicator--5da310a5-1ae5-47d3-9b58-96e285b21b7b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d4086d5-e819-4c35-9058-56497907116b", "sighting_of_ref": "indicator--b0c33940-d80f-4000-9245-435b62bcd1b0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf0a2347-a07c-4d0b-afe0-9f30c2c52d1f", "sighting_of_ref": "indicator--90634457-0a99-4c09-aeee-ec22c7109daa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1541ee5-63d3-42c3-880f-c8235a3fac39", "sighting_of_ref": "indicator--45f2129e-1256-457e-a674-5d5b5b4273ad", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18232a08-2b2a-480d-9a57-dd92c2cf5bed", "sighting_of_ref": "indicator--cc20a39a-6f34-4641-92cd-945c7be5490b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ebbe3c-543c-45a0-b377-ab034801e229", "sighting_of_ref": "indicator--eef8ae1c-7332-4a02-ae1e-b29f5a2c3fde", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2a62a22-5da6-4a40-b11f-b4f8c725f39c", "sighting_of_ref": "indicator--152b1c6a-2a34-4764-a062-889a6c21bd06", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9fea426-2867-4edf-aa26-a3f517e0abf2", "sighting_of_ref": "indicator--acfe23b6-9620-499c-8b7a-e1d154293efd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e95a30e8-e580-42cc-bc06-bef3bb7158b1", "sighting_of_ref": "indicator--f299afaa-c0ee-49b7-8a2d-cd54494d231d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca83e597-d899-417e-b6a4-75a47443eb97", "sighting_of_ref": "indicator--9a377cf1-76db-45d5-81da-5e6e81a50e7e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50570052-87bf-469a-916d-3fc9a9873950", "sighting_of_ref": "indicator--b6d2d419-bc55-47b9-bf46-17afd07e8b26", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0d639d3-6242-496e-8805-913c23e7dfbe", "sighting_of_ref": "indicator--1720c397-979d-45d5-8c85-299b3a0f865c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79cc41eb-a773-4498-a1f1-181fe0b0388d", "sighting_of_ref": "indicator--d7cf85aa-7b81-4c2e-80dc-882eeb6d4b63", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0d60013-5a22-4882-a7f9-d8e384662415", "sighting_of_ref": "indicator--b246d4f2-1328-4496-885f-633994999e80", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d1e9d4-5502-4d36-af11-683fe2f96cd8", "sighting_of_ref": "indicator--a116ee84-45c3-4a1a-876d-23dfbe4b1270", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae84b051-7650-4794-9840-8d5c1ff4ef2f", "sighting_of_ref": "indicator--65db650e-26d5-4f57-a27a-364559821402", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--781223fe-23a7-4a93-a6e8-c20ebfae3621", "sighting_of_ref": "indicator--1c3075b0-b398-415d-a8ca-6531249280ce", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--116adb0b-d45a-42e6-9e24-48c53cc1cb49", "sighting_of_ref": "indicator--e83b83cc-ca54-41d1-9f6f-15ccdee828dc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5494cca-7e99-44f4-a940-d99ce799281d", "sighting_of_ref": "indicator--deb8a4c4-5887-4629-b424-6aefb3cf191b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f36c2a1-578f-4394-b9bc-8aa1fb7f8a8a", "sighting_of_ref": "indicator--914d88f9-0475-4318-85fb-c83c55a7e3f1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf621c2-8a4b-4b0f-b8ef-29a1a1f8db47", "sighting_of_ref": "indicator--e75ee492-41d6-4372-913e-a318b1bf2c62", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fe3e4f9-9cef-432d-bdaf-ad0939084677", "sighting_of_ref": "indicator--2b26d16b-7ca7-419a-aee7-8ce7aebcdb43", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd7ac82-bdaa-45aa-be76-ea36bdeabe54", "sighting_of_ref": "indicator--7c912a48-3475-4250-96fc-aab9d86cf879", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7dcdca9-9bf8-4a2f-85d4-a2f7999f7f31", "sighting_of_ref": "indicator--0f8eb60b-c07f-409c-8a43-3f83fcd2d65e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26294ad1-00e7-4bd6-8192-b97f558aecb6", "sighting_of_ref": "indicator--7610c222-9036-4a76-8c05-9c9880577f4b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ab60c08-b92d-4686-ae5e-2b5cb8a5b0d0", "sighting_of_ref": "indicator--f08b69f2-498b-4754-b804-791243e0092d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df8b264a-5966-437d-be21-bd39d9a73704", "sighting_of_ref": "indicator--438ff447-8c7d-432a-898c-edf99d5d9ac0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3e051de-c8bb-436d-97a1-8d4c7004a0fe", "sighting_of_ref": "indicator--fe916cd5-1250-4cf2-bdb3-204b90bb9ebe", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ea27895-5fc8-486d-a7e9-dd5abba18c0f", "sighting_of_ref": "indicator--b9da79e7-ae30-49d4-aad3-f2610af560b6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29b0f6fc-7bab-4e0b-80d7-87b0dd0bc841", "sighting_of_ref": "indicator--70b9fcf5-68ee-4396-b8d6-15eb72bf912b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--508c30ed-315a-4d60-a9cd-db5bd7ffa689", "sighting_of_ref": "indicator--bb4dca8a-9a1e-46ba-a560-afca6afcb039", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce7e28a2-befe-4c1b-8e14-511559dcb1c0", "sighting_of_ref": "indicator--38c98110-38fe-4674-83e8-01e5c122b1e4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfa969c6-c7fe-452e-b07a-009de2ad1eac", "sighting_of_ref": "indicator--9f7344a0-46f3-4766-a0f2-35035dff6c70", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4766a23c-6ffc-4568-b2d6-5655e98e06e8", "sighting_of_ref": "indicator--10bcee9f-f4f8-49e8-a5d9-30c0b261dccb", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fba4a20-c6ac-4a3d-8387-a8ad63f1bf13", "sighting_of_ref": "indicator--43dc5a57-5f69-43b4-bf2a-2d70f24c07f1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ddf547b-9f90-4554-8fa4-5f9593b64c7e", "sighting_of_ref": "indicator--47d9b49a-21de-4fb8-84c1-898d626ad5d0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37f21f1e-9a03-4acd-888f-4d5ca0af1eb3", "sighting_of_ref": "indicator--f1e464c3-3f3c-41e7-9952-2cea1e4062b7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9666db1f-3ba8-47da-abc9-aa63e69c352a", "sighting_of_ref": "indicator--80332119-d367-4c4f-a4d4-bce928f0dde9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--218c37aa-8d53-4e70-8ed1-0787625f87da", "sighting_of_ref": "indicator--296f5030-b5fa-4c6c-80ca-5e3a5d0f0aa6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c328bda1-886f-4386-bf21-36e999ef028b", "sighting_of_ref": "indicator--90631a90-1d85-4791-99bc-db3af9a3ffd2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4114ce9c-76f9-4ef0-b2b5-6d906d8fa03e", "sighting_of_ref": "indicator--30e10874-a2d6-45b4-8e5a-54a84d30bfc8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef51f06-a60f-41b8-bd3b-8f2d3712e8d6", "sighting_of_ref": "indicator--84c60371-dd37-4b79-9f92-368c46adb609", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36316566-81ed-499c-adf7-10d4b8cb1193", "sighting_of_ref": "indicator--2eaadc8e-43c7-41f3-ba27-1f8716d875ad", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f76d8416-ed69-4684-858f-66fe53c99e9f", "sighting_of_ref": "indicator--a0de1a71-e748-4dd9-856d-b257b6a04f11", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cbd86f6-f825-47d6-9e81-6b16ef5b0f88", "sighting_of_ref": "indicator--9abee19f-1718-4fc7-8a97-2fa968d1045b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34effde8-4ce3-4a2f-bbe4-a4e7bad03329", "sighting_of_ref": "indicator--649ce841-78ba-4a28-b21e-0a8b444878b9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7860a15-7fa5-4d81-b8fe-51887e213a4b", "sighting_of_ref": "indicator--f727cd05-026f-4cb0-9168-bd170178d3f5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e468086-16d0-4e2e-bb9a-53508e96e0ac", "sighting_of_ref": "indicator--48b34759-5415-44c5-a98a-57545dcaa5b4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e3f2e8f-c56f-481f-9ef4-43fec7f55f6b", "sighting_of_ref": "indicator--7b65fb7b-75ad-44c1-9a7f-50ee7bbbac0f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9820aba6-c48c-432e-9fce-cb275c51127d", "sighting_of_ref": "indicator--3c9c8e79-8732-4d88-8c98-a312415c9d32", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a571055-ddd9-4c23-82a0-a595d31c9820", "sighting_of_ref": "indicator--16cd32bb-463b-42b6-a814-362bfb0dff6b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff80268b-2840-4a27-ab7a-7f2254c68e90", "sighting_of_ref": "indicator--131b24b2-d339-4076-9bb8-fbae612a8f54", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--232d2f2b-eff7-458a-9342-60d94f056823", "sighting_of_ref": "indicator--5561b9a1-d607-419d-929d-389add84ed30", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7956d2f5-0f19-447d-aae8-3b5b5d42caf4", "sighting_of_ref": "indicator--dc97348e-df12-439b-a6d4-049cc36bf478", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ee883f6-5555-43eb-9881-dcaf86edf75f", "sighting_of_ref": "indicator--0d3e1742-beac-4219-ad95-8d1d27119ee8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40b81186-fafc-494d-b217-84c46221902f", "sighting_of_ref": "indicator--c9c4a248-fa23-438d-bef9-77a746d4c2dd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--592fc181-52fe-4ac6-9243-4517713a81c1", "sighting_of_ref": "indicator--f423b94c-4696-4545-b42a-5efa497960e2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a22d7e48-c14c-4b1d-a01e-a7b4567fda9c", "sighting_of_ref": "indicator--99e55484-43b1-4040-b524-42b919f17327", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--212519e6-5d0c-451f-b755-9bee53160861", "sighting_of_ref": "indicator--bcb5b388-58c6-4d84-9dfa-b6b68cb2b003", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03c7850b-adea-47ad-82b5-00f4a57dac9f", "sighting_of_ref": "indicator--9ff14568-117c-4616-9fe9-2aa47886ae63", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f83ebd2-92a7-44d5-a684-21875777a09f", "sighting_of_ref": "indicator--46aaea64-efa1-4d61-8c74-3bdd9f98e664", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1467575b-96b7-41ae-a710-09d2d2b5e80d", "sighting_of_ref": "indicator--f58a6a9e-a2a1-481f-b696-7489ae9fb8d2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cf05785-f88a-4b0c-93da-ada95a68de03", "sighting_of_ref": "indicator--7c5c9202-7819-4936-a58d-b675cc6338af", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--059a07f1-8056-402c-bb1d-d977c4527990", "sighting_of_ref": "indicator--9c0c2146-690f-4420-9383-d2802922ee04", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1a94c24-56b9-4c8a-97d2-43dbad7a4e16", "sighting_of_ref": "indicator--15c6540d-fbe4-40fb-a712-1143ae2188a9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9d6a51e-dd9a-4c96-b2c8-d49927a4935e", "sighting_of_ref": "indicator--e99a3bd8-d3b8-435a-8516-9dd8595e741b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00030f87-378d-4c71-b7da-55729386a0eb", "sighting_of_ref": "indicator--212087b9-0cde-485a-907f-d121a824da32", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3480336c-7a3e-4487-a339-58124e299ca2", "sighting_of_ref": "indicator--bc20c342-e284-4c2b-bdaf-e58f35570ca6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e7803f5-29e0-40fc-8395-d6eaebbee49f", "sighting_of_ref": "indicator--68613353-be8b-4ed9-8260-2faf3f8063f5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda766ac-1a3b-4aae-b48c-9f45c0777ce3", "sighting_of_ref": "indicator--177da7f1-d40f-4324-b0c1-8f664ced7716", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f13dfbe8-29e7-473a-88b5-cf7aa43414fa", "sighting_of_ref": "indicator--d928618a-eacf-49ed-b49e-90346161bbec", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9556b209-3a9f-49f4-915d-e5c3de7b9fdd", "sighting_of_ref": "indicator--007a2582-45d8-4f1d-ac7e-1077a6b29052", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5e12a1-8fef-4df3-bb5d-a8b7f2013878", "sighting_of_ref": "indicator--a9d94a06-b6c7-4d57-b572-55464eb30867", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56108abe-4b7f-427f-ad2c-d551f5b9309f", "sighting_of_ref": "indicator--59539cd1-079a-4d9b-bb49-4501eda5616b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a20f025-7e41-47bc-b4b0-36b06780a162", "sighting_of_ref": "indicator--63ea95dc-a805-43eb-938f-647f5b2073cf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d3d46c3-8ef3-4b0c-a686-929012d66c68", "sighting_of_ref": "indicator--e654b1c8-b8a2-42c7-8ad9-55b241aff54e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd7e0789-236d-4c67-b915-a57bb281d261", "sighting_of_ref": "indicator--3c097a4f-1d71-401a-9ee3-f12f296ff264", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d137a21-94af-4438-aaed-6f02a612cd32", "sighting_of_ref": "indicator--1398c5d5-83b9-4205-bda2-313e39973892", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d0f38c-5b63-40eb-93cf-42701cfce590", "sighting_of_ref": "indicator--89c583c5-6b0b-4036-b451-0051ef40d63e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--722cd995-304a-484f-a303-644dd195c598", "sighting_of_ref": "indicator--761bdba1-ef08-436f-9a38-b3b9804dd5c8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dad62918-5af9-4315-9f5c-6cf74df16e9e", "sighting_of_ref": "indicator--206658d2-30dd-4f10-9cfd-0b144adf6567", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e43447b-ddf5-4e25-b1d2-673dab0bb285", "sighting_of_ref": "indicator--8a480b49-4f9f-4a32-9e3c-c6d9d8528bb3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--895ff5cc-6a43-478f-85ce-dddc1384090a", "sighting_of_ref": "indicator--e73f558b-cc4e-4460-a0b7-4e845f78ecf3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fc18968-b6d1-4dbe-ab45-07329a9fb27e", "sighting_of_ref": "indicator--8053e8db-3aa0-4b71-9358-0f42ee652a3e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e41a449-1c5e-4744-91eb-1f2c5bf10bc0", "sighting_of_ref": "indicator--a2d0fa8b-48b0-414e-9f53-a25d1220db88", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--462a6930-f20e-47f2-a0dc-a12f0c571677", "sighting_of_ref": "indicator--704d93aa-d6b0-4817-888e-0dffb4e58b96", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7434760f-55fa-4018-8076-1cb1bc9b7eaa", "sighting_of_ref": "indicator--49e3a82b-9342-4629-9255-0156dbd2bece", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40e7d7d9-20b3-40f0-9751-7092b58164da", "sighting_of_ref": "indicator--bad49aef-d522-4637-8a27-d621aec6971f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2534d032-0baf-4a60-995b-134c4f4540e7", "sighting_of_ref": "indicator--da6f23f0-32cd-49e6-8709-7e690fcc2d01", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd64eb8-321b-4f23-ac1b-eff288a65f0e", "sighting_of_ref": "indicator--6d8da886-6fc1-404b-a05a-c030513e97f1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c7bd42-b0c8-4f29-b1df-5cf890b3c2ab", "sighting_of_ref": "indicator--960f29b6-6011-4eae-9284-3b883b7cbad1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffae32f9-cfd9-48bd-8473-412e07ae86de", "sighting_of_ref": "indicator--13e87cc3-6117-4634-9f4d-94a909204911", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee1814d-7f59-42e0-87fe-ee9ef8a18cd9", "sighting_of_ref": "indicator--0a0e9462-9cb8-415d-aa33-3450728da131", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1013b539-1f14-4f1f-92d8-aceffd8966cb", "sighting_of_ref": "indicator--410ad01a-f21b-4b0d-ac26-8b3a9e8a6a83", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d79d808b-4571-4b18-a2bc-1088a8c162fd", "sighting_of_ref": "indicator--0a263876-52ad-4731-8a75-66caeecac389", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da68b23a-9fd1-4037-adeb-385462391cb2", "sighting_of_ref": "indicator--74f1eabb-7a41-4451-948f-80954a4e88b7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--916d1f0c-cfc9-452f-a55f-88d74c659f8c", "sighting_of_ref": "indicator--b7e8f362-8ce4-4a05-827b-d8fa6145b61a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--047d0a6a-7c3e-45ba-884a-e721fec0cfb2", "sighting_of_ref": "indicator--cee5f33f-cfa6-4b93-9d88-f14a836ea808", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02f41bc7-855b-4e11-bb79-c869381b8244", "sighting_of_ref": "indicator--d7101251-273a-4362-b1ca-844b341fd75f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed946872-010f-49ed-a581-ee53ae03661c", "sighting_of_ref": "indicator--e461003b-691f-48f9-9b6b-b6e9ccae9319", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50f69430-c8c3-4850-9db8-7f27d2351c75", "sighting_of_ref": "indicator--3b1f0faa-cf8f-4a06-ad7a-dcbc27edf9de", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--679c979b-f04e-4f18-bb95-027b60230b24", "sighting_of_ref": "indicator--d0a999a7-91da-4c54-a39a-28041a9119a2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bed986d7-a3b5-4605-8981-77c1ae7b6807", "sighting_of_ref": "indicator--7d99d409-98c0-46e5-a738-522d770a15f2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a6af9f6-18fd-476b-a98c-fb06c0913355", "sighting_of_ref": "indicator--6e354541-b575-48f9-97d1-afc79c02c085", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d63ee0-538b-4729-bd2e-9c04c1bb63fb", "sighting_of_ref": "indicator--e823d18b-9c3e-4872-a060-6f2130f5759c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40605525-56f7-4f16-857e-a28d2d800948", "sighting_of_ref": "indicator--825ad83f-2a05-4814-b01a-2c7bef116d99", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55ac27aa-8ca6-4126-b502-62b2c26e32bc", "sighting_of_ref": "indicator--5f303514-1211-46f7-8abb-1cc5dbb57bc7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fbb989f-ffe1-4b6e-a467-3a974e57fcc3", "sighting_of_ref": "indicator--3862fa67-2466-4aff-a0b5-0a52d4b7311b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e1a971-d73f-4e32-b9b6-7e586a47c6f7", "sighting_of_ref": "indicator--6ececd4f-f04e-4998-98df-2af495365923", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed7ddd06-e59e-4c1b-b119-d54fdc8229e9", "sighting_of_ref": "indicator--f4b7cd13-1cb9-4781-9fdc-92ae81752e55", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a9f640a-3903-41e6-a690-ab6beea8d77d", "sighting_of_ref": "indicator--c489ae21-1387-47eb-885a-7909102ceeaa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f12b84b-0042-4206-840a-bf14a4d8c960", "sighting_of_ref": "indicator--157697d5-4745-414a-a2f1-0adc0f12f48c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--637c9fa8-a195-4014-8155-6036264b0d91", "sighting_of_ref": "indicator--ac514bb2-c4e0-45a8-b0f5-05518ad3bd98", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a24fa88a-18f3-471c-a648-db113e88f99a", "sighting_of_ref": "indicator--c605d7c3-8a58-47d8-9964-c49a8ac88e16", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d8f88ce-59a6-43bf-95da-27114b04a5d7", "sighting_of_ref": "indicator--83a745ef-5458-46e3-9223-14150f95088f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd9c4054-98d3-4249-9920-3b42d4968737", "sighting_of_ref": "indicator--9ae168fe-9f63-465e-b7e9-9bd9a543e4da", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3ca0d06-9d6d-4b1b-ba54-a8263501f8da", "sighting_of_ref": "indicator--63c5fd68-f34a-44b3-8cbe-6b44c2e61b91", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b0a1ca-124e-47d5-81b0-3990e87b8f62", "sighting_of_ref": "indicator--706396b9-c0d9-43d5-b2fd-a65f0bf53bd4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb963c2-5769-4540-9722-7523d95b8477", "sighting_of_ref": "indicator--b601f244-13ae-491c-86da-b98a908da680", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c3191a-11b0-43fa-9427-749ea93efe15", "sighting_of_ref": "indicator--2f0fe92d-a917-461a-bd59-4ea82565aa94", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f118f6a-bc85-47f7-be8a-2b1b95b09788", "sighting_of_ref": "indicator--292612fd-3728-458f-a9a7-47ccfd4dcb89", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ca8c6a-c642-47ac-976e-43217e996030", "sighting_of_ref": "indicator--c0f41a97-2531-4d62-85bb-dab99cc0e457", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4a5d22a-29ad-4282-88d4-5d9a4b2837c6", "sighting_of_ref": "indicator--4b9d8549-8f43-4fed-9848-3b5c2000651c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6358b129-256b-46ae-9e51-00ff260c4984", "sighting_of_ref": "indicator--4b3636f2-16f3-47f3-9586-48ef28c567f5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad728ef1-f546-4791-9511-130d17d31a9b", "sighting_of_ref": "indicator--13295295-5470-4c56-b5e4-e6bce68dc8fb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0742f809-8691-45fe-b599-58427995da44", "sighting_of_ref": "indicator--699c233f-de2c-4853-9999-3e5fb453d706", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ed3607c-6714-402d-8e43-44865ed603dd", "sighting_of_ref": "indicator--5894b60b-5cf2-4f6a-b8aa-8bbeadf86e30", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b8f0525-4898-4a87-a62f-c043f624392e", "sighting_of_ref": "indicator--5be246c1-3fe3-4649-a336-20a713dfae1e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b63f4a44-6a16-4da6-a30d-f55db6d0da47", "sighting_of_ref": "indicator--3e0619c7-c433-4281-be4c-2db9d0c625fc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c49b25b-865a-413b-80f6-5a7befa2c4f6", "sighting_of_ref": "indicator--35bb891e-1e6e-474d-b71b-02bed0b1f759", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8b6ad85-664e-4542-a8ed-ef24f10b461d", "sighting_of_ref": "indicator--ad9aadfb-d85f-4fbe-b726-e61532a0c178", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27fb569c-d2b6-4fed-a940-dfff5f2c21bb", "sighting_of_ref": "indicator--8d92e4fa-c3cb-45be-b79c-042b95604af5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e83cfd6b-c812-4ed7-99dc-ee5577ca98d1", "sighting_of_ref": "indicator--e90fc492-0d39-4573-a817-73121a3fa1fe", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63913db5-69cf-40c1-99be-19528c106f08", "sighting_of_ref": "indicator--3bfde503-61e1-4936-b990-c1198b74db0e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac2881f8-e0ea-4805-8897-3ccaa661d876", "sighting_of_ref": "indicator--8c324463-3434-4198-915f-41b134c6bdd1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4446690d-fac0-44c5-85a3-09805e6e635c", "sighting_of_ref": "indicator--4c2fff00-616a-435c-9ef2-06695d1a67cd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d008634b-86ba-4c3d-b96f-1dbd7add49e7", "sighting_of_ref": "indicator--e17e9986-70bc-4b53-bfa2-c8c21b24d79b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f71181f-5f95-45d1-9e51-b570261f3140", "sighting_of_ref": "indicator--59d04db5-c2ba-4ad2-aac1-17605d8db9b4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c03baf-32cb-4b69-bf76-445bc49c0db1", "sighting_of_ref": "indicator--cde5029d-7576-4b96-b378-42c0edd5f5b9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce40c2da-a83a-40fe-83e5-5b1926df2577", "sighting_of_ref": "indicator--1f33562f-ac4c-424c-854d-4ba9c8a0e383", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b5bc547-12ff-4410-b58e-4bc9850fe301", "sighting_of_ref": "indicator--1236ce0a-b2f6-4b9b-877e-3c13072b818a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1462e540-9eb1-49e7-8151-eb92d83cca1b", "sighting_of_ref": "indicator--5c027b37-5a60-4507-b4fc-afd93dd07e3b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--003a1356-e0bc-4507-b117-49581ea68842", "sighting_of_ref": "indicator--6c89eb67-77bf-4edf-a180-90c7505a3f82", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13072dca-1f9e-42c3-ab3e-e0a166f5095d", "sighting_of_ref": "indicator--b0ba0665-cebc-44b4-8bcd-f43eec8406d0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f3366c5-acd5-484e-9372-3fc692410477", "sighting_of_ref": "indicator--d6120a8c-c9f7-4ee2-84d5-17de9f346ee3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40f4e48f-c82a-4db2-acf4-66d1874dc939", "sighting_of_ref": "indicator--4d9ad93b-8011-44a2-be93-c7ce5b7b0ce2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04937a19-7171-49e2-a016-b4b3746cb871", "sighting_of_ref": "indicator--9282c249-006b-40d5-b9e4-0c650a74b9ae", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25f3a0c5-6705-4f92-b21b-73be07f82fda", "sighting_of_ref": "indicator--6e0cac78-38a2-45dd-86be-df70393ebcc5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82912422-718a-4c23-86b6-1fcdcca2d9b1", "sighting_of_ref": "indicator--250218f1-8b6e-45cd-8e6f-deee7f3f1e94", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4583612-64bf-44e6-93c8-325d332274f3", "sighting_of_ref": "indicator--1c9e4ec0-30f5-42bb-b975-864119e7c856", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f28a948-cb04-4147-865a-08b2f8cb6251", "sighting_of_ref": "indicator--5788a31a-e65d-49be-af76-15acf6e1a879", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ea4907f-8bbe-4f81-a414-3670ce23996c", "sighting_of_ref": "indicator--f351efa3-8863-4357-a1d7-56d1344268f2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6753a804-b290-441e-a3f9-f4a9a5433a52", "sighting_of_ref": "indicator--f5eb5817-38ab-44f3-ac2a-7f4f236cb23a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac6264c4-b189-433c-8609-5776256385a7", "sighting_of_ref": "indicator--c469f8de-e4a2-4b64-ab83-50a9226c5302", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee8c643c-b095-4ceb-b825-370e104c2f2c", "sighting_of_ref": "indicator--96b2e721-dbaf-4f15-b989-6aef135ba18c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05c59abf-e0f5-4b92-8db9-54d88aeae61f", "sighting_of_ref": "indicator--f85f767f-a1d6-4322-b569-d535849b8056", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1c733c1-4a7c-478e-8238-7eb22bddd811", "sighting_of_ref": "indicator--22f4689b-9d2b-43b0-b112-c7fdd6a98d77", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a93462e-3d7d-496c-b264-9f62e6714680", "sighting_of_ref": "indicator--e86920b5-7029-4d19-bdfd-a4436c266e7f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2855e30e-3767-40b1-913c-c96864bc145d", "sighting_of_ref": "indicator--9d31def7-9670-43cf-8f21-a0801dc7b678", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f46e3b0c-b871-40d9-91dc-db015677e993", "sighting_of_ref": "indicator--7f039b10-368e-4a9b-9c36-5207a2fb91ac", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27c51d2c-ff26-4fa1-802d-376abdba1436", "sighting_of_ref": "indicator--96b8bf45-d8ca-4f4f-9c5f-b00223fe9161", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c38f5647-5530-4dc3-982b-9b29b50b05cb", "sighting_of_ref": "indicator--d8152e6f-e7f0-425f-ba88-5bef690aab2e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6adeafa3-4543-4db8-9f52-5ae313065e63", "sighting_of_ref": "indicator--448eec92-928a-41a2-88de-4b12c31e2d5b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39666631-5382-4ef4-84ee-72c79e1d95bc", "sighting_of_ref": "indicator--ff36a502-d455-4171-9356-9698b7d5e50f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--244f240d-b62a-4a86-8d7b-ed106ae4c506", "sighting_of_ref": "indicator--e82c902d-1420-4b9e-80c1-5b31b7a2ba5d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ac77ec9-0a23-454e-97c8-75f4dbea8361", "sighting_of_ref": "indicator--a6e8904f-9011-4535-a347-6887901c6c01", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e7af9ed-532e-4136-831e-eb94e7f19859", "sighting_of_ref": "indicator--f95f5f30-4420-4ebd-ab4a-a6c7ddce2c81", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49de2623-2fcf-44c0-a3a7-f45231181240", "sighting_of_ref": "indicator--04890475-88ae-4a2e-b66e-bcb06bad93bc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f5d3430-4cc2-406b-ad8c-4309228b5b3f", "sighting_of_ref": "indicator--99792a5b-383c-48d0-9bd9-4b286d09a4a2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f47fd457-03b0-4556-85aa-284734cc13d8", "sighting_of_ref": "indicator--54c9a1d0-6139-4497-ae1f-37f0a334db05", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18af691-8f05-4ab0-b4b3-d24c46887f12", "sighting_of_ref": "indicator--86c58a52-7e43-4a25-a46a-b62c1ea452df", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a14a8704-9e5a-4950-bf81-7b3d0c6d7e48", "sighting_of_ref": "indicator--f55fcfc5-edae-445d-8a65-80fee67aa040", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d871e0d-0c51-411b-83ee-685aa7eca5bb", "sighting_of_ref": "indicator--2aca8857-c689-41af-bc5d-79c71a03c55e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6edbe72-f0d3-428e-8d5d-53c762419808", "sighting_of_ref": "indicator--9a801c1d-1495-4f8f-aeef-c5999c56e95a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8233ff3-a7d3-4d28-9c49-c16dc37877c5", "sighting_of_ref": "indicator--9e9228a3-6bb0-47f8-9b74-8cb4366fc290", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55335b9e-9b8b-46cc-8ba2-fc34748b6cbb", "sighting_of_ref": "indicator--78571af5-7d80-4c03-8a0b-35f62efa47c6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df73f9e-34c6-424e-8605-df792cdd4b2a", "sighting_of_ref": "indicator--acb0e58d-d933-48c1-be54-ee6fdf1bd85a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29fc1e5d-3e53-45d7-9807-60234fc4be40", "sighting_of_ref": "indicator--c450d376-61dd-4ae3-8a2c-1229d4230c78", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d49a0f2f-5411-4aaa-a932-0a44e59f14b8", "sighting_of_ref": "indicator--74e62b9f-7ab5-4c2a-9652-c0f11e4a82a6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f27fa58c-79c3-420b-a554-51beae8959a8", "sighting_of_ref": "indicator--eaffdb03-ac8e-4350-b3a2-ed0d61978ec2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--327f0f61-8dbe-4efc-b7a3-0f5469f6ef06", "sighting_of_ref": "indicator--374bf25a-0dae-4e12-a314-1d2036066586", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c97c4be9-595d-4c87-b1de-341013b1032a", "sighting_of_ref": "indicator--e69673ed-c893-4706-bc0e-2aab8c5bb2aa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74a68c10-b0eb-42bd-8a9f-f3ee1f212c37", "sighting_of_ref": "indicator--14db0953-24ea-4c2a-8048-1a49f1c3ff5c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50225126-f50d-4560-90f9-94f3e183372e", "sighting_of_ref": "indicator--5336e6cc-f4a8-430f-ba76-0227fb8ab836", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f4e6710-dfb0-4929-a21d-c01ab8ffeff8", "sighting_of_ref": "indicator--5ed4bc35-4748-4421-95e2-767cb375f1df", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e624c28-1376-458b-8f74-bf0fefc96591", "sighting_of_ref": "indicator--d8608c79-298d-4618-968b-0de1873add53", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32df1707-b3e8-4c6f-a2c1-f8e6f968f1db", "sighting_of_ref": "indicator--cae3ebee-a6a4-4d1d-a13f-2919b9706d3f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac072ecf-6116-4352-8a73-9d197d3c00bb", "sighting_of_ref": "indicator--a8c607a7-a46d-4822-834d-5b5793dd765f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c424ed7c-43d1-4ac1-a816-4810ba38774f", "sighting_of_ref": "indicator--a8c607a7-a46d-4822-834d-5b5793dd765f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa74e11f-275a-4ace-93fc-6bad14943519", "sighting_of_ref": "indicator--9b8036b1-c9cf-4d19-888a-b2a07652017a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4110b7e3-f2c5-47eb-817b-dd1d934b878a", "sighting_of_ref": "indicator--aac23fd0-9277-44ad-92d8-7a8cedcb2f8f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ed6db8-88c2-4976-bcc3-25a105e86682", "sighting_of_ref": "indicator--160e3d09-8c2b-4764-8bfb-187782732eae", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26b376a5-7644-488f-8bd1-6e10e000c1eb", "sighting_of_ref": "indicator--6ca94ea6-f55b-420e-82e8-bf72fd7be3c4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eea2f028-b8a4-448a-b915-e423c6cd486c", "sighting_of_ref": "indicator--ba137d8e-81e1-47a5-8130-e0cd19d511ee", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--981da437-3d76-41f9-a59a-6b746162c28f", "sighting_of_ref": "indicator--4b9afd71-7cfd-4d82-8a5e-a40dee15dd1c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--855f2c3e-214b-4dcf-9280-8a4de9760beb", "sighting_of_ref": "indicator--7b8ec159-b724-409d-a055-7ca6108889c0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16c744ee-d431-4ccc-be2d-c943f8f8370f", "sighting_of_ref": "indicator--d319f195-1a65-40b9-859b-89927243231e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef1ae455-a9d4-4ef2-bd83-7fe08b5fe380", "sighting_of_ref": "indicator--96fa14fd-e429-4585-af59-e746bc63c136", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc6acd5-9c99-4c72-baa2-a46e2cadf2f1", "sighting_of_ref": "indicator--72d93020-8b91-4259-96d0-798c6351f7ea", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e431b7df-2a13-488b-9f97-54d243c827fe", "sighting_of_ref": "indicator--51a9b7f8-816f-4eab-9ea7-a70bc30a68aa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2abc287b-00bd-4422-bbc2-ea0b2b78ab96", "sighting_of_ref": "indicator--5d830a3f-7233-4ad2-b8d3-664afe468116", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc2b7540-f489-4683-b41b-6d76817a3034", "sighting_of_ref": "indicator--cba68437-f9c9-463a-86cc-81167eee61c0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70bcea3c-580d-4ba9-a334-972d8781120f", "sighting_of_ref": "indicator--00f60bd4-5474-4d0a-87ce-253e385330bc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68160db8-be41-4d7a-b4e6-160fbe350c10", "sighting_of_ref": "indicator--184f6ef2-0e7d-4ebd-9715-fd39c1871335", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--083dca4d-3643-46ca-8aa1-721daa7f757b", "sighting_of_ref": "indicator--03442d48-4517-4617-b16d-c9b870b184a2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81738d36-2b94-4173-ba54-7c9c33f5e6a4", "sighting_of_ref": "indicator--9068a01e-5dee-43d4-ab18-d8eabb7acfc6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ce33618-0851-4dbe-86ce-c0c4f758e996", "sighting_of_ref": "indicator--20ba726d-7233-4c97-b566-b4f4308cd9a9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13fd635b-c9c9-49fc-81a9-7409ee789935", "sighting_of_ref": "indicator--6fb4615a-a67c-493c-989e-8610ba94021a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6750000-7b39-4b87-a613-64830f2ce921", "sighting_of_ref": "indicator--7e84b3c1-e68d-4206-8d0b-8eb2c823571c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6888438-f71b-4461-95a7-2d1073bb16fa", "sighting_of_ref": "indicator--f8ca1699-fd46-4131-aa9b-147833061fcf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9c2d6ff-997b-4775-8313-9305a96d4068", "sighting_of_ref": "indicator--ec2bf24b-1d27-4ec2-aa2c-4122c7ca09fc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2342ae7-a695-4aa9-b3c5-e37815346cd5", "sighting_of_ref": "indicator--18afdb08-5086-401e-9b55-c0a5a31aff38", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eaaa55f-bac4-4b27-beb2-5556bd394248", "sighting_of_ref": "indicator--8acc62a6-77f5-49a8-92a0-96fd95d97ff1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--624c130b-d4da-4042-b2b8-b2a4711ee45b", "sighting_of_ref": "indicator--51fe05ee-7768-428b-ac92-8522f74b2bb2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ac6f89f-f369-4abc-ad42-9168d208b3ab", "sighting_of_ref": "indicator--47fc4eed-4add-473e-bef1-674b90e56140", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e6078bc-7caa-4f84-8649-f7ee59a0fbb7", "sighting_of_ref": "indicator--7dd33e1f-0375-40ff-a870-31b8fc89f647", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b37e2f3-3f61-4e0f-9072-6df34ca55101", "sighting_of_ref": "indicator--f2ca086d-b60c-4ae7-8269-3ee8a2f0b8cb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9049a468-bd29-41bf-8873-6dc521bc5530", "sighting_of_ref": "indicator--66b170b6-9c22-40a3-b7c1-f4c0857f765d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63ce0418-c03c-4671-9be8-a8c57dd64621", "sighting_of_ref": "indicator--0f50124c-88c8-46b2-a6cc-5677495e57c1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902d8cbd-efbf-41b7-a230-457f53ded974", "sighting_of_ref": "indicator--10851658-344a-4cf9-899b-feed924bf194", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fdaef68-4afa-405e-b385-556d57b43fed", "sighting_of_ref": "indicator--f52f54d8-fdae-4201-a959-804909c97295", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe200961-a1ca-4813-9fb1-f3dbc2d580f6", "sighting_of_ref": "indicator--27a10d39-fca0-4e17-9037-58df45ed574b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34837a25-b227-4084-87eb-88c7da77cb4e", "sighting_of_ref": "indicator--9f334efb-ab1d-4515-9491-ad44511d7fa3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c2857cd-97f2-4579-b7c2-70586d786908", "sighting_of_ref": "indicator--6e0b3df1-80f1-46d2-8647-67efc6cab33c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f19011d-2dce-4cf0-af73-79c31342fa64", "sighting_of_ref": "indicator--3df45467-0969-49ee-aa17-7cb2f4afa797", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39faace7-18ae-4f72-a707-86480c7cf224", "sighting_of_ref": "indicator--d22eee4a-f35f-4d34-82f8-e88f9812840b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a744922-b3db-46da-b16e-cababa528b8f", "sighting_of_ref": "indicator--525e0145-a167-4978-86c0-5ea87e89b098", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe8ac929-1cdc-465c-8d53-7a10a83702e0", "sighting_of_ref": "indicator--cbf3cfa0-1544-4453-9624-a2721c10f8d7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f35ad95-0e92-4e78-b18e-bf0792e5c754", "sighting_of_ref": "indicator--7360bc5f-796f-4140-a1b1-69bd63bea5f7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7b6aa7-e404-437f-9971-28d2f137c71c", "sighting_of_ref": "indicator--b1d81534-dea1-4d04-9713-298030734862", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdaf781e-d574-4486-9169-d70b0fd0f193", "sighting_of_ref": "indicator--bc03bd0a-51ac-4e37-b187-5a377b6956a3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8139fd86-aac9-48c1-9e00-acd5564ac9ea", "sighting_of_ref": "indicator--4bdfa603-eaad-445b-979d-05c933adf65b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60398cb1-ef40-4319-aa0f-7c3d12aca03e", "sighting_of_ref": "indicator--df562efc-5317-4ddf-9170-bac992f3f302", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5fdc687-69e4-4299-8ea5-02853f3e8da8", "sighting_of_ref": "indicator--66e34ca8-3c0b-4164-ba48-fc5d4421c54d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88dbae5f-5187-431d-a060-db9b29c0b46a", "sighting_of_ref": "indicator--334b91ff-6337-4b93-95ac-2ed16f72659f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be168d33-2927-460f-a3cd-b1ead5281abd", "sighting_of_ref": "indicator--6848ee5c-1110-46c7-8227-6903e31f63bb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2f06f39-d9b2-41e7-8a6e-e1930798e465", "sighting_of_ref": "indicator--750747ef-bedd-4ceb-a3bc-76b526ded91a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--942a9b8c-163e-48f0-a98e-8a06792c64fa", "sighting_of_ref": "indicator--d461ad17-e969-4b29-a39a-0890aa29ff3d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc0d2ed6-a0b0-4832-a648-00988d14ac2e", "sighting_of_ref": "indicator--b3c86559-eca4-4da5-a23d-358910ccce6a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d00664b7-2b26-456c-9f43-ef898bc8080e", "sighting_of_ref": "indicator--988911f9-d1d9-4a97-a773-1e4ab61f072b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e879c4-2b37-468d-a62b-7cc420e31736", "sighting_of_ref": "indicator--243b0e15-9dfe-4ef5-8037-b0f5674e711c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--979b50e9-65ec-479e-817c-678da3bc6dc7", "sighting_of_ref": "indicator--83b028ff-e19f-495f-a2c2-7567ccfd7cbb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6eba9d9-e12d-44b2-a855-42af5b079432", "sighting_of_ref": "indicator--83ed5185-7152-42ec-9bca-3e1a18e01d3e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f53856e-8390-4163-9625-cf0737c608ed", "sighting_of_ref": "indicator--8b1e83a1-29a6-4ef5-9dc6-03daff5cb6bc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0619ecd-ef88-4498-a49f-7ce1c7c3fb3b", "sighting_of_ref": "indicator--ba618bed-4974-447d-a1d5-0f0fd6b785a2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7200bcc9-206b-4654-b1f8-42475ed7d039", "sighting_of_ref": "indicator--a7240931-d2e7-45a8-b950-27dd1a2e0526", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1450b070-ec2c-42b4-8229-3c89662cd64f", "sighting_of_ref": "indicator--27319b6c-579f-4f26-91b0-157d84e065d1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1718f247-e075-4b7f-9196-b485e57d369a", "sighting_of_ref": "indicator--c68b3f0f-3e7a-4e9b-bfc0-4ebd42e3abff", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cba9a54-d1d7-4150-9c09-9f21a5ab900d", "sighting_of_ref": "indicator--d1b69fea-b5a0-4378-a8a5-57f4dba83250", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb28f57a-44ef-43eb-9f9a-89ee90f33eba", "sighting_of_ref": "indicator--df36396f-dd54-42de-a8a9-d7c527cd27d6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c27c57e-7050-49db-9310-4d11c86e3bb7", "sighting_of_ref": "indicator--120cdc89-056f-4c9d-9b5a-d365bc971d01", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ebcb95f-1627-4270-879c-567e83bf2d60", "sighting_of_ref": "indicator--8fe3cc65-d981-4b40-8f58-ee299112dfe8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55535657-1c3c-4271-8a7c-17fdc720a15c", "sighting_of_ref": "indicator--1204d631-2be7-41c6-a816-a7dd9a9ac3fb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--670bcc26-44a8-4f3c-abe2-88ed216d4097", "sighting_of_ref": "indicator--e45f06dc-78e9-4946-ada8-94c6d9518f1b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70df8d90-ab0a-4b7b-b727-a8925cc331ae", "sighting_of_ref": "indicator--f0e7031f-7413-4fea-bdaf-3eccce4cda47", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00c93050-cbf1-4060-8b22-d7f7a6cf2879", "sighting_of_ref": "indicator--8f76435f-9796-4b07-a6f7-3f75a42f2f2c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1b1321c-2392-4a09-83b6-53f2fecb3338", "sighting_of_ref": "indicator--e69a9236-94c7-4ea0-b90a-214bdf86967c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23ccc08-47aa-4c46-9621-6f44ccaecf0b", "sighting_of_ref": "indicator--ad7f2230-ab94-4457-b0eb-d71863bf6279", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18be4c12-ddba-4c89-980d-a4fa413a4e3a", "sighting_of_ref": "indicator--1a4e28be-9e60-40b6-8054-e116c273437e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f7fdbb1-a3c6-4074-81af-2953607a3144", "sighting_of_ref": "indicator--1bc9f581-4a12-410e-a04b-3573ac403fdf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a7e22e3-8c1a-4c99-a96a-48331a9e3914", "sighting_of_ref": "indicator--ac7366ef-838a-40d1-9bdd-dfad4a5a46ca", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db09daa3-ed0a-435d-b23d-ea3caa166d25", "sighting_of_ref": "indicator--74077866-0a2f-4a6e-bf1b-5f43f66cec2d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0388ed7f-2dd7-499f-85c0-eec4b5c08e1e", "sighting_of_ref": "indicator--ac74a406-306d-43f9-b9c8-52b81a77830a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1b1a9ce-f95a-4c87-b6e2-d777d478c3a1", "sighting_of_ref": "indicator--f1477640-7c02-467a-973e-54e047418847", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c6ef093-f5b6-4191-91ea-365004a63956", "sighting_of_ref": "indicator--df8bc42e-2d4d-4a91-85a8-fd42dc772b77", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09ebd052-d0c0-41fd-aa65-64e67b4bcd89", "sighting_of_ref": "indicator--f826e2b0-68bb-43a4-97b8-574be79889ec", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a283e3ab-62f7-4365-845c-e025f4d1e5a7", "sighting_of_ref": "indicator--0d8412dc-7729-4912-9f01-516ac6cbeac1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a6ef81a-c2d1-40e4-be59-37c8222af1c2", "sighting_of_ref": "indicator--57c352fc-f29a-47cf-819d-976fa45b2786", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da98294a-d371-4436-8d22-392f6acf5235", "sighting_of_ref": "indicator--6802fc5b-71d6-4f2f-98b0-4c908fa755ec", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cbf56c0-d98b-4c16-900b-3e6a3d52f9f6", "sighting_of_ref": "indicator--e6aa15f6-2a48-43e9-9ebc-d053426a752b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b93d4a22-7483-4816-ab2e-d3b97bcc393b", "sighting_of_ref": "indicator--57a5e175-dc18-40e6-bee9-85a43ab31bf3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94148a94-13c9-4f9a-9842-fde380c2f8cf", "sighting_of_ref": "indicator--beba46c2-f8ad-4594-8471-9bf2396cafc9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37626813-e7bc-4f6e-b5e3-b011daf517a7", "sighting_of_ref": "indicator--f34ee09c-a364-4b77-8160-87549bd8ff06", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--809dd973-1487-424b-951c-a325c75152ed", "sighting_of_ref": "indicator--5975ddd6-1a40-4f8c-a0b1-4fdf683e4e7c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f8df0eb-1e9e-4b82-bfcc-436c7b8558fa", "sighting_of_ref": "indicator--8f290e84-b168-4094-985f-4719f324357a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6df597d2-6f66-4397-bf71-c6df82668e6c", "sighting_of_ref": "indicator--1891ba1c-6553-4389-8047-642ac4b0e3c1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8fd2544-4b39-42fd-b237-84cf6f32bea2", "sighting_of_ref": "indicator--a57ef41b-9bf1-48aa-a4a8-d0c501c856b0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5be0d3a8-651e-4169-999d-bd896c3c2cd2", "sighting_of_ref": "indicator--fe2eca2d-e419-484b-8223-e904d4406baa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf4dfdfb-3272-4c98-a48a-4e8641b2fc3a", "sighting_of_ref": "indicator--d34b2e55-4bb0-443f-ad6a-0ac7ce06b9a6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d90025b9-c8d3-49f0-bd4c-0b82b7872a91", "sighting_of_ref": "indicator--c9963d2d-a223-4812-af2f-626e83f73768", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2e2225d-f1ba-456f-b9bd-4dbc5a95c47e", "sighting_of_ref": "indicator--98c2b0c8-6c82-4b21-a254-2c178731374b", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--485ab93f-5067-458e-8abb-322f81ce1764", "sighting_of_ref": "indicator--1a57c266-c5ea-4940-a7ec-544665a40e65", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--743e3b95-2245-451b-b576-9611ea395dbe", "sighting_of_ref": "indicator--15c93064-4ef0-4732-ae12-74a547fc1d89", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18a6a61b-b135-46fa-9c6c-ef3accba9e61", "sighting_of_ref": "indicator--e38ddbeb-b29d-40f7-98bc-a9ec38ca7599", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--297c70c0-62aa-4bd2-a1f7-833e422f6a60", "sighting_of_ref": "indicator--9a8ad20f-ae46-49b8-b042-29e3911d4bc2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77742da6-8b54-41ce-a986-22f1754128b2", "sighting_of_ref": "indicator--a56d5f2d-eb88-4031-b668-94a73c4bc8ec", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cac25bea-ea8a-464d-96ba-910595c082dd", "sighting_of_ref": "indicator--f84d5c47-84ee-45bf-ac90-90520f48e186", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2731578b-a19f-47f4-8b60-1058dd188aaa", "sighting_of_ref": "indicator--616f4f2a-2268-494e-9c10-3638694bf0ab", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--253c5c97-fd5e-4fe2-b0ad-14778d34df09", "sighting_of_ref": "indicator--f5b14422-cd37-422f-ae2c-437aa7ff3553", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d9a4ff6-c351-4907-bc04-b0da53790d3d", "sighting_of_ref": "indicator--01216005-b365-45e1-9c71-963bcdab6a6d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52a3d660-a390-4445-b463-608bdd377fea", "sighting_of_ref": "indicator--62605fb8-6b0e-475a-8dba-739e9b2010d1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9284a9f-512c-493c-b01c-e244fcd9b3c5", "sighting_of_ref": "indicator--5d97ab18-6df0-441a-9ca9-90ffff9e8a1a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--033a298c-c3b5-44c0-ab4a-c292ea4ea889", "sighting_of_ref": "indicator--8db327bb-f087-448d-8e39-10bc5c4ad267", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5d82ed6-ccab-471e-8dab-a998a3225fbd", "sighting_of_ref": "indicator--5cc2cda1-3778-45c6-990a-0dea1f80915e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--153a3991-c167-4b77-9e64-4d5f59e48f8e", "sighting_of_ref": "indicator--331d8bc5-d010-4c2b-9882-1126989185f0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce886017-ba7c-436d-a2ad-311319336f90", "sighting_of_ref": "indicator--729d51cd-b69e-4ff1-89b1-159baa784143", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77878519-bb54-4697-afa6-c863fd74e429", "sighting_of_ref": "indicator--8fa39cb9-19b6-4ad1-816d-314bb5a6b232", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--199279c4-b2bb-485a-b3b7-c2e8532c430a", "sighting_of_ref": "indicator--01179bc1-685d-4d15-b7d3-81fbdc784a1f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69ef0925-e3a6-41c6-adcd-c1e2a9e49a70", "sighting_of_ref": "indicator--9e342bfa-2739-437b-b14a-f65aec4b625f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca8829f-8564-415e-9e55-4e0c23c07774", "sighting_of_ref": "indicator--bddd5b1b-5b0c-4c81-861b-cf15efb70d9e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b65b45f-42e0-450f-ba5b-009aeb0fc342", "sighting_of_ref": "indicator--11bc5ffa-5d6d-4461-b40f-05e89ebede5e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12c8d8dc-1c66-417c-8085-d6aa823abcfe", "sighting_of_ref": "indicator--11bc5ffa-5d6d-4461-b40f-05e89ebede5e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce2f74e-106c-4470-a87a-943053f263a4", "sighting_of_ref": "indicator--b6762187-80ea-4d69-b70f-b1559ed086b7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02355971-c8fc-4b13-ac17-1ed192285729", "sighting_of_ref": "indicator--0785c885-b20e-48f0-9d58-d9124de9b00e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cca09400-3d10-4b14-89a0-235d14939537", "sighting_of_ref": "indicator--1f339e40-0722-4f50-8f6e-f9a931dfcf26", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--086c9989-d5b5-4e4c-b8dd-4db93e6cc2b4", "sighting_of_ref": "indicator--c3583df4-4cb6-4399-b049-d41c02eedb8d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1113d56-0f49-4355-b875-a90b9f574d00", "sighting_of_ref": "indicator--567cd0a2-e307-4e9a-b26d-49f172a7d515", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e919136-9523-4fc8-9ae6-4391a5941a1b", "sighting_of_ref": "indicator--c172c417-9ed6-45e3-944f-7777943143aa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88a2ae61-8330-418b-b4bc-9545a746a702", "sighting_of_ref": "indicator--6fdc520b-49af-4caf-ae7d-d8a345f497cd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8102644-dc53-42e2-aaf4-7eeae4e52b82", "sighting_of_ref": "indicator--a48cc294-3ac3-4ce9-9ca6-cccbadb5eb35", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a6e445e-8b64-4020-a85a-fe77465c5879", "sighting_of_ref": "indicator--2b0dfec3-8d77-47a8-81a7-9d492b03cb6a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6e01c7f-f5c5-4683-8574-af50e45c16ac", "sighting_of_ref": "indicator--098fd7cd-76d3-4041-932d-07769aa303c1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a74054-b242-4c2b-8149-9c0510e8d2f0", "sighting_of_ref": "indicator--591c8070-33bb-452d-a10a-65a85ddb26ef", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3a2b4d5-7bf4-4f83-9a8f-22d05b27ad7e", "sighting_of_ref": "indicator--c5d49d6a-de74-4bcb-80d9-aa33fbef07ce", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9965d0e4-0641-4e7d-9557-659e5bf72cdc", "sighting_of_ref": "indicator--d05e82cc-204e-4526-b804-bb3b47e096f6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b4587f8-acbe-4dca-ba95-6b94923932c0", "sighting_of_ref": "indicator--064c7d0f-4b61-422f-bbca-f9a0eb26fb52", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34ec7cff-5aad-45fa-bc49-964727c7a1ba", "sighting_of_ref": "indicator--30b93098-58f6-4cf5-9b28-fce364a664cf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7faf82ba-54ee-4745-97da-bf4ec379dc53", "sighting_of_ref": "indicator--7f6bf525-817f-46ee-8091-16fc5cee7e21", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e6e21f5-3287-4a17-a33d-27c751da2097", "sighting_of_ref": "indicator--c1ecb735-50b6-403f-8a46-7ad7c3086e60", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ea61304-c350-46a3-936b-bbd8f68c0eb4", "sighting_of_ref": "indicator--3b9ff01d-97ba-4290-896f-d148fcc4d2c6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bbe2bc6-ee29-4b3b-b449-e2346bac7fcd", "sighting_of_ref": "indicator--783add8d-e3d2-43c2-a1d3-c5e8d57667c9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31780ea3-a903-4e33-ae34-00821ed09427", "sighting_of_ref": "indicator--275e59f1-5de6-463b-bb22-5656b1ab923b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24881003-38e0-4177-b48c-337c3f5ef6d7", "sighting_of_ref": "indicator--53c656f1-6c54-4fa4-8304-28e04ef21340", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e9a9afc-e9c7-4eef-86bf-ca99e8685541", "sighting_of_ref": "indicator--ea50d2ba-2ce0-40a5-9a91-4a7015fd46a1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b34597-6fcf-4850-a1ed-3b399dbfc971", "sighting_of_ref": "indicator--6c9eb70f-ca27-40c6-8578-bf2057a42f47", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea60a9a2-ec17-49ea-baf5-4affbd34226d", "sighting_of_ref": "indicator--b3442e26-d8dc-4d1d-8681-ffcf03697c7f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4200d0d-20af-44b4-bdd5-da953c6987b4", "sighting_of_ref": "indicator--2543e3e3-3d97-4dee-ab58-7dd3ae026bbe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9400ac19-4f11-43ec-a652-e905a194f086", "sighting_of_ref": "indicator--02d1efe3-4024-44a9-9236-4ddfe3a8766a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d4e22f-a5e0-4c4e-a2a0-b843efb428db", "sighting_of_ref": "indicator--89d7cbf0-bc27-4874-873e-5ac8bc28e0a9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b1830fa-94e7-4de3-8988-e7fe33391745", "sighting_of_ref": "indicator--ac652ac4-76c9-4002-bf84-1d0c1e2d7e56", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a8743be-d955-4f2b-ba2b-75ce28aa2698", "sighting_of_ref": "indicator--bcb552b2-4970-4e76-b66c-28578ce8610e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cbee683-0022-475e-be4c-21ec6f54bb03", "sighting_of_ref": "indicator--9993d601-69e1-4a2e-91d9-6d078ce6bbd9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73ede55a-6e92-48db-8896-0796e030f137", "sighting_of_ref": "indicator--fefbc329-9b2c-4ecb-98f7-9279609c7fa8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2154ad78-1cf3-4d1e-8089-9fcd1f92499e", "sighting_of_ref": "indicator--b290af94-130c-4fe1-9f04-aa9a94aef848", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0801d166-d939-40a4-bf2f-e32472e6f46c", "sighting_of_ref": "indicator--835a3b85-8a56-4177-a40e-dfbe12100a87", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3339eba6-b9b6-4aa1-8dc3-bd75af0997ba", "sighting_of_ref": "indicator--41e33fd8-cd1b-4339-b880-90b21c89869b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac809aa3-9317-45c3-847c-9d26e0eea8d6", "sighting_of_ref": "indicator--41e33fd8-cd1b-4339-b880-90b21c89869b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e553ba04-5a92-4bf0-8b5e-a256d1c607f9", "sighting_of_ref": "indicator--30bc120a-6de2-4717-af1f-3e07c33ea42e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a413e46-d735-428a-a924-947b70666ff6", "sighting_of_ref": "indicator--fe694276-c7b2-4ad2-b198-37a72f5ec00f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c500c3-affd-4b6a-875b-69c129ab9b18", "sighting_of_ref": "indicator--672bd468-f10e-4916-a04f-6baf21d908c9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b4683dc-056a-4140-a4a5-7285e69bf7f3", "sighting_of_ref": "indicator--f94e9b77-8788-415a-99cb-d0eec59088dd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a321d61d-a518-4ff7-addc-5cec922b8dcb", "sighting_of_ref": "indicator--82008f49-4fa0-4611-a54c-6b6af407da18", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--288443d6-7525-4d94-941e-cbb200a15d7d", "sighting_of_ref": "indicator--ae1afcf2-c748-43cc-8ef7-dd69a3530049", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7499def-7f78-44b2-832e-dcd4235bce29", "sighting_of_ref": "indicator--2fa79472-3d22-4a68-accd-0cd4f74f971a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de96a09b-c1ad-4bea-a598-cb4aa59541a2", "sighting_of_ref": "indicator--94b4b9eb-4a98-4712-aad3-ce1367384265", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa687db3-e1f7-4b42-9ff5-b4417cac0304", "sighting_of_ref": "indicator--f2f279a5-c6f4-48d4-a2ac-90b3b660b3fa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa132b29-2e9b-49a7-9fbe-a6ce64e3e94e", "sighting_of_ref": "indicator--6be943a6-3958-433a-90c4-c62b548f395a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b066e281-28b3-4bff-87c6-082fd8e2a7d8", "sighting_of_ref": "indicator--96b91650-43d3-47cc-afcd-720a2a52ec47", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17f99ea7-e7d0-4170-8aed-2e6b9b5897f0", "sighting_of_ref": "indicator--96b91650-43d3-47cc-afcd-720a2a52ec47", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--076ae53f-fd7d-492d-a767-df3abb3f64f1", "sighting_of_ref": "indicator--401a60f7-0c63-4722-aa32-695d166bf43a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63485e32-0fd2-4bb0-b690-a20832178ea7", "sighting_of_ref": "indicator--a734f3f0-76bd-46ec-9003-ccf213ca7328", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c38478c-957f-4f79-88ea-64615b880ce5", "sighting_of_ref": "indicator--eb8aa81e-8cd5-4ff5-974b-475abff14a08", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e2302d-1652-4dc0-876b-a97d1730dc5a", "sighting_of_ref": "indicator--66c9e389-7b0e-4afe-853a-75c841e35966", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f1590c-c8d2-444a-bfac-bbc5d84e0dfc", "sighting_of_ref": "indicator--a083c315-4ac1-4d40-ab2b-173306bcede0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c14679-00e9-43c9-873b-c2cc85175229", "sighting_of_ref": "indicator--9eca02ea-4543-4691-a66f-0833ef2083c3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8189e24-0ece-4c95-8ae6-af77550a6a8f", "sighting_of_ref": "indicator--70b01e87-348f-43fa-baf0-15b1d17735ec", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2d87ce3-bf53-48d5-9efb-8c8c7edc8a74", "sighting_of_ref": "indicator--9aa8833a-4565-4889-9983-c09fa547587c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2def4ca-3267-4f5d-b65c-7366cd6b31f2", "sighting_of_ref": "indicator--ea876720-1e5a-42c5-b13b-c99ff6300c6e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e9aad40-a5ea-4bf2-9b41-111df7c662eb", "sighting_of_ref": "indicator--c484ab92-2266-4486-8c3c-3e92e2e2ccb6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e106fc4-0fb9-455f-9e89-f437be024501", "sighting_of_ref": "indicator--c397b793-33cc-4ed6-b575-94b59533f494", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27c225b0-0808-4158-9d88-46051b8397af", "sighting_of_ref": "indicator--53747447-0ba1-492d-94ee-83b99e6710f7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96e22ca5-1144-44e8-9a78-91ee87c4d035", "sighting_of_ref": "indicator--728162df-22f2-422f-bf13-a04e6340a39d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24fe0684-022f-4e56-a3c8-aa4cdfc4f0b9", "sighting_of_ref": "indicator--4c3c5287-ff88-459b-95ca-c609f9f87191", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3fdc3ce-6c59-4d0d-92ea-fbc62e09a8ef", "sighting_of_ref": "indicator--17826ef9-b936-412a-b915-f09692abe7b3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--276139ce-27c8-45a7-9b72-437d4b1f9062", "sighting_of_ref": "indicator--1f44bb63-5ded-47c5-ae91-09cc16eefe77", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2604bbc0-c822-4341-9ce0-384a77422f17", "sighting_of_ref": "indicator--6c21222a-c5f6-42e8-97b0-4a11e25b876c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d91cfd9d-c724-4971-bc6f-7d43e25fcd46", "sighting_of_ref": "indicator--f644a803-7fca-4e3d-b82e-6c98669a2661", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33e00f68-4ceb-406c-98f5-3c352cfd964a", "sighting_of_ref": "indicator--28e1ff93-5f89-4e17-a8d4-97cba0d4e437", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--470cb5ca-851f-453f-95e8-7c255f312613", "sighting_of_ref": "indicator--4995cca4-2b96-44b6-b939-cef93a824cdf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8b70048-d97e-42fd-a088-e52750d4b1e7", "sighting_of_ref": "indicator--85621be5-c12e-4dc8-869c-c248f9f04763", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28359bfc-e078-45b2-9899-2fea0cbabf8d", "sighting_of_ref": "indicator--bab94bbd-758d-4829-bc6c-3871d6857984", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--914a365d-5e0e-40e9-8685-c5e55db1024f", "sighting_of_ref": "indicator--3a3b8fe9-d237-495c-87c4-f976c844b811", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--219166ed-37fa-4e8f-9c5c-200f5523051c", "sighting_of_ref": "indicator--20ebec9a-62c5-49f6-a950-9ed8694d672c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edbc5a33-9dde-468a-9350-f8756af8a4dd", "sighting_of_ref": "indicator--8ab6209f-e9c1-4e05-a39c-dd191b660e99", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b23ea0b0-5d1e-4bea-88f2-a8efb5309130", "sighting_of_ref": "indicator--6599b7aa-9472-4097-b8e3-44bd7870e6f9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b3280ae-f608-4aaf-91bd-eedbe1ac40fb", "sighting_of_ref": "indicator--eab72f0e-519b-47e6-bda2-2e4bd3e71a48", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c5fdb9f-84c6-44c4-8459-05601ae5f878", "sighting_of_ref": "indicator--070b2a2f-6d24-44ee-98d8-3e9dd04671ce", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--225799e5-17a1-4a8f-a853-2bfed88b0c1a", "sighting_of_ref": "indicator--510e5c34-c7cc-412b-a9e4-627e4388fc63", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb2510d3-af09-411e-bdfa-69f8290809b6", "sighting_of_ref": "indicator--67a6b9f7-acb0-4290-9788-d1c3aff3b98a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--578243bd-ea9d-4703-bd71-083bec516390", "sighting_of_ref": "indicator--146beaa0-ea59-48e7-97e0-afeaf1943ea2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--719b544c-45cf-48ba-b500-4ec31a74cbd8", "sighting_of_ref": "indicator--f2ad0d8d-72b0-4706-8bd5-56bd42f5c46b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2924f6b-a098-4850-b5fd-018957b294a6", "sighting_of_ref": "indicator--4765ef69-c87d-4750-8df6-59e4d7ed25fc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c102d376-e51a-422a-86ba-f512872129ef", "sighting_of_ref": "indicator--36621f6a-859f-4ad6-905f-d4cfb797302d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee067740-0c11-44c8-ae67-e1c628ae976e", "sighting_of_ref": "indicator--36621f6a-859f-4ad6-905f-d4cfb797302d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5dcb81a-980a-4f6a-869a-e9c3390f5895", "sighting_of_ref": "indicator--0176f7ef-3637-467e-ad77-b4943b83dfbf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e62d735-5ff2-4b98-a11a-841b7c54432a", "sighting_of_ref": "indicator--0176f7ef-3637-467e-ad77-b4943b83dfbf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5589976f-83a9-46d5-973c-fa1dfa14e78d", "sighting_of_ref": "indicator--c8a84e8b-1ce2-4cbd-b840-205ee5f76b2a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6f94c8c-0e58-458c-b433-9d40ccab838f", "sighting_of_ref": "indicator--c8a84e8b-1ce2-4cbd-b840-205ee5f76b2a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35498451-ce66-4ed9-92a4-662ceda81d87", "sighting_of_ref": "indicator--762f8104-89f5-4e82-b78a-0f9481f0cef6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5911539f-b70e-4f27-8f9d-300993303b29", "sighting_of_ref": "indicator--66be540a-8025-4061-a51c-eecce2e1f4c9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b11b3da3-d45b-4fd6-abd5-f58e1703c550", "sighting_of_ref": "indicator--3e77b499-8af2-4b87-aa8d-9cafe70d01e8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f43c614c-2b3e-4474-b50b-07b13e600e8c", "sighting_of_ref": "indicator--16a71b61-dee0-497e-9abc-323b740b848d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fbce7af-377a-4ff5-9cb8-0e5f4dbee51a", "sighting_of_ref": "indicator--e328ca1e-58cc-453c-9f92-45b077228f16", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--967b1705-cdad-4819-a689-f21e4f6a9a0f", "sighting_of_ref": "indicator--3adc9a24-a432-4185-b6f8-08e4492623c3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fac2a9e-3b6d-4585-9dfc-028d5d4d680a", "sighting_of_ref": "indicator--eac165e9-9369-436b-b66c-9613527ca3ff", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--320084da-e78b-4e02-8f9e-a60fcf0eb5c7", "sighting_of_ref": "indicator--9cbe5d23-bb13-430a-85ba-a665d31e93e6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7effa48a-69c0-4d70-bd31-efc71e0c33cf", "sighting_of_ref": "indicator--21037b77-351d-4c37-8ab4-2473689087e6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6315a37-8862-4355-b6d3-660292e02a98", "sighting_of_ref": "indicator--9be32b08-21f4-490c-aff1-d426bfcbe8b3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5dccabb-464d-4265-8a2c-e493e0d40f3b", "sighting_of_ref": "indicator--5db5f4d1-9a90-42a5-ad48-c7c7f8c19a17", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63621452-09b5-464a-993c-c4c41878c57c", "sighting_of_ref": "indicator--50c4678d-75d7-4db8-8986-55ce6a305ad1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b28ced26-5ddb-4c77-9d9c-0a9909d4b7b1", "sighting_of_ref": "indicator--12005cea-ede4-4b4d-b2d5-f6efc3e42071", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f0b2b52-003f-491d-b675-e9f186dacf7c", "sighting_of_ref": "indicator--721cb633-fa0d-43f5-aabe-85e2907783da", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41e913e4-3930-473c-a6a4-07c76674751f", "sighting_of_ref": "indicator--5ea94855-1a19-4408-b3c7-cb912507b2f7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b7eaec-41ae-4de8-8a70-a4bb283f88d0", "sighting_of_ref": "indicator--a3fdeacc-0896-4309-9f8e-5d4ca4d46113", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797d008a-9bb9-4cc4-a243-17b4b3916b10", "sighting_of_ref": "indicator--0791d92c-0290-42ce-8633-75b47d2d4343", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a159a5b-01d2-4db8-ae9c-49aff5a83132", "sighting_of_ref": "indicator--963d5862-d877-43ca-91e3-d6c93cc69339", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f42f0d3d-d683-4cba-ac93-2c47deea1524", "sighting_of_ref": "indicator--3e5dc035-2fc3-45bd-98aa-7faf1fda0f98", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74eea7c3-cdfb-47c7-8e1d-cda11e6e9d96", "sighting_of_ref": "indicator--10eac651-da9d-4b8f-98bc-25e08cf66bbf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8516f10d-75b3-4e40-8ce1-49d7988175af", "sighting_of_ref": "indicator--51e854a2-50b5-4b35-9415-c5ca50e41cfd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f91bee3-bc0f-4975-a0dd-6ae8ab70e21d", "sighting_of_ref": "indicator--64ec4912-7594-4739-9ca7-b3a7dde97bbf", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1baf2e73-76db-40b5-9dbc-27252ef01e2b", "sighting_of_ref": "indicator--993f043b-d5e0-4105-91d1-20aff84e25d9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f20e39-d3b1-4366-b831-75a7566c4201", "sighting_of_ref": "indicator--68b96598-d5d8-4126-8fa4-fd8b721f9568", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aa2e073-a957-478f-af01-091deb3d350b", "sighting_of_ref": "indicator--0218bcb3-e9ee-4edf-90c5-925be51c252b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a3038f4-dc81-49c6-92cb-cfbdc48da854", "sighting_of_ref": "indicator--0218bcb3-e9ee-4edf-90c5-925be51c252b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6f586a6-c326-4669-af09-9e76b9679970", "sighting_of_ref": "indicator--27a800a5-3704-4832-a70c-abad8cbe37e6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c2d1174-6f87-40b2-ba5a-a69d2eb361ec", "sighting_of_ref": "indicator--5b1a6f04-a9aa-410b-b903-7fcb410fd7b8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--312f0080-8b65-4fd6-8fba-2051e46b3d59", "sighting_of_ref": "indicator--15e7727e-d2af-4bf2-9482-94a39a650fa4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e48696a8-5d98-4ec9-8b31-2a5c748a406d", "sighting_of_ref": "indicator--3ba31451-7999-43fa-b6f3-22223f787b37", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77fb87d8-85f4-4e08-89e2-6509dd2baab5", "sighting_of_ref": "indicator--22ab68d5-e68b-48b0-941e-c9adc0d400c3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--887e119a-c316-440e-b7f9-720324a9682c", "sighting_of_ref": "indicator--8e93d167-3ea5-4949-9df2-e12d03bc1226", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19d26374-f159-4826-9e45-b2686f014985", "sighting_of_ref": "indicator--c07f4b72-70c2-4e89-a93b-7002479bce49", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bd68f7a-fe40-45fa-a696-c6adcfd7dfa1", "sighting_of_ref": "indicator--4c2bc0c4-2e7d-4458-8a9c-a35d462dc1ab", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64a6532e-f681-4805-b9de-ce42222b08b4", "sighting_of_ref": "indicator--e17b05ca-5b06-45d8-b5b3-26d9bd0d6ef5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d9f7f3-e2d1-4f94-b6aa-70e9b8b8b689", "sighting_of_ref": "indicator--9d81e938-5e93-450c-a8c7-dea327bdfa0a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e5839c-fc38-4ff3-8049-8b6e598454a5", "sighting_of_ref": "indicator--c39fc41e-e4b3-4ca0-a2d7-a21daaa930d7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d99480ea-f402-41bf-9b94-326b4e348965", "sighting_of_ref": "indicator--bb902274-231f-43d5-8405-0ef5782aeb6a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b789409-e46e-4547-ba0d-21932595c8cf", "sighting_of_ref": "indicator--5f59c4ed-fccb-41ec-a055-f4f5fc60f379", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62515d7d-2f56-4ace-b829-6e2686ce299b", "sighting_of_ref": "indicator--d2897444-9972-427c-9ca5-230cbdb1fdcd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--901543cd-b458-4b63-9974-4040c021bb32", "sighting_of_ref": "indicator--07b7eb21-caee-4374-8a6c-26dff6bd05ea", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f748664b-060f-4e36-b36b-2c0a5f35d69d", "sighting_of_ref": "indicator--fe0d691c-8bae-4bb2-a4eb-3ac2082df763", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e3f27ee-7c79-4029-a94e-7fa3cdf2f9f9", "sighting_of_ref": "indicator--a1b3e9f0-2523-4b6c-b735-fb31470bd77b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a45f171e-390e-437e-9f79-fd8a4c2cbddc", "sighting_of_ref": "indicator--396327e5-e25f-4a3e-9ac5-57dad8cd41ea", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78dd4282-ba4c-457f-a07f-30002525a304", "sighting_of_ref": "indicator--c0bea392-a8ac-4f3d-8fe2-19d1e6b02508", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13a3fc1c-fd34-4f5d-a0b4-268d8fdc85f0", "sighting_of_ref": "indicator--5de99077-5be0-4c4b-9719-4634601ed21d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8409ef26-3995-47cc-9ce6-aff41a39d4eb", "sighting_of_ref": "indicator--8d57215e-91c4-4635-ae22-1f98a6360d94", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dff180b8-d5bd-4048-b5c7-ceb7fbafc6a6", "sighting_of_ref": "indicator--fc1f02ae-9247-4d86-9dca-fe29027d1566", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--893903c9-b00d-4897-8248-c374d28ee5f3", "sighting_of_ref": "indicator--1a77a0a8-a910-4fe5-ba0d-1173e85c8a19", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30625d68-3c9a-45fd-92dc-c00fd86df0e3", "sighting_of_ref": "indicator--478ddbe4-361e-4589-850b-05274516c0b8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db96894e-7210-4648-8680-87a34cd30c1d", "sighting_of_ref": "indicator--85c8f5b0-cd28-4b38-bc13-0aa4b913976e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b1a1aa1-229d-4f36-9fb2-cd2f23936d09", "sighting_of_ref": "indicator--6c421dfc-2fd6-41a9-b510-f9320bb508cd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8306c6a-bb31-47de-af3c-30b19bfdc665", "sighting_of_ref": "indicator--8341e6ce-4b05-4ac8-bc8d-65d7d1fd2c70", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f667b860-470d-459c-b3ff-9d78b8f2afb2", "sighting_of_ref": "indicator--dde0edaa-eb8b-4259-90e8-c7d73c0949da", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4de8dfe3-62b3-4db7-a3c3-7c4aaf2747b6", "sighting_of_ref": "indicator--2f49aeb1-a440-4fa9-a846-374848ce9ea2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--787a9e64-0ec8-4e98-8bbd-92aefee6ed8f", "sighting_of_ref": "indicator--8c6ec887-3cce-45d4-86c0-2c81eaf0178c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d884c6-cd20-464b-9495-adc8a7ef09e9", "sighting_of_ref": "indicator--90263aba-eaa4-4da0-b2b3-aba34b6fcc7e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55996c2c-0c2c-409f-a31a-9f15b41f3d8a", "sighting_of_ref": "indicator--56b251ef-bad5-4670-86df-729885321995", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8376a8f0-6b1a-4578-aa3d-81b561817a48", "sighting_of_ref": "indicator--39702784-083b-4d1d-9396-00ac115d6ffe", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--174435da-9129-4c5c-b3cc-9899d4333877", "sighting_of_ref": "indicator--f45c9cfd-81d8-44c7-90d4-d344616cc088", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e2faa01-e384-472b-89e0-7ec5c5af1431", "sighting_of_ref": "indicator--8734d20d-6885-4451-bce3-7904020edb3b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c2647c-9543-4a62-b1d9-5fdeda82e469", "sighting_of_ref": "indicator--e76f66e7-4aee-4081-b540-4921d96781a2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9739b7ca-698d-4eb5-ab67-79f1b6541744", "sighting_of_ref": "indicator--8115549a-54ab-4f1e-98be-eb60553f70d0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44acf035-f96b-4359-9496-052506bc9ace", "sighting_of_ref": "indicator--94a63d9c-8d59-40ba-8ee6-da68938d4ec3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--690a0de3-37ea-4dcb-af5c-377af70ba695", "sighting_of_ref": "indicator--8db0dde8-5705-4a2e-a8ea-0854da955a1a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c8d3abf-58e9-4356-bee1-250f1f46ce56", "sighting_of_ref": "indicator--73422589-24f8-436f-9a30-392f09ac5cde", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc560a0f-7116-4c4f-8728-446543c689d8", "sighting_of_ref": "indicator--78e0716d-e088-4917-a0bf-39853059a517", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f211fd4-fd08-43e0-877b-281d13f8335f", "sighting_of_ref": "indicator--2153ee98-5438-43ec-bcdb-74ff738fa673", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23ad93e0-ffc9-4dee-a72f-401db425c2a7", "sighting_of_ref": "indicator--60d6821e-cbdd-4edb-84db-b8cc27b3bf59", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8164af73-92d2-4404-89b7-761965a7007f", "sighting_of_ref": "indicator--27f12eae-a5d3-4626-9f54-238849b7fb49", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a36c6766-31c1-4922-8092-d32343497385", "sighting_of_ref": "indicator--a3765646-5b19-456f-b82c-ef34b3c00fc2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da029be9-81c3-4d67-81ec-752734641c49", "sighting_of_ref": "indicator--fa476a4d-be71-468b-b527-3d8e1df61144", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb2099c-ae9c-4939-a0ae-5cef7ee9a784", "sighting_of_ref": "indicator--d42f5d26-9907-494c-8f21-242c5b4dda8a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfcd0aa2-f3b4-4e24-8db3-22409e6b664c", "sighting_of_ref": "indicator--0c855cf7-889d-494d-b1ef-29f6e5317b0e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a4a3513-e34d-4a9e-984e-749d30dc34e9", "sighting_of_ref": "indicator--61f21a45-272b-4d3f-ab3b-251adafea7f9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--debc6acf-956b-413c-932d-a8a66ab62e19", "sighting_of_ref": "indicator--97231346-7d90-45b5-8eaa-bed3b1ac9697", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d01a09fa-0fb7-4c0a-9c0e-cdd6f8a12dec", "sighting_of_ref": "indicator--c417256a-a5cb-4208-a8cb-35432128ae83", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d72667b1-3ce3-4f53-a88b-482b1615616b", "sighting_of_ref": "indicator--b2991fc6-4cad-4efa-8e77-b5c4c912cc1e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0755d4a-af83-4a1b-b531-22ea04174b7e", "sighting_of_ref": "indicator--e0bd2a6f-d783-4d50-a244-13f9f8bdc23f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--639dc68e-571c-4a4a-ab4a-2aaad9754e7b", "sighting_of_ref": "indicator--72308882-3474-4c7b-8a11-b0dec8386ddc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85ef2059-84f6-45b0-a8a2-4d2c6121d436", "sighting_of_ref": "indicator--573054dd-685b-4e63-abbd-7bad130fd8fa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02cafa4b-efdc-4fdc-bd61-ec8d8e873235", "sighting_of_ref": "indicator--13acf0e4-b061-4e77-bb62-2c2ca1452c53", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b08a6dfd-8a1c-4f7d-a2d5-b93fad8dedd7", "sighting_of_ref": "indicator--bf9e61d9-ed23-4dca-8bec-70fccfa3f031", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e1ed05e-cf1d-4274-9212-bdd2a69987a6", "sighting_of_ref": "indicator--18627f02-5037-4071-bbd0-8d6ef5414277", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--055c8c0c-a097-4314-b7ef-da647a5eaa9c", "sighting_of_ref": "indicator--a4901af3-5cc4-484c-b039-b7c83c19473d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3452f7ee-611a-4867-8fdf-7aed0505fc9b", "sighting_of_ref": "indicator--edb7b301-ea69-498a-97ae-291a141df5b8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20595bd4-f046-4808-b2d0-88fef87deee4", "sighting_of_ref": "indicator--334dc855-ac77-45e8-ad5b-32e2a72e60b9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52946041-b8a4-4ae2-96a1-894603d05535", "sighting_of_ref": "indicator--d5202a9d-815a-4d96-a788-ed56d74fcc5e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e30c24ae-175c-48d2-9667-4f39a5620f5a", "sighting_of_ref": "indicator--d6304a8a-621c-40d2-b79b-b214f1355d2b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--732400eb-5dfd-4e5e-a479-bee0247c8541", "sighting_of_ref": "indicator--57c7ef75-3ac5-4ea5-b244-c621fec64f75", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e61de064-dc86-40b9-a562-c48020d9efc1", "sighting_of_ref": "indicator--608dcf09-ac74-4967-a8fd-2c1194f932e7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--404455fd-53ac-425e-b54c-5551270c6881", "sighting_of_ref": "indicator--425fdece-aa38-4e77-a2b3-25a17004356c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--badd63a0-4f6b-4ccc-8a88-56c5437f67d9", "sighting_of_ref": "indicator--a4bbb3a0-9706-4425-bf61-83f60177f184", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2778483d-8c01-4056-b8e0-e33ffdaf3666", "sighting_of_ref": "indicator--b675aea0-8b97-4adc-b2d8-49fec426fb3c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbbe824d-fefe-48dc-83fd-c5c9b38b198f", "sighting_of_ref": "indicator--d19f865b-d393-4237-b2f8-f4446e01181b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66bee0a6-7032-48f3-834e-209e4b9d3a96", "sighting_of_ref": "indicator--3ca6a62f-2c8d-490b-b0da-e01ff976179e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eba914c-c5b4-4851-a210-a8782d34bc01", "sighting_of_ref": "indicator--6bbd3ebd-711e-4ed5-878a-35ed059514e9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ac7b4be-df08-4d1c-9e4b-4acf98cf1eab", "sighting_of_ref": "indicator--c2d79fc4-9a88-44e2-8047-264f7acd4361", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7da7cf0e-4622-4152-a774-f83b1890fc27", "sighting_of_ref": "indicator--a33d3177-f15f-4e55-887f-eecfa25e24fb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d86afbe-5834-4b11-9f36-c546f70796cb", "sighting_of_ref": "indicator--dbfc4b58-6bcb-40b5-8782-4e92d6e05f70", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35db0ac2-26b3-4ae8-b00b-9f51abdf82fd", "sighting_of_ref": "indicator--1a4750a1-035b-4982-bef7-49e8f7fe4f40", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88e66bbb-9578-450c-8d95-8fbd2c024530", "sighting_of_ref": "indicator--f663b17b-d284-48a5-a95c-f01c2e25585d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6361248-eb3d-46c8-9677-4df0aaa3bd3a", "sighting_of_ref": "indicator--f251b100-a248-44a1-b21b-cc8f47a8fce6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23bfdf7d-7e40-42be-86d6-99f911700ef1", "sighting_of_ref": "indicator--1ebada35-83ec-4bab-98a5-f0cc471654b3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b33fa8c4-7393-4551-a9a0-188a11039225", "sighting_of_ref": "indicator--0e539958-a205-4f84-8b77-b0055c08e43d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b9786f4-e0fb-43fc-8f85-0ceea591fffa", "sighting_of_ref": "indicator--202620d6-77f0-45f2-8519-fed99c1129a1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a2e7e26-a407-40dd-9536-77ae6708a8b8", "sighting_of_ref": "indicator--baa26a98-8ac2-43ac-8929-9f33f743deaf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed9a349-14ed-44eb-adcb-793b91850cb6", "sighting_of_ref": "indicator--86a2ba03-733e-4b08-9cbd-da65a1519f51", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce53c40-e3a7-4bba-b419-9f4606eeaa28", "sighting_of_ref": "indicator--582588e2-1261-422d-85b0-3770dd7c15fa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c5a251d-9538-4d41-99bc-ee980be720c7", "sighting_of_ref": "indicator--43afb2fa-0654-43d9-9aa1-1d9af15befe3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c18ff90-7d4a-4862-94d4-83d1cd7a63f4", "sighting_of_ref": "indicator--9695766a-d442-4080-b65c-5cb68b62fc4a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c70a21-f393-47ef-bada-132d776901c7", "sighting_of_ref": "indicator--f3c27601-fd58-4d7d-901b-d52bfdb54598", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b1d71e4-a127-45e4-af62-0490a382d906", "sighting_of_ref": "indicator--0ffeef33-2393-417e-add9-7347975a722d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4028a6f-711a-4caa-abe8-6667ac6fc68a", "sighting_of_ref": "indicator--88c1db54-6c89-4f82-ac2d-90909ad8dfca", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68591da7-8d67-4c7a-bee1-d06dcc30ec10", "sighting_of_ref": "indicator--8836f7b0-eefa-463e-a27b-7cc88be59133", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e310ceb1-ee2c-4cd1-916e-1e450b4201a0", "sighting_of_ref": "indicator--f42a3468-d0e7-4581-a27e-8fc3eba90ac9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4a19bc8-dcca-4ddc-9954-3d724eaabc4d", "sighting_of_ref": "indicator--a3ccbb2f-4000-4818-9b50-54a7baabbae1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f71f574-4a5d-46e4-9cf0-ca466d92f19d", "sighting_of_ref": "indicator--0bf999b8-6862-45c2-b568-ced4d986d59b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1924b5b7-757e-4a91-acb1-673cd7709e2c", "sighting_of_ref": "indicator--a3116263-c7a0-4122-90cd-9abcb9f39ed3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72675695-438d-42b9-9122-218c4bb8add8", "sighting_of_ref": "indicator--ad1bae39-a276-4de6-9303-2ece77cab2db", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fbe3cc6-3c71-4637-83ee-7ffcad84b1b0", "sighting_of_ref": "indicator--b3bd75fc-08c2-4333-888f-4ac22e21799a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39fe0d0f-29bd-421f-b2dd-090775d9b3c5", "sighting_of_ref": "indicator--df48047d-0d85-447e-a0e6-f77ea1a2232c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e277843d-ede4-498f-a5ac-98d2d7333a94", "sighting_of_ref": "indicator--0a565266-0f4c-4fd5-a14a-74028ad4fafb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0c5d701-7276-4d64-9a10-eba2701b8a9c", "sighting_of_ref": "indicator--a611d2e6-f81f-44a5-91ec-74f077bade72", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3a63851-23d2-4959-910b-6c11f7211bd9", "sighting_of_ref": "indicator--3e94735e-db2b-4073-a315-a89aeed3e978", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--094bbd0f-4b62-421f-8bf4-3911c87e6abb", "sighting_of_ref": "indicator--349baf41-872a-4ae0-9b74-7fc1d41c6929", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8fab471-5190-46d7-bb23-aa31f8a36dcf", "sighting_of_ref": "indicator--b9822eb7-b7ae-420f-ab6c-df2bdedf8d1d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--929694a4-b903-464d-af14-367ddd94dbb7", "sighting_of_ref": "indicator--f3a1cef9-bb05-4ec1-8642-69197a94d055", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3807936b-c6b7-4c7c-8030-f6a58941ed80", "sighting_of_ref": "indicator--4a7a3c26-643d-4968-89ce-319927fb6109", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22008b7a-8397-4cbd-af38-482618f3cc9e", "sighting_of_ref": "indicator--f7a9b1c5-af69-4061-9f68-0df23c6bb819", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--519c09b9-d982-483d-8dda-ba20872c111e", "sighting_of_ref": "indicator--f833b071-9f6b-49cd-9f0b-edb1a87ceaa6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5897d127-e422-449b-88cc-f8222be4158b", "sighting_of_ref": "indicator--54e61551-bef5-48ba-b446-83768d8ea864", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3462ac9f-ae15-4b32-b3c9-03be690d3353", "sighting_of_ref": "indicator--92446410-cbd3-4902-bd41-13010c53dc02", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4bb1ec-afce-4753-9f1d-123eeb51c440", "sighting_of_ref": "indicator--96465421-e6eb-4ab8-a77d-ed88b960a28a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--221cdf75-3b5a-4f1f-afc4-90d359529081", "sighting_of_ref": "indicator--4ffe6504-7e32-4745-920e-2fdec66f4b72", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e11da8b4-f896-439f-9b36-19b784119be9", "sighting_of_ref": "indicator--45a4de1c-4d93-4ffd-9d48-1e37fc86c09f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26cdee26-2e56-4a6c-8688-9eadc6dd1f9b", "sighting_of_ref": "indicator--a6e4927e-4c60-42da-80b6-3ed3194c96d3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--773f69b2-0656-4321-9398-d2c04aed4544", "sighting_of_ref": "indicator--2bd5bf7a-1340-478f-8a81-ca4f8007f515", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49082082-54b4-406a-a781-54471c69a690", "sighting_of_ref": "indicator--8b72769b-3f74-4601-8592-7fd0d747af4a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ca9d698-b7ea-4cda-8448-a085a9f636d1", "sighting_of_ref": "indicator--0d9d1f06-363d-4c97-ac34-f99a344e9271", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e12e425-102b-40e0-aaa9-e0558d454c7b", "sighting_of_ref": "indicator--497f182c-5cf9-42f5-a7fb-ae4c780ec3fa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9795828-3e0e-407e-bf89-128e7a71b280", "sighting_of_ref": "indicator--1345739d-1a50-460d-b744-b69f9cf57deb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6eaa56b-0b4c-4085-b187-9d77446e4613", "sighting_of_ref": "indicator--d30e979a-ca53-4c03-882d-669b91e63ed6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b1a33ef-7b94-4c9f-a593-1978187f271a", "sighting_of_ref": "indicator--6d993ce4-aa25-4801-9b21-4292322099e2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f9f7c43-e448-4532-ad0b-ca46c0c32866", "sighting_of_ref": "indicator--b91e8ce8-49d9-4f61-bb6c-a119e2583da2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f3d36f-0cc8-4b49-af02-25811656f0fb", "sighting_of_ref": "indicator--252d3a47-3cae-4d2c-b740-fcc93881cafb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73ca7289-d0fd-446c-81e5-69c626145712", "sighting_of_ref": "indicator--9eee0f6e-f5f0-4374-a19c-dd8832b63007", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed83e262-64b1-4369-95c5-3c1601b7a495", "sighting_of_ref": "indicator--0d28a0e2-b41b-4bd0-a506-ec2d0cccc949", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f86618-1383-4b8b-98e7-2748084d2bb1", "sighting_of_ref": "indicator--489983c2-6d73-40d5-b52d-15088c9038d8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04a27d6c-2513-47e7-8fb0-e1c00a5db072", "sighting_of_ref": "indicator--183f3cc7-39ce-4aeb-9cdd-177d8104c083", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80d5bb1-3d15-4eb7-a8a0-b7e476f11d10", "sighting_of_ref": "indicator--a93be335-7fbe-4ad8-ba1f-076378a1f4fd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6536084-3ff6-48e2-b4f3-e6897e2729fd", "sighting_of_ref": "indicator--f8bc8c67-5752-4bef-84e3-0943a53c2fdf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aff40503-6ea5-4ca9-b642-cc696df553b7", "sighting_of_ref": "indicator--56b2ae6f-9ff8-44a8-8b65-d612bf15e328", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb93549-f5bc-426f-a1e8-e41085c0075f", "sighting_of_ref": "indicator--ecd64245-75ab-4b4e-99b2-d2d653a82b95", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ed7a942-277f-45ec-86bc-fb1e82fa1da7", "sighting_of_ref": "indicator--5c93e0c9-f587-4ccd-ba2f-746d5d1ce7d0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ebff187-0b91-459b-a4b3-5a4fac420534", "sighting_of_ref": "indicator--d37fb47e-f141-4007-a7ab-d776d94f1e2c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ece7bab-4b74-4590-a56b-96c6c0ee5c66", "sighting_of_ref": "indicator--be10b3d6-3a34-4d52-8a4d-5c93a06e0df7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--981ffe6c-8149-4629-a683-eabaa7d1c669", "sighting_of_ref": "indicator--6a76b270-3b69-41e1-9921-1409f55a4660", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--403a62a9-f2ca-43db-9766-02079552a98e", "sighting_of_ref": "indicator--dfa7a4aa-1fc3-4883-b80d-82ebf4d22af3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79405b08-b35f-4f17-9824-dd8e3891c7b6", "sighting_of_ref": "indicator--6ee42916-fe43-4006-8ce9-31a98ad925b5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d40ad683-b4f3-4ddd-b473-1bfa26ec71f4", "sighting_of_ref": "indicator--faefe686-61fd-4daf-81ef-9b382b3df580", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c6493b-5f53-47af-af6f-d82d8bdad5ad", "sighting_of_ref": "indicator--cec21650-59d3-46cd-8a8c-4713657c5ec7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ebf5ee6-0c5a-4d34-9517-a481b2f2a8d9", "sighting_of_ref": "indicator--03e7687e-65a6-4229-9675-82209bba6fa7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--551759c7-01c0-408d-8efb-1ddeeef8fa00", "sighting_of_ref": "indicator--dd99c11f-8a88-49d1-a73c-fdf7093cbfb9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6213ec63-2182-4c6e-9ef8-bdf745a56658", "sighting_of_ref": "indicator--ab630ee0-5b88-4e71-abe3-e86c937c615f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d4e8c44-32da-4ec8-b066-cd58f1f2946b", "sighting_of_ref": "indicator--b2eb98c0-f247-4e3c-83ff-68c122862173", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f7a3049-34d3-4ae6-a7e2-1993547c0be6", "sighting_of_ref": "indicator--cd696e0d-5712-4176-a8db-0f370e0e6807", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8762c9b-c9ef-4548-b135-c01728e8559b", "sighting_of_ref": "indicator--0a08b67c-ca2e-483c-804a-0b7996b50433", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ed5340-7d43-4683-af3a-f2139259cd12", "sighting_of_ref": "indicator--bc4a285c-94f3-41c5-80c4-01988427467c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc8ea47b-22ec-485d-bd08-2c97474c8e13", "sighting_of_ref": "indicator--b5b88967-0030-4a11-b11d-df78f60958ce", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b465a06-89fd-4ab5-96c0-7e4e0b85d305", "sighting_of_ref": "indicator--6f079124-3d84-4d9f-9b6b-dcadbdbc2608", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d424524e-df3c-409f-8848-aeaac4856c5a", "sighting_of_ref": "indicator--37be142f-ba4a-4608-94db-a97d21fe8725", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--964b9d91-dd7b-4349-ada1-7c952b0050b2", "sighting_of_ref": "indicator--dae15fc0-6b67-45b5-b4ab-a7bbcef083f8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dab6278-706b-4e1f-8e0c-0c894a72c27b", "sighting_of_ref": "indicator--60719887-c878-4ccb-951d-d6e70839b654", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--916014d4-e759-4365-8ce7-e577411ac9d2", "sighting_of_ref": "indicator--d442f51e-dab6-4f02-b20f-df14d26fee17", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca3739a3-ad69-42ce-9aef-3460f4b4af9f", "sighting_of_ref": "indicator--e0090020-d7e3-4622-a276-aa870eb0b571", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--178441bc-f7b1-495d-aa9c-1f12489fcbd7", "sighting_of_ref": "indicator--d83d9793-c701-443e-be66-7a4c5e7d3207", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5384184e-f258-41ed-b9e2-37ddebc9fa75", "sighting_of_ref": "indicator--71fbff3b-1d73-4298-bb81-8aec8a9f01f3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d1f460-2549-4be3-8ed1-3d4888ff54c0", "sighting_of_ref": "indicator--380342d6-46e0-4609-8987-8fdf2338ccf3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b40e41f8-6db2-4942-a743-1030c906e130", "sighting_of_ref": "indicator--8b01fb61-041c-4fa3-8cd2-b7a7c91e7304", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5722e315-aad6-407f-a144-42a85fcd1e8c", "sighting_of_ref": "indicator--909ab6b6-f3ee-4742-b702-477b86fce0ec", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--310a3ed0-7204-494e-b192-ac426dceee8c", "sighting_of_ref": "indicator--b75c192b-6608-458d-ab65-acbfe9a85813", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5bc8227-1002-4a7a-a709-02b271b2133d", "sighting_of_ref": "indicator--4045e281-7c71-45b7-8326-f924b23facdd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8927b445-14ad-46ab-8acf-644533f90b42", "sighting_of_ref": "indicator--437f3fad-1f7c-4e1b-82f7-6d710f76d39b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f2324d-0ba5-4fc3-8af9-fd7e017fc993", "sighting_of_ref": "indicator--df695742-2240-43af-8b5c-d12af5b17a3b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58cad4b5-f3bb-4fb5-9ab0-520ec800559c", "sighting_of_ref": "indicator--31e6fb5e-f3a5-48e5-8fd2-76ae53e82733", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b5fa86-9eff-40d5-a919-8d0c50606766", "sighting_of_ref": "indicator--2f598122-bef5-4a36-a912-1bde0e8b60bb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--293a79cf-ace1-4933-8460-dae7213eeec6", "sighting_of_ref": "indicator--13cb912d-faa7-4cd0-942f-06244bf4d029", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f300f15e-3f30-4d80-9a42-026b76912f63", "sighting_of_ref": "indicator--6c186832-e625-409e-920e-da11fb1bc4ee", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c67e5fcc-5df2-401a-9bf5-bc4b245e1f68", "sighting_of_ref": "indicator--9c62a6e7-93a3-437c-ae64-da67b3cbe3b4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--079d86f6-6889-4a67-8e06-6eaa0dc94bd9", "sighting_of_ref": "indicator--85453793-43a5-4d06-9879-5e87e125dadc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--513a0a89-e1df-4a00-bf64-6257ecc98d07", "sighting_of_ref": "indicator--fb705837-039c-43a7-9069-c36069a64a8b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da0ba1b-6efc-4f4a-8194-de102a1f2b65", "sighting_of_ref": "indicator--f0741e08-501e-4cfb-9f88-dfc19de5c98d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57de1be1-de9b-452a-98b7-cfce5b6efc9c", "sighting_of_ref": "indicator--b0dd679b-288b-44b6-a679-ae35f62d6b1b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--200858cc-8e1a-4d05-befe-f0f0b790506b", "sighting_of_ref": "indicator--f975dffa-30a3-4012-ac6f-0075c8428d78", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--917d96e2-7656-4b58-ac39-a49d4501d06d", "sighting_of_ref": "indicator--98bb4fdd-fb3c-4b86-a58f-a768ed6c2b51", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f25a7f33-ae96-4a8f-b971-148f808ceb32", "sighting_of_ref": "indicator--56918151-4406-495f-88a5-f2b307e00e55", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50fe843e-b087-4404-83b0-e2b9b1766744", "sighting_of_ref": "indicator--03900194-e87e-4305-95e0-8f0019c80828", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a75fa5c6-8481-49c1-9e18-ece7deda9475", "sighting_of_ref": "indicator--c0a7d469-c18f-4831-8d3a-8bd30caf1771", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f31ae47-c213-412f-bac5-c26dd7456d7c", "sighting_of_ref": "indicator--8665d4eb-0a96-440b-bc60-b4fb5cbca655", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11b44825-7eee-4b58-8f87-476af47c4bad", "sighting_of_ref": "indicator--e5c35a66-5242-4d36-9d04-2174af41352f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--008a9f43-ac68-4520-a14d-cf12ef134dc0", "sighting_of_ref": "indicator--2d99a8df-e37a-44b7-9b53-6884f862bfeb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef20758-be87-4c86-b8f4-47fe846098db", "sighting_of_ref": "indicator--67cedb4e-4b67-4dec-bba0-7b311c2b37ec", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--562dcd62-ac82-4f0f-b5bf-89ac4d86ebbb", "sighting_of_ref": "indicator--a17e366c-ea10-4480-93e0-97a76e586688", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f52f9c-b7d0-4c2b-85ed-a2bc51aeebdb", "sighting_of_ref": "indicator--cc5eecaf-9db6-40ae-bf36-fa2ad3b6b0e0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee98c1ef-f79e-4802-aaf9-7c41180589f0", "sighting_of_ref": "indicator--2cd780bd-1dcf-46f8-baa9-54da5012bc48", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca88bc5e-73c5-46d7-8f52-f01e54861d8d", "sighting_of_ref": "indicator--058d6994-2ed5-41fa-8528-af178d4c5c6c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d46bfdc2-f1b2-47d4-8c08-eda95804b936", "sighting_of_ref": "indicator--d48a9aef-7f43-46a0-a4e9-029594a1ce6b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bb8a186-ce9a-4df2-8ccf-0b20b340a700", "sighting_of_ref": "indicator--efdc5a32-4af0-4159-a056-563f780a9cf7", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec43a861-e145-41b3-9caa-e4d07fbe7109", "sighting_of_ref": "indicator--b695ef18-40f2-4bb3-9159-dc617a253341", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc37d413-7427-40bb-9831-aa0fbc21180f", "sighting_of_ref": "indicator--0ddeb954-36bb-4966-ab4c-d59077ef630e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c00bbe34-948b-4a0b-b997-74640217f011", "sighting_of_ref": "indicator--dbf738db-56fb-45b8-93f5-631e432dbd46", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2be79cb-bce7-4c44-88a0-81e1a9ae9e87", "sighting_of_ref": "indicator--6bf63247-0026-4a94-a042-33429158aa8d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be1de8be-b492-4d59-9b1f-17f79ad854a9", "sighting_of_ref": "indicator--b732aaef-2b86-43af-a9c8-a726139b5754", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52811a53-f3e1-4ff4-a807-ddae7393ee05", "sighting_of_ref": "indicator--a6bb3826-8c1e-407f-9782-3a0643545232", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0796ae98-53e8-42f0-b3d9-bbfb128f8ab1", "sighting_of_ref": "indicator--ed5e7bf1-f394-477f-b57d-f6814aa6e6fd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68254846-24f7-4328-b21e-314138383b69", "sighting_of_ref": "indicator--befb56a8-bb14-4385-8f41-c53200b1ab97", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d17d08-4c5a-4d19-8de5-cc0b575d75b6", "sighting_of_ref": "indicator--1168aed7-ba40-4c2e-af9f-1feb35454c94", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80153a02-407d-467b-ada9-1e345cee5b9e", "sighting_of_ref": "indicator--e34089cb-6b6e-465b-b7e1-f990ef5f847e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f53416b1-ccd7-4f56-b0d0-d62e456b07e8", "sighting_of_ref": "indicator--42880d4b-932f-4339-84ef-e264dae64e9c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f089e5-8265-4062-8af1-278e87fb798e", "sighting_of_ref": "indicator--940ff804-5bdf-443f-b921-111bcd44efc7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e3edcc5-9738-4eef-92e7-7bece439988d", "sighting_of_ref": "indicator--aa460836-400f-4f9d-836d-fdd0c61929ef", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb8fc0d4-0929-4c2b-b9ac-9d80f9525ae7", "sighting_of_ref": "indicator--67830dd6-e754-4e6e-ad9f-8f0207637bc6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa515d58-e0c3-491d-8665-79909353c376", "sighting_of_ref": "indicator--e1ca636e-1ecb-4ab5-aaac-70fd4a90920b", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d248bc-ff1f-44bf-a416-a901a0b3e122", "sighting_of_ref": "indicator--899eb6be-1b36-4304-a71f-ce260f8522c8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4d338e4-2fec-4b48-8eab-4864f494ece9", "sighting_of_ref": "indicator--fd068d21-b8cd-4f68-99f2-f2aa96d3e680", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73218f63-b4f8-4513-994a-a7ef12d64b73", "sighting_of_ref": "indicator--67e4afbb-653a-46b1-a51a-2c649e951315", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10b7544a-1249-4de3-b178-5fa967b78afd", "sighting_of_ref": "indicator--61c46d15-b915-428e-a6ff-c0c2d4f45500", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--434d3a09-b3a6-4e2d-ba13-514843ca6974", "sighting_of_ref": "indicator--487c00b0-f9ad-4dfa-8b64-e9da6c0514bb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b453019-b61d-4b96-97cb-e6d245c12bf1", "sighting_of_ref": "indicator--e630bae0-fb60-4d60-901d-9eb6d0d1947c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75928a56-9343-4e6f-af5f-b0eef20ca82e", "sighting_of_ref": "indicator--1a6fae1a-0c3e-41dc-9f03-4338b7a29f4a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d7aa2e8-c276-4286-957a-ea00c74d2174", "sighting_of_ref": "indicator--11d7cf7a-707a-4dbe-a0c8-0547921e571f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02f14289-113c-4fae-8b51-d501275f885a", "sighting_of_ref": "indicator--ef1b1508-2089-4422-a5fe-bdc25ba11f64", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ced91f5-0dfb-4cbc-93a8-faaedbfea15f", "sighting_of_ref": "indicator--6fb04048-17c8-4340-9bb8-98b8c1159575", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--842c593d-6576-4b12-ba53-2fca9c97d11e", "sighting_of_ref": "indicator--82038eb9-0061-4620-9de8-74f102f32739", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35cd4955-84aa-4a2f-bbf8-a53c6ca9db26", "sighting_of_ref": "indicator--f3d3b68b-e0c3-43c5-98a3-d371766965e6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cede650a-25d9-44b5-a2a8-af0e86112843", "sighting_of_ref": "indicator--b06bcf82-6c54-4e80-9939-47498f36981b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0addb30-1ff9-473b-999b-cf3e31c95a42", "sighting_of_ref": "indicator--e0a8f522-3b64-4193-b7d6-f5387e290de1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b13a8d45-b715-4897-9064-f46c3b413542", "sighting_of_ref": "indicator--1948e16e-daaf-40ad-89eb-a26ee591b00a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--205c857b-e780-417d-857b-36c519675e52", "sighting_of_ref": "indicator--0bdc50aa-aa64-4ba2-b003-28e1e328d8b9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c50ef0b7-1326-4eb8-b5ec-68a35a495250", "sighting_of_ref": "indicator--e7edabb7-72db-4f5b-8767-ff669e125d95", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c6f617f-4a6f-448e-898c-d3c8dcd7eb87", "sighting_of_ref": "indicator--39a69f86-91c2-4b14-b976-88806e56e267", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a54ff018-1798-4908-92d8-83133dde577d", "sighting_of_ref": "indicator--d6c53a47-049f-4a87-b00d-3a7213fa9129", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16f84c13-2623-4c10-8e2a-6ebd56dc8698", "sighting_of_ref": "indicator--25901813-7fcc-4efd-916f-2a817e5cfc74", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78860273-41b9-4944-a3ec-28ba8d1b3f23", "sighting_of_ref": "indicator--8d992f55-ec44-4614-9637-569cfdb5a52f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c32bc2-b316-48ac-9520-a3225cf6869d", "sighting_of_ref": "indicator--8a210f89-a004-48ee-9e07-57f1474b871c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60999134-81f7-4abd-9e67-ef0bdc592cad", "sighting_of_ref": "indicator--663af7d2-4975-4865-ae0a-12715619a546", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2f16261-635e-49a1-b58a-145f5a78b134", "sighting_of_ref": "indicator--684e3bb5-cc49-4014-a487-c7b6a4b2a954", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efd5a052-1c4a-4da0-b891-965cf3e8d154", "sighting_of_ref": "indicator--f654cdc7-3e4c-49b5-82ad-7692014f3d4c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e505686c-11f6-4321-acc2-090bded008fa", "sighting_of_ref": "indicator--6947c878-0585-428c-8c74-a6519b850b6e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a9df23d-1f5f-4a50-93ba-710016d97a00", "sighting_of_ref": "indicator--98e99caa-7a85-4024-bcd5-9cf196a5973c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f27a9db-4d08-43a4-9da1-5c60f609bdcf", "sighting_of_ref": "indicator--4616318a-6a97-4b7b-bfcd-60e185536557", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--603ec4e9-ce55-4e5e-8781-5d8b1e0596cd", "sighting_of_ref": "indicator--19a96b61-a027-4c20-bcac-11e98e5dccb9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b26872a5-d2c9-419e-9be7-d7db1a0b2300", "sighting_of_ref": "indicator--60afe33a-c2c8-42fc-b94a-82da8ebf3c7f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f99e20c0-5b17-470a-915a-8a2df41960e9", "sighting_of_ref": "indicator--60afe33a-c2c8-42fc-b94a-82da8ebf3c7f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8af1f1e4-1574-491d-b5ea-27a67770b7f2", "sighting_of_ref": "indicator--912a74a3-8d82-47b2-9bdb-8fc964f007cc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92526ad3-4538-4096-b710-29eade95e04f", "sighting_of_ref": "indicator--318a059b-2365-4c6c-9473-5d71624c7660", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d1012c8-4073-45bc-b61f-6b788f9b1926", "sighting_of_ref": "indicator--8cc6bfd7-8e29-4e78-b14b-24490815641c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dfe25cb-9396-4427-963e-21984b4ec0ce", "sighting_of_ref": "indicator--153c29a9-935e-40b3-b64d-bee7298e34cd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55fa91ab-48f9-497d-9f5c-f7c732f7900f", "sighting_of_ref": "indicator--64dcb84f-5cfc-4cce-84d2-70586590205f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b883cb-6c5d-4a55-8099-88cc9b4a9b2b", "sighting_of_ref": "indicator--8b370318-b092-4751-9604-02e885011b49", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da1b9ff4-8e60-4f11-8aa9-3b1bd97f6875", "sighting_of_ref": "indicator--3f5a5752-b095-4647-b1cc-8a71b1d69285", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f838c12d-06d0-45c2-a220-0f3f503c88c1", "sighting_of_ref": "indicator--0ff44e9b-5767-47fa-9958-b2ba624d514b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c859d52-5cb8-4e5d-be02-e8f998a82cf4", "sighting_of_ref": "indicator--72498d33-422c-4de0-b619-909570495998", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b79aad-8d5e-4d93-a476-f0196fdd13d4", "sighting_of_ref": "indicator--2021412e-2de3-4250-887e-dc80b62cdf87", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70e9085a-5793-4307-81cd-9c37cc45ef41", "sighting_of_ref": "indicator--a9cc2001-d098-4303-8920-17dffcbb3cbc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abc3815c-dbec-40be-a0df-daaa20243256", "sighting_of_ref": "indicator--9688d9a2-52f0-4d53-898c-25c34cb19683", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--035963a1-629e-4de8-a099-7af4431dcf7e", "sighting_of_ref": "indicator--158ffeca-3b4d-4cb6-8c44-f48f78af78a5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6784923-3dde-4b5d-bc0b-d50462590998", "sighting_of_ref": "indicator--9f2f3a53-1bfe-4286-af55-73618535342b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a42762-5cbb-4ecc-b925-61ec82994953", "sighting_of_ref": "indicator--31f59311-0e19-4eeb-98ba-46f58b9ec9e0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e0f68ea-c313-4524-b8ad-323eefe4acbe", "sighting_of_ref": "indicator--25d7d2a1-8dfe-4e06-9652-09ed39772ce1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc890986-bcad-4e52-a136-95aa8a63e743", "sighting_of_ref": "indicator--2884df00-e7ba-4d22-8d11-f99d659144d6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e613381f-5365-4cbe-91c0-a60354c518fb", "sighting_of_ref": "indicator--3d3a636f-0239-462b-82f8-07d22ef57a9d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--002ef106-a135-4972-b640-ee15e8861b1f", "sighting_of_ref": "indicator--60758788-0c0d-436f-b341-ac1ed5cdc8f5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6426a49-5e59-4d5b-af83-a0d1b314d26f", "sighting_of_ref": "indicator--ca900489-0dbb-4562-8a9a-93d5036aedb3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aab50290-3374-4d49-a0ec-2d4104886110", "sighting_of_ref": "indicator--71faff47-e1bc-4464-aa13-8289bcaf311a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--113d10bd-ad99-426c-9fef-4c4827031c67", "sighting_of_ref": "indicator--5b2d9c8f-538e-4be1-9bcd-8bb6e10cb9e0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac1b7926-5249-4dc2-a12a-dbacf200dc20", "sighting_of_ref": "indicator--52236418-bbe5-4416-b800-834c8fa1e686", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d184405-a7ad-4397-94ee-bc4f9a63d767", "sighting_of_ref": "indicator--9ab292e3-fd9f-43d5-880a-09aa132578e5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e7e825-cf52-4c8c-b7db-5e8f19c746b5", "sighting_of_ref": "indicator--46f30f55-684b-4c40-ba56-42450812d935", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51955057-8097-43b3-af9a-15b44e581167", "sighting_of_ref": "indicator--188fd45e-9291-462c-a64f-2a7125cb447e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4c8bfd0-6057-4a6d-a4a3-a8011e433bd7", "sighting_of_ref": "indicator--38b75cd9-98c6-475c-8787-4ac194361f27", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49aabf98-014a-4c1f-9a90-50fe8faf5858", "sighting_of_ref": "indicator--e34aee27-d02b-41bf-9342-bee323be295e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf20b6c7-e48a-4322-9a6c-9c9753b8510e", "sighting_of_ref": "indicator--df3e740d-1718-4400-8daa-3a844a63142f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8917d65-1e79-4800-9cd3-1da3ee139e6e", "sighting_of_ref": "indicator--d56508d0-451b-4da0-9224-c2cbc5d23c37", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ada7b9a-513a-4912-a9b5-e9d76ab23961", "sighting_of_ref": "indicator--f9ce12d1-c9c9-4808-b4eb-bd2285246f4b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--484f4fae-f2a7-4f6b-bdcf-24e48ffc150c", "sighting_of_ref": "indicator--f9ce12d1-c9c9-4808-b4eb-bd2285246f4b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6ab9890-cb54-4d5c-b2d5-35562040c127", "sighting_of_ref": "indicator--f90e4a21-1f7b-4f4b-80c8-15c149495759", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d4de4a2-ff7d-4eba-acf7-02b9233999ee", "sighting_of_ref": "indicator--47281104-7178-4ba8-b1df-f21710c78d49", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df3ba1a4-face-4f57-ab34-1f9f7d791112", "sighting_of_ref": "indicator--7d71c66c-2dd2-4b11-80ae-dd6a44aa2796", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3133ca46-b59e-4308-9da7-dadaabede907", "sighting_of_ref": "indicator--70b9625b-2399-40e5-8d4f-486277f1b586", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--312cde25-757b-461e-b1da-9b1bd16114be", "sighting_of_ref": "indicator--ec9200ad-e186-467b-8f05-a9730366c80b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42d9d709-298b-459f-9a13-75eeb542fb68", "sighting_of_ref": "indicator--f171d57e-24a4-47ad-a6be-69b865513da3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--518669cf-fe5c-4714-ac38-4313763c8e16", "sighting_of_ref": "indicator--31c54809-a1c3-420b-9c7c-298d08e17f14", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94793f99-6558-49c7-9927-559de4e2c161", "sighting_of_ref": "indicator--16b738ff-ad98-40cb-9f09-8f242639a381", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--967982ef-dc7b-4429-ae89-d353feda4580", "sighting_of_ref": "indicator--6ac853f0-6b2e-4ee5-8afa-72bfe5526825", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a9eb7f5-49f0-4eb4-a55c-e9dd9fa5e825", "sighting_of_ref": "indicator--e80124b5-15ef-4e57-ae4f-4b45dfa9c7ab", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0297831c-9024-4b04-9300-04349be1b1bd", "sighting_of_ref": "indicator--3dcf4d55-96c0-4e1f-ba1a-5653088ce29d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--835a79d2-0ca6-4054-b264-909233bef026", "sighting_of_ref": "indicator--c9ce683b-6fba-4d2b-a721-7dc828f3222b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c4b8834-b372-40c8-bb42-7be8b4f074e3", "sighting_of_ref": "indicator--497c848f-a7f2-4d1a-9c34-d065963f8641", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1faca47-3b81-4fbf-bda9-349ecfda172e", "sighting_of_ref": "indicator--4cb88264-3981-48bc-a823-b6cd1d98bdee", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a59ad500-ee12-434b-b5be-d3839049ad3e", "sighting_of_ref": "indicator--4cb88264-3981-48bc-a823-b6cd1d98bdee", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b06f570-dfa6-42c4-99ae-47180089f5ed", "sighting_of_ref": "indicator--979a2c4a-af8a-4cbb-9272-65b7bea3f21c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead3a5a0-0448-41fe-b31a-058b1e6f471f", "sighting_of_ref": "indicator--e988184f-c336-4adc-b72a-afb8ac65418c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e20fa723-1303-4553-affe-34745146b7f2", "sighting_of_ref": "indicator--502a72a7-02ad-4138-8ab3-fc995a6d1291", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49cffd5a-5a1b-4954-8b7f-d9955c7eb506", "sighting_of_ref": "indicator--ae878950-06de-4359-b51e-879a9edb5548", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae317b0-1e2e-4b93-b901-e1c70d89c00d", "sighting_of_ref": "indicator--76af431b-192b-4e0c-9deb-95caa14d8d4e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc7bc3b0-13b7-4cdf-b8b1-7a080e037959", "sighting_of_ref": "indicator--94051280-746b-4c1f-94f8-4a321c21b8f5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ce795d-193f-4d3f-ba30-ec5acfd83020", "sighting_of_ref": "indicator--94051280-746b-4c1f-94f8-4a321c21b8f5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a90a67da-ea71-4e6f-8cbc-ca88df968b13", "sighting_of_ref": "indicator--261cd78f-be08-407f-9fd9-1c1a202f3d13", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b37310-17fb-4767-bdb0-c15a0caf335e", "sighting_of_ref": "indicator--cf575dbb-7045-42e3-8918-357a8efdf9d6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad46b187-558d-4056-9833-69fffd29268a", "sighting_of_ref": "indicator--53f76c35-df54-439c-8a98-c9f6aafc38dc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c1f01e-c935-40eb-bffd-1a2add2954d8", "sighting_of_ref": "indicator--fd7b76bb-5237-4d08-918d-c2bab6c82c89", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--737bada0-31d2-4578-84c7-0f77a35e3137", "sighting_of_ref": "indicator--7399b83a-79c1-42cb-8bcf-215375a8c08a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc03715-110b-49f3-ae6e-e91b0ae84138", "sighting_of_ref": "indicator--1d796411-ad32-4da6-9a96-3542db0b5fea", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--681b7983-b191-457f-87d3-5240c77091ea", "sighting_of_ref": "indicator--3bee5c78-676f-484b-86e3-b3eeb1cabc28", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a82c6019-e7e0-4515-a7ab-07400730cc65", "sighting_of_ref": "indicator--427ac501-7b14-4bc1-a622-a888795af6c9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d67abacd-bf97-4cb3-9e0b-faf9cc47f6a1", "sighting_of_ref": "indicator--6a96f527-168a-4801-b60f-b9c3a2e65370", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e51c4440-342b-4f2c-8ab1-1e3bdddc484c", "sighting_of_ref": "indicator--5aefc778-c446-4d6e-97ff-9beb1403a2b1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2658e95-6f4e-4dbf-becc-73d88068b6d3", "sighting_of_ref": "indicator--65494d97-a7f6-4920-8446-3eecee9b5e16", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77de1d16-2a61-4304-a71f-a32c90bb2a9c", "sighting_of_ref": "indicator--a98dd196-0031-4178-9ccb-0e7884a0bd7d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76f5c391-9a37-446f-b70a-0adb70a0b376", "sighting_of_ref": "indicator--5289be2a-58f5-430f-98d3-b89db3874350", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56385904-b97e-415b-895e-89ac174a7bbe", "sighting_of_ref": "indicator--ddcbaf20-5373-4a00-a957-0b826ff5995e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9be307d-668d-4de9-9222-dacf8803ea39", "sighting_of_ref": "indicator--a4296727-61b2-481d-8683-bdfa223e74e3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b59412ef-4ea6-4296-9de6-ede546a4c8e9", "sighting_of_ref": "indicator--60b4cc12-d20d-401f-aa96-d2e88094d835", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f77799a0-3416-461d-96cb-d8b00e4b4fb8", "sighting_of_ref": "indicator--69008cfa-fb40-4259-8589-74380a308d2b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8757586f-0b6f-4057-818a-64a0a2e685f1", "sighting_of_ref": "indicator--18a01f34-ae7a-406b-b55f-c92ddc9d58a5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b6d3a38-ee00-4a84-aa05-3453c207063f", "sighting_of_ref": "indicator--1b92c94f-380d-431a-80ea-e65692e6b483", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c5dc5c9-45b1-4c93-87cb-1959282da357", "sighting_of_ref": "indicator--2abe5623-47fb-4392-bbfe-8f9cb1ba0e95", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e7ddc49-517d-4275-81ba-ad3cd29bf319", "sighting_of_ref": "indicator--3c4f16b0-8d48-47b2-99b8-c74f078cb9d8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af415327-6a4e-4774-88d7-27dc7cf8901e", "sighting_of_ref": "indicator--16412145-31a5-4be6-830d-0f4835a6aa5b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b99ed108-6544-48f9-b605-c07c3c1c0bd1", "sighting_of_ref": "indicator--e718e3ea-bb3b-4697-854a-7e47d63c78eb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a0c33f-6170-4d23-bba9-9f58ceae75ae", "sighting_of_ref": "indicator--bd383bf3-a4c5-4640-892c-8a3f09a3c8b9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d75038-78d9-498f-95ae-fe22f7c9263e", "sighting_of_ref": "indicator--4119269d-5e65-4fbb-afaf-79a527e17718", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3854d3c6-208f-4fe4-9e58-49db12f59fe6", "sighting_of_ref": "indicator--a13f341d-5554-431a-bae9-b368fca62b34", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--584e7dd1-b1a9-4fe5-89c4-388a9ba655a9", "sighting_of_ref": "indicator--f2a10993-8a75-4922-b40f-e62d43d9d476", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da7ed45c-3d81-4692-a23e-78d6c994c5c1", "sighting_of_ref": "indicator--f2a10993-8a75-4922-b40f-e62d43d9d476", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9798895-ba1d-46d9-82db-eb60601e9136", "sighting_of_ref": "indicator--d85126c1-02a2-45e9-b3d9-e3c73343cd1d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac27083a-3e5c-45ed-bdb3-e6aa10ab3786", "sighting_of_ref": "indicator--d85126c1-02a2-45e9-b3d9-e3c73343cd1d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6908615-9d1f-4514-9b2a-aa31b90ebbf1", "sighting_of_ref": "indicator--3d47d933-8c16-4efd-9ee3-17d0d9c3f01c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46c83af1-3725-49c5-a541-ccba18666c42", "sighting_of_ref": "indicator--4aeaa176-197e-4f24-9bae-aeda6635e01f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8561648d-4d2c-45f9-bb3f-f8bf4ba53611", "sighting_of_ref": "indicator--6e10e8d9-5819-4e97-aa80-20aba564ce46", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a88664-e915-47a8-8d7d-11d7c51abf35", "sighting_of_ref": "indicator--7411f1d2-7591-4294-8fa1-0c05bd0aa06e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdfe43c0-94f0-4fc3-b988-ca5ae31a9762", "sighting_of_ref": "indicator--a1361d80-070d-4ded-a7f9-f25f900b00bf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b972c093-88da-45c3-8ed3-c494116590cf", "sighting_of_ref": "indicator--3188faee-5ca4-4280-a83b-24bdcca5c897", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--809c1f39-57e0-49cf-aae8-dee0f010812b", "sighting_of_ref": "indicator--d71c5328-8b62-4092-9e8a-b3e19959962a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb55214-3453-4d5f-ab14-b44fe0764026", "sighting_of_ref": "indicator--2b5c075b-d853-43a9-83d5-f207ba8e823e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d46c245-9d2d-4377-a50d-45bb6d9cf64a", "sighting_of_ref": "indicator--eb3b3970-6419-4f52-8663-93e58570b75c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d127a9a-e9fb-4031-aaa8-e5bc8f791608", "sighting_of_ref": "indicator--e8506c53-baed-4213-b8b4-b691df6edbdd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92731485-e7ed-4e94-b182-c149c2cfa3a4", "sighting_of_ref": "indicator--ea0618c5-8639-4485-aca8-84be882e426b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a4664a4-da04-48e9-891f-858a19181264", "sighting_of_ref": "indicator--6795bccd-7dbb-4a97-9aae-ba090cb2667d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ae50ad1-ad41-491e-8154-3eb5c488e4a1", "sighting_of_ref": "indicator--ee9d22dc-aee3-492d-9027-0ecfd27e8e7c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47fb7a5f-dcd3-49e2-ae20-1432ea1568a1", "sighting_of_ref": "indicator--39644b6f-33e2-4d80-937f-023a42242136", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74fa3279-7f1d-4662-af8a-01a5479fd5f1", "sighting_of_ref": "indicator--ec16ccba-c800-43d0-b4c6-140b3e995db1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2510c999-1177-4d95-8587-935e35752303", "sighting_of_ref": "indicator--59a4571b-5d36-4634-a499-16b3cdf94c61", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afafcacf-5fe1-449f-8685-7bbe680d9a6d", "sighting_of_ref": "indicator--d9437f97-6672-41ae-8468-6ce102f390ad", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c750cea6-5cd7-4a2b-8ba6-bcda4895ad05", "sighting_of_ref": "indicator--f72cd864-3b3e-402a-9700-2623863925e6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8c9f14b-2b9a-4d61-99e9-97a552e753e1", "sighting_of_ref": "indicator--eb7735de-2c25-4488-8451-3379f40d0160", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff510c3-d932-4f69-b823-413ef6a13d1a", "sighting_of_ref": "indicator--ac33afd6-0b6c-4102-abc2-10e98011dd9b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c932662-0ced-4cfb-89d5-24d8d3cb6ea9", "sighting_of_ref": "indicator--c54b890d-92f6-48cc-bd49-47906494529f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2718e8e3-564c-4a37-b847-576ef77215bf", "sighting_of_ref": "indicator--c54b890d-92f6-48cc-bd49-47906494529f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d31c9d4-de35-4acc-8a19-728209caa86d", "sighting_of_ref": "indicator--4b4acf6d-5952-48c4-88dd-04b28c6bce95", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--023f8809-d950-44db-be11-ddb6657badcb", "sighting_of_ref": "indicator--5a8f1f66-d271-4c99-a83e-8edd61f0af54", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd44fa48-5bdd-4fed-aeb8-66919d2fe578", "sighting_of_ref": "indicator--0be4e565-ec83-4138-80c1-885579152984", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e904fa9-5053-443b-945d-8cb581b77cce", "sighting_of_ref": "indicator--b246360c-ee10-4edc-90a1-3ac27de76f27", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc3d9d9d-520d-4b17-8d3a-9609079a24a5", "sighting_of_ref": "indicator--ae614bcb-4f64-4789-80a8-bdbe652e7f78", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--861d0846-ea7a-42c3-9d77-df8678f93e12", "sighting_of_ref": "indicator--cfa6c848-5134-4291-bd4e-8b05c85f7f65", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f612b80-d521-49d8-8d0d-bd83ced08840", "sighting_of_ref": "indicator--0f85f4da-f087-4383-aa3c-19b91fafd303", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b0535a-604a-4f60-b351-cc0870030b44", "sighting_of_ref": "indicator--bef6a446-3a31-44c3-8a9e-27bf474a2459", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49f69872-b916-4792-a8bf-d86671d2cefa", "sighting_of_ref": "indicator--347d32d5-a73a-4e21-ab3a-e0d79f33e2cb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c8b9736-a119-49ab-a3be-630adb3a5d41", "sighting_of_ref": "indicator--9ab3eb86-580f-4af5-bbcf-54ff955a415d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06328d7f-7534-4635-ba0a-7c85b677de42", "sighting_of_ref": "indicator--6d2daf24-14e3-4d7b-a234-71703d813d5a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c57d512d-4e12-4da1-8585-036e53946885", "sighting_of_ref": "indicator--694e9a0f-f040-46f2-9626-4f1982c1cef7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3374a055-a85d-47ab-aecc-9fa9ae6bce3c", "sighting_of_ref": "indicator--45539930-6781-423c-b7b1-b39932c4538c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598ab80f-b29a-4972-9853-607837f4a061", "sighting_of_ref": "indicator--332c6902-9019-41da-94c3-8e5ac9c1ca99", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b14fd6d9-dfcf-4f00-9762-9f71f62fdc24", "sighting_of_ref": "indicator--9dfd35c1-caca-4ff3-8b38-5221ead79044", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--198bc208-a7c8-4c04-9a96-4ad0bedddb06", "sighting_of_ref": "indicator--e56c318e-4527-4d65-a022-4681d21ff450", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c57e5a-44a8-464c-bdbf-ff1edd1eefa0", "sighting_of_ref": "indicator--94dfc2bf-83ad-4a57-bd2c-c45bc2db677b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--056fc227-2f5c-4e74-8c2e-54b655cb5cbb", "sighting_of_ref": "indicator--4371864c-1b90-4f61-a126-fce9a6120a41", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4893170a-a75a-493b-88c1-6407c5c3df5f", "sighting_of_ref": "indicator--a7cd8691-1a3c-4b87-8fad-f902328ad52a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd057840-11f1-43c2-bcc1-811b6ae25e04", "sighting_of_ref": "indicator--7b008a3f-c37d-4318-967c-2c934cb453f6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b56aead0-41dd-4ee0-aa68-42e99cac5306", "sighting_of_ref": "indicator--7e02149c-7de6-4aee-94cd-29ed99faad3b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--676f7ae1-b50a-45c4-887e-94ae6b0bc140", "sighting_of_ref": "indicator--fb688de0-e3db-44cc-8749-491abe9029c7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32b0c381-5cf3-4390-b728-1b43e9cdbc88", "sighting_of_ref": "indicator--2ea0b906-8cd5-4037-87d7-2247f2257ba2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79fe29ad-7ea5-4f43-8f10-6419555f1293", "sighting_of_ref": "indicator--0d3eb55e-6b91-4b5b-a6c7-a061890e563c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d0ba052-e865-40ab-9b30-c6aae9c3d8ce", "sighting_of_ref": "indicator--1cdf6492-d4f8-4487-972e-f85a7afdf876", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22f5b5b4-b837-4ea9-bf81-a36ba59c5d05", "sighting_of_ref": "indicator--595e3689-1596-4be6-92f9-17319258d5c9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54225c99-5404-4d19-bd4e-95f9b797b262", "sighting_of_ref": "indicator--dff365e5-a973-4288-be3e-5dc28951132e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce728e19-8b4a-4987-9c1d-ec099cf99841", "sighting_of_ref": "indicator--98d2ba07-dfa4-413b-b37f-a4640431922c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e8f6d75-5ebe-4c65-a779-3456af21a3a3", "sighting_of_ref": "indicator--3fc6bea5-4818-4f1d-bfdd-a398c5b9afdb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--221b31a1-a743-45b6-97b1-1ba2683ffabc", "sighting_of_ref": "indicator--b2df33b6-07c4-409a-9aa8-898a8163f48f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35311356-0122-4ab8-be1c-d4b82a37834e", "sighting_of_ref": "indicator--7826c722-970f-40dd-a1d5-df52a7281439", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0e900b5-bd22-4f8f-999b-d14c47cf5e81", "sighting_of_ref": "indicator--39e343c9-39c0-44cc-b132-504b3d2586f2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e5ff220-fd14-4ada-8335-c6a46500aa92", "sighting_of_ref": "indicator--9a06dece-9ba5-4030-b185-eb96223f0ec8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3760c01-f504-4c8c-bd62-be65a6267ff8", "sighting_of_ref": "indicator--11137346-b0cf-48e9-9fc9-465dd0c79b6e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--033316bb-9d7b-4a50-9a6b-70456277180a", "sighting_of_ref": "indicator--0805a7fd-4eeb-40d7-aa92-4ee764db8dc4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--525da32f-0808-44e1-85ec-dedc233b0253", "sighting_of_ref": "indicator--b1e6d88a-2acb-4379-9884-408e9205ec32", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68038a66-1cb9-4a50-84b5-b10911c2e1a6", "sighting_of_ref": "indicator--4a656919-6e0d-4ac9-9b08-c338ea01223b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--662d2cd8-91ce-4cc1-9841-0483c1a0bb79", "sighting_of_ref": "indicator--57b56e48-2e25-4cbb-8bcf-975dcaa98b98", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45326de4-942f-43bd-8e17-57b65cf9d7ec", "sighting_of_ref": "indicator--fc2551c2-d6e0-43e1-8e25-2626b8c45d8e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c450f04d-8cbc-4336-82bb-2ed9b886b2f3", "sighting_of_ref": "indicator--b0397220-fb7b-4c88-9aff-9dff879893c2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d611066e-b6c6-4320-bf68-fc984a443baa", "sighting_of_ref": "indicator--9e0293e9-dcdc-45ca-8e16-09ba84fef966", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5aafb53-38df-48e6-ad17-41b0e3b251d4", "sighting_of_ref": "indicator--e6262231-f6c1-4d5c-8d41-727af2a52031", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29209449-fbb3-46e9-9921-1c23673f6c6f", "sighting_of_ref": "indicator--fa7adfd7-7489-4c5a-a3b9-2ea75f0c71b0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eda901e-a1a5-4f78-ab47-b37c8259b488", "sighting_of_ref": "indicator--4262b082-e9c1-4b61-9d17-c77595f69fd7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aab12c5-d82b-43e4-9321-297bcff95f9f", "sighting_of_ref": "indicator--f8cc9d69-b9e1-4eae-9f14-a5de41739f6e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3a7b5db-983e-430c-adf0-614ba5fb9d39", "sighting_of_ref": "indicator--21180d5e-c0fe-43dc-bf69-ae6da5107bae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a857b46-9048-4bd8-88f7-d7db687bef85", "sighting_of_ref": "indicator--8672b017-2cd0-47ba-93f4-67baa734d0fa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4f997d3-e68c-4297-9ca3-1ebf1e438ae2", "sighting_of_ref": "indicator--c4b58a45-b765-4a23-b30a-09a0672d21a8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--719d88f9-eda9-4fb3-9724-afa90c9aabf0", "sighting_of_ref": "indicator--eddb6853-a56d-4adf-bdea-f45e7d5ace1b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffcc3a1f-7f54-48b2-b5d8-243a5fe4b079", "sighting_of_ref": "indicator--07ab7728-6441-49c1-a9a2-82ec2e7fa500", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39273e2e-c309-4236-9064-0c8034e1999d", "sighting_of_ref": "indicator--d583a93e-11ec-4edf-9bc1-013bc4879b9f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6907ff4-8ac2-4d62-9d69-a99b5e588763", "sighting_of_ref": "indicator--b8054f75-3134-43f5-829a-62d4c4b4eb10", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e688b8fb-bf28-49d3-9ef9-01461fc129fa", "sighting_of_ref": "indicator--056c8c50-2bc4-4b23-a4ae-20ded72462f3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0911ded9-753f-422a-b8df-4f876d4729fe", "sighting_of_ref": "indicator--4038fac5-c5aa-4a62-b7de-c43796b9433b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e576ac6-1a0f-43a2-8976-73882c7f4ceb", "sighting_of_ref": "indicator--681f50e1-e3f8-4e2e-b41e-1b82a48eb454", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4457d4c-1f8a-46c2-934b-d9612fbbcf00", "sighting_of_ref": "indicator--c07f079f-6a1c-470c-a4c6-6f9ef61243c1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--351a687a-bb3d-4901-a6cb-05b0d3355f31", "sighting_of_ref": "indicator--4e88c19f-a078-49b6-832a-40a13f01ab84", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1da565f2-84cd-4aa9-853c-0fc79855c083", "sighting_of_ref": "indicator--41f40960-cce0-47bc-84d3-3f418c55ec96", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6462ea9-2319-4e10-b4af-dc6dd984f060", "sighting_of_ref": "indicator--0b020505-0513-4f52-ae6f-0b737bc1aa5c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--609094d6-1726-4ad7-894d-a30c340d0c60", "sighting_of_ref": "indicator--0cc3f093-d1ba-4b37-8841-b6a9fb9fbb37", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e24c2907-d0c8-49ce-8c6c-9138d1b22167", "sighting_of_ref": "indicator--92967d5e-f13b-4fcd-9384-203a61e1b45b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b69307b8-6ed2-433a-a44b-8b61b3ebb781", "sighting_of_ref": "indicator--c2c420b6-d314-49e5-a41c-148d8c31da6a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c665fe01-a950-410d-9b01-4833ac1487f3", "sighting_of_ref": "indicator--cfa1d8c9-f9e5-4ec4-a93b-6008ac7231ad", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a694373-9f86-4819-b933-fac54f709e60", "sighting_of_ref": "indicator--5b929d1b-2b68-442d-a6c9-4a24cb103258", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0c5a871-c4a8-4679-a6ea-204679db4f04", "sighting_of_ref": "indicator--8e7b9ca1-1f50-460d-ad1a-255b8b8e2c47", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad82daf6-258a-4366-9539-a82e2a372e7a", "sighting_of_ref": "indicator--df755c85-ab85-4058-9cdd-81711980ccb2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ec0d75-038d-4707-9129-3505b0bef0d0", "sighting_of_ref": "indicator--a87fca08-1588-467e-a5e6-320c8c1d5011", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--988ae450-11ae-4589-9be0-562315e3fa09", "sighting_of_ref": "indicator--cd064de1-72cf-4aca-ad15-ea61b135a79e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c795013-273f-48af-a10c-4d60cc921ae0", "sighting_of_ref": "indicator--2720495a-0bcf-4211-a96f-004bab4c2132", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d370fb9d-9812-45c3-8afc-91ec74e16e3e", "sighting_of_ref": "indicator--303e2818-32fd-4824-ae8f-a81681bada71", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7b77db4-e0a5-4243-baf5-ade05eda244b", "sighting_of_ref": "indicator--7c90eb04-fa27-47f3-8464-98d834a1d40a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e53296d1-1e15-4094-9735-1d760db59d08", "sighting_of_ref": "indicator--640133c7-c267-43f4-8117-93659d5f4fe6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d000d1-dff4-4ca6-adea-c4b15cfb667b", "sighting_of_ref": "indicator--415dacea-b219-4a76-9c3d-74ef3a71826b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa72f5b-9b9a-4e07-973d-bacbf1e2a76e", "sighting_of_ref": "indicator--1f39a014-96d8-433a-8063-6a43b5f05ea3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--637b66d2-e4f2-4912-a66e-cdaaa6229978", "sighting_of_ref": "indicator--0a18c693-0787-44a8-b20a-4b2d9907ac8c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5115b7fa-bd81-4d79-a08d-4010a4d9041a", "sighting_of_ref": "indicator--abac88d7-fa40-43b9-9a83-47228e4690cc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e301bb51-f293-4460-9d0b-a28c18280a25", "sighting_of_ref": "indicator--f8bfa87c-16ca-4b52-a7e2-25d97ae722b7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eebfa5d-f647-444c-9f23-c406c4c51609", "sighting_of_ref": "indicator--e5a38388-26f1-4e09-b0f9-931307830d42", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8998f4f6-c39b-4f02-93df-ea8a392e7f73", "sighting_of_ref": "indicator--b3b8dd21-e938-4444-b0d5-5effbb90a551", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38701155-20c7-4b96-9eb9-9bc293c53bf3", "sighting_of_ref": "indicator--4cf88248-e640-409f-8634-30cb8d4da03c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f099aba-a063-40de-b9ce-550044f3db2d", "sighting_of_ref": "indicator--ac850387-bbfa-44a8-bfee-7c4795e64fed", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe59b095-adcb-4681-8d5b-a1f0802259eb", "sighting_of_ref": "indicator--02d20cca-8bc6-4667-a113-9471b95c960b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54c64933-2746-48fa-bd68-4dfeb8816e6a", "sighting_of_ref": "indicator--1ecd37e2-ff5d-403a-9b00-6b3666466c47", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47a8bbd2-e3fb-40c0-acbd-1da3fa1971a0", "sighting_of_ref": "indicator--0e54e326-dd26-4cf0-97b9-f023a3c3f666", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf63680-e6a0-42ec-9f84-fe49b67bd248", "sighting_of_ref": "indicator--fbb75035-952f-4871-93ed-88be03237d2a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--805aa660-633e-43f3-a4f9-aa65cfe5d30c", "sighting_of_ref": "indicator--f7465c87-77a3-4062-8e35-174282103016", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d568254f-6a13-4fde-8a96-67fcd5f6cff2", "sighting_of_ref": "indicator--01285780-a183-4517-ab49-1b0d6725efaa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0844318-ec6b-4d52-a18a-6a379285cd66", "sighting_of_ref": "indicator--f90e5663-e7f9-4a13-9cc5-207989ab1ea1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b00b590f-037d-456b-8096-9526c03d8a23", "sighting_of_ref": "indicator--2b0977c0-ac0f-4cc7-8367-efd2da3a5a9b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cee4218c-e396-41b0-b765-d38ec0b88779", "sighting_of_ref": "indicator--975e425c-db37-4209-8e34-3e01f05e33fb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0134561d-25cd-498f-bb49-925de3dcad95", "sighting_of_ref": "indicator--6293ee34-da43-4d76-9450-10514da3a5b9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--629535af-2bb2-497c-b664-c382417f41bf", "sighting_of_ref": "indicator--1ea9af96-ef5d-4bef-8afc-24036add0fc5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93519989-c964-4fcc-8a71-f420b83ec758", "sighting_of_ref": "indicator--218060ee-7762-4838-8bed-c4161a38a812", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22371126-dd97-4116-be35-3e65c25cc433", "sighting_of_ref": "indicator--e20684d6-5094-4078-921a-bf1acf67cb38", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6b91359-f749-4081-b74f-4c516f5d4d35", "sighting_of_ref": "indicator--83010cc7-3775-4f8a-88f3-14cd9242efae", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffc8d8c5-04e6-47c3-956c-dea7862c7ee2", "sighting_of_ref": "indicator--4481597b-2d71-410a-bcc8-99374227fa0e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f70de01-e6f9-4850-b5ec-3cd3f007b3ce", "sighting_of_ref": "indicator--4c01b3b5-05a7-4b46-8169-6c4c7291582f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a8f4910-1d60-4fae-81e0-d16facb2a06a", "sighting_of_ref": "indicator--8910fbe9-976f-47ef-af9e-d78856e61eef", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0799c46a-38cb-446b-b668-67cf12b37d03", "sighting_of_ref": "indicator--0ef6fd69-3b28-4ed5-9d3a-418b4a96610f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f26db1a6-6481-4415-a590-baf430f23c07", "sighting_of_ref": "indicator--e0ce61eb-f47a-48be-a6f9-f5945db5e338", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95a7e862-1566-40e0-a5a1-90b7ebbf11fa", "sighting_of_ref": "indicator--d4f6f091-679d-4b1d-b633-965fdf4db1bc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a077f5f9-2159-453f-8b43-4e34df652947", "sighting_of_ref": "indicator--a7b65824-94ea-4ad6-9344-8066e23cd50b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd20d78-033b-4402-b7de-60f1f221113a", "sighting_of_ref": "indicator--05ff85a5-7f2b-4df8-8711-ecce92563846", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca4b8902-25b3-4545-b4ef-2de27d5918cb", "sighting_of_ref": "indicator--a6533721-2824-4f56-954a-148d08e16e36", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--962ad73b-e3e6-45e6-8efe-6e9e9b3b061d", "sighting_of_ref": "indicator--188685a6-95bc-44d8-94f9-d5ce2befc6ec", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efc4d9da-0c9d-421a-af60-bad357d27313", "sighting_of_ref": "indicator--c17adb94-896d-400b-afe7-03b34dadc3f7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--826e262a-d372-4c07-a7ab-e48fa45c58d9", "sighting_of_ref": "indicator--7c4bd1dc-9185-48a7-9cd7-cfb36bc05913", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b5f24a9-a823-4d08-bcd6-ffcb49b443fa", "sighting_of_ref": "indicator--49ca736e-048e-42cb-858c-2d565a85e738", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6953150-bd82-42bb-9be1-67e7db88fcc4", "sighting_of_ref": "indicator--891b8e9c-3c2c-432f-8cb4-2eac4eff8d91", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0543fe47-4f96-44df-a074-7b7421b52fdc", "sighting_of_ref": "indicator--ea6a2d1b-c7c9-41c6-acdc-a433ae3a5de9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7492b99-8ab2-4f86-8efb-cf0f5eeefca9", "sighting_of_ref": "indicator--abee4cc4-ee9c-471e-b09b-79c8cb36798f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a739d71-b9dc-4070-a585-34945df43e53", "sighting_of_ref": "indicator--f05e9e79-4365-4df2-8ce6-49170ef612ab", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f5709e2-5bc5-4faf-b6ee-122b90272cd7", "sighting_of_ref": "indicator--3d843e38-b98e-4f3e-b631-698f8b186d1d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--666c8dec-ecca-4046-9ec6-3dcd449e3952", "sighting_of_ref": "indicator--802d8a77-1e53-4f08-9815-158bf710cd39", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2565fde-27d1-4045-b7f9-95006f15be3a", "sighting_of_ref": "indicator--6a7a2dfd-5886-4ed9-8068-fccee76d29bd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d58dbbc9-9ba1-4d83-9cb2-1db0590be787", "sighting_of_ref": "indicator--d2c7e32f-647a-4a8f-9a18-3ad41ecdd979", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c36d081-0a6d-4ff5-9f0f-6ede95d0b8b5", "sighting_of_ref": "indicator--b494039b-e89d-4876-b332-bd0a2ae0c256", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2deaa02-bdcf-47af-a293-87090cdf8126", "sighting_of_ref": "indicator--9a42c21f-4518-4c86-974b-b66926c42e01", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d29b87-a006-47cb-b187-a6e1158ff90f", "sighting_of_ref": "indicator--c61597c3-d8e2-4151-9f6a-3fa6547b2505", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9dc734d-eb9c-44a5-a488-6159217ea3b5", "sighting_of_ref": "indicator--1e3e32a5-85fc-4254-a6af-b1574658c094", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e32c371c-6675-40a6-ae3e-f8a029104dc1", "sighting_of_ref": "indicator--6b49b891-56ef-4d2c-beb1-788961257858", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c8b76cc-2abd-47b7-bdd7-ba6d1bf7fbe9", "sighting_of_ref": "indicator--19910a91-9e4d-42c7-96f7-50bef16d55ba", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ef0a6eb-cc18-4f14-b64d-9aa9c0567262", "sighting_of_ref": "indicator--c91c25c6-22ad-4118-8998-2e35a3d4b93c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b01eaa92-ef30-4e99-add5-280ceb32e311", "sighting_of_ref": "indicator--10d0246d-e665-4c57-b2f1-b967e70f8460", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--590ae952-0939-4298-912c-d587c2f1ddc5", "sighting_of_ref": "indicator--c355ea98-d6cc-48c6-9c21-690523c6efb5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--890959a4-1eed-405c-9344-823bf0d61f73", "sighting_of_ref": "indicator--9262eb03-6ea0-4157-b3b5-276cc58bf84e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6e3f085-c240-4625-88fb-f3bf076fc4b5", "sighting_of_ref": "indicator--378a03ad-bef6-47a7-ad01-d093781aa4f6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7b8b568-6b20-4560-b597-37aaf61e59e5", "sighting_of_ref": "indicator--85dba42b-47c3-440e-a8de-13014574fd99", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b390ff71-ee15-4252-8e6a-c0f37c809073", "sighting_of_ref": "indicator--8a950328-0f26-4f85-a365-3e8e4e4b054f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c6c8d4f-ac44-499f-9525-b20e06ed1ca3", "sighting_of_ref": "indicator--6c83553b-70e6-4d4b-b07b-5d5e42ffc42c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49d95274-c403-4708-9920-b76ff208016e", "sighting_of_ref": "indicator--7380eaa3-f007-497e-b618-37ae36cbb108", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c3c0b8-7aab-4eee-9c67-306ddc030ab9", "sighting_of_ref": "indicator--01e792c6-b674-4313-a62c-32754ac092b2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31cffca1-dfef-4974-abff-94c7c20309ab", "sighting_of_ref": "indicator--95816363-b948-4ddb-9026-fc7ac9aa6afb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--836dca4f-fab6-4729-80d4-b17676bde41c", "sighting_of_ref": "indicator--11d2857c-21e7-46cf-8126-2e675fa5f0b6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be903eb-8b19-470a-9984-2f384112ecae", "sighting_of_ref": "indicator--c0a1aca8-7aef-4f2e-b1e6-b1efcfb78add", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fd0f3e9-e586-402d-af9a-faba4665f589", "sighting_of_ref": "indicator--f305513e-d751-4c6d-9ded-67bc8faeb451", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1602dbdd-05b5-4d17-9790-4556bbb8917d", "sighting_of_ref": "indicator--ff910e46-0bee-45b5-8e10-0e927385a376", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a255d43c-3a28-4bf1-af84-ce86899e067d", "sighting_of_ref": "indicator--2d9a7236-f719-4d7f-8778-b14ecfa53adc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60b0578b-1d78-4862-bf3c-92e5b6d078d2", "sighting_of_ref": "indicator--2dc42975-dc42-464b-be18-ec519e60baef", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3d6a1a7-eba2-4471-b5a1-f3dbccdf8679", "sighting_of_ref": "indicator--99dfac12-cb6a-4dbd-b4fd-8c1d533534ec", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e8aab07-7354-4e4e-af6d-69ef91a3f80c", "sighting_of_ref": "indicator--bd84857a-0b93-464e-bf09-7ad300fa51e0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8650d12-4920-4c62-9f47-29b893a2da5d", "sighting_of_ref": "indicator--417f95da-e5a6-41fd-89e7-bbe93e08f8c0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac47d922-9dd6-4071-9566-348066119772", "sighting_of_ref": "indicator--d2d22ed5-c6e2-42e6-a7fc-2551e256fe2f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c3c1939-9526-412a-b791-0182f33a41d3", "sighting_of_ref": "indicator--a1388748-8d96-42ee-9aeb-28f8e46ab724", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87105883-1ed4-433a-9948-e72cf90fbdec", "sighting_of_ref": "indicator--eb154f68-d7ed-4426-a1e6-86c8840639b7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3017cf4-614c-454f-88f8-4c1893f3da51", "sighting_of_ref": "indicator--f9552f8b-99fb-4358-a768-a89613e9d0ac", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88fa61aa-d7cd-42c7-b7d2-f7d461dca9e5", "sighting_of_ref": "indicator--37653c7b-43b2-459a-8a24-7d3d5f4cbed3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a58d7a4d-b7a3-46cf-914b-7f6824f75a1d", "sighting_of_ref": "indicator--4de760d7-0ed7-4b8d-b11a-fe40b7e627ca", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5adf84be-593f-4229-b9f6-44d1508e8017", "sighting_of_ref": "indicator--89692e5c-2555-4f63-a6af-cd35c9bf817b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee568c76-de92-435d-8567-dfbd0766f36b", "sighting_of_ref": "indicator--21ae6796-58b1-473d-bb00-cc4188af4147", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b8c6410-fdab-47e3-b682-72d700d7b618", "sighting_of_ref": "indicator--5220ef44-556d-4036-82d6-8bb38673702a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7430140f-3ee5-4205-8fea-1003fadc06ae", "sighting_of_ref": "indicator--67f830b9-9463-4f78-8b81-42c73e4480ac", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d50e120e-2d67-4875-a9e4-eafea9526328", "sighting_of_ref": "indicator--ed762403-2468-4b55-a306-34f519fd82c3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72161722-83eb-480c-a855-cff958320444", "sighting_of_ref": "indicator--82495bc5-88fa-4b12-aaea-4d73b6090a52", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca5e2181-9b02-4e5d-80f9-2be87f8c60d1", "sighting_of_ref": "indicator--cb3d7b90-4f77-4fd1-8e27-2a5f181bc4a9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db59d9de-ef32-4c01-afd8-d4161f554706", "sighting_of_ref": "indicator--edc18707-af14-4e57-a638-bec12752462a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a29537d-fcec-4cd1-a602-8143bd542d5c", "sighting_of_ref": "indicator--a67819b0-c1a3-4bea-b7f7-e6e6dbf15011", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1c8a3a4-8862-4d7f-b58b-e12966935a3d", "sighting_of_ref": "indicator--2cbfd9fb-33b6-419b-b466-53ef1c0f0d05", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46954c1b-cc2c-45b3-a445-b24b90f273cc", "sighting_of_ref": "indicator--04e6da3b-c014-4abd-a33f-2f1e3e0a76a9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d340d029-b238-46fe-9bc2-9dbfeda9514a", "sighting_of_ref": "indicator--7a74b441-55ff-4690-b719-a36363c0ed0e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b04e322-6aad-42da-9e49-94eedf0b77e4", "sighting_of_ref": "indicator--ffb80e6c-d9fe-4aaa-bc28-041863395f70", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c213e1-3004-41be-9ae9-efb10af8e8e8", "sighting_of_ref": "indicator--808685c3-fad2-430f-a612-903c814273ae", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f692e68-4148-4178-8559-3b4c94ad98ef", "sighting_of_ref": "indicator--3d025814-f502-41d3-acf6-0de28434a844", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb4874c3-1419-4423-b962-08afecf39983", "sighting_of_ref": "indicator--85a5f116-24e0-450b-a2ed-8bceb03d741d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7c35314-21bd-4977-a4d4-0d27e42ec680", "sighting_of_ref": "indicator--bdb654df-40c3-42f0-ade0-17e5f3eeda2f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2747937-0c2c-4ff1-b655-021c3126c50e", "sighting_of_ref": "indicator--4b32cec1-d582-413b-87d3-5ec4357ea62f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c97c3af-a8bd-4870-8983-7cb4d9993bcf", "sighting_of_ref": "indicator--61be5991-509f-4b3d-8495-134775a7c36f", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3892ff91-8b7a-4458-a2c2-697bf082bc55", "sighting_of_ref": "indicator--61be5991-509f-4b3d-8495-134775a7c36f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7551d206-a6f4-4dac-a7a0-0bd81a12cd48", "sighting_of_ref": "indicator--470b800f-a6cf-456c-bd98-6e705b7f34d6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b878340e-c028-403b-bb0c-0f9d3c84c932", "sighting_of_ref": "indicator--3bbb49b8-5d1b-4101-87eb-e12f271d193c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d7c8196-f1fa-48cf-b7d1-94d2e7a98d98", "sighting_of_ref": "indicator--84b99bde-b1cb-46db-9343-431841af14dd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc91cd05-f00c-4a0e-9b90-1c08b4737ee5", "sighting_of_ref": "indicator--f4f157c7-7e08-4c18-b3e9-5d785fefc899", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a373015a-4eaa-406f-9f11-2c2fb398d210", "sighting_of_ref": "indicator--98b67115-997c-4bed-bf8a-659e3e973c3f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e868bb55-3b70-44ce-803d-7958b59d3ecb", "sighting_of_ref": "indicator--aa81bc74-bf3e-40d7-9f8c-d7b2aae58776", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8220d76e-b530-4528-9e12-8ca1578b908c", "sighting_of_ref": "indicator--24400c31-72a8-4168-aeb1-93620e672775", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03b98c58-3ce4-41f4-831e-d97827684f8a", "sighting_of_ref": "indicator--5d45e04e-6e2b-4979-b4f8-9d9751402737", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eab09f2-5282-4d47-a49c-f1cfcfab153e", "sighting_of_ref": "indicator--4a6708f3-7481-4b25-9696-e978f1fce20a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--994f49d1-f690-4713-ad1e-84953348aa4b", "sighting_of_ref": "indicator--e75fc163-d73b-4249-8b2b-41f5eee4c46e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9270513c-cd3d-424b-8858-4561d119fb57", "sighting_of_ref": "indicator--455ca927-6aee-4b99-baf3-a0cb2244229d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c18984e-ab7c-4b55-b38e-bf1dac52bb9f", "sighting_of_ref": "indicator--bfe7bbbc-cbcf-480a-804b-022b95255331", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd76920-e715-4da0-939d-91ffff5ebd85", "sighting_of_ref": "indicator--b99ede71-172c-4d92-ad06-e5643dc1e67d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcce5108-5e88-4d5d-a31a-b51ba547539c", "sighting_of_ref": "indicator--0b11f459-d126-4b56-90e0-295a3c56bc0a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--850ceb5b-f76e-456b-8def-3d9da249fb59", "sighting_of_ref": "indicator--d7b765a9-2298-4cfa-af09-811171666ea3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82513b6e-f7a1-4691-9e93-e66d568f492b", "sighting_of_ref": "indicator--40c46829-20b1-4b57-8b28-5138c17bfae4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b547c9f0-ea9a-422c-829e-9bb6d36dca60", "sighting_of_ref": "indicator--06c48097-2e3f-4eb6-bdcc-d965279e8f56", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f799ac60-d8e5-44ec-b900-ba3879eb9aaa", "sighting_of_ref": "indicator--a4986b11-40c5-47c3-826e-fe0ccb91fa58", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c2506c8-0519-4829-bd53-4f140153cad0", "sighting_of_ref": "indicator--916a18ff-6c25-4e2e-b996-9bd6fb92a8af", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4801299-8b75-4d1d-8ff9-1af6c13b9adf", "sighting_of_ref": "indicator--6583bb3b-a457-444f-8297-f41767a76237", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0267960f-4f3b-4dea-827f-0d6183a60ccb", "sighting_of_ref": "indicator--6c0d9ce5-83c5-49fc-9c92-d1e08860e514", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b0f9ea5-11af-4a32-b8c8-6251b47d97ab", "sighting_of_ref": "indicator--344ac68e-2954-4e1d-bc1c-6a3841c3b387", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067af86f-525d-4110-8c44-81a493e87dd7", "sighting_of_ref": "indicator--859be15f-46fb-408e-9757-370d9ff2ee7b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca982f97-252f-463b-9868-35ca31967f9d", "sighting_of_ref": "indicator--6bcf598a-d84e-438e-9fcb-0816f3478a60", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c781565c-52b5-4f61-9356-ae2c8ec6b226", "sighting_of_ref": "indicator--1a4ac5f9-944a-4168-acfb-e29b07954a67", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14c7e816-552e-45c3-be32-e6410c3a1a1f", "sighting_of_ref": "indicator--0ff7709a-a259-4f6c-a101-ed48ac127609", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a77c22b0-f274-403a-a9db-38b7d941a406", "sighting_of_ref": "indicator--2544a945-1985-4332-ab56-0c6001a74c72", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e2d58eb-a168-4731-aeaf-c4278af0c030", "sighting_of_ref": "indicator--0d71b646-fb8e-4def-beae-b18e1da855a3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df6bd98e-1ec5-4523-8146-92faeebf7a33", "sighting_of_ref": "indicator--ed684fec-31dd-4b70-bfe5-ed762c4732cb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--770bf7af-2110-48fa-ba66-84fb4abd2c5c", "sighting_of_ref": "indicator--d4e95e8c-f23b-42b5-9c5e-a0ed1015bf78", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab205443-51b9-42ca-85b5-31bd67323f45", "sighting_of_ref": "indicator--5c7a60f8-2d94-4507-9c96-31e7e1519fbf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee3f9606-5e5d-4891-9a8d-00b155969202", "sighting_of_ref": "indicator--98028aaf-7cf2-4b75-a8b6-ac717eda702a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98dd5092-e591-42ce-ae0b-f75285c4c298", "sighting_of_ref": "indicator--a3aa5e22-af15-4021-9aa9-3a1fc1f7abe7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ec595ba-2d4c-4479-9fb4-76eb144d928b", "sighting_of_ref": "indicator--a01a8a6b-de15-4543-b66d-57cfbdefa819", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f5a8df-103b-4b74-9c61-6e6e1ab405ee", "sighting_of_ref": "indicator--9786f513-1b60-40f1-8dbf-ee6d398044b1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--872bec7c-2d09-4217-8958-e8632dea096f", "sighting_of_ref": "indicator--25aefa5a-cf7d-48e1-9912-7ec84912b52c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed3d9f8b-391d-43ff-8275-1e16824c70b5", "sighting_of_ref": "indicator--c4ffe710-6a30-49bb-a59f-f4508767e141", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87fa0f6e-60bc-431a-8b6a-e8133dd1e0a1", "sighting_of_ref": "indicator--be86fde9-c5ba-4a7a-b10d-2db23c50c2e4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4390c3f-9999-424c-a70c-4ecd506c3f04", "sighting_of_ref": "indicator--9d1cf9ba-a212-4af0-a224-d87ae11ed7ac", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e16bcb-9dc6-45dd-a3b6-60ef7591ef44", "sighting_of_ref": "indicator--7855c034-03ca-4875-9369-3bab52040573", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb938d3c-dd18-44bf-af21-8364a3e8195b", "sighting_of_ref": "indicator--be627c29-5118-4e46-a15a-ee3830f1b78d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--597974d1-ac44-4959-97be-1eeea3047d5b", "sighting_of_ref": "indicator--9115b12c-e0f4-4e55-9deb-af03af4ebbc5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--886c4ed1-fbc1-40de-af77-4f7bb53ade46", "sighting_of_ref": "indicator--f20dd0f1-93a6-46be-bb68-74ed7b29ded4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81704e4c-e76c-46e2-a89c-174f711acd08", "sighting_of_ref": "indicator--392ddeee-f041-465d-a905-06a504bf1835", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7177b0f-9396-4278-a5c0-db5cdd373827", "sighting_of_ref": "indicator--6d6da401-348f-4a20-a118-b5c46f7cb480", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db6d5876-c89c-4240-b157-7920d78897c8", "sighting_of_ref": "indicator--68d29f6c-cbb9-448e-945e-813c4dd60eed", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0543ba8d-9b13-4ca4-baaa-1b263c3a4568", "sighting_of_ref": "indicator--f385e41d-131c-4536-a1e3-0e7e7d81f6ed", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95296ff-3456-4f99-a17f-17e823e67508", "sighting_of_ref": "indicator--523383de-04e3-4924-9ceb-e356b8ff5bf6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1253dfb4-2d10-448c-92c8-930f49f5ffcd", "sighting_of_ref": "indicator--062c2b45-71df-4421-af9a-d4b57fce0b48", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c3d610-bf94-4da2-9455-90b87d993ffb", "sighting_of_ref": "indicator--1f2ce0e6-cf0e-49b7-86f0-5c9f3932ee51", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ddde2b-ed33-428f-90b7-75260e549877", "sighting_of_ref": "indicator--e820dd97-775a-48e4-a255-07515cdb1838", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2cbcd15-5ac0-4042-ae9b-212b455f75f7", "sighting_of_ref": "indicator--327858bc-97ac-447e-96d2-4b5de58245e1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e07f279-2e0a-4386-8f2c-bf596fe69d0b", "sighting_of_ref": "indicator--c710968c-068b-465f-9cae-a9fdc302147b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca54f0d3-dc00-4e18-bd9b-6485eda58029", "sighting_of_ref": "indicator--66198227-13db-4920-bc18-d4d1cd5652d9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0821698c-0c11-4ef7-b188-295cbbbcd05a", "sighting_of_ref": "indicator--4733ee20-eddf-4bbd-844e-78d0a2c16dcc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b785b5-31e0-4d18-9d9d-1c82d26f2923", "sighting_of_ref": "indicator--e96dcd36-6ecc-4126-b573-12457c3d30ce", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d682a738-bdb9-4c71-be5b-cfc2f7a5d640", "sighting_of_ref": "indicator--a454dedb-d719-42af-95cb-10a55afee610", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af8d63bb-3d82-4791-90cc-155b05227947", "sighting_of_ref": "indicator--4caeea4e-e4ee-48b2-ad36-31a16d027a29", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd179fc-a0bf-4dcd-a77b-4a631c7edb02", "sighting_of_ref": "indicator--448b4034-458c-4520-b95f-0e5d4918e536", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--019c8707-56fb-4063-a52b-f69f7c1ff6e2", "sighting_of_ref": "indicator--73b437ed-8ea6-4933-bc7f-e00d53fe77b8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8c18398-4fbe-4da9-abf2-7476da804cc1", "sighting_of_ref": "indicator--2e6ee658-9570-4a32-abc9-10c261c7480d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4fbd6c2-8b44-4418-8560-96b962d9947f", "sighting_of_ref": "indicator--8a808003-20fc-4e06-8feb-44a10dd5a849", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e275605-ca20-4450-a7b0-ab51b5fcefa4", "sighting_of_ref": "indicator--f42188d7-2ac4-48a4-9def-c2e65a5016e4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c086ee58-748b-473d-8c98-c985a79ddcfd", "sighting_of_ref": "indicator--120ff497-1cf0-4468-bf3d-4a17dcb62206", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c9ea965-132d-4018-a1d0-1d79b5144325", "sighting_of_ref": "indicator--df1e55a3-67e0-41a7-a0d6-5efc77cb818d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea868ba-05fd-48f8-a9f0-a8cc22b5691f", "sighting_of_ref": "indicator--9b1ad3bc-da8e-47d5-a343-80a23fd4b03c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc3c7e7-d583-432d-b1c8-813cbb77ca49", "sighting_of_ref": "indicator--9335c1ca-1de2-473e-bc88-a9bfc155cadb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79fb7ee7-844f-4f81-903c-7225a73048fb", "sighting_of_ref": "indicator--cd909e4e-d54f-47e8-8079-a2808b91b878", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b43a500-6c5c-4b05-ba24-0900de431f9f", "sighting_of_ref": "indicator--b720e370-3d67-4b16-92d2-468dd40b82f8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a92c89-412b-4a18-8c5f-92ac652cb84e", "sighting_of_ref": "indicator--beb35125-ba14-467d-95bd-2b061257b85e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6f2b332-1c29-4500-a2c7-b8dc6fd4a8d4", "sighting_of_ref": "indicator--1c81e743-d530-4dd7-b5c9-ce2b1cc506f0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--711b4d8c-4375-4b79-9cc3-d17005f21c67", "sighting_of_ref": "indicator--f68db7d9-1e44-48cf-9769-3ede2a6d6354", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f843462-c0a7-42d8-9487-7dd73036ad84", "sighting_of_ref": "indicator--0f6ad01b-ec2e-4220-8cfc-2d272c7492c4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f22eb5-36bd-4088-8bfc-57d7ded0c84d", "sighting_of_ref": "indicator--771fb8eb-f6c6-4cab-9d5d-c11259e19ea2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a739af-b3d2-4c2d-97f0-c1489957c439", "sighting_of_ref": "indicator--a4f1e1a5-4110-4347-9163-169a0b3dd198", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--643988a4-9f1d-436c-a240-253930e2f2ed", "sighting_of_ref": "indicator--48fe6a95-6a6d-4211-98e9-ed098afd2ede", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3a192da-4a05-42de-9137-c49cb0e2ff38", "sighting_of_ref": "indicator--aa85c694-9223-4d3b-a6f5-dfdd552d089b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87860556-f718-4def-b34e-4485e81c9359", "sighting_of_ref": "indicator--7012dd41-837c-48f5-a612-301b22e6aa9c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cad4a1b-334e-40b0-872e-85e79563d69f", "sighting_of_ref": "indicator--910d6232-7da9-4535-86b3-8df5e1abbd1a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b98ffa6e-68b7-41ef-a85d-663a2ca2ac04", "sighting_of_ref": "indicator--9b0f53c6-5092-4755-bcdf-5a51fa1e891d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b147d00c-9dba-4e4d-be23-0b1d6ce41e2e", "sighting_of_ref": "indicator--a05a7e00-b51f-4cbe-9794-ec9cd1f19c55", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b16e42fe-7b3d-47f1-92f8-a71831dc23d5", "sighting_of_ref": "indicator--15746ca8-87a5-4e52-a6ea-b38e67239711", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e01afe5d-8b4a-4ff9-b07b-08c117c03f2e", "sighting_of_ref": "indicator--9f90d8ca-b28d-480d-b583-4e2634778851", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6463e84-ef62-448b-aa9d-a6661a38385b", "sighting_of_ref": "indicator--7ef47d17-abd7-4e69-ae52-a3fcda44f38e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb068116-857b-4387-acdb-a910f950cefd", "sighting_of_ref": "indicator--24247ebe-4f1a-43fc-bdf8-ad9bee7aed65", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--975eff36-db1d-4d53-9152-898303b7b239", "sighting_of_ref": "indicator--acc32728-8765-46c4-bd09-65b38f11310e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--def35ce5-2239-483d-b288-6e22fa388954", "sighting_of_ref": "indicator--af4443b5-a90f-4cdc-bd84-704f09cd74d8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b26f640-7b67-4116-8cc4-f4174a5752ec", "sighting_of_ref": "indicator--a40bc3a7-d875-4bff-aa49-b9c32952f8ac", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc026ad2-ccf6-41c2-8fd5-fc615a9a49d7", "sighting_of_ref": "indicator--f2640bf5-d6ac-4c23-8024-9e6945f23518", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--882992d5-0d53-44d0-8b87-0f1a56d84bef", "sighting_of_ref": "indicator--ee0c7eab-8319-4286-890c-fdbee49f30bb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d15f47d0-7307-442d-b88c-903b8d6a7b18", "sighting_of_ref": "indicator--c30fb01f-e49c-49b7-80bf-00659014c078", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73fe4f67-2637-4aca-b907-e7e639b6c1b6", "sighting_of_ref": "indicator--2c0fd05d-a773-48c2-96a5-574e2a32f55b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e93bd3a0-88c9-4bb2-99f1-0822699fdff8", "sighting_of_ref": "indicator--d87b8501-1047-443a-bd31-0af705637c94", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9e0bfbf-59b7-4f08-b1a6-30d8d5c0cb78", "sighting_of_ref": "indicator--8966ed9d-8890-402a-a012-127bad2a190d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d7c9691-7ea0-43a2-8e21-e4a8681eb977", "sighting_of_ref": "indicator--f8a474e5-f70c-4823-81df-0e91732f95ff", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53520b07-b98a-4a6e-b214-587039eea613", "sighting_of_ref": "indicator--5c16b0bb-507a-4b75-a501-4dc5dc410393", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e6531d2-fa1e-4d6e-b314-a743f2b7961b", "sighting_of_ref": "indicator--77ed4ad4-3d59-459a-8d41-48882197ca9e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e1e7b9-f291-4103-ab11-b7c923fa8811", "sighting_of_ref": "indicator--bb356bcb-1368-44bf-8be9-254e4cf05599", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aec0782-893f-4a71-ac12-6dde9609e806", "sighting_of_ref": "indicator--9752b336-4be5-4abf-a84d-e6d421c1ad52", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--323d1345-aedf-47f9-b70d-2b111671f344", "sighting_of_ref": "indicator--1a18c567-af62-48e6-aa21-ca8db212980a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f6edc3-94bf-4274-afc9-9b64a481047b", "sighting_of_ref": "indicator--cf153e66-d137-4a2e-9709-e3d84039bd3f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e789ea5-c7cb-4c15-8c78-f3f82e724dc0", "sighting_of_ref": "indicator--674fbe0a-1ee8-4a4b-bfd9-ad72516ec830", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eece0302-5cde-41d3-9eb2-68f875bbc18d", "sighting_of_ref": "indicator--e91a0205-74a3-4e74-96ee-0923b312ce24", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2cd1fa3-3467-43a7-9dd3-a0015cd40fcb", "sighting_of_ref": "indicator--03294e24-f5bf-42f1-9e68-8d872f8ec05f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c28b023c-474a-4786-950e-f4b2be552a13", "sighting_of_ref": "indicator--744b60b7-5a35-4ce9-ae74-b9e3646c829c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfd79c0b-ad74-48f6-8e66-2d150269f66a", "sighting_of_ref": "indicator--9ed5e1b2-002a-46a0-9b56-a0676ef55ccf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ea5785-21d3-4f96-a114-cfb78daeb128", "sighting_of_ref": "indicator--53f321df-1532-4194-b0eb-bd8249024b8c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46c88429-7a12-405c-9ef4-fd98a3a5178b", "sighting_of_ref": "indicator--4f742cdb-9ab4-4b5f-9cfe-fe68480a8436", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8745d7f-2eca-4510-854c-f06dff96c15b", "sighting_of_ref": "indicator--5dc0a2ec-4ab5-4847-b0da-47296e96baf6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--743c67f2-6943-4e09-bb43-dfd727f9d961", "sighting_of_ref": "indicator--0590ec39-ad6a-4be0-9e0d-c4fd68f38ec0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--381c114d-0715-4216-a5dc-5a770d852fbd", "sighting_of_ref": "indicator--c3dc69a9-2a99-4124-8a9d-6a97f5c25a18", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5041a200-a17f-44e6-8e9b-de1b15c8c58a", "sighting_of_ref": "indicator--b33043a1-5417-4dc7-9dd2-5e0209961c40", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--995d96db-e386-4dbd-8e91-56dde838cc77", "sighting_of_ref": "indicator--6e0fafaf-f1e1-487e-9f48-75b0850b03b9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea6217cc-6ca2-4c1e-a0ee-dd019e9e879b", "sighting_of_ref": "indicator--befb0011-f68a-4ab3-b2aa-9a1f11596fdf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c183adad-02fd-48e0-81cb-ddb4e2a5680f", "sighting_of_ref": "indicator--f5da61f3-3fd5-482d-9264-bdf26184074a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ec7f6d-e2c5-4e42-b336-0471066598a7", "sighting_of_ref": "indicator--f6575904-9f43-4574-b1e1-e707919911a4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d567a96-08d2-47a9-a77d-bf83d5ece36c", "sighting_of_ref": "indicator--db46d36a-c5c8-43d4-bf27-ac6ebc6b3ee1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d738159-e437-4646-b93e-7c64987a2ec7", "sighting_of_ref": "indicator--a388315e-ff59-4d0d-8905-f457cecb92b4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93eb0e5a-1a94-4fb8-b84f-32ec972571f9", "sighting_of_ref": "indicator--65320688-0fd8-4541-a8d6-f9beb411d21a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f609836-8685-4136-bdc7-d6559a83fcb2", "sighting_of_ref": "indicator--988c8b1e-8ef6-4ebc-a025-ef448098a732", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f17ad89-e1c6-48a2-8db2-de7487aa4614", "sighting_of_ref": "indicator--3383b236-b63e-49b4-a30c-ed0c7b672804", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec33f28a-b950-4bcc-bf87-deff6b392921", "sighting_of_ref": "indicator--dbf974b7-d31e-4e2f-9a5d-b15f1ceb5e50", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--928c6b91-18c6-4ff0-a83f-24958c32a6ec", "sighting_of_ref": "indicator--84eaac16-e510-4e5e-809d-8f880e070e98", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ab0d59e-5ec2-40b6-9788-2c7c6d6e54e9", "sighting_of_ref": "indicator--ba8b184b-3b25-4305-a1ae-67c318d44609", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e77e76ca-6520-48a3-abbb-24e3809e251c", "sighting_of_ref": "indicator--8347df99-2b74-4c70-935e-4331cfa79eda", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a790c9ff-d0da-4cb1-b885-d890fbaca7f6", "sighting_of_ref": "indicator--f5ae417d-5aa1-4177-8b79-e81f6840d969", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f97c26d-2ab4-4538-b73d-4bca00826ebb", "sighting_of_ref": "indicator--9f3f1533-a9b6-476a-bd95-a28e03e58b3b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44176170-4153-4b93-9a7c-fc09474dbcd2", "sighting_of_ref": "indicator--e9e06530-14ed-40b9-939f-19c13dfbfeb5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f141c4d-4e04-49be-834b-5533bca2aabf", "sighting_of_ref": "indicator--f185b33e-e925-4620-8f10-2ce5d17d9b30", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9118193-ec18-4de8-95fd-62f31ac82cbf", "sighting_of_ref": "indicator--4036176e-2596-4fec-9b09-2a0f29a8c621", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a4ca209-fa82-4324-b543-9ff166ffd940", "sighting_of_ref": "indicator--7f5a2b89-0ac3-432c-8d76-ce7b8b3cdf95", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccd4bf9e-7d06-403b-b03d-89bb4efce389", "sighting_of_ref": "indicator--2fb7e71b-365d-4878-b380-ac48183ac1e9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f6c288d-f061-4b76-b9e6-943d34d51b14", "sighting_of_ref": "indicator--05d2d08c-3803-4526-8f62-3338f3c2a0fe", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12fce55d-935d-4473-a553-40effced35c8", "sighting_of_ref": "indicator--9644ac2b-a6e8-4553-8297-364425ba20e0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d0384c-a1f8-428e-938a-316ed64d3cbc", "sighting_of_ref": "indicator--713c0019-8983-480d-ac07-9309878ae007", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ecbc46-59e7-489b-ace4-1276f324f9a8", "sighting_of_ref": "indicator--49e79b8e-e144-4053-b464-af7755e3c2a4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0d7b755-7ad2-47b1-b2d2-7fb1cd89396e", "sighting_of_ref": "indicator--f875b9e0-8c0b-411d-b1ea-64366d754f68", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd780b7-28f4-4558-aee6-a3003539b031", "sighting_of_ref": "indicator--a7fa4d97-df54-4db0-9417-0a7c18a63856", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2989c245-9f38-43bf-94aa-fb121b96b155", "sighting_of_ref": "indicator--0c214f54-244a-40ec-99e0-885a374457ad", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94029f74-00d0-4cf3-b62e-0a2ee69ff3ed", "sighting_of_ref": "indicator--573c0911-50ce-4bfa-bd0f-5b0b81b5b733", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d356924-2912-4f10-b3ef-b3445ea46af8", "sighting_of_ref": "indicator--15892ff6-5eaf-4e31-95cd-9f50f7924d91", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca3a372-9485-45cc-b30f-33a7d5196e3b", "sighting_of_ref": "indicator--a1a07e45-a869-4766-aa28-81d69faff986", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9421e659-2a02-4af3-aa71-9381236321b2", "sighting_of_ref": "indicator--efa40708-e556-4585-89fc-d3449216aca7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a0d1f88-1a4e-4d61-88e1-8492f30d9f11", "sighting_of_ref": "indicator--e31f12c8-0192-45c9-b9f1-fbaf3fddf940", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9dc59d1-5635-4b05-ac95-88f0889b99a1", "sighting_of_ref": "indicator--6c59e96a-f320-4819-82cf-e90c88d00855", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d86aa689-a9a1-4859-8d92-43bd2c6f044d", "sighting_of_ref": "indicator--16cea2df-677b-4873-a55d-f39ea50010a3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--537ced28-2ba9-4c75-99e4-36ad124da0d9", "sighting_of_ref": "indicator--e69601e7-c2c8-4bbf-80bf-661be581c253", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c832796a-8fe3-48dd-8540-2d4ffc740bd5", "sighting_of_ref": "indicator--3a645e3a-fb38-4600-9ab8-5229ecec1903", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e4289f1-d7a6-4e1b-9075-e3598a56ee5c", "sighting_of_ref": "indicator--7cfe62e5-f15a-45a0-a983-497b8d14e201", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f20a66a-62fc-42cb-b088-306cde8ec58f", "sighting_of_ref": "indicator--90d3a049-1a45-44ad-a077-e038c7588808", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb23af8-fba8-4ebe-9f6c-3d7928cb773f", "sighting_of_ref": "indicator--906caede-f42b-4fcc-9277-20cbadaa01d8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32771cc8-6fb1-4e2d-9251-3a3edf743b18", "sighting_of_ref": "indicator--ddbfdbbe-9d1b-4a5a-b8c9-acb750ca0bc7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64762c88-ca00-4402-9969-a924ac7f00b7", "sighting_of_ref": "indicator--89548225-9daf-41a7-bf99-a8011c5e222f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f38bd122-7d54-4879-b329-564e477da457", "sighting_of_ref": "indicator--0a0eeacf-5599-4e81-8527-4e3997b1569a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c678800-50cc-4c46-9ce0-20f803ceda3c", "sighting_of_ref": "indicator--d66b0731-c105-4aa1-830c-7a3cbf8aaab8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6946a143-9959-4605-a21d-ee31bae12e7e", "sighting_of_ref": "indicator--208616fa-569a-4480-a1cd-ff73863afd22", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c678216a-6928-4749-9de3-de374e756cd5", "sighting_of_ref": "indicator--574708f4-9692-440f-b72f-dec5a6414a61", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3153a556-8520-4f72-8cda-2e1a9d6b8a57", "sighting_of_ref": "indicator--e38a706e-5344-431c-9215-41ec8497707a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--150b12fa-617d-425b-905b-54fe3f792cc8", "sighting_of_ref": "indicator--94fc67bb-6d46-4f2f-b17a-ab308bad6663", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75a302b9-9510-46a5-b8f9-38cdd9293457", "sighting_of_ref": "indicator--7d05f745-d6e1-46e3-b37a-4aba3b92ad46", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7268b926-945c-4375-8b19-301518b25fe6", "sighting_of_ref": "indicator--f59bf3ef-4032-4a04-8696-ee811ba73c2b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ad6e6f0-e820-469d-9757-9cd507cd213b", "sighting_of_ref": "indicator--cf3d9ea5-69c7-44a0-8a7f-c9a93b0f13be", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94fee910-ea3f-41dc-831f-cd234804692d", "sighting_of_ref": "indicator--7d3bc2e4-0662-423d-9a35-2d4c061be72f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74db6015-d165-4180-a847-f7ce38800126", "sighting_of_ref": "indicator--ce7ec9f7-d394-47bc-a909-1b547379c6d6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30e720fa-a790-4ed1-8bb6-db1465d66649", "sighting_of_ref": "indicator--c2c5b71a-8424-4af8-ad66-f285d1bad858", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c765d157-c785-4713-acf1-eb3790e076f9", "sighting_of_ref": "indicator--d7302aec-c717-4b0d-8ae5-e176cf568e7b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cef1e4c-f32a-4b3e-9cec-3d619e0d4fdf", "sighting_of_ref": "indicator--64c677fe-486a-4227-ba63-79b23f233365", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3683720-e638-4078-891b-cd9c72717f4e", "sighting_of_ref": "indicator--d697f1aa-47ee-4446-8d2c-f454e132f0b0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b7e200-23f6-4f53-9451-cdba91d87d18", "sighting_of_ref": "indicator--38e01ad6-71c4-4b6f-909e-589b9d02e23f", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--428459ce-54b7-445d-a9e4-9c4209098953", "sighting_of_ref": "indicator--6a5de49f-e81b-4478-acd4-68a73d9ef8ae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2c146f2-7b65-4abc-b5ef-4898f828c150", "sighting_of_ref": "indicator--8a366702-279c-4e2a-b122-490a1b5bb5cf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfc63d56-3cc9-4d06-89cd-328425f3b6e9", "sighting_of_ref": "indicator--964b0448-45db-45c4-98ef-c7d5854d81fa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e8f093-ba96-4319-993f-5c89c7e4bd38", "sighting_of_ref": "indicator--f9ba4897-f613-4c48-befd-2509f5cd308c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e5cddd-2bf6-4123-8281-da6e586872b8", "sighting_of_ref": "indicator--3b6765e3-a578-4b0b-a3ab-09996db86636", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d5d3011-7d53-4dca-a661-bf429198d332", "sighting_of_ref": "indicator--e90fddbf-7ce3-4867-b826-cb07ce4bab7c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a41b48f-1483-4b68-9cbd-f28247de397b", "sighting_of_ref": "indicator--468f83aa-9583-488e-a454-822994378828", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--292f78d6-de17-4d19-8713-0ffd6961be02", "sighting_of_ref": "indicator--c3241428-7d4c-4d7b-a9ef-906087a53e00", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd7620e-374e-408f-9a9e-e2bd718b257c", "sighting_of_ref": "indicator--5318cd45-b581-4691-b25f-9b204973b680", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d56d817-05f7-4219-b02b-9f399dd67053", "sighting_of_ref": "indicator--3839b24a-6d11-4203-a916-89f4dde531a7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d43c100-86f0-45f4-ad6d-9391626181d5", "sighting_of_ref": "indicator--eb0523cb-a426-43f2-929f-e4a78feb48bb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d71aa4b1-208b-401c-b851-5de4c21ff8f3", "sighting_of_ref": "indicator--7239832e-a0ae-4a4a-8dbc-35b9e85de391", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94b73988-41be-470f-ab9b-539036f20493", "sighting_of_ref": "indicator--ba59ef4e-ca0e-4241-ad01-c94e1f78279c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fde15ee3-95fb-4310-8f96-8f97eb9b7edb", "sighting_of_ref": "indicator--88a501ee-c06d-4990-bbf4-c4fa8bced9da", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--956def4d-1c1c-4adf-8ddc-b562964eb264", "sighting_of_ref": "indicator--0d696710-891d-4985-9f2a-7e8850bd8c05", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a62c567-234b-4001-aee0-65bee5b955a3", "sighting_of_ref": "indicator--ebbee5ea-fe24-4698-885a-0a5f6e0f49c6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c059a1-a9e4-4d9b-8c83-41cfa5c603fb", "sighting_of_ref": "indicator--e6699b98-6fe7-40e4-839a-3fef31c4afdc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccb73cfd-fdbe-4833-9214-d81ec0c4529b", "sighting_of_ref": "indicator--70f35024-a1b4-44a9-943f-9d86a8c5dacc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5090aa3-98b1-44ff-9248-bda65346fd20", "sighting_of_ref": "indicator--09994008-c3eb-4814-b4e4-089f8d26a6a7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e37a4110-2d05-476f-a86f-10621aba7806", "sighting_of_ref": "indicator--740addf9-e550-4f5d-ab97-905afb1b6836", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bdca205-8202-49db-9d76-9a6829f464d7", "sighting_of_ref": "indicator--76b7f434-03a6-4d67-b952-c8660f178c84", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca38aace-c12d-418e-adb2-d1020835bab3", "sighting_of_ref": "indicator--17443839-f789-4eb3-a9bb-93db875c3d0c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94bd9617-6582-4c69-af32-57f7138576d1", "sighting_of_ref": "indicator--ec43a2a9-8cd8-428d-8b05-e66084d9b952", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28359c88-a40e-443e-9f02-8d1737510410", "sighting_of_ref": "indicator--226319b7-cec8-4dd1-8b48-3f987351966e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63d4211d-8033-4a35-b959-64b967dda8ea", "sighting_of_ref": "indicator--6f70b6e8-1f7a-4ba6-8ab1-ab824aa5f174", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edb96219-e66f-4efd-b462-3902c3ab5c73", "sighting_of_ref": "indicator--bfa618c9-7868-4eb6-90f8-f05310cac142", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04f90a94-7d8b-4913-8b30-7a6350d58127", "sighting_of_ref": "indicator--8f1e9573-b06d-456b-af35-5f0259ec1e0b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1754129f-ccd5-45a8-9cae-bc163872b24d", "sighting_of_ref": "indicator--db5d96fa-b946-4e21-b5d5-d1cfd38b4715", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--760c3dbf-14d5-4eb4-a6a5-b5262517be11", "sighting_of_ref": "indicator--6ce3067b-10d1-4814-b3d5-c60dbd8eb54b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44a6ba95-964d-4b31-ab87-28011d7e35e3", "sighting_of_ref": "indicator--b9799ca1-cd3a-44ad-9273-c39265ee7a84", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fafa679-670a-49f1-80d7-5e85990ccac4", "sighting_of_ref": "indicator--3729aecf-ad31-403e-a695-eb1ccc0e87e4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50fc5f25-ce7c-4988-bc09-c3ab20a9af0d", "sighting_of_ref": "indicator--4cfd6dc6-305e-4c10-ad54-9b229a85d714", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ad985a4-fc19-4c5c-a198-869611d3a3fd", "sighting_of_ref": "indicator--ccb30ea1-cd34-4266-b6d8-c163765f8afd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b84e0fbc-8f7f-4936-9590-4e3dec42f1be", "sighting_of_ref": "indicator--38b60ed0-8eeb-4fdb-bcab-26bcad17ae79", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8d351d5-8473-4d7a-a401-9ac7d813fb6a", "sighting_of_ref": "indicator--88e80ab3-7f3c-4a67-9e58-0dce7ac3916b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba1edb8-70cb-4ce3-9900-2b44426c9db7", "sighting_of_ref": "indicator--119cd28f-31f7-44c7-872f-0fbee7e6d992", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--191f0762-eebc-40e6-abde-a4de43fd822e", "sighting_of_ref": "indicator--a6a3f79b-591e-4f7e-ab8b-c4d9211d9f74", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98245066-f820-45a4-aefc-8500ab052f78", "sighting_of_ref": "indicator--5436413a-2f65-4ef9-8475-0841f3a4dcd4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--def1a125-e22c-4128-b63e-e0e01dab4f6a", "sighting_of_ref": "indicator--4ec2bfb2-6f16-4eb6-8466-c8e672f060c9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc8ed25-522e-45c1-8d5a-a41bc9f21dc2", "sighting_of_ref": "indicator--06ce2da3-812f-4258-b7bc-8b331178944c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49d120d0-c6a9-40cd-a6a5-ccc4a892364c", "sighting_of_ref": "indicator--6536d8ef-a656-4259-bac4-a5c59dfa462f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5382cf3-991b-4358-9f34-1c69d10a91cb", "sighting_of_ref": "indicator--6b5f0ea0-4270-47e9-917f-5893e73f0319", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--141cfca0-2e63-43b2-afa2-5773e313887b", "sighting_of_ref": "indicator--40cc2a57-aaad-436c-9e8e-29fec47cec6d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d693614-1307-46f0-99d4-b93b81d7c38a", "sighting_of_ref": "indicator--29c5f954-b4d0-4589-9115-a624d0d57b2b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a613e3a-89ce-43fd-949d-a4671ef55e78", "sighting_of_ref": "indicator--aff8a84a-8980-4f28-9e4a-c3a27e3bee6c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c154dd94-cc78-442c-b35f-b04bd8a2d53c", "sighting_of_ref": "indicator--53d63c44-7297-4423-a0ba-6a4a5994e358", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1f8e20e-cee0-4801-965b-602aeaca8407", "sighting_of_ref": "indicator--cd316bd3-d8b3-487b-855a-eb25a6e1d199", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--468bde81-3081-4a4b-8d8f-448f8502c7cb", "sighting_of_ref": "indicator--8d0419ba-206d-40fc-a2de-1e62ff08e994", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fca89c6a-30f5-4616-b9fe-f2e455273a85", "sighting_of_ref": "indicator--aeb075a1-01f8-4b3b-9419-3afccd75913e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31270442-56fa-4bd8-bef5-8d591a8a8d5c", "sighting_of_ref": "indicator--89dfe511-0f13-4555-8f60-2ce43938aefe", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed80663-1c18-45d2-a18f-13e555559df4", "sighting_of_ref": "indicator--8b263b50-e5e2-4b2e-8c7f-2644996120ec", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a764ffbc-8d5e-4e1d-b901-e49dd8078675", "sighting_of_ref": "indicator--2c9586f9-4195-4850-b807-ef0cdcc9f30d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39385f4b-d99e-42bf-97ab-934b9a811fc8", "sighting_of_ref": "indicator--a5dec7c8-09ed-440b-9efd-e6c39f1664e4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a27f56e-dd0e-4218-8248-995b0af0e01b", "sighting_of_ref": "indicator--5fe5c8a0-f680-411c-9c74-274c76f2a918", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8efe2364-cb4f-4bdc-94b8-45701b61b78a", "sighting_of_ref": "indicator--c20fa9b0-d5c7-4664-9cac-f30d73f2775b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73fd5a7a-de31-4f4b-91aa-207dc1e96494", "sighting_of_ref": "indicator--1dd68fa9-61ff-43da-9064-d7c50425d947", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee0b03c-7e45-4dac-881a-85e923e9932e", "sighting_of_ref": "indicator--0a762c79-4b5d-4d2f-95a2-a29a4a5fc346", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f974b78-404f-4d94-9501-2c5eb9f0b0bb", "sighting_of_ref": "indicator--796fcd7c-9317-443a-83e3-2cf54d93dc3e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37340fdc-1e64-4a48-9de6-9478fd6f2b0d", "sighting_of_ref": "indicator--4bdca56b-8a22-43df-bfe6-cab22d712fcb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27ed408e-58b7-4602-9917-56ce72d90d04", "sighting_of_ref": "indicator--a9751477-82e7-4ce2-81f5-181864ea505f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eb97c9d-efad-41ac-9c18-f075afd20b52", "sighting_of_ref": "indicator--a5b33662-ab26-4e52-ac74-648be7489769", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b560e64-dcd8-4215-bbc7-18ac3d16e25c", "sighting_of_ref": "indicator--535640e7-4f9c-4d43-971c-8321c8f0f2ad", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90df0f18-6f8a-427b-8391-9e1beb7a88f9", "sighting_of_ref": "indicator--32b43124-d236-4415-812d-24f0714b3492", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85f37202-f6ac-401b-9f88-a46562b16025", "sighting_of_ref": "indicator--de3ecbe9-b252-4a7d-ae5d-171aae3176ca", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f850561-5003-4b17-bcb6-255751aa666a", "sighting_of_ref": "indicator--63e066c8-d09a-4a88-8c85-912116a02cb8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a81932b-238c-41d6-b1b9-825383668151", "sighting_of_ref": "indicator--0a1af7df-4408-4403-96ff-451a7702706f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4711a9da-db53-4ad7-b051-6dd05adffba9", "sighting_of_ref": "indicator--22278e11-8172-44bd-a8fc-0eea925c95e7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe712bab-c4ef-4da9-935b-1ac62998ba93", "sighting_of_ref": "indicator--db6a94c2-af12-4b9e-ac59-fd3e1f557481", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a535ea8-fd84-4967-ab5a-2dca41982054", "sighting_of_ref": "indicator--87eae58d-c403-41b4-b079-9112b4fcbb7e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--366949ac-8b54-4c17-8cb9-eeef28e09d8b", "sighting_of_ref": "indicator--c164da80-7f66-45f8-921d-37ab884c4392", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--370c99ac-651a-4c74-971f-a882e7d0c9a4", "sighting_of_ref": "indicator--20bfe07b-18f1-4dac-85a2-3ee00b15f805", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--015465c2-0e5b-483e-a483-02f8f021adb9", "sighting_of_ref": "indicator--b48ae6d6-0f32-47de-86e0-2d89105b2e78", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffd1511b-826d-4f5b-b0a0-38d3b4434886", "sighting_of_ref": "indicator--696e629e-bc52-43ab-80a6-334a281d5a29", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36e98d01-ce4a-41b2-8e0b-e7f97572c4f9", "sighting_of_ref": "indicator--24c59b74-d650-4b05-b881-bb5f5153a7b3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb97e472-38a6-4f11-9ab6-490d78e3504b", "sighting_of_ref": "indicator--8f3f6c14-fc51-4512-8386-bcc5d4ab61cc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48e196bd-79ed-4183-ac94-55d07f7a9044", "sighting_of_ref": "indicator--409bd010-bb6d-428d-a57e-73107504bf23", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d76e0ff4-bf39-4f4b-be05-d11c02ad2263", "sighting_of_ref": "indicator--04af682f-6ea5-480d-9290-dca363736a62", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d57e14d4-95aa-45ef-8e00-7c0157ffb41d", "sighting_of_ref": "indicator--8d7ec274-257f-46b5-add6-a1a7911968c4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee1582ce-78a6-4ee0-8fe1-93ae9295f8ac", "sighting_of_ref": "indicator--e4841c5c-a08f-4ad5-9e46-af9a6c8332aa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb2f2a7f-8ffb-4453-af7c-7c519c8ad310", "sighting_of_ref": "indicator--4c9a7b77-ee7e-4995-8bbd-393852140a5a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4954d1a-5ca9-4d39-9b31-b4fda7673426", "sighting_of_ref": "indicator--69ee8f88-fca2-4e42-9593-acf70ca9c90d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5f889a2-dd9c-44d4-8699-7304038c3ed3", "sighting_of_ref": "indicator--137fdd5d-7143-48f0-9f05-d5299acb628e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb2734f4-6d3e-40f7-8af2-078f76762f01", "sighting_of_ref": "indicator--e8ad8b17-b235-4208-ae79-1af5bc16382e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ed1d6d6-73ce-48ee-8f74-3d0772312f95", "sighting_of_ref": "indicator--d505480f-030b-4e7c-848f-42d8b8d34bcc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a1a52b-b33a-441d-804d-e9942ba5999d", "sighting_of_ref": "indicator--74b7d033-3d92-4db1-af33-8a04702a4294", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd81631e-0ef9-4cb8-8bd0-6838d8521f61", "sighting_of_ref": "indicator--b292ef52-0917-434b-9d86-549e3d4f5131", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af1ab1f3-08f4-49f4-880f-30f6b5b79771", "sighting_of_ref": "indicator--34c06268-99b1-4480-bae2-aa698a86d187", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6455590-4f5b-4263-9555-fd1e37e038c4", "sighting_of_ref": "indicator--d0267e3c-e54a-4c29-908d-4929add51d44", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0a496a6-6a10-4d5a-b7f2-c717d071d109", "sighting_of_ref": "indicator--cd69cca4-09cd-4fe2-bdf8-7c0231623bb5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d0eeb37-c865-4949-876b-5897bbe2b6a4", "sighting_of_ref": "indicator--14b5252f-a4b7-48fb-922e-4dd65046f856", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a023aa68-e718-41a9-9d15-345866465daf", "sighting_of_ref": "indicator--40d52388-46e2-4798-be55-dba72dcb2a93", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef87ddde-2956-464e-8437-0b40b6af0eb1", "sighting_of_ref": "indicator--ec6bde54-90a4-4586-a05e-5640f77fb9b9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04c7fbb0-534b-46da-abb6-45680cf8a912", "sighting_of_ref": "indicator--61ad0d15-28c3-4b1b-b99f-a6ab04c616d6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5a50aad-fd3c-4ae6-b2a8-b591ddf495e2", "sighting_of_ref": "indicator--29a68d95-4f7e-490a-9d17-7a5d5fe89362", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8f44506-0de3-4628-83e3-13d87402a7db", "sighting_of_ref": "indicator--78422100-cfef-45fb-93e9-b19f4b22bf1e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f29f2ae3-a7b5-46a3-9687-a53d25d591be", "sighting_of_ref": "indicator--c705321e-4cef-4959-9614-5278037d01c5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84c20676-2933-44a8-802d-0a67c8810061", "sighting_of_ref": "indicator--e0a707d8-a208-45f8-a6f7-5cba95baecf5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--504cd8f1-9c81-4b6d-9fda-624f8157d996", "sighting_of_ref": "indicator--1293cfdd-b9dc-4e32-bf2d-c4357e2741f3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef4d8fa9-a3a1-4d52-9c72-52df97657a03", "sighting_of_ref": "indicator--23362962-6d05-467c-b4bc-66c5b83c72b3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41057b9c-1e45-4e23-b620-4b52f5647f41", "sighting_of_ref": "indicator--f07d28a9-efe5-4849-90aa-f18755fd8216", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25a6a8c8-d97b-495f-aed1-4c158b98a293", "sighting_of_ref": "indicator--b2917863-4f88-4609-b199-588c4983e577", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--796e647c-6b3c-4e22-bb91-09509c39e736", "sighting_of_ref": "indicator--bfe8ae05-114f-473a-a6bb-a564eb3a7bc0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--681af2bf-7000-4634-bb39-c863ca81a575", "sighting_of_ref": "indicator--50676239-9868-4aa0-ab38-a807fc8329ce", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a289af4b-8345-4aa7-84a7-25c38e170198", "sighting_of_ref": "indicator--d57456ed-feb2-440e-98cf-61e395cf845c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56940e95-d841-4487-a313-159fb48fb69c", "sighting_of_ref": "indicator--184bd2cc-18de-4ca2-92ce-9f54954b1506", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d85223-3fa2-425a-a038-3615232cb7b0", "sighting_of_ref": "indicator--040379f7-a6eb-41fa-b52b-dad6782be8a9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e52dff-c8b6-42e8-802c-5ceed224f4b2", "sighting_of_ref": "indicator--bf255fc6-50e8-49f1-a0a6-d6bf80165f3d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--684a0b8d-1499-4e66-807a-1d7caa649da8", "sighting_of_ref": "indicator--69c7f4f4-c009-48b0-852b-c634b2cb1102", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a066dbaf-2680-4d31-b520-302685d37fee", "sighting_of_ref": "indicator--41941b20-bd6b-40d0-b1e9-40afdbade358", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66f06207-c163-4ae7-a9fb-f16dac012e03", "sighting_of_ref": "indicator--81c16ff8-45c5-4714-93ee-8a7c6fd1144a", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--257709a4-796b-45f4-8a76-34b9b0904ad8", "sighting_of_ref": "indicator--528d3f5e-583f-4385-b23b-5e4fe0696dba", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d14c27ca-9d3e-4ce0-b5bb-28e0bd0a30a4", "sighting_of_ref": "indicator--650fe6eb-6a60-4efe-8dbe-2c2a98036a0e", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--336a22b4-0ed7-4735-8173-07e1b763e4e1", "sighting_of_ref": "indicator--576da97e-8032-45c8-ad5f-65d3a1d9a8a5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26ad525a-f110-4582-843f-42f968fe6cb6", "sighting_of_ref": "indicator--2d40e569-236c-4cd5-8d7f-dedebe8d3f46", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c9d9b4b-aa8c-4b05-a519-62ab50a305dc", "sighting_of_ref": "indicator--1ee4133f-543a-4f4a-b61e-c8f1db93a49e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e55a3989-e358-4292-9e8a-d88048ad754d", "sighting_of_ref": "indicator--c6af1cc7-258b-42cf-a355-f0735cc13ee6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4c99789-e7d8-4226-9107-361d2f6fd0cf", "sighting_of_ref": "indicator--231431c5-7dfa-4dc1-9efe-8d29ddd14aaa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d04f7d-17c9-400c-a41c-2a5777a88f85", "sighting_of_ref": "indicator--1ced6206-4635-40a4-a167-4dcab473cf96", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f280fd28-2e1c-480e-b08d-5e6b6ee6c9ec", "sighting_of_ref": "indicator--6d813d5f-5534-40be-a965-017a7313f0dd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--924eeb97-fe4a-48fe-a110-79760826bbad", "sighting_of_ref": "indicator--689e18dc-6df0-4e00-b0b5-12ae992c9d55", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b10e79e3-df3a-49d5-a2a1-5d3c4aa2d6cc", "sighting_of_ref": "indicator--27373aed-a300-43da-9a89-0b598cf662e7", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06412c72-34b4-4e7c-9c8c-947817a3fb9e", "sighting_of_ref": "indicator--88166770-b4a8-4955-a556-dbf39bb56611", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1915cf14-1f39-410c-ac52-72369bd01ca3", "sighting_of_ref": "indicator--18dbaf66-5132-441b-a99c-9ba8539bdefa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fca7ff37-6a9e-43d8-83e5-3e88700cf31b", "sighting_of_ref": "indicator--3b8d9ad4-1145-4e62-8a8e-1c33032be872", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--096d4514-1f0b-468f-a70e-e94bb759c82d", "sighting_of_ref": "indicator--4d8d8507-6fc7-4db2-b16d-a9a541743296", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89514361-c7cc-4c2a-aed3-e89fcedead17", "sighting_of_ref": "indicator--e3157193-a47c-4cad-a3ef-27263848c525", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7950d62d-f62f-42ea-80e4-8a36babb7239", "sighting_of_ref": "indicator--3ff82c66-8f7f-4cf7-bc7a-86ba75beda04", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e11c969b-1933-44d5-994c-6db39c4f4efc", "sighting_of_ref": "indicator--a7392583-4318-45ea-bde5-24f27a59a933", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--524b9d1a-e627-4c89-901d-f83eb4a43947", "sighting_of_ref": "indicator--e935704f-061b-45f6-8125-0e3913628478", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5766f3f3-d4ef-436b-a6e3-b264289aae28", "sighting_of_ref": "indicator--b6a6c1d3-d590-47a3-a164-f2b6a4472763", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dda4613-6eab-4638-9cb0-151285e5d962", "sighting_of_ref": "indicator--3c866840-b890-4072-a9a2-79e6894b55f4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd729f50-9fb7-496c-8ff8-039c9d112fc9", "sighting_of_ref": "indicator--2cf8479f-4603-4052-887e-0253ad9fd727", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03721f06-85b0-4373-a146-8bc28a85cc1c", "sighting_of_ref": "indicator--6735bd8f-2968-4161-b7a4-0490f062ba84", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8763c16e-dadb-453e-9517-a2d418bf07be", "sighting_of_ref": "indicator--97e939d8-dd28-40da-9629-cf607b457d76", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e22ad004-b4ff-42a2-a962-9a2e839f9255", "sighting_of_ref": "indicator--b017e3e7-47d9-47d4-ad87-1db9d461203a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27631acd-26d5-4342-8bab-cf9b959f79ea", "sighting_of_ref": "indicator--7a0838bc-6ec4-4922-9992-45d5dbadda4f", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a22d5d8-372d-48f9-a68d-a082c4c0be11", "sighting_of_ref": "indicator--9a36023b-ff66-4aab-935c-4dc1976267df", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f7e5ba7-b29d-47fa-8930-cbefc413a48b", "sighting_of_ref": "indicator--3e5573c7-166b-4937-b895-dc8950d40485", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac6e81c0-fc74-41d2-8fed-3f60ab211a80", "sighting_of_ref": "indicator--1358e55b-efb2-4c52-8436-6c35ccc028a6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ead021-2a8c-4668-8317-f53b193fa7cb", "sighting_of_ref": "indicator--01cb2f83-c3dc-4d2b-bcc0-d9b15a7b6c1d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a233956-d152-4c59-a44b-f372f9762b38", "sighting_of_ref": "indicator--48aa9f42-39b3-4596-bd23-163dd8a6c679", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--339a77d2-5fde-4b3f-87c6-cef76a344b03", "sighting_of_ref": "indicator--6f623d1b-33d5-4d0c-818d-fcdaf37a2409", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c745e8eb-e5f4-45a5-ba77-5e3d528bff9f", "sighting_of_ref": "indicator--6f623d1b-33d5-4d0c-818d-fcdaf37a2409", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a071b990-d30b-4cb9-9b87-1562cfd10107", "sighting_of_ref": "indicator--94f322d8-245c-42f0-a6b4-131257b0baeb", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a2fd5d4-4b13-45cd-9c28-8d415971a6b9", "sighting_of_ref": "indicator--5cfefa6d-5118-4346-8328-262861833ef0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1be5637-831b-4761-ae1c-c0e0fd0c52b6", "sighting_of_ref": "indicator--9fd3f2a0-67b1-421e-ad04-de8cbc52a738", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a449509-867c-462b-9eac-3b2b135b46bd", "sighting_of_ref": "indicator--41de66f0-522c-4ba8-bea1-835133f618d0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82080a08-f613-4e87-acd0-5340de0dfea2", "sighting_of_ref": "indicator--c280f406-597e-4926-a9bb-930860150b10", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e0fa22d-ad76-4f57-b855-b30da7b19edf", "sighting_of_ref": "indicator--56c1affc-7ceb-42cf-8d84-5d60f5016b09", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d509d1a-a8cc-4237-a59d-80a27ebc96d3", "sighting_of_ref": "indicator--7ad0543a-9511-468d-bab0-3d57365d6937", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a8c9c66-1b48-4ca5-be52-3b09d84d97a0", "sighting_of_ref": "indicator--03a4145c-9f4d-4c0e-839e-5b966d524dc6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21089de7-c9de-442c-88d3-b729144c2487", "sighting_of_ref": "indicator--8b8282d4-1288-48b6-94e2-29889d520978", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bed7f85-f4a6-4345-ae54-c8e06571d6a5", "sighting_of_ref": "indicator--f970c137-12af-4fcd-a3a4-0bfd385cd025", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--817d988e-5c6d-48e8-87f3-364477c5a99f", "sighting_of_ref": "indicator--a99158d9-718a-4e33-9053-4f7f862be2df", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f47f1af-7c84-4080-a860-fa5f3b8325ef", "sighting_of_ref": "indicator--0538282f-38b7-4a17-9b14-fb786d1581dd", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a056b056-8ad2-4a40-a45c-0bb312209638", "sighting_of_ref": "indicator--9668fc42-b0f2-4a12-aca1-055a0591c836", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c270fe9e-23dc-439f-9495-148da8c2a78e", "sighting_of_ref": "indicator--b7ba8fd7-b0e8-4177-a7eb-ae76bef0c5dc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2c66e2a-48f8-4b33-aec9-ab6f6b58ceb1", "sighting_of_ref": "indicator--84e781a0-c31e-4d85-98b0-cb9e54e2911f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1b0322d-10e7-44eb-ace4-f37b1fa63d54", "sighting_of_ref": "indicator--d7c69558-f1ca-4db0-804b-1f35ca389d04", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b4f01d-4e83-4377-ba27-dd2d80e28266", "sighting_of_ref": "indicator--0c4f1001-e683-4964-9f3c-02722bc718dc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--494956d3-d457-4043-af45-3e5b4e9aa060", "sighting_of_ref": "indicator--bd874c5f-ff51-450c-aeb4-c527169f9572", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b1a6331-e4af-4a0c-9324-0c7c965bb77e", "sighting_of_ref": "indicator--46efe40e-f164-4728-829f-5d0f70f50ef9", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f70cdf-9357-488f-a8a8-5e6669f9fafb", "sighting_of_ref": "indicator--26496bab-affb-4ae1-baf5-88ce0cfd5742", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b71f299a-d5b6-4689-b991-72ef7c6b17c9", "sighting_of_ref": "indicator--6230bbe0-12c9-4046-92b1-40cbdb29e9d4", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f7bcf9d-6dcf-47e7-a84e-ac03f20d2a10", "sighting_of_ref": "indicator--07df97d2-5a92-46c9-8866-f5baa0906e38", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ddb6f28-d83e-4b77-840b-5395a9bb9a1a", "sighting_of_ref": "indicator--a18a8a1a-8242-4e2b-8b82-651191a18669", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1f4d273-5c29-4182-8506-2a6dd6fcd476", "sighting_of_ref": "indicator--9e07cc29-826e-40d9-b370-7ab1e1462f61", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f1cc9fa-55c9-4135-9df6-9ac594ca5c25", "sighting_of_ref": "indicator--e53ffb7b-db0b-4a20-9d18-2dc7cb251559", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee79ca6-4cca-4a05-9a60-6cf12cd83590", "sighting_of_ref": "indicator--07edcda7-9ef2-457f-9860-b560e2a534f5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b5eda2-52ba-40c9-8eb0-1fbe8f442756", "sighting_of_ref": "indicator--b98551a1-3ed1-4b68-8239-8dc270f33efd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a191c0b-71d6-4b94-8fbc-6b00326b92d0", "sighting_of_ref": "indicator--5f62e715-384e-4ae0-99dc-c1b01ecf632e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f6c2dd2-6a01-48d6-8681-5931bfc824a5", "sighting_of_ref": "indicator--405d7480-4ac7-4fb7-a1ce-b9a187fa3d38", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e69a8a-cc21-482d-a3f5-c4662aa5da2f", "sighting_of_ref": "indicator--c9f5d43f-f968-4007-ba69-952fcc18d39d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e77063f-73d3-4a39-a7b9-14b6190b39dc", "sighting_of_ref": "indicator--fb05de2f-41fe-4b63-86f8-8acc6b0dae3c", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--146a20f5-e45e-46db-8cac-b00212910f22", "sighting_of_ref": "indicator--cfadcff5-21d6-4773-94de-81ea189211f5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bbefe61-2289-4045-83a9-379753bc8e78", "sighting_of_ref": "indicator--a013b692-0976-4cd5-a689-d820b0136be6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ab66351-cded-4cea-9877-f35567d41a72", "sighting_of_ref": "indicator--1a7eb812-0ada-4799-bd58-1354504159f9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8ba9027-fb7f-43fd-a107-8b1660307501", "sighting_of_ref": "indicator--790be167-f7a3-4fd5-af87-fd2794238e70", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32656be0-8f2a-444e-b00f-e0f0dfd97de6", "sighting_of_ref": "indicator--f654ad2b-16a0-415b-a846-a6dc0f5b56bb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1557f20a-aaed-4ff0-a441-52bf331806e5", "sighting_of_ref": "indicator--981fc9a7-418b-4579-9b17-4edab10cd21d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5133189f-8d60-4a98-af41-d76cc6439d3e", "sighting_of_ref": "indicator--7c957856-aa5f-44e9-9083-79a2336c2fe2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8389c2d-7d5d-454e-91ff-8862f62a123c", "sighting_of_ref": "indicator--7c957856-aa5f-44e9-9083-79a2336c2fe2", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431d8bea-8980-43d7-b516-6d0b14ec5c13", "sighting_of_ref": "indicator--d9ae1f0b-4422-4ac4-b47f-5aefcfbf1a7a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd6f0a04-4042-495a-94f9-b63fe5e4cf2e", "sighting_of_ref": "indicator--5bfe2735-5012-4bcf-af44-e68d51e2d01d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--621aacad-7c26-4b82-b232-297692aa1b96", "sighting_of_ref": "indicator--d9f21027-8723-4994-b368-d055f6c5c911", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a850f5ec-b6f2-41c1-a1f3-6e142dc3c257", "sighting_of_ref": "indicator--d5d5fc9f-269e-488b-8adf-a8ec0ee8f747", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8086c87e-a244-4edc-ad8d-3a5fd14f8cae", "sighting_of_ref": "indicator--75015f51-2d11-4e9a-99ed-ceffa89c0294", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd079bd-d9b8-434a-90aa-d38be99bfe29", "sighting_of_ref": "indicator--d7489736-a5b2-4329-86cf-ed2a26a73b96", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec17397-d7d8-4060-b3e8-dfae60a6c5b6", "sighting_of_ref": "indicator--cc874d9e-34ed-4298-9d0d-663a28492d97", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fecdbe7-2641-4d2e-a4f1-87d39c8a78f9", "sighting_of_ref": "indicator--bbf6ca29-e3b4-42db-9b6e-156a9953c5ac", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c23410f7-330e-4434-96ea-312c2e656cd3", "sighting_of_ref": "indicator--38893ee7-412a-4b30-a6be-916e0a953d32", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--579fd329-b8a4-453b-a5b7-ee15a3043642", "sighting_of_ref": "indicator--c3ec4162-0ab4-4e35-9da6-60519074b5db", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d223172-c2ab-4b5b-accf-6d2f4bfeeb6d", "sighting_of_ref": "indicator--8fdf8084-3a25-456a-9a5a-f94f4fb5fcde", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e88c5b-5c4a-437f-a654-15fe15a55956", "sighting_of_ref": "indicator--09fca2f7-aa56-4ab4-8f53-d9683d348888", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbd4f111-fb88-4b3d-b84f-161313704fcb", "sighting_of_ref": "indicator--8a146968-c6d9-4287-9873-db4adc44cd11", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab06bf2f-8ee6-4cf1-b7c3-a02dffa599da", "sighting_of_ref": "indicator--dc575269-b6d8-4185-8874-8322ef602a76", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4de237b-a7cf-43ca-9146-8439bcddee94", "sighting_of_ref": "indicator--67fc6983-7242-4cd0-a543-6a3131e52ab8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9afd381a-5719-4e2c-b768-3577c23f186b", "sighting_of_ref": "indicator--7ed028b7-660a-4daa-940f-b4d446d9723a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c77cc2b-f9a4-4dad-b962-2fe75311a3a2", "sighting_of_ref": "indicator--854fdb60-51bd-4080-a1fd-4595567943b8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795cd41c-fd00-4944-8570-ea93f5ca105a", "sighting_of_ref": "indicator--07f2ec22-54d0-4dfa-9e5f-aaf9ef5926ba", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad64cb26-bbcf-48b1-9bbf-61ee87f7c0f0", "sighting_of_ref": "indicator--60016df4-f778-4af0-8410-0d5067f7ba48", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--099185a2-0f04-45ed-8add-3560a35fe8ca", "sighting_of_ref": "indicator--d7d59824-a8fb-49e4-98cd-61d00b75af57", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74144a63-fe52-46c5-9f34-a917f4327265", "sighting_of_ref": "indicator--4b49ed16-528d-4fc5-bf08-0110409f26bb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf1ec624-ffcd-4da4-be4f-6b875155f998", "sighting_of_ref": "indicator--f556e1b3-52e1-4bd1-a09a-e14b8eeba3c9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c9ca81a-2b1c-46bd-84f1-026f76860ccc", "sighting_of_ref": "indicator--ec65c40c-24c1-4009-9e4b-94a6fd2218ab", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--729337be-ae43-4034-8c24-2696ad0b28e0", "sighting_of_ref": "indicator--89ebaf4a-e1be-4811-bf48-79ad621b29f6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b77ea7c-6799-4468-a097-ee2cf3994d71", "sighting_of_ref": "indicator--ccdf7a01-a8ed-484f-9012-62b8079baf44", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d43d6501-f5d9-4d7e-a523-d01538c232dc", "sighting_of_ref": "indicator--88bbf05d-869f-4b50-a338-91f165296332", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7593b047-9e88-4c72-8a48-776d03d99c3d", "sighting_of_ref": "indicator--147f0d83-e329-4566-aba6-4022e567a56f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69fa833f-4e6a-444f-9993-adc13aa69fc8", "sighting_of_ref": "indicator--f90d41ed-0094-490b-979e-1cdf9662b05f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f710376-6a54-4774-be03-393cb740935f", "sighting_of_ref": "indicator--b0d8ea4a-82c2-4bba-93e0-0582917ba76f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01dc99c9-d544-40c4-ae5f-ed616a86a312", "sighting_of_ref": "indicator--d40facaa-d76d-4726-acaa-e6a7189998f1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b59bfb98-1096-4b0d-9202-9e9f37cfb118", "sighting_of_ref": "indicator--00bfd03c-5235-4e59-bcb3-f217d45cbda9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fb8aa68-b2f3-4327-afc2-3f6406e462f9", "sighting_of_ref": "indicator--7582527b-7b7c-4b5a-9ce4-68afa8ffe24e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b79de001-c767-4c1c-ba55-f81ae16d29ba", "sighting_of_ref": "indicator--e5380364-8285-4c9e-96c4-89260f065b1d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa0a69fe-4641-4234-8621-90fa1f309860", "sighting_of_ref": "indicator--39d1bc85-09ae-4c4f-9d86-2439d066eeaa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9c28bba-49a4-43c9-9b03-d1bf76aac296", "sighting_of_ref": "indicator--fbcbe1f0-e287-4973-8dfe-af5d375c3974", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30732c11-41b1-4510-81a6-51279d3f4913", "sighting_of_ref": "indicator--4acc4882-9ef1-4474-9da8-751a99583d56", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a93055d9-60fb-4227-9a92-fcdda56781ff", "sighting_of_ref": "indicator--6013bf1a-9e47-4727-b7a9-04a6e2b03cc1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d059417a-38ce-4617-9b3b-9e466510627d", "sighting_of_ref": "indicator--ac72530c-c8a7-4d50-a378-74f5b9c3543c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0895546-0508-4d58-b4a5-418850f08ce5", "sighting_of_ref": "indicator--e535df0c-19d8-483d-99dd-2072c2fce34a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--574674ed-0327-4cc4-8d41-065dff6e92a9", "sighting_of_ref": "indicator--0aef3b00-fd6a-4620-ab53-27a9f22fffa5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f321ad5-449d-4800-941d-67eb0286c281", "sighting_of_ref": "indicator--6356b591-b199-4899-8fb7-7c7a2b6b42e4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9453ac63-fe90-4394-aba6-d5d114bacd93", "sighting_of_ref": "indicator--b7f2a379-4373-44ce-ad0d-83f06ba8d7b9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbe17b56-8ffe-4801-af62-06057efb36cb", "sighting_of_ref": "indicator--180c1495-02e0-4a9e-ad60-72c05fe12792", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba19c12-d952-4d48-981d-ac236ea7e89b", "sighting_of_ref": "indicator--30e20592-0e83-4e5d-9c6c-e6e05306eda3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--261a3b3b-3fe3-41f1-bc1d-675bb9a613b0", "sighting_of_ref": "indicator--838cd65c-ba1e-4a6a-9311-25deda47c76f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb33bb9-ce2f-4576-89d0-c63353afd8ea", "sighting_of_ref": "indicator--40831bc5-0872-4ae4-b4d7-9c11af944126", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0215d81d-7875-4c11-b3b6-0fa6e2040a92", "sighting_of_ref": "indicator--41d37138-382f-4dfd-955c-1f39dd125946", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70dca07e-b6d3-4f56-b877-e31d1b878129", "sighting_of_ref": "indicator--cfe6942a-5ba6-4431-9e89-a723032b5e96", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e630d26a-0248-4fad-b683-53307f02619e", "sighting_of_ref": "indicator--3b502cdb-505f-4f94-905e-ed27ee5f015b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed373f90-a3a7-49b7-a854-56ddc9ff3cef", "sighting_of_ref": "indicator--b4dbd871-ce48-4fd1-8322-c80c6c7a0323", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9ce795b-19b4-4f73-939d-5d8504638989", "sighting_of_ref": "indicator--b616d529-9c92-461b-bdb8-cbc04388f5e9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da7c01c5-de87-4afe-82fc-58162658d160", "sighting_of_ref": "indicator--756e9cb7-fab8-401c-86d0-e1fd42c72339", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c835bbd8-53c0-46da-a9de-14280eb766d4", "sighting_of_ref": "indicator--4f7f6c7c-bfc5-4a54-acb3-aa9af6990eb1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51de7845-008c-4d20-86c7-594d59517cba", "sighting_of_ref": "indicator--6a24b150-b375-47a8-a3c9-4e6396935160", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--343e4d06-288e-4bd7-8322-92e02c69484c", "sighting_of_ref": "indicator--5710ec63-208a-498f-b878-2fdec8679db1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a7fbe10-1aa0-452e-87e2-0d2810219f9d", "sighting_of_ref": "indicator--3a09635c-2b37-4944-84c7-051b67ae866a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--376614dc-1029-42a5-96ac-7e43203b80c5", "sighting_of_ref": "indicator--a16f8141-879f-4ab7-beab-7385194558c8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e47d0a9-6adb-4957-81b5-64bf694ae5b2", "sighting_of_ref": "indicator--30ea995c-7885-4814-81fb-3ff3eddd6611", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2118b63d-81f1-40aa-87e5-837b7e3830f8", "sighting_of_ref": "indicator--3f0a1c76-ef94-4ffb-bbde-1ac71ebbdb6b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f44e0a62-4e74-46c5-8472-667e323ea9dc", "sighting_of_ref": "indicator--b38fae4f-d489-4290-83af-de2dc30987b0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c455fd-024d-4e88-ab91-7b5e9981069d", "sighting_of_ref": "indicator--ff98fa37-7d7c-499e-90bd-6a4482249ca1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b5c927b-66bc-40fe-acb9-297e4abae619", "sighting_of_ref": "indicator--69b7d6c0-298b-4f72-8e89-5c8049a859ec", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6aa99c6-fbab-448b-a391-abbadbe9051a", "sighting_of_ref": "indicator--9165c42a-7188-409e-b7c8-06dddbcb4580", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8aab2e5-2510-4799-bd42-72145f634aab", "sighting_of_ref": "indicator--1ae1dccd-7d5d-499b-862b-99eec1194479", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c888359-91c8-42d4-900d-4970e48c64f8", "sighting_of_ref": "indicator--fb50e454-7f3a-40a3-92e5-64127ea0dad5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--058efc26-ada8-4482-9f15-f3e2148fd9fb", "sighting_of_ref": "indicator--22d2107d-3b16-4c2a-9143-59fa8361a217", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b2414cb-eaf4-4a9d-98f5-4c784344e8ee", "sighting_of_ref": "indicator--001a4a34-91a6-4de1-99ef-b11b7814c8a4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae4a45e5-9842-4351-bae4-dc43f2d49a16", "sighting_of_ref": "indicator--69dc4cbd-91a9-4dbf-a5ea-6269ca978982", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a057ce-4082-4a29-a5e8-016cfb5061e4", "sighting_of_ref": "indicator--e91bfb5c-6f2c-443d-87e2-7b14d61ef203", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb0c2458-a5e7-449b-80fe-c285e67adf8a", "sighting_of_ref": "indicator--8f0b6f08-5363-42cb-a42f-67382bb9e459", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--334f1294-3cb8-49c7-a440-0fcd564de60c", "sighting_of_ref": "indicator--b396f90f-2911-41db-89f2-440553c8ca83", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--008d43ad-4b5f-4c4b-9bbf-365d1c401852", "sighting_of_ref": "indicator--504d3288-c1c1-4273-8426-b07851c9ef4c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b392ceb-7f24-4a2c-9292-90b5b53d8305", "sighting_of_ref": "indicator--9488b163-83b2-4706-a44d-3daba11fa4d1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3608b6c6-3858-4e69-9f1d-87d0edbb8b72", "sighting_of_ref": "indicator--0ce0ea07-00eb-4bde-8153-e532bcec23c7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eee84dcd-61df-455f-965d-4a9c63319772", "sighting_of_ref": "indicator--1c93fe6e-099f-41d5-a224-96e20b3d3b8b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faa0d676-cde8-4976-83f0-acf848f56f74", "sighting_of_ref": "indicator--04d9f9f8-546a-44dc-a2c1-32b8675ec0ad", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd5d894-8b13-4bc6-a549-913d4731ff9c", "sighting_of_ref": "indicator--6d38d4dc-2796-41d6-8823-6d20d5e61592", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c42fa3e1-fdc9-4bcc-9b1f-192f8097303a", "sighting_of_ref": "indicator--3bea5a3a-0b1c-40c6-adc6-f9b9b393eb69", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b4b55f5-6ea6-4ac0-9196-f0bda06dfac8", "sighting_of_ref": "indicator--8ee7241a-3de2-4303-a450-4df1ebe4fe8a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b40b2e6-05e2-4d63-8019-1737c3ffbb72", "sighting_of_ref": "indicator--7d9cadbd-1a8b-489b-ba2d-7508795f83e3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa694cef-056a-4d15-bf27-b587534faa5a", "sighting_of_ref": "indicator--d22092f4-f3d9-47ed-96bb-929f4054ab2a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f4409d2-4399-4c19-b718-6fa2e5a457e5", "sighting_of_ref": "indicator--960959ba-1339-4de7-917e-03449fc26548", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18bc086f-4b67-4a4a-9ac7-be0d5d4a2e84", "sighting_of_ref": "indicator--6f2eccb4-f268-4099-bddc-3fae73f2bbb7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a1c7058-53aa-4ba6-9ec2-ea574f38b09f", "sighting_of_ref": "indicator--f2180651-377c-4e01-aaeb-5c1eb278dbf0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b031ef-5c61-4a73-86ba-ce5fd07b020f", "sighting_of_ref": "indicator--03ac238d-318a-4c7c-a798-b289f8aa01f0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f3271d-8e36-49a2-807d-5a5f42236d3e", "sighting_of_ref": "indicator--da666ac7-e7d3-45c5-8dd3-03eda00ed71f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbe198d1-204c-4a35-9aac-8b04e20b1278", "sighting_of_ref": "indicator--eafe74fe-bd0b-4798-bc8b-2210fc7637b9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18030ff8-42c8-40e0-91c4-5d0ade4f9018", "sighting_of_ref": "indicator--f3073a4a-ee29-4831-b95b-513de8345be9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5812f66-8a33-4051-8889-8df72bcd319a", "sighting_of_ref": "indicator--f2e65e0c-4ffe-444d-a3bd-3c423bc9769f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--692851dc-7a06-4c57-a44f-0f0daf156820", "sighting_of_ref": "indicator--ad29b1a7-7101-44ec-9df4-ef1cccde4de7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f74e4e-0621-4b41-b680-c78cdb822c2a", "sighting_of_ref": "indicator--a6854208-784c-4c5b-9b80-3c1cbd3d6e23", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eefc1684-85fd-4c99-b299-0ec683b4b9d5", "sighting_of_ref": "indicator--eee35b9a-cc9b-4f04-abd8-bf8cb73cc1e8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bf3fc7b-8c72-433c-ad7d-ba61332b38f1", "sighting_of_ref": "indicator--25883470-c774-43a3-a7b3-e16148b813da", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f983b01a-112a-47d0-babd-60e75305a5e0", "sighting_of_ref": "indicator--c43ddd9a-9a7b-4511-bb88-505ec661c5d7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--324a6098-53a8-4c4c-ad67-39dc73c75d94", "sighting_of_ref": "indicator--91edc07d-1285-4a34-b55b-14bda1d115c7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6482659c-1df7-4565-b74f-30fd77cd6c77", "sighting_of_ref": "indicator--ae8ca64d-bf00-49d9-9096-2f17111ae80c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e914c8cc-c836-4ec4-99b5-b57102f90825", "sighting_of_ref": "indicator--bdf6d0d3-9a09-4e89-ad3f-e31c25eb3a9f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1440417c-519b-40c6-8168-72ba34a8cbcf", "sighting_of_ref": "indicator--e0b34231-7e21-4d34-b453-a8e1713eba8a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50021953-aeaa-48f0-bc3c-bf55ccf774e7", "sighting_of_ref": "indicator--b09b16a9-8572-482c-b761-0d248b2f0995", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec51b08b-1e57-4757-979e-603f395ac951", "sighting_of_ref": "indicator--b7e908a1-fcdf-4c3b-8584-71d7b6f92e6e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1200ccdc-b6e1-4a2f-8ec0-3d6c37ec85f4", "sighting_of_ref": "indicator--5573b892-d067-488e-80b8-a0cf3441ba5d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97347400-cfce-4ccc-9f85-98614a6d98bb", "sighting_of_ref": "indicator--30e8f008-c996-4b86-8f8f-499d9b56c982", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef87f4f5-fd69-42f1-8b44-ddac683bffae", "sighting_of_ref": "indicator--2db19150-69fd-40d8-b554-37f5f6723fc8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1ba6183-1111-474a-8506-40fa88e92e5a", "sighting_of_ref": "indicator--cdca84cb-aae3-44ef-91cf-7d57495b77df", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2244ae4-1d57-4ac7-bb32-75797df2dfe0", "sighting_of_ref": "indicator--faefdb1b-fa6d-459b-a7c8-f6815fca3135", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1968bfa-e09c-4591-ba61-629122556f2e", "sighting_of_ref": "indicator--77631ed7-4e0f-45c1-ae6e-70e2b1f74ec6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e27f81a-ec7b-4409-b4a4-a8b9729a7cd7", "sighting_of_ref": "indicator--100ff346-9cd7-4420-a2f8-05758d3bac07", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33233b48-2ffc-4fe5-b13e-aafd97c845c5", "sighting_of_ref": "indicator--e8db0d03-e353-4d7d-bd0f-fad42fc2df67", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--711cb69d-2f84-4fa0-9986-3c15e48b54da", "sighting_of_ref": "indicator--f71082b2-ac9f-4cde-a0c4-6ce91e9b616a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf7fb56e-b5d5-43ad-be32-8e93f9f8988f", "sighting_of_ref": "indicator--20f4887b-abee-4d78-8bd0-13f91d4bb74d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--696823c9-6587-43ad-a9b2-51a7cfefb5bc", "sighting_of_ref": "indicator--be9d79ac-24d6-4020-af80-48d614ac0163", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78a05d34-602e-4fac-9f3b-0e62f8c977bc", "sighting_of_ref": "indicator--6b701ced-d83b-40da-b972-868d7f3d2ec4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--670f2e4b-e090-4a5b-954d-849e8346873a", "sighting_of_ref": "indicator--f350cb5a-f3f3-4958-ae93-c6067f56c3b9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d706265-d86c-4498-ad7f-e7ef4fd607b2", "sighting_of_ref": "indicator--8c038a24-6afa-443e-866c-52218b97469b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54427f31-ca0d-4a9d-b137-a6c097a30eb9", "sighting_of_ref": "indicator--aa310bba-193c-4f7e-a28e-69d2f1827c92", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eef46ed3-3664-4309-96b8-9b7dc1fd0fd7", "sighting_of_ref": "indicator--71a28822-5a98-4a95-ba64-a09c0884dc68", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8324f9c-b909-4fc0-a0a8-7bb4ba977c00", "sighting_of_ref": "indicator--b78de6ba-388b-4a5b-a08c-5ea111cd1521", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86311095-79c0-42b3-89c2-d432ba102261", "sighting_of_ref": "indicator--38a1d544-b2e9-40a0-8e8a-637406ba3ecb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f709bc44-63b2-4347-b953-bbfa6ba44be2", "sighting_of_ref": "indicator--6f02e030-6207-443c-aa84-8bde3dc29f45", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d9f264a-13ae-4e0a-a107-4a0501f224d6", "sighting_of_ref": "indicator--0605f310-9e20-4957-88e0-1ccb9cc72de5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47ebef43-f944-4a42-898c-a7bce0e6b125", "sighting_of_ref": "indicator--16f6e8cb-798c-4c1c-803d-b1cb2dcd141b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--914a3303-d40a-4cd1-a457-30ecb8f2541a", "sighting_of_ref": "indicator--ab29f8e1-e5ff-4a0c-bee1-eea6e20f4ed1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55d1b52c-9765-4bed-9e06-989e455331e8", "sighting_of_ref": "indicator--7f8e4abf-5566-4624-93d3-f19f7bd3dd0d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07a3c845-28aa-47f8-a772-08fb9dd2512a", "sighting_of_ref": "indicator--f33c511f-d435-4436-abc9-4913ca4c1bd1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d423f030-89b0-46e2-9109-baae73f5e547", "sighting_of_ref": "indicator--0bb51753-472e-4f90-8971-3724812029a3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7432cf9b-22a5-4e83-9df8-5f56a6c5ae26", "sighting_of_ref": "indicator--30af3253-be1d-41d7-be1f-c5c74f655f25", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e455408-8e3a-40a0-b2d4-543a67542226", "sighting_of_ref": "indicator--5e76ca47-7ba9-4698-9393-a6cc5be3b494", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3837c2f8-7172-4337-8f22-84e8e4fdca4d", "sighting_of_ref": "indicator--ea4e3aa7-3413-4b28-9743-9379bda35bf3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d87689-6722-4c6b-b7da-88edb016da52", "sighting_of_ref": "indicator--9e4da502-929f-4f1e-8c91-3fe476c511a6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0cd8e9e-acd8-4a57-b064-ac379dcd01f4", "sighting_of_ref": "indicator--57ccd310-f359-4e5d-ab06-a975d7f49c57", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f660651-d82c-406c-8381-54f51d5d22b2", "sighting_of_ref": "indicator--e970985b-ce3e-4446-8742-3934405d8232", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a6c628-0d7f-43df-a74b-183c7985c253", "sighting_of_ref": "indicator--3e9fc631-9d06-45f2-80a7-7748535270fb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d64ad4-7afe-4ad8-8514-db939e14b6b8", "sighting_of_ref": "indicator--5fd6382b-7841-485f-b7ca-99767bdff9ca", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bf2aa4b-f37e-426e-b7b8-0ba180adc4d7", "sighting_of_ref": "indicator--6e9c8b2b-0dc0-4da7-9c2d-83eb2defcd80", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--457dab80-e892-40ba-a4c4-6eb047c1d2e7", "sighting_of_ref": "indicator--48f5d9c4-7175-4079-9cb6-d8198f933e70", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a35e11e-8972-425c-a773-5082aeb8cac3", "sighting_of_ref": "indicator--85f5426a-b547-419f-a6c9-814c5cf31029", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08bb691d-789f-4433-8f6a-149e24c68077", "sighting_of_ref": "indicator--4325b1be-82e7-4335-9045-c839e3a7f504", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f38bce93-b48c-4683-b1ef-0bad1dbdefa7", "sighting_of_ref": "indicator--bdb37e7b-b68d-44b1-b0a0-09c6032e84ba", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63444fda-4a67-4086-93d0-e48eecdb53c0", "sighting_of_ref": "indicator--34f0fc83-833f-461a-8bd0-6fe843b195fa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42e1c231-012f-42a2-913f-1f299d3c3214", "sighting_of_ref": "indicator--b49283cb-634d-4bc2-b44b-bf82ca27c48e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acaf4218-a078-47e1-8923-eb77254f7d74", "sighting_of_ref": "indicator--641f2c56-6a78-43a5-aa7e-42dd8a1fd636", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce6ced7b-c4ed-4c21-bb3b-0fccddd3363a", "sighting_of_ref": "indicator--f9101c86-ca34-47ba-bf86-ba78b128825e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3021fcf7-5fa0-4002-b59a-a4439542503f", "sighting_of_ref": "indicator--5017b061-2b74-47ce-8e11-f2474a516691", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3299560-a0f6-4eeb-bcbd-4da4fd6b156d", "sighting_of_ref": "indicator--ffc2e59d-4f65-4855-bf16-3add7e60a96c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--140da88f-4adb-4802-8d49-5bd4aa42d7b3", "sighting_of_ref": "indicator--45b6b73f-87fc-4241-afc9-b3f9d3f3bd61", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb0448cc-c945-42d3-b959-c3f206788109", "sighting_of_ref": "indicator--79fb1a19-862b-4feb-98e6-be61d1ad9eac", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc1fb90-2c02-40cc-a12a-22bfa0d5c431", "sighting_of_ref": "indicator--70629bec-17ff-4cb2-a095-0be47029e494", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4bd6632-7346-4138-8138-a3c60e90bb18", "sighting_of_ref": "indicator--8d6d500d-7c23-4839-a52c-376b973e3000", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb3c413a-34da-41d7-a2f7-3bc476c21749", "sighting_of_ref": "indicator--7fbdf6d7-3451-48b4-a2ed-47b19fd0ea75", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c8fb588-2a69-40a6-8f51-a64f561fb759", "sighting_of_ref": "indicator--b94bcaf4-94ad-4b2a-810c-83d58671bdc3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8711790a-52cc-4986-8408-be9a23a902f7", "sighting_of_ref": "indicator--5416ad4b-72b0-47c2-af6a-f1b1b658d9b1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7677958-cda9-4a97-b8f8-cdc6a558721f", "sighting_of_ref": "indicator--2e90c4ee-4808-408b-9fd1-b95d54bb405c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a72ad6-2994-427b-be7a-ec8eaf7134c0", "sighting_of_ref": "indicator--93ff4568-7582-4029-b5f4-dd040eb5bfc1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19dabc7c-23d9-4bf1-9481-dcaed9cb2c9d", "sighting_of_ref": "indicator--cece63bc-e005-4a8f-be3a-fd5c284d5f16", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed2a65b3-a535-4daa-ab32-407769419c97", "sighting_of_ref": "indicator--17c092d7-37a2-4c56-8381-91d83f1f6ca0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ca8ec4-5eac-4622-8966-a5f9dd1d0ce3", "sighting_of_ref": "indicator--cbe771d6-01b6-4c8b-84e1-1f790e3b6bc7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72135083-86e1-4f69-9c6d-2bb042d14400", "sighting_of_ref": "indicator--22c42df5-e307-4d34-a2d8-dda2abfc2fc3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc942cc2-9452-44b9-8959-e8165dc0223a", "sighting_of_ref": "indicator--30cd1501-9c5b-4d70-95c6-c4c58cf4fb5c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b714867-20ba-44a2-9a05-ad1f428fd417", "sighting_of_ref": "indicator--0bbccab4-3791-4671-a372-38d9ba655b6c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06237567-b314-4641-b52a-1f444dfb4f67", "sighting_of_ref": "indicator--98345e45-7489-4c66-91f3-68f49791fea7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62153a03-6892-4e9b-9969-0998a3d1a7e8", "sighting_of_ref": "indicator--808e37ff-970e-43d3-b2ff-957e92c747ff", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1afab10d-fea8-43d1-8d94-8ef424c90764", "sighting_of_ref": "indicator--bc9a06cc-20cc-4ae8-8c96-ebf747b2a312", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b53de10-c2fb-41ad-9c27-d6f31dd5a841", "sighting_of_ref": "indicator--03c664b0-e0fc-49c9-bba3-1fe7c9b84597", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb1573c4-76be-47c8-a74a-e855a7cca758", "sighting_of_ref": "indicator--b1ec9318-3083-4436-9da6-43ee99c35b21", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6957c2b0-7382-4072-bdd4-0e6146ddda5f", "sighting_of_ref": "indicator--32ca91ce-9249-433a-b7b6-fb0b45d5593b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a131f02-f014-4709-8d35-1c9d41ae6125", "sighting_of_ref": "indicator--20a67b38-a5ce-442b-9531-9b7e0c64f1c5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da3bf5c-513f-4f99-b0ac-68c3526d9769", "sighting_of_ref": "indicator--2a6f15ee-db1b-4d48-a527-11019fd27bb4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed08a94d-7ae9-4cd8-aecb-2c8ec6e4066b", "sighting_of_ref": "indicator--4838fedd-3a4b-49af-932e-d9cb317e0975", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ee073b-bd8b-483b-aab1-d4ec7d69181a", "sighting_of_ref": "indicator--28f1b60c-b202-46a6-958d-ad9cb9fd9629", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d332b547-bad6-47f4-ada2-b0d4ce4511fb", "sighting_of_ref": "indicator--a594ba04-efe2-459d-b01c-98d915a2b231", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd4bf4a3-f245-4de5-9735-fa2ed5898a75", "sighting_of_ref": "indicator--2f9764d3-690e-49ba-b95f-a863d426badf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e0ca5e7-e8f7-468f-8106-4c17941b65cd", "sighting_of_ref": "indicator--847e5e28-8388-484d-a0a4-8a14b4f9126c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2729674-0e2e-456c-bdd4-0982b27850ac", "sighting_of_ref": "indicator--9e6b52aa-1a6d-4859-8cae-9bb1a79bb8f9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--172a1784-4966-4a9d-abc7-f36d42468154", "sighting_of_ref": "indicator--6a921e31-e5bd-4cb2-9656-9be2b1a937ad", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be3e06c-0134-4212-800e-76d7d590654f", "sighting_of_ref": "indicator--e2b81202-be82-4161-84dd-d923af4dc4f2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff82f33-379e-4051-9e50-4dfde05692a8", "sighting_of_ref": "indicator--8ba5555d-a466-4944-9053-f834c07cfa71", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3021066-e2a9-4b24-b89f-84c3fe811429", "sighting_of_ref": "indicator--27c9cd83-9661-45f5-8065-8c159df64bbb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ef50309-6832-4d72-b462-17bcc86c3d3e", "sighting_of_ref": "indicator--43216858-7dea-4539-b88b-fae228881471", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf5db5b-d010-4cdb-9a78-eebc196a7451", "sighting_of_ref": "indicator--a2c0b07b-8721-4fff-9e08-5f3963d8eb70", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89eee16d-1205-40f0-be9f-85e2f90b765e", "sighting_of_ref": "indicator--ef791596-ca14-4c15-9309-dc4058e5e09a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--762518fd-241a-4d8d-a430-a766c9c847de", "sighting_of_ref": "indicator--915b9922-c14f-4d9a-a018-69f4af75c82d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8ffcc0b-cfe3-4417-baa0-5bd2e9340f1a", "sighting_of_ref": "indicator--b9a248e8-395b-49b0-a064-28228f596424", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e941767-b1fc-457e-929a-67541a00baad", "sighting_of_ref": "indicator--6d4a90e6-afcf-49fa-a735-1278e9d1933f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1210c76a-1e92-4702-9e75-be2ddc09d286", "sighting_of_ref": "indicator--b2f03d47-cff4-4102-938c-fe07be81b64b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9848b024-9b66-4427-8f51-342a42599157", "sighting_of_ref": "indicator--81c36858-f8ac-4f75-9eb1-9179c67cc45c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d6989a9-6096-420f-a4aa-3d0c380d4a89", "sighting_of_ref": "indicator--847809b5-8489-47b1-85cf-8f4e31dcd053", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51d60a27-fb6a-4d62-ba7e-3e866fff92a7", "sighting_of_ref": "indicator--9c5a0d94-a010-4a1a-b004-c5940d597f59", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22656aee-3b58-4f13-8725-4b7f2cc97733", "sighting_of_ref": "indicator--329fa3ce-7f11-42f4-ba24-0865c0640046", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2691bc1d-f078-43e0-9b3e-d6ac11a27759", "sighting_of_ref": "indicator--8affce5e-c66a-4fc4-867a-01b142483fcf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d81a938b-3137-4950-9452-7abab88fb862", "sighting_of_ref": "indicator--ceb0453a-cc88-4605-9fe0-2ce02eda704e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfb0d8da-1a5d-480e-9a9e-0cca95c107ef", "sighting_of_ref": "indicator--6798b51d-d8df-484a-8659-477c4a9f50b3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7a49292-e1af-494e-8431-136e4291e15e", "sighting_of_ref": "indicator--974ad2da-9d52-4c8c-8c14-36953dfa34c5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28648b09-4d69-4295-adde-34c3a09f7fe5", "sighting_of_ref": "indicator--8f7d817d-268b-4454-9f9a-2fe5b8b3f796", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3008d98f-31d3-42d1-a708-e59c301cf5f9", "sighting_of_ref": "indicator--1c01a063-25ae-49f1-833a-e3347d08f333", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20009558-c7cb-472a-abe8-dadda04e9c4b", "sighting_of_ref": "indicator--b3276502-0395-46dd-a930-809d9a61932e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f72fdb0d-88b6-489e-a1d7-3608f2aa9039", "sighting_of_ref": "indicator--cfd5cfc6-6dec-4005-8e9a-d654dc13676a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b7f05b0-818e-4f3a-8260-f97b42373ee2", "sighting_of_ref": "indicator--2db9ea3d-0480-4fdb-b609-dff0f630c0e9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a842a51-1495-4205-94ce-3a2671f337ca", "sighting_of_ref": "indicator--079f13de-650c-4363-a4ce-f00be1029cd4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98aa19a5-e58a-473b-94d4-01b149c5b2ae", "sighting_of_ref": "indicator--006dc597-e9b1-42db-8618-1f3bed3f3a98", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e65e8f0-e60c-45a7-982d-6cd4dd5e6d76", "sighting_of_ref": "indicator--5360cf87-2e85-467b-a7fb-131a0b6edb17", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2608796-a7c1-4045-8815-48d5de895abb", "sighting_of_ref": "indicator--fd643fdd-d64d-4fc7-b979-c891120ed7e1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c5dc5de-1670-4a69-854e-9c601f5a80b9", "sighting_of_ref": "indicator--4df26660-fd5a-4caa-9664-34112ff64eaa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d55182fa-8d9c-47bf-b1c1-5ebd2a1ba45f", "sighting_of_ref": "indicator--bfd375e8-16f1-4c91-8dd1-92b5a8bc96c6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d145ec-8a3d-4d04-a2ed-a624903a780b", "sighting_of_ref": "indicator--f61f700b-b90a-4284-940c-88108ec721dd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d3a6b3-0c5e-445e-8b55-678c0050fbca", "sighting_of_ref": "indicator--dd33112d-be27-4335-8f0b-e0eb86d44cb1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f3c75ea-8be0-40ba-aa65-a7236da88b49", "sighting_of_ref": "indicator--7f0f377f-4b8c-4ccf-93bc-6066ce6adc26", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80578fb6-2d99-4d19-8fd7-c8ab40f236de", "sighting_of_ref": "indicator--b8c49e5d-bb43-4541-9fe2-0f418077e791", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8809755-1ac8-4feb-9439-8d5b2247a31f", "sighting_of_ref": "indicator--8c43da68-9c76-4d83-9408-bc5be0d70945", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a449b06-4640-491c-9555-a42cecd5bf87", "sighting_of_ref": "indicator--574cf473-c429-4846-ad6a-ad9cfb80299a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--853763a4-c58a-43c4-a3b7-1da048c40c69", "sighting_of_ref": "indicator--157ec47b-e90f-4220-83ef-d81e5415ac96", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9688060-7358-463c-9123-0a46d4d7ea3b", "sighting_of_ref": "indicator--0d43f1c4-b9b7-43d5-beeb-f9df56560b4b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdf2063e-f41e-44be-9ae0-0256d74c6499", "sighting_of_ref": "indicator--1d649c70-03e0-404c-a04e-cb6a0e6b4607", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc894970-b487-4fb7-8b73-225f550d64bd", "sighting_of_ref": "indicator--8e57bc28-fe5c-4119-89cb-1d11ebd0a4ea", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e54c06ad-6049-475a-a809-cbcd4f73c78c", "sighting_of_ref": "indicator--a250caa9-3791-4fd3-abf7-228dc04c2acf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed0e2248-4c2e-448c-a140-038ca64a8531", "sighting_of_ref": "indicator--18e3078f-4027-45b5-ae5b-ef5b49747e8f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0ec3f21-a0c6-4223-baab-07c396363c54", "sighting_of_ref": "indicator--8af26f09-9d36-4b69-b4e5-a4d3caf71fb9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d71954c-9c67-4045-93cb-84a58c6bcea7", "sighting_of_ref": "indicator--bb98985a-3ae7-4e2f-9593-45a79039ebae", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e91eca29-10e0-485e-9bfe-8ac911efc2d4", "sighting_of_ref": "indicator--6f57b410-cbac-49d8-8d48-23cedff8568e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7562ec4c-1dfc-457b-8ed1-2d0882c79b97", "sighting_of_ref": "indicator--ac6693c1-3e14-4665-af32-8a872e8618c6", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64a46421-ce50-42e1-ac8e-efadbd5b9d7b", "sighting_of_ref": "indicator--ac6693c1-3e14-4665-af32-8a872e8618c6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b873c788-da89-4004-8e85-9a195073a47f", "sighting_of_ref": "indicator--3d6d0507-a023-479f-a779-c337d631900e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4930f719-8557-447f-9105-fe6fcc19a556", "sighting_of_ref": "indicator--fae5d330-25cb-4116-a547-86fa460f8a48", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1399dd75-0eb6-4cfa-b3b8-0585f9662ff4", "sighting_of_ref": "indicator--56431a58-43f0-4fb7-bed3-01fc9b4d1a3c", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e1b3f83-917d-4731-9b89-0bcae51ff869", "sighting_of_ref": "indicator--1e775ef8-41c1-4149-a16f-7eda0a9f2af3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dbc502a-7058-4fa1-8be5-eaaf0010dded", "sighting_of_ref": "indicator--0d74e78b-53c3-4ee9-9082-2cc7258a6eb1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4f320f4-86ca-48a3-8a8b-73bb5edcf69b", "sighting_of_ref": "indicator--87ede879-b56d-443c-8807-665752b29386", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--512e0701-d049-46d8-a57c-bec354653f1a", "sighting_of_ref": "indicator--25775e6d-9739-4d9f-86b0-1f39cf4f830f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f99db290-03cc-415e-9dbe-6d091c3838d5", "sighting_of_ref": "indicator--b0e7fe32-8f0c-4068-a5a3-b3274ae5da95", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ce976e-4253-41e7-b7ad-eef59fcc77b2", "sighting_of_ref": "indicator--f485814e-eb2d-4aee-a813-67a70bf119bb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f25981f5-390d-494a-9e5a-ccc75e60d92e", "sighting_of_ref": "indicator--d026aea9-8778-470f-b527-dc8c2d1a7718", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc17b1a1-9b22-49a2-a87d-c82376f85ca7", "sighting_of_ref": "indicator--d2c364f8-38a5-4bab-8d51-fb7ee98341c2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f25a85e2-569d-40b7-91cb-fad101e7b526", "sighting_of_ref": "indicator--1cb22830-4ba4-483a-9dff-3ae547c7bce3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a591120a-3989-47a1-b4df-01062183b856", "sighting_of_ref": "indicator--d41943f0-cfb6-4167-b3b4-4d1d9731c869", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c5da47-3c70-4fa5-9c91-9188550d720f", "sighting_of_ref": "indicator--2664611a-e62e-484f-b90d-4466b1ec6408", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de9b327a-7157-4155-b29a-dc7a21a241bf", "sighting_of_ref": "indicator--d538179b-92c9-4361-9a67-908b09b3bb3a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfbfb03b-8217-4106-97f9-00c96a5fd770", "sighting_of_ref": "indicator--c59830a7-1f3a-442b-950b-0040b3616b0c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--452a2475-6602-42b8-a8c5-62ce5b32c9e5", "sighting_of_ref": "indicator--55c3de53-f9f1-4045-ad11-2e5463eb0096", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f2af7f7-73f5-4075-ad4a-ee5dc2474acd", "sighting_of_ref": "indicator--e31ba406-a503-4f74-9a3c-ba864f84a901", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53191f8d-ec9c-47e4-9b9e-d547765311e2", "sighting_of_ref": "indicator--0c378dbb-7114-4b87-891d-ef2801adc107", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59af56f3-c5aa-4e11-ae08-4b55bcf4ef3c", "sighting_of_ref": "indicator--166045fc-c986-421e-b0f9-b28811ad8214", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25b84ece-b2af-4ac7-a4d5-607c9da61d79", "sighting_of_ref": "indicator--cfd84b1f-0286-456b-8df3-7953d73081c5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5add0ce4-b233-499e-8198-a826a8b94c40", "sighting_of_ref": "indicator--603be068-30d0-4d22-8ade-c8e703ebc5ff", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4029bb34-be0b-41dd-a93f-001ba1791720", "sighting_of_ref": "indicator--f962f403-6565-4300-834b-6e6fad23250b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08039f8e-31ad-4fca-9bf4-836a98e0d56d", "sighting_of_ref": "indicator--655dd266-d621-414b-989f-dad294eac1b4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f716d9d-3b13-432f-b3f6-adba662d3f85", "sighting_of_ref": "indicator--70a5a0c8-3102-4b81-9a39-7f6d966172c4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7065fc09-e9d8-4167-9dd0-cd0a3843b48e", "sighting_of_ref": "indicator--8897bd07-5f93-41db-a637-d808c9cd1092", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34dac0bc-5199-4ae8-83de-5707931e8beb", "sighting_of_ref": "indicator--0563c9cf-7057-498d-b46f-8a3f30908785", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a0357a6-3c96-4ee7-af8a-5cfe607c4fed", "sighting_of_ref": "indicator--61f79e61-ae57-4008-ba6e-c9323a3bd15b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73fbaeec-9ce2-4179-8a9b-07755793f0e6", "sighting_of_ref": "indicator--c24b2a60-b278-40d9-be4e-ddcc43c5a574", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--668e8136-4a98-4eed-a648-13504aba2c91", "sighting_of_ref": "indicator--a049b9a6-c392-41da-93ca-d0f77dc25a2e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c41465c7-ae4d-4257-9605-57f7999254c9", "sighting_of_ref": "indicator--957fd419-8d63-4152-a040-b2d77e1f5f04", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d9fb31-6e43-4611-b58d-5472dc1f76d9", "sighting_of_ref": "indicator--5f7fde48-52f4-48a5-801f-b54a7598af42", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e5e8091-bc7f-4448-8bcf-35b44c4e51d2", "sighting_of_ref": "indicator--dd552cb1-d78f-4049-9bd1-eb8bdcfe306d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80616f24-ebcf-4810-9c39-1d1a5109d921", "sighting_of_ref": "indicator--0ac21d5d-1712-4024-8ed3-77f8ffef070a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43da36a2-bbae-46ca-8d36-438b3b7db7a7", "sighting_of_ref": "indicator--76bfb3c8-3759-4ffa-9fad-b0ecdee011e5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--834ebe0f-8f33-4390-b503-350611f7004f", "sighting_of_ref": "indicator--7a342d53-dfe3-4df4-b1cf-960147e51220", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e753c9d1-fc50-421e-a6b4-5673dd06f6a1", "sighting_of_ref": "indicator--1df6c6f3-1be4-4f5f-9326-1298e354921b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b0e4c5f-56e1-4481-a1ee-f61f29a4db7a", "sighting_of_ref": "indicator--02584b90-50b2-4ac5-9161-244a8163bb00", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b68aab0a-bd88-4cbe-9835-a461350ae410", "sighting_of_ref": "indicator--54f37b4c-7c21-448b-8dc1-78f47d91dfb2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae221307-69ed-4931-8c71-55417d8b5145", "sighting_of_ref": "indicator--f81ef9a3-7a8d-4c3f-b8da-3cfe3b28e9ca", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5375ec40-f3bd-4c73-bea3-a92894bc9914", "sighting_of_ref": "indicator--25bd6a93-1d97-41c6-b903-ecfb6de626c8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--824a9582-0621-4913-9057-983158a742ee", "sighting_of_ref": "indicator--1fdfefa2-3f54-47d9-b562-5e4c57d5f451", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0794d72f-7fcb-4076-991a-349d9636a4e0", "sighting_of_ref": "indicator--ea145aab-9797-4782-a5f4-14ee53978a3f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62c8fc6b-2563-4aae-a18d-b1e2e155c84b", "sighting_of_ref": "indicator--53d02345-49a4-41a6-a782-a2cd6e5ebaa3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0d727c7-707a-4016-8b07-0f64f96233dc", "sighting_of_ref": "indicator--fdfd3479-1733-4eb3-ac9a-af8f9710a64b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b8868a-a685-49e0-ad4c-de795d28c08f", "sighting_of_ref": "indicator--2c1ea2fb-1b17-427f-9bc9-649e8a9748e1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ff9d0d-6cdc-49d4-a89a-bc9ab06f576c", "sighting_of_ref": "indicator--1ffcb49a-33ea-49cf-8835-81658f9980ce", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--731d6308-dbc9-4cf8-bd08-eb1ea5f53f54", "sighting_of_ref": "indicator--87feb2c4-1350-4e94-b392-8076ab0b4098", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b885392-52ea-41d4-b0fc-a2ae01fd8de4", "sighting_of_ref": "indicator--fc6b9fe3-783a-4ddf-9553-8ac6e08090fe", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92d9f78d-c884-45b1-8c79-cbbd987507d7", "sighting_of_ref": "indicator--d2b29e0c-c672-4ee7-8977-25fd6d4ff444", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15bbb2dd-2db1-43c9-87e8-63766b592baf", "sighting_of_ref": "indicator--656139ae-d1ea-4eb2-a885-ee9a2e13d926", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55d07efc-568d-45e4-97fa-7aece0267643", "sighting_of_ref": "indicator--96e14ef2-0647-4e82-a3e1-61e980f878ee", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b4025d-a3bd-4ec9-bac9-d401c92b62af", "sighting_of_ref": "indicator--4450d400-67a7-4a59-80a4-8e6b9dde4d65", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56dc44bd-a5ae-4242-8fd6-c08764079433", "sighting_of_ref": "indicator--97f329b5-24f6-4775-afc4-d74f40a788fd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f24960f-1370-4d2b-8573-795e229e3af8", "sighting_of_ref": "indicator--cebc274a-2c63-4fca-92c7-abf279d9dd99", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--300333e8-78de-4064-ad6f-36627b1f16f9", "sighting_of_ref": "indicator--a33a074a-9cd7-4969-a98e-42c5e66a4989", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b3d9566-b3a3-41f3-b47a-a95eb21a51bc", "sighting_of_ref": "indicator--2b0e329e-bb32-49a0-9106-fa16e02b2242", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da68f6a9-f46e-4908-ad00-7fcd43641468", "sighting_of_ref": "indicator--41b8a84b-e20c-4daf-9d05-685d82eb5998", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7014d044-a2a0-4e32-bd3a-0847dfe31f62", "sighting_of_ref": "indicator--17a44d33-0462-4642-adf3-2bbdc0d2bcd7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a551d95e-e381-4e0a-b702-4c1ed547d667", "sighting_of_ref": "indicator--b2cc2e67-8c7c-49fd-ac64-d65b8105cd75", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6be2b5d-6a44-4923-ba88-f4065ef1a765", "sighting_of_ref": "indicator--15ba00d3-d00c-4700-b15a-6489a8097a88", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf5b6db5-5bbf-4661-b2c9-b942be745fc4", "sighting_of_ref": "indicator--836f48db-7a81-4472-a476-f0e1f6b2e9d3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a192c874-2b3e-44a5-a6f9-5db851cff11b", "sighting_of_ref": "indicator--2b774f53-a375-40eb-9d0d-511c5ae31253", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4384b139-340a-45cf-9db7-61e46157f76c", "sighting_of_ref": "indicator--7b5fbd5f-ac86-45fc-a75c-32c1b22a0efa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9884f445-d296-438e-95e8-44420d8ee144", "sighting_of_ref": "indicator--077ddd91-1d4e-448d-b9bb-6e3d70ac8364", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed8e6b0f-b80f-4d47-92fa-753a4185f025", "sighting_of_ref": "indicator--358be385-80b3-479e-8dc3-a090a1ff9bed", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--756d6f5f-36ec-49a7-8759-2e262013a96f", "sighting_of_ref": "indicator--6d51f4b6-5397-413b-98b8-5bbe76c5f125", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cdb7663-c693-408c-bc00-3e2b26a926b0", "sighting_of_ref": "indicator--a6116e9f-a588-4644-b380-4fe3753eba82", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b5a3682-140f-4207-a053-79c06b824908", "sighting_of_ref": "indicator--7867a6ee-45f3-4468-97a1-babca2371de0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14859a07-1a45-488c-9c8a-514e5018aa9e", "sighting_of_ref": "indicator--f129a3ce-bde8-49dd-a582-cfd208180e59", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb220a2d-c64e-4d1d-928d-989284b5021e", "sighting_of_ref": "indicator--a6028d75-d982-48cb-a44b-ff5012dce977", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5703f114-99dd-43bc-b9ab-d5fb4f7df296", "sighting_of_ref": "indicator--834c5c5c-1b8a-432a-aa7f-ffb104b2ed24", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12f720c6-3562-4ff1-b1c3-9b1986cc9598", "sighting_of_ref": "indicator--49ccdc61-9324-4659-8da2-8648f41c0298", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d999311-3c64-41b7-875f-d39793421dc4", "sighting_of_ref": "indicator--f2d750ef-f623-4348-85e1-aee0a8333595", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df901724-bc2f-49b3-bb10-673a6cb0215b", "sighting_of_ref": "indicator--9c0f3eae-9373-43ab-a000-6ed68d93a521", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d82956a9-1f69-4fbb-ac44-fc074b7b270e", "sighting_of_ref": "indicator--acf7c47f-c32c-4015-bc15-1a5990df12cd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74b72bc1-01a2-4612-a7c3-ee9e5bd33e3e", "sighting_of_ref": "indicator--69743beb-ac0c-496f-b2f7-897c1f683c2f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc2f01d-beb9-4605-9a78-b682a619d96c", "sighting_of_ref": "indicator--5675ce2b-c527-427f-86ea-66ca332cf00e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e42575ac-85d8-4d0d-9a1b-d7eb0ab335bb", "sighting_of_ref": "indicator--8f6e93ae-fbcc-405e-b554-84ddfcd2a40a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2c87294-14a0-4d98-8508-296ad0c4fb38", "sighting_of_ref": "indicator--04cc7cb3-3c71-4f0d-89d8-7b5f5f88ba43", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9993301b-f666-417a-9cb9-1c9d8320f67f", "sighting_of_ref": "indicator--2215fbca-0d89-43f3-9e63-cdd2afa36fe9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfb9c83e-b257-436a-ad1b-49fb4b06eeea", "sighting_of_ref": "indicator--9fcce271-4f6f-4e9a-a1cc-082cd4ba2efb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f899ed24-fed7-4fc9-98cc-8a4da93cb928", "sighting_of_ref": "indicator--b239c240-216e-4c00-a27a-17ea75385198", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef1ba60-ae69-4e94-84c8-1a32c3c63d8b", "sighting_of_ref": "indicator--f80cb446-1247-476e-b8a2-b1bf9df8a81a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9147c7e0-f302-4729-934f-aec5bca9b549", "sighting_of_ref": "indicator--4ff29633-f03b-43ab-90ac-e1c4b5acbdde", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86972163-f19f-4b6b-9d59-c2634a1e31ff", "sighting_of_ref": "indicator--43b79cdd-83f1-44d3-b74b-6140affbf799", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2640e582-ece5-42b3-aeb9-8c48eca4f041", "sighting_of_ref": "indicator--d4da3061-c7ab-4681-adb1-c956611475b2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71940ad2-19ab-4404-b602-4a03412977c3", "sighting_of_ref": "indicator--ced0ec6c-97e4-482a-8ef0-ee2a29633353", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7a9d16d-b994-4213-8bc7-ed1c493eea7d", "sighting_of_ref": "indicator--0f1a1937-3d1f-453a-aa7f-5e740d626b15", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c21bb5fb-6ce7-4ea3-b875-9386c2f7c410", "sighting_of_ref": "indicator--52bc400e-7d3d-40c1-8d99-8e51c965dbdc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd117ae-f029-4c27-91de-e16341a8af1a", "sighting_of_ref": "indicator--52a91ea6-f9f6-4796-946a-23804aef58c8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--717c748a-56b7-4b92-a030-640675f52f73", "sighting_of_ref": "indicator--6a5bcc28-ea55-4ad4-959c-2ceb7e0ee566", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--548a9f4d-e5fd-497a-ac97-8e77214d01dc", "sighting_of_ref": "indicator--611210b0-e1c1-478b-b0b6-3636ea79a830", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd4ca920-aaa8-42b9-a2e4-2edf6cc9b6b1", "sighting_of_ref": "indicator--2d966788-4b7f-4410-93e8-d8369c02feab", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941cbdee-a93d-4a17-85fb-d6ed4460f557", "sighting_of_ref": "indicator--45af4cda-33f2-4308-ab61-7b760788a954", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a977a1aa-5fd0-45bd-8092-d158cff3c925", "sighting_of_ref": "indicator--42bcbb30-7913-4ef9-aedd-6c3fa3fe5a87", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1a9e184-7ad8-4488-be28-e3fe4f28f20d", "sighting_of_ref": "indicator--5004d177-ebb3-4e0d-b266-4c517f6da6c3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5acdd1ba-b0ad-4d1b-b70c-4ad3198f9583", "sighting_of_ref": "indicator--e84fce4b-fc44-4177-a0a0-033f76ac9aec", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77524653-d679-41f1-b7be-10ec1ad3c440", "sighting_of_ref": "indicator--84c62a30-bdaf-45b7-adac-02936ce93dbb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4730a773-e9b0-4094-9ec0-0b6ff25c9890", "sighting_of_ref": "indicator--9ab2b608-8ef6-465a-a45d-0f38714feecb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--241c66ab-93e2-4a0a-b541-940e5edbee8a", "sighting_of_ref": "indicator--3f494d14-75d6-4173-8ec9-1aec02812d00", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18cffad8-c841-4c7a-9f41-ba6db45ff36a", "sighting_of_ref": "indicator--7330328e-e65c-493c-bd6f-8ab4fdf7e8ac", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64ec41fa-5976-4218-88c4-503b56501728", "sighting_of_ref": "indicator--3be4957b-7f8d-48e3-b4e1-bd42d578f957", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3f6681d-0642-40ed-a817-e6686ddb020f", "sighting_of_ref": "indicator--e4946867-ab25-438c-a45e-799189988e1b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3bb57fe-7ccd-461a-8891-1d762d3b4498", "sighting_of_ref": "indicator--726456d1-69ff-48f1-8d6f-9e4d2bce5856", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef184bd4-4ecd-4660-94f1-48bf415b7608", "sighting_of_ref": "indicator--95d47ed9-0bda-47df-b770-90a0d304ccaa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f911e35b-d9d8-45ac-9cac-f5fc3e8aa663", "sighting_of_ref": "indicator--64ef7b50-9b41-42d0-894c-b466d51848fb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6829e45-252a-4fcb-b399-47f4279c1484", "sighting_of_ref": "indicator--4d8cfe0f-3a04-4489-b679-f9f740c0e400", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce79b1f4-f1a4-462a-bc00-9037b3f8bc4f", "sighting_of_ref": "indicator--c1380b52-0c88-4cc9-87b1-4092a1f2d51c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f5a62f-59cd-49b8-b60f-04cb3f99fb09", "sighting_of_ref": "indicator--7ec6a386-5935-41be-adb6-b814ba631506", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d446af0-dbad-4ece-99a4-fe68cae66368", "sighting_of_ref": "indicator--4f566920-f496-45f9-9cbd-b29a07c9c2e0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e3f987e-aee3-45bd-8aa8-83d0d4177b3c", "sighting_of_ref": "indicator--a8367204-19dd-4551-8acc-e36facf181fb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f34cf33-3da3-49e2-90aa-0eff98d9a387", "sighting_of_ref": "indicator--92ea673e-7832-41a4-99a3-33e77595c19e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56f912a6-95cc-408a-869d-ce30a920087e", "sighting_of_ref": "indicator--45f39259-c230-480d-9471-5b58b65d7e56", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db47c2bc-1cd5-4f45-acf7-19b23a5b0a2d", "sighting_of_ref": "indicator--f27c47e0-9b53-439f-a59b-5958ccf9c56c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb66b72-1c9a-4313-8c81-63ccf6dfdd0d", "sighting_of_ref": "indicator--aeb3a849-bf39-426d-8f03-f9fff8491bb6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fde9bdb-0c5d-4af8-afdb-9e5e5dcb9a52", "sighting_of_ref": "indicator--7971af31-40da-4b26-818e-452fdea253db", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33db2fa6-5890-40a5-88f7-a539a992c8f5", "sighting_of_ref": "indicator--f03ad11d-7efd-458d-bdcb-694010537633", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b4fd6e7-ca17-40ee-921d-49680b81b5d9", "sighting_of_ref": "indicator--ab8ecd22-6af8-4b90-bedc-b4f132e50c84", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6128f4b5-cf8f-4bb9-80c9-8aacec7ffcb8", "sighting_of_ref": "indicator--2a48bc11-0ac0-468c-9b66-a95f3bec4c6c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98fe553e-5502-4b19-85ba-13d637bcb0be", "sighting_of_ref": "indicator--84473d26-55dc-4d7f-a8b4-4a018d500a4c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06aafeaf-f32d-4ddd-a8ff-e2baa1ee207b", "sighting_of_ref": "indicator--a5b86d80-955b-45b9-84a3-613a8f25a236", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c51f20-579d-45b3-87d5-cf6b9bfc9b18", "sighting_of_ref": "indicator--298bbbda-0413-4257-b467-65821673dcba", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--126cdf2d-9781-41e9-a5a4-92dd22f98d27", "sighting_of_ref": "indicator--31328681-dcd4-480b-8acf-094fa492947f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24edb802-d58c-4ce5-9ef4-a186c2001596", "sighting_of_ref": "indicator--fddcf279-51c1-422d-b066-62c3f81538e6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac44423c-ce29-4652-95f5-2cabd0cd308b", "sighting_of_ref": "indicator--c23e1790-425a-4f76-aab8-62e86f1afcc3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8177813-85d2-4a3c-9084-e67d6ccbcd9d", "sighting_of_ref": "indicator--0be6bac1-980e-4264-95a9-e2e377c997a3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--effdc620-6f29-426c-8701-2bb362d87b23", "sighting_of_ref": "indicator--ad254563-11a7-465e-84e7-09975bd36ea5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7ea8b23-ba18-4040-a93d-a15edfedf166", "sighting_of_ref": "indicator--e82b6b56-33de-4f61-afd8-132acf00cba2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d56a489-39e3-49c8-a057-9938e13afc8e", "sighting_of_ref": "indicator--35584c17-10be-40c0-a477-9e3f683eb148", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7cb923d-2aba-4574-9b48-828593895c4f", "sighting_of_ref": "indicator--c7c9aa46-febb-47bc-ad6c-cd0780a6d99f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9f27b6a-82fd-49cf-9ded-f965d9163fc2", "sighting_of_ref": "indicator--556f6984-fb9c-413f-8cd9-5f7e8e3fe6b7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e40341ae-f5fe-4355-b07c-a6a9354c3d25", "sighting_of_ref": "indicator--4d9b8961-86b3-41e5-9898-94b2df0a9561", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf2f721-1951-4b82-a3e8-40cc59234710", "sighting_of_ref": "indicator--f11b5bc5-bebd-4875-9f17-0a765ae93302", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d621048b-ab8c-409d-8632-7b8eb53b0dca", "sighting_of_ref": "indicator--d1f40ca3-56f6-4e08-9c74-9788da28a731", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1884175e-476f-4543-8345-42e81008e035", "sighting_of_ref": "indicator--4133dc96-3a15-4239-9a57-2f121d2301dd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c2f592f-81bf-4b37-a890-ff4086990326", "sighting_of_ref": "indicator--de4c20b1-ffc5-4359-b289-85f1cc9c3e51", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc50a1b8-8100-468d-86ad-ea4e011f73a2", "sighting_of_ref": "indicator--ffb95707-b2c3-4b08-8bc6-6f50dc13545d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b73b7ac3-6c6b-4964-b611-40dc76ad274b", "sighting_of_ref": "indicator--ce9fb9de-bd4f-4ee4-ab0b-d301c0efe63a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9703ca5c-8949-4e18-8c7a-9694637e4622", "sighting_of_ref": "indicator--17ed4099-f5ea-4a5f-8955-d2f14a47d4de", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6884bf61-b93d-4967-a167-a57620593350", "sighting_of_ref": "indicator--959dfc8e-c6d2-4af3-b89f-60259d457c91", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--153a3c1b-a9c6-41f5-85a0-44045165020d", "sighting_of_ref": "indicator--5d15eb7d-9714-4c7f-a92b-9c028d1d1b4d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7793c2d6-a432-4648-ac05-25c83e25a378", "sighting_of_ref": "indicator--9868b174-b458-485e-a9a5-0764eb94bd44", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab27a431-c310-4729-8eec-c5efd76778eb", "sighting_of_ref": "indicator--30f4a294-6787-4fa2-9ddf-38183e9922b8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e3d90e-e1ef-4c82-9c2b-6e119da98ba1", "sighting_of_ref": "indicator--54688193-ce02-4fa1-b8b1-aa0608ed90e2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec23b79c-db99-4302-9f45-4799e03a87d3", "sighting_of_ref": "indicator--1a00408a-3c17-4b63-999e-d284791a7a69", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e5d062-aeaf-459b-a5ec-ff1f35801377", "sighting_of_ref": "indicator--8dd1c8e7-c4a0-401d-9e79-c3acbb752992", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da006a0f-adf7-491e-88d8-370fe608768c", "sighting_of_ref": "indicator--512cd3a5-16a2-4137-be1a-d87632f3df5e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6416c690-1f7c-40e9-8eb0-fe69e7397617", "sighting_of_ref": "indicator--057429c1-67d3-4c9a-a5f0-3e78c15c7809", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01d6f759-270f-4cd6-bbda-cfc765c0ce99", "sighting_of_ref": "indicator--5ed624f4-70f3-4688-8c5c-e8df396071c2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a89842-1fb6-4b3c-8149-a20400119116", "sighting_of_ref": "indicator--de4af172-c8de-41fd-af96-b65f6677e88d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a112a2-d0e4-4761-8481-ad277fad7252", "sighting_of_ref": "indicator--e86bae84-41a1-4423-8ee1-367e6d7d7dce", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c852de0b-67ba-43c9-86b0-65c487dd87e1", "sighting_of_ref": "indicator--fa63335a-53ab-4409-a852-c8f2a9244160", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55fb0428-6d4d-44b2-afe1-ab1ad106a589", "sighting_of_ref": "indicator--0f6eaa75-5f5d-45e7-8769-a52f01669a08", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf926b95-2630-4c6e-8989-05bf271ee29b", "sighting_of_ref": "indicator--0f9ffb4b-5d95-45bd-b1b0-e10950881779", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51576e9f-3894-4cd6-8a2d-3dbdc6cb7bf4", "sighting_of_ref": "indicator--91c960bf-fb55-4ed8-b1fe-b0131d6af1f2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b0bc7b-77ff-4a6d-aa25-160ea5413453", "sighting_of_ref": "indicator--668a1eea-c647-415a-9415-1a9ad36fbd18", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f817d949-6252-4569-b74b-471d71017203", "sighting_of_ref": "indicator--cf32ff18-fffe-48e5-8782-cc64d3a31f78", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31bf5d90-44f2-4d4e-9b75-ce044b5a1ff7", "sighting_of_ref": "indicator--6484fb87-a4a5-44c8-b7b5-1e93d95680d3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a99cc889-72c8-4cf6-a391-cfb42aa22991", "sighting_of_ref": "indicator--e7efbce9-3623-4b2f-9e9b-f643ed18f119", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e952c3-3c75-4b12-bf77-b404a6a09051", "sighting_of_ref": "indicator--e4d2977b-a5e3-4217-b674-90fb5a1612f1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b15bd75-3413-4727-93b3-1a9e20c63fd8", "sighting_of_ref": "indicator--444ea460-a492-452c-a123-41b805039c5b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97f29733-9d07-4f00-80f8-cb5a4e83d618", "sighting_of_ref": "indicator--bb8ef838-5f19-429b-a46b-2c3c27b1412a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fc7cb79-f098-45d6-ade5-9d05f472c2ef", "sighting_of_ref": "indicator--6addb226-de20-42e2-8e0a-7c6d6b789654", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34797ddf-1955-4f6e-9394-5b58464f4032", "sighting_of_ref": "indicator--ebb527ee-23ef-4098-bcfc-d727c5892b55", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d89da738-05a6-4e0f-b34c-09f6239d9696", "sighting_of_ref": "indicator--ffdea50c-d63d-478e-a276-ecc45d55de66", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3395d37d-d889-491d-a5d4-d6a0e94436e7", "sighting_of_ref": "indicator--41edec2c-b44e-4a5b-82db-99b42eff55ee", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9af123d4-52ce-4cc7-b6b9-30260c66e303", "sighting_of_ref": "indicator--56928340-e5b9-4697-9599-f949d3b581ad", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab003110-9982-45cc-8f92-9a23bf7e6850", "sighting_of_ref": "indicator--102a4527-fe01-4817-9732-3e2f4717c466", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f79a2b2c-a406-4ddd-a814-bff5dd5385d2", "sighting_of_ref": "indicator--63f12bfe-0434-4056-a036-a47a678525b2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c2aaaa-890d-4607-bc3f-afa33def205b", "sighting_of_ref": "indicator--5b763006-21ea-4455-988c-8d3caf4f91e0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe6fd4ad-c402-4817-aacd-db3b87bcb4ed", "sighting_of_ref": "indicator--b5ac796c-3919-4095-bf3c-71221314bab8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d1d9dff-38e6-43e0-bcf5-fc46b53fc5e6", "sighting_of_ref": "indicator--493c32b4-5960-4f3d-a5c9-8946130954dc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b845fec7-2583-4425-9514-a2407f8b9827", "sighting_of_ref": "indicator--dd865838-9274-4afe-a47a-1debe09e0633", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--057136db-4fa2-4882-8ac1-d23278968d65", "sighting_of_ref": "indicator--ad7b2415-9ad0-4d9c-a558-c917199177b1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ab126e5-db7e-4bfa-9aa1-a61ded555993", "sighting_of_ref": "indicator--27729c0d-8d19-4242-b9e3-21e8f8070bbd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a77046-24c5-45b5-94a9-5bf832d22fe9", "sighting_of_ref": "indicator--b4d9bc5f-dc27-412f-8c55-d1bd6fc3a7c7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0700254f-86f6-412f-86e3-27729ec6d159", "sighting_of_ref": "indicator--b20b931c-a1b4-4390-8d5e-15171deb6d1d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a19485b-9f72-451f-af19-4cf9dfcb07d6", "sighting_of_ref": "indicator--05e4a2e9-11e6-472b-a9c3-339e0fc2fcb5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0031c67-022c-432b-9356-a06ceb42047b", "sighting_of_ref": "indicator--dc04d5c8-a642-42bf-baa3-df229d6973c9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5881097a-4ece-4300-b107-036bbb5794f1", "sighting_of_ref": "indicator--8b3eef96-44cf-49a8-bf62-d381991cfad2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b632e91e-86c5-43ce-9798-3c5482d1fcb3", "sighting_of_ref": "indicator--36e7f334-c394-4d05-9d19-0cc9ea7c9428", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24dfa1d3-01e1-4242-875b-fd7ebc8fb485", "sighting_of_ref": "indicator--e089b04d-4da9-4e9f-8df1-eb2b3d957d18", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83c7d7bb-8fd3-415b-9cac-a9ee6589a6df", "sighting_of_ref": "indicator--dcb6eeb9-66d8-4e4b-9a44-52d47b70c5bc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35a986d9-dcce-46ff-8784-9eeec2cd2249", "sighting_of_ref": "indicator--c5b2b365-1daa-4aa8-b465-ed62409d7548", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac8ea97b-7c36-415b-8e69-8500111f1b9b", "sighting_of_ref": "indicator--9c59d9a0-783c-48df-8fff-514f8c950ab6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a107949-1372-48ac-9d3e-efcaf40a0941", "sighting_of_ref": "indicator--e449bc7e-4f6e-458f-8d7a-590a72c96c4d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98aa2351-1e1f-4da4-a689-428b0c340586", "sighting_of_ref": "indicator--944df2f7-bb18-4505-b4a7-8ba9e5353536", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e1ed57e-df3e-4b3a-9eb2-899b7e1554e5", "sighting_of_ref": "indicator--cf47781e-f74e-4b58-a461-8bf5a3106821", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--851db35e-af52-4a15-b8a2-ed36943f7efb", "sighting_of_ref": "indicator--f352cdd2-dda6-4507-9427-5d45952a2b00", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad991e24-379f-4b98-b217-32b17d4cbb53", "sighting_of_ref": "indicator--2c66c8dc-b8ed-4da4-97ab-f4b40ccdff0f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f9086bc-8b33-4df5-bf1f-6c4528c7c2a7", "sighting_of_ref": "indicator--c253604a-0463-416c-8936-e8340a35ba28", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77b40045-5eac-4ec5-bc9e-9f2ceb56a4af", "sighting_of_ref": "indicator--6daac873-44ad-4c05-9560-76d6f78650c9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7af80c4a-6460-4c68-830a-ea6bb5c180d0", "sighting_of_ref": "indicator--c7ac14e1-18a6-4dbf-93fd-8061c03aca31", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e94d97f-28ef-43da-8991-261a7cf6c604", "sighting_of_ref": "indicator--4cdede9d-c0b5-490a-bb83-e7c95a45356a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8801385-1be6-43df-b986-4b5b6f4cce7a", "sighting_of_ref": "indicator--c387f795-7e15-4835-aa2a-0c534da338ae", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0349d589-a89c-4502-9f67-8e60671655eb", "sighting_of_ref": "indicator--83e34a3e-f7eb-4b27-b112-b22b28aaf9f7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c412600e-f25e-4013-a917-3be795a3632d", "sighting_of_ref": "indicator--39bcb679-44da-4ef6-8bea-12a9da91c34a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50d75cda-4e78-499a-997e-736903af8880", "sighting_of_ref": "indicator--813106e2-dff1-4003-9e5a-fb2b76a75e2b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26de2caa-2c18-4fac-b195-da767a72d8cb", "sighting_of_ref": "indicator--69ce7495-368d-4c76-af6a-0897a8392352", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c021dd-4940-47cf-91ba-42ff4a56aa29", "sighting_of_ref": "indicator--9d7b1ecb-ddb9-492c-8374-ad0112cde9fc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e134c64f-bf7a-4607-86e9-e8b16389c05f", "sighting_of_ref": "indicator--e579a4b4-4be9-41e3-a490-508627080167", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--788da98e-ddd8-4230-9c94-1ac3058c2b21", "sighting_of_ref": "indicator--8ebf74ce-5cb3-4a2c-8e0f-a189cac10c86", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52fce13c-0448-4d2f-86cf-e3738a015288", "sighting_of_ref": "indicator--df89257a-19fc-4786-8080-9f11f0ab69ba", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59dcc8c1-7c93-4d57-9efe-73a14412ffce", "sighting_of_ref": "indicator--db03856e-a14c-456f-be4a-689fcd5a542c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a3956f4-477c-457b-a9d6-a2e087e30888", "sighting_of_ref": "indicator--71ebe986-bfb0-4f35-866d-27950b4fc67b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6da27ab9-38a2-4804-b223-f509e49f7d64", "sighting_of_ref": "indicator--7dba66b8-3579-466d-86fb-a7cb72244df1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f2ffd0d-45ba-49db-a9a6-0d6ead4db783", "sighting_of_ref": "indicator--fac78af4-8fd5-422f-abab-94b591ada921", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20bb5f67-0f39-434e-b3d9-41d388c5ea6a", "sighting_of_ref": "indicator--d6481bcb-cc74-4b89-88d9-da2bf394372e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7726d43a-ea32-402a-a63f-66ad25c51c03", "sighting_of_ref": "indicator--0af75bab-f6e0-4372-882b-1776aabbf10c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e2a6dd-f65c-43ad-abfe-8f055ab5bb3e", "sighting_of_ref": "indicator--ff141304-b5b1-4a5a-9e18-3805d2e603af", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af94690a-c0c6-42c0-94dc-c852ec44f720", "sighting_of_ref": "indicator--51ef87f7-1cb0-40f2-bcbc-5fc0f84ce991", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe68f6e2-2a5b-4916-8dee-c19b308427fd", "sighting_of_ref": "indicator--3e34079a-d38f-418c-bada-198f993ccd4e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f82a50b5-9a71-44c0-a05d-1ad0b9275d1f", "sighting_of_ref": "indicator--68017a58-4112-435d-9752-4842457f0ade", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f5b400-ba63-4729-9815-43ac352088bc", "sighting_of_ref": "indicator--991e1c8b-dcd3-49a4-be58-848ac7ad60b9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0413d51b-5792-4d3f-9d85-8b2e2a04838c", "sighting_of_ref": "indicator--72a385c9-372d-414e-bafb-cfec871f183e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a53dae5a-5239-4e97-8f62-1529ab4c0d03", "sighting_of_ref": "indicator--bdf83bef-51fd-4415-96a9-326792b3b35f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bf6d129-68ea-4abe-8503-30a0901ea99d", "sighting_of_ref": "indicator--3f93318b-ead7-4263-ab74-050cdf491c3e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--433d9f3a-6551-4851-a518-7343cd7da548", "sighting_of_ref": "indicator--2053ca51-57a8-4d41-a46f-765c7b1b9d57", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0abe4d53-f241-4615-a228-1f5fe11c376e", "sighting_of_ref": "indicator--84e0534b-7139-4de8-9b48-a6f48d8ee09b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd601185-8401-4906-8d82-1f4b11237814", "sighting_of_ref": "indicator--ce5151be-5129-4697-98c8-f174bc2b7c79", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b3bf59d-4a0c-42c6-a55d-665650182d3a", "sighting_of_ref": "indicator--ed595b1e-e303-422c-9b0e-a53edd3029d6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5237130b-a665-46ee-bcdb-82c4b35ae037", "sighting_of_ref": "indicator--72f03af3-6c98-4ae5-b613-f44d648f5556", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35168948-27cf-47b7-8eab-8d9f5c1441b8", "sighting_of_ref": "indicator--fc7e24b8-9cb1-44b0-8263-57f7ebece338", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f10cb6fd-f40b-4034-ad1f-3a671d5ee291", "sighting_of_ref": "indicator--a0e424b0-0f59-4f5d-bc87-defe34d1087e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94062b2d-a715-4e6b-a598-ce8c74d7df44", "sighting_of_ref": "indicator--52d1a4a9-522c-4e22-bf5c-7f075f876c3a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda52c02-f1ad-480d-be94-7406ea2f6fd2", "sighting_of_ref": "indicator--e7203e86-0b9e-41b9-b989-73320a012414", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f819d2fd-7141-4c07-838c-ce38b125cf59", "sighting_of_ref": "indicator--63b0d469-f42e-45d0-924e-ac4efe55d0d9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e910f0-37cc-4475-869b-6b45b621561c", "sighting_of_ref": "indicator--522028a5-9d05-4105-9dd1-a5521984c1a5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee5ebfcd-d699-4998-888d-c519faa52ac3", "sighting_of_ref": "indicator--913c005d-9911-414b-8444-6b18fd0af75d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ebba4f-f12a-430d-be39-12a83bd137b6", "sighting_of_ref": "indicator--0982be5a-690a-4370-97e0-0e4f96171ccd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00ef0003-e160-495b-bada-78c6b0148f1a", "sighting_of_ref": "indicator--90b9c00b-be01-4c7f-98c6-e7554a614802", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b22822-38a1-432c-885c-82d015085db2", "sighting_of_ref": "indicator--64542475-3e49-4705-88e2-a8085257314e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--640e339f-2c7b-4a25-ac51-858033f70d81", "sighting_of_ref": "indicator--09573583-2bcb-4758-a7a1-693bf2732cc5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c6d573b-071c-4ce9-84d9-da46709f8360", "sighting_of_ref": "indicator--c15d9ee7-eade-4a7c-8193-2b5af609cd14", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d4eef9e-4765-4df9-a430-15b1fccb0076", "sighting_of_ref": "indicator--0bdbb6ef-81bc-42d7-851b-2e4686b68b4d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--563d44d8-6e69-4799-bd8d-137db66772d9", "sighting_of_ref": "indicator--b2223342-6063-4650-9daa-1940be36f55f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1199d680-ed7d-4301-af1c-647f1ef358e7", "sighting_of_ref": "indicator--7a573666-22b7-4bcf-90c7-158642547273", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed18340f-d255-423a-bdd9-b93113fbcdcc", "sighting_of_ref": "indicator--647e0062-1217-4d1d-86e0-4ceac7689857", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba68f4fc-5d0d-4f9e-b7f3-290377e96186", "sighting_of_ref": "indicator--a1b3e8ec-998d-42db-bd09-b7eaedc0dc12", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d391515-4256-4ff4-875c-be0bdcece34b", "sighting_of_ref": "indicator--213282e1-2941-4b25-ae10-be025d4513b8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35674bf0-fe66-4dd7-9da6-b94683988cc0", "sighting_of_ref": "indicator--736c65fd-585d-4bd2-a71a-e5ee04222c50", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b5c642b-59df-4784-b3c4-f5c2e6caad0c", "sighting_of_ref": "indicator--4bf4d1e9-78b5-4097-8043-ea5b17e11509", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf2fb5fe-3386-4a77-a0fa-db92a2fdbfab", "sighting_of_ref": "indicator--c6852590-e3a2-49d7-8efb-f0a17aa68fb8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df8bbb08-85be-425a-ac42-212b43995a9c", "sighting_of_ref": "indicator--a3353bde-367e-406d-b03e-9c5ffc622185", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c3fb518-27d2-4032-b540-c54a0db72e17", "sighting_of_ref": "indicator--774e9982-e63a-43b1-82f3-43ff8f763002", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1d670a6-3bc3-40f1-bbec-e82378a69762", "sighting_of_ref": "indicator--1ddf9ea6-b7d7-4f32-b5ac-bd3638852cdf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fdc2ef8-b41e-4efd-b34a-97502fd1b448", "sighting_of_ref": "indicator--8ce448cf-cc75-4375-973c-442244620a0f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caec5cd0-7c46-4a90-93d0-ca2addadcc82", "sighting_of_ref": "indicator--9ed781cc-5ebd-41a7-b39d-9f1a9786be44", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e821018e-88df-4261-9ec1-23f1b94683b3", "sighting_of_ref": "indicator--b920ba99-39df-4d74-ac57-4d1d1bfdf485", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c93200-5256-4091-b24b-8a97970db8e4", "sighting_of_ref": "indicator--5199083f-f74e-4539-8377-238b69cce557", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ba54aab-a9b1-4088-8fcc-c7fa236d8dd0", "sighting_of_ref": "indicator--26026515-be67-44b2-b4ab-1db1f5dc4347", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e580d3e8-444a-4d4b-a855-f5c7c504fa06", "sighting_of_ref": "indicator--6c948626-24e0-4b59-83c4-dafd13c535a3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da64b6a2-39dd-4ada-9af4-2a481a744d3a", "sighting_of_ref": "indicator--98a76151-3888-461f-a4ff-06f117daca18", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e989621-98f8-4b1c-b5a0-23459b106ae1", "sighting_of_ref": "indicator--326f8075-ce7c-4a70-b6a0-5f1977204df5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--435090d7-a286-4916-bc10-568e5a527c97", "sighting_of_ref": "indicator--dc74fb26-e5af-476f-a3ae-d924c0f125c8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--345fbdd0-2958-4b3b-9537-2e0082ededf7", "sighting_of_ref": "indicator--ac9f9369-5f23-4fc1-b153-a5425f5d49e1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dff4a582-9fe5-4a93-9249-cfe06a302e58", "sighting_of_ref": "indicator--bc66043e-2e27-4061-839f-d97441d98e48", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cfb906f-7845-4bfa-b3d2-a388bb624e50", "sighting_of_ref": "indicator--36598607-26bd-4944-9a12-51decec46817", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f1eed6-d811-4019-92e6-1c9c8dcc488e", "sighting_of_ref": "indicator--8f45b604-9757-41f9-a785-8a1558a2138e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--550b418e-2d76-4af7-9d91-9b3d737e7e60", "sighting_of_ref": "indicator--735a4e3b-2535-4409-bf9b-2dd2f6051d1b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12a89792-bd41-49e3-b69e-311c65e8062e", "sighting_of_ref": "indicator--d4e9f12a-af11-4e89-83d5-1e3e98a4c126", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb087f2a-27ff-4c1d-a84b-2317aa40371b", "sighting_of_ref": "indicator--2b9f30cc-03ae-4fe7-b43f-ec1767721797", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e99f3fa-e4e8-47f5-b6e8-d0b55b328753", "sighting_of_ref": "indicator--fc0d3b6c-aaf5-4776-a92e-675ca3f38105", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8df2a599-da90-44ec-ab9d-35745fb43c61", "sighting_of_ref": "indicator--0bfdff89-6af8-4503-a31a-0f101248173c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f48e04d-afa3-4e7c-8b30-654f86c75c53", "sighting_of_ref": "indicator--7d459db6-74b1-4396-be64-554e4b81479b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa321b65-cd93-4157-8bbc-277a8eb44faf", "sighting_of_ref": "indicator--6f09648e-498e-4df1-9bfd-ba69badf6559", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--338e5adb-a5b9-4a3f-9476-1f7dd6fe183f", "sighting_of_ref": "indicator--c41e8a93-a09a-48a0-b966-ed24a63cc52c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23ace2b2-802c-4d82-968e-8637f019eefa", "sighting_of_ref": "indicator--f06476f0-a1ea-4fe9-94f9-80d210b56a1e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f24f5504-8116-4f51-b785-b00aae0bf899", "sighting_of_ref": "indicator--c1820137-bf55-401c-94dd-1b295acad6aa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42290983-4c0d-474e-9bf2-cd381bd91a2d", "sighting_of_ref": "indicator--ff261c9e-55ba-431a-9c6b-12e06d57dfbd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe970371-37d9-4b80-bc64-a4f9a783b5f5", "sighting_of_ref": "indicator--e161f29b-1315-4aa5-b10f-2420f465dec0", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--017d5ea0-4afb-4a27-86be-36a695e37ac9", "sighting_of_ref": "indicator--bac87977-afd1-4a8c-bd59-b67aad4f4a3d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3ebcc30-644e-4f72-8d1f-981f95d0f0fd", "sighting_of_ref": "indicator--8bbd1f08-0e6b-4b86-a256-f9c390448a2f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5c87a23-414c-411c-827c-a0216c474bfc", "sighting_of_ref": "indicator--e70dd544-f461-483d-9dd7-64f4a466ac0a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d3df96-fd8f-4889-9a4e-c9b43a692dfb", "sighting_of_ref": "indicator--367bf9bf-9eb6-4b28-b542-b302cd575255", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0be852a-2c47-41d4-b178-fe71319939ea", "sighting_of_ref": "indicator--0880e7c5-3cf1-47cb-8059-484ef3cb3571", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda4762f-9583-47ce-ac0e-546101189277", "sighting_of_ref": "indicator--1a7e230f-36fd-4841-aa1b-87458232f8dd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e36da0-96f3-4d41-aaad-e00c72707e16", "sighting_of_ref": "indicator--fd807861-23db-47e9-98f1-a88ca944f7f4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3422b2e0-e56f-4cd9-86f5-bb72cbdfd0f7", "sighting_of_ref": "indicator--d001ce73-105f-4a36-bb18-39fcbad69118", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--714ddab3-fda5-465d-8298-05b4aefd4c80", "sighting_of_ref": "indicator--833dbca2-7c7e-4e58-8a66-3cf8cf43b6ea", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b642fbb-8be0-4815-a9e1-8a901b50e6fb", "sighting_of_ref": "indicator--80b427d0-5676-42a2-899c-88ef6eb60b74", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--917bfb74-4b6d-43c5-b24f-e93d9c83a80e", "sighting_of_ref": "indicator--5e78fff5-7778-478c-ac82-c8f5e3c833cd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b7d41d-ace0-4a57-8364-4a4915cd1f12", "sighting_of_ref": "indicator--83c9f183-85ab-49f0-bc2e-4a57a407090d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9da9d474-6027-481e-ab0c-dc474aa10d79", "sighting_of_ref": "indicator--39062563-dff2-4894-b305-e474653f1ea9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd82436-80c1-4929-8aa1-78a95f6aef18", "sighting_of_ref": "indicator--a7278abd-753f-403f-ab06-4fa0923c08d4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd213ff-72fb-43f0-a27b-8fa64a147f4b", "sighting_of_ref": "indicator--38e9d450-0a2d-4be7-92a9-99c6ba950873", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c97eefad-bc6c-4eb2-9b56-b9eb4cf63921", "sighting_of_ref": "indicator--322df81f-482b-46ac-bda4-b9fcb769a323", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7047ef5f-e994-4348-ad0f-70ec5b147baa", "sighting_of_ref": "indicator--9f04cb46-416a-4f9d-bf5c-df6c9856636e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8876260b-bc49-4737-83c7-6fd544af9944", "sighting_of_ref": "indicator--e49fcdcd-1320-4512-bc9e-44870ad23c4f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31358805-9a7a-4884-8708-b9d39cd878c3", "sighting_of_ref": "indicator--6d87ddc4-ecf0-4c85-9814-a580dc29f861", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb16fb48-e442-4c50-b3c7-3ba24847ab56", "sighting_of_ref": "indicator--be0308b9-3897-4637-a29d-9293871ff97f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87901244-3c84-4e6e-9870-45a3e97d07ae", "sighting_of_ref": "indicator--665bc87f-7d31-4afb-a4a3-431702790aff", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b60fb0-773d-4894-bdb1-7e3f44f0be7e", "sighting_of_ref": "indicator--679aeec1-818a-4e48-b32d-3eaf40737c0f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bd52514-bae7-48ba-8e7b-7ef4f8cfdda0", "sighting_of_ref": "indicator--8b20da21-8009-4c2b-9d3b-9d950111b432", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a4a11c9-68c9-47cf-9b5b-3aff42ed248d", "sighting_of_ref": "indicator--013f72ea-6127-4f58-a676-79e3bf0d2e82", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43842bc2-ee62-42b9-8fdd-8b68fb3b23ff", "sighting_of_ref": "indicator--76f549a8-42c9-48ca-a2a4-9fb167247f0e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f1c1e7-e12b-45fa-9efa-446706f7566b", "sighting_of_ref": "indicator--e0282fb2-76d5-4025-b99a-b941f01a8480", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f1ac8d4-b3e1-4461-bc28-052889d2b1c1", "sighting_of_ref": "indicator--3b984d81-149d-488b-ac52-17de89b9f1a4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e62daa-d2d4-4be8-80f0-59a17eed4675", "sighting_of_ref": "indicator--817d7753-e3ef-494a-bdbd-e41532f26619", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eb55775-e1ba-4f12-acf9-005c7a3cf693", "sighting_of_ref": "indicator--caac2d9a-5c1f-44bc-b01c-cafd9a81fa40", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bca5018-4fab-4179-b154-58b7de5e64e1", "sighting_of_ref": "indicator--a78cf6bf-a800-4444-932f-c9eccc94b83b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1325964d-d824-4f70-a14f-76becdfb33c0", "sighting_of_ref": "indicator--541e506b-42ef-42cf-a32a-d9da685a3fb0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1211c3b3-83bf-40d9-85cc-a9e109a36af3", "sighting_of_ref": "indicator--cc34972e-0d0b-4e70-bc8f-4897147f3eac", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8632093-81d5-4513-aa87-16a75dc10046", "sighting_of_ref": "indicator--c9fa5c2c-879c-4f83-8a2b-35853ed9ef3a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca17a45f-b372-4481-af52-83a6a97f29d3", "sighting_of_ref": "indicator--32e82b63-00dc-4389-bfa7-4117cac1459e", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fff28e0-9ea4-45b0-9b34-775a148c6a39", "sighting_of_ref": "indicator--ed72db61-753a-417a-bd0a-923661399339", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc75091d-6eb7-4784-b52e-ccb8561d3839", "sighting_of_ref": "indicator--1473b7c2-dd4a-4a75-9cac-cc987133910f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eb7e1b5-3648-4a89-bcfd-fc1662e586a7", "sighting_of_ref": "indicator--784fa6dd-d1cb-4339-b574-5a76abcf3770", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--932b4134-62c2-45e5-b6e4-dde80a153eec", "sighting_of_ref": "indicator--023e6a5e-55c8-4832-aa08-15695e6456e0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfb2de56-7809-4660-bf1d-6a3d91d2936a", "sighting_of_ref": "indicator--055c0b82-8e0e-424a-a9fc-90ee282d5df9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--718a382a-1aa1-44fe-8e73-556da029f30e", "sighting_of_ref": "indicator--31b24a02-8758-4410-9eed-0984669868aa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa2d785b-b4ef-4af5-b6f8-a7c37b64f816", "sighting_of_ref": "indicator--3f149135-fcaf-4458-bec1-90280d9647e6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9db6aa6-e5f1-4ba1-a148-af89c932b967", "sighting_of_ref": "indicator--32e0e41a-7330-4d57-83d8-02778427be3f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84132d96-5571-4dcb-8005-8817a706a4ee", "sighting_of_ref": "indicator--0d81e002-ccd7-422f-8e4f-0015bd6e3b19", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ea0f77-b324-4a35-af52-8bcbd0a8f1e1", "sighting_of_ref": "indicator--9b4abecb-1540-4614-b360-e609506e1430", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc0fe9c-50fd-45ba-9f44-7334013ee8fa", "sighting_of_ref": "indicator--6ef9b359-060f-4f6d-9e5a-387fc8067d30", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4142366-bbc9-4cc2-b53a-f076f708c6c3", "sighting_of_ref": "indicator--d47e4f83-4902-42e5-8b0f-48b64f5abb48", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91114bcf-d85d-4eb1-add1-2df919d8949d", "sighting_of_ref": "indicator--cf31f9ec-07e4-49c1-b275-58dfe8773019", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0655fb3c-75b1-4b1d-a09e-34eb477a972b", "sighting_of_ref": "indicator--1ecbe934-cdcc-4ce9-aadd-798aecd2f45b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24923254-8d9a-4b72-8f2b-3728441d73b5", "sighting_of_ref": "indicator--07baaf6c-9621-486b-94a0-4bb14f7d2421", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba926e5a-35ba-4d1b-abac-cfa022756829", "sighting_of_ref": "indicator--29512c59-eb7f-46d9-b00c-e338aebac0db", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d25e376c-11a8-494d-952a-7e74409b6a4b", "sighting_of_ref": "indicator--558a663f-8af8-4014-91af-f7324304f02b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8916999d-d18b-4b78-bc53-51fdd1961b9c", "sighting_of_ref": "indicator--c109250b-82ef-41ae-9ee9-24d12fa32e8b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d19091db-7537-45b0-bd75-7990e9b96fed", "sighting_of_ref": "indicator--086e1a90-03a7-4be9-80ee-bbea577bbabd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ceca251-b8d4-4f5c-97c3-1623303c7769", "sighting_of_ref": "indicator--18ee9316-04be-4069-8709-c897acc7411b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e9077f2-1500-4459-9e95-3061094d739b", "sighting_of_ref": "indicator--6be31bfb-e5eb-4166-a9ec-1b3ec027e90c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8183294-4fd2-466e-8780-884977a56212", "sighting_of_ref": "indicator--431131d6-1008-47ca-8c45-89718f0b7282", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dd7f50f-7fc4-44cd-b0f5-91d80c0a1739", "sighting_of_ref": "indicator--63b14d4c-767b-4449-b9df-d425c222581b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a44ecc-1b20-47c0-986f-99c483f5d742", "sighting_of_ref": "indicator--e4b79399-16fa-4677-86c5-144e9ade63b5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ca81d80-4093-48e8-9593-581c8a98029e", "sighting_of_ref": "indicator--007a96a1-a884-4ddc-ae69-2f41f0c8f44f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3676c2fb-5bee-403f-a87a-63a752b68522", "sighting_of_ref": "indicator--50dfd573-98e0-42e0-9e22-51efdb73b546", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86dc06aa-221d-45e6-ae20-d9cebf7d4050", "sighting_of_ref": "indicator--56f9d4d0-31a8-4cd0-b7db-a85f36290bf3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--306bb8cc-d4ea-4f9c-aee3-07d4a06a5364", "sighting_of_ref": "indicator--fb40889f-28b0-4ea8-a435-e70d58e99159", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ad840d-65b2-46bd-95f4-ac4c7d9ea67d", "sighting_of_ref": "indicator--63560ef6-2846-4ca7-a1f5-cb8d77b2a065", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--079f8544-5bfb-4ae9-8e4f-95169c7acfae", "sighting_of_ref": "indicator--d60e2044-1bc5-4057-921f-b709adec3cb4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57627302-a952-4b08-a313-e61c5c27fb6f", "sighting_of_ref": "indicator--804937bb-718e-4b94-b9f5-c9e9c02e3755", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa76ee7d-c252-4ba2-b4ea-1f680f0e00af", "sighting_of_ref": "indicator--3b0a072c-4485-4200-8683-d2ca8f6b0705", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be6d26e8-afe6-497c-92d0-50d812fe3f04", "sighting_of_ref": "indicator--2ccef78e-28d7-46fe-88c3-3dc8a59e77f8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e5128ab-b815-4dfb-b186-17474865d97e", "sighting_of_ref": "indicator--86b9e3a1-f548-4205-956d-547b3ea0462e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0427a550-2c2d-4453-878d-5acf42396883", "sighting_of_ref": "indicator--a4dbe0eb-6f97-4885-ae55-ffb11d5d0c24", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd32995c-9059-42dd-a6cf-77fd1860cd6a", "sighting_of_ref": "indicator--c8f26799-0859-43f7-829f-70520ce8aa8f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65fea9bd-af11-471e-bf89-c3715584a055", "sighting_of_ref": "indicator--1e7e10c6-9342-46ac-a3c1-ad96165d13d7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6bb76ff-99e5-441b-9177-34d0a9349975", "sighting_of_ref": "indicator--ea6df09f-ac3c-493f-b79c-ab8aac05a455", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de680b56-f836-4dd1-a8ac-28e1211cf29f", "sighting_of_ref": "indicator--0a8b8a7c-ec61-40ac-aa74-a8f2e2c239d5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a5ea5a-4279-4485-9577-f96e576d5175", "sighting_of_ref": "indicator--bcea79dc-288b-4e3e-a78b-f612d098f9a7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b524d57a-4428-4211-a322-ed61cc77aa5c", "sighting_of_ref": "indicator--95ae7114-8cf4-4655-bf14-f419ccc21012", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10500b90-613f-483d-bf1f-0d8a5c3d8bdb", "sighting_of_ref": "indicator--a6162559-b04e-4e84-a4e2-52e74fbcac8b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e1bf5a-c1b1-4d44-bf70-b6f83eabcfab", "sighting_of_ref": "indicator--31a2e9bf-4708-4f1d-b410-7b9303780f2c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccafa5f9-e45f-4e85-8efe-3d5dcdca87b4", "sighting_of_ref": "indicator--e455aed9-3aac-4b11-8aa5-670d44c41b59", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72eb2c39-df9c-4332-9097-bcd011f3ec8e", "sighting_of_ref": "indicator--dd22a5c9-4b77-4957-984e-558419fdb883", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42d159dd-4b31-4aae-85a7-9286fe7bd185", "sighting_of_ref": "indicator--e3017b28-0dff-4c9d-aa5b-eb0f4eee3240", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede798e3-44b2-4c3e-99b6-91d75b727c49", "sighting_of_ref": "indicator--a4cd1f58-693e-46e4-a54e-36326b03dd69", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec8814e3-5901-4006-a4d2-369a752a7f40", "sighting_of_ref": "indicator--8999c97c-8073-4896-ab22-e0bcb6ac7b96", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02835ab2-00b7-43e0-8dfb-77bd219c9e1e", "sighting_of_ref": "indicator--700fb5f2-82bf-4343-a96e-51c9391d0684", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--296f5490-37fb-436e-b5ca-76a8046335b3", "sighting_of_ref": "indicator--25ffd5e9-8518-4450-a471-d24db05c77fe", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5df47011-a353-4aaf-b975-17d187134175", "sighting_of_ref": "indicator--4dc935f1-89cc-4a4c-8b55-7f2029b85ee0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db1fd9f5-3ed5-4bbe-ad60-6868fa5f00ea", "sighting_of_ref": "indicator--02e93dc6-50ac-482c-b626-a08358ccd372", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b9ebfbd-7ac6-4a96-b28d-6fffa8b5fb5e", "sighting_of_ref": "indicator--408cdbd0-cab6-40e3-b82e-41541e02daad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80b1f1ca-405a-48f0-9148-8babb1c76478", "sighting_of_ref": "indicator--1a52890a-ea12-40e0-ad27-7e6fab226d25", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39617b5f-1785-4d9e-a8e6-8aab36bdff38", "sighting_of_ref": "indicator--9417e5e8-29da-4797-ab8a-4c4a920212cb", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--036b513d-6a9b-4f50-86b6-97a4544c5095", "sighting_of_ref": "indicator--0a711032-ca3d-4972-9b53-3cd6829c4a1b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83fba25d-1e5b-4b57-9515-ed086ea911cc", "sighting_of_ref": "indicator--f070234f-fa2a-40bd-ac68-e897b6a4cc29", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e06feab9-6b63-4d1a-a8cf-78cfe591ffea", "sighting_of_ref": "indicator--674631ed-ffd5-4f0f-bd5f-b0f30f4e3509", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b4cd1c2-155d-49f2-a444-958676b48d2c", "sighting_of_ref": "indicator--222ad500-1148-43a5-90a2-a7535ebd3bec", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8588eb6d-a6a9-4c93-864e-0b4f3f38f84c", "sighting_of_ref": "indicator--526552a3-02cf-48e9-8966-605055be9b2a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e71618c2-d14e-44b9-89ce-6009d256442a", "sighting_of_ref": "indicator--cc85df45-d6a4-4797-add2-ce707f27f4a2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2db76ff-8c94-4caa-9210-433086e5a4c0", "sighting_of_ref": "indicator--065c22c6-f12a-4b21-8c6e-39bcc234b467", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2269e24-1213-4351-8e18-d6d28ee05401", "sighting_of_ref": "indicator--26ab94c8-c4d3-49b2-870d-be57972e659a", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cec87958-ab49-481c-82cd-b6e655ef027a", "sighting_of_ref": "indicator--e5adcef4-0427-4eaa-887b-69f9ed6b1119", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c10cc77f-9bb3-4747-9b56-33e927ca5c4a", "sighting_of_ref": "indicator--4b844afc-1430-485b-aa95-9eac418ffc1b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d3a229c-0cd1-4a9f-a2b7-c13cd0cb1684", "sighting_of_ref": "indicator--c2151f07-6750-4968-b03e-9d5714ecf48b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--422d83d4-9678-4b83-8881-f27cc66d31d5", "sighting_of_ref": "indicator--465e72c1-f636-4c61-ab54-b4614da5105f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99b3adb1-74a3-42f8-8a74-6d45ae91d764", "sighting_of_ref": "indicator--955df534-819e-4f13-bc57-416d8323a2cd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a4b07cf-dca6-46d0-92e7-96a5407c2ff0", "sighting_of_ref": "indicator--64537af7-99da-4755-8ae4-21e5dc1ac268", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba5418a-1e13-436b-a46f-82a685709f27", "sighting_of_ref": "indicator--9cda9887-fbed-4290-ad77-7b6ad2299a1b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f2548c8-eb30-4f83-a858-cf5c56389bf3", "sighting_of_ref": "indicator--9cc61a85-8be4-4a38-8921-73b25fc785a4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02fe7fb8-93dd-42fc-83e1-2dc11be1ba88", "sighting_of_ref": "indicator--fb4d253f-2a56-4939-aec4-4d4dc7b15524", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5e2be47-96e0-42a9-8ac9-3d10fa1ce50e", "sighting_of_ref": "indicator--a8988772-f71e-4144-8478-110d6bcd436a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf3af75-6800-4797-ac3c-81264f9c443b", "sighting_of_ref": "indicator--971f18a2-e725-4ed5-89a1-1cb9af882f19", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87c6ddc1-949d-4de0-b00f-4e885c5f8914", "sighting_of_ref": "indicator--cf03253d-8eac-4660-8c06-e3b66730ed00", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f320f9b-c8a6-4300-9484-c11f962758c4", "sighting_of_ref": "indicator--4e801ad6-a337-4c88-94df-b98645472693", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d84a7eb-b951-42b7-b1f4-01ba19747ce2", "sighting_of_ref": "indicator--85e294ff-79b7-4b63-a488-fa637d85b7c6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae00de40-260f-4af0-8ed8-81b233c6e046", "sighting_of_ref": "indicator--6364ce2b-b6f3-43b1-acba-795329c2b69f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c16eb9f0-83b1-4978-9147-632a1d921eb8", "sighting_of_ref": "indicator--1f6adfbe-82d8-44af-8f60-587baae00887", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f85ec75-baff-4432-8bea-ae4cb4ee6d79", "sighting_of_ref": "indicator--79c883fb-b1d3-4372-b422-c016ea52d157", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ea0194b-184a-422f-adc3-3efbf33d3f64", "sighting_of_ref": "indicator--69bc0f49-b01a-48fb-b800-0212d544156e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2d9c8e0-4408-43fb-9e57-1684c2725b20", "sighting_of_ref": "indicator--c52065c1-779b-45aa-a814-68bc0be8cb3d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f13f55d-1338-4a74-aef8-aebbf5aab4f6", "sighting_of_ref": "indicator--8e4df4c2-9400-4c02-a65d-8ea15f78b75e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0419e902-224b-4ce6-91f8-a69b90350d57", "sighting_of_ref": "indicator--f852ac40-a2f9-4ac2-9d85-ee40c46e63c3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61b60d7f-44fb-4f8f-bd96-789618f4040e", "sighting_of_ref": "indicator--869f296b-a398-44ce-91a7-4a13b58aa31d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ddc0bda-8d93-4422-b071-5419ee0634ff", "sighting_of_ref": "indicator--541bec32-81e1-46e8-8760-df62fa00f533", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac31583d-e0d8-41ac-a2ec-9a8c9a56d837", "sighting_of_ref": "indicator--5d68784c-169d-4e3b-9d02-d8bb73d8b0a3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce3bbd0c-3719-40ab-80bb-67e610c60f1d", "sighting_of_ref": "indicator--e5b8aa42-d678-4616-adac-9b458bee08ec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--681e6c48-60cf-4cb6-a4ab-b169c35de293", "sighting_of_ref": "indicator--cac6fc3d-97b8-4f4f-b4c0-dd76665fd1db", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8c31191-8552-4ef0-a16d-af210bbad187", "sighting_of_ref": "indicator--8e3971eb-10a2-461e-8432-d56332f659fa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc9b057e-9f6f-45e0-ba46-4d26a62a1b4c", "sighting_of_ref": "indicator--1d4cb226-a156-468a-8099-6e80aefa6b28", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8427b083-ce20-480d-8c92-76e18f38430b", "sighting_of_ref": "indicator--a3626023-0b86-4c27-b2f5-a54bc7d1e859", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da24f99-e960-4049-8f52-d72259069337", "sighting_of_ref": "indicator--a9116554-440b-4ad4-8540-21d2bf6f75ed", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--432313a0-7ecc-47e3-a03a-34a899a82292", "sighting_of_ref": "indicator--7518b409-3727-4a64-9255-6d29260f6c73", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--647bb176-ce92-402d-a268-9f679a759524", "sighting_of_ref": "indicator--7caaf32a-d8ce-4aed-8cd3-e4f289452b62", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b68d53d0-147a-42ce-9ef1-9e9312f15078", "sighting_of_ref": "indicator--f0d6b52b-59ab-46a5-84dd-341edc820874", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34b358a8-7b87-40e1-a8ff-3ca4f0d02a2f", "sighting_of_ref": "indicator--8caf1304-9f5c-46da-a785-7bc279c5f9f7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec8bfeda-e4d6-4b2b-bcd6-71ccee0df0b2", "sighting_of_ref": "indicator--1b1bd2bf-0c6f-4949-8dbc-04f88ee5710d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e217ea71-69d2-4102-86fe-2eaad966d3c9", "sighting_of_ref": "indicator--91689ac7-3878-4ee0-a489-934e880b9533", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aa96e72-662f-4afb-a989-565f494c6bda", "sighting_of_ref": "indicator--720fe04f-c734-4168-b6b4-6cfe46371f73", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d71f36-8a0b-4b1a-a598-50accec7e834", "sighting_of_ref": "indicator--1a26e406-ab91-4d3c-9637-5e932f77f75d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--244185a3-4dc0-4d82-9a5c-5714356f2e43", "sighting_of_ref": "indicator--1e8be10e-0680-4160-b635-022cacc8a7cc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18df58a3-7373-4eae-a0b8-339d05c057c9", "sighting_of_ref": "indicator--f3776b87-a867-4c89-9cee-3f0205570060", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1516bc2-8a8d-4d70-88a9-fab3b3bedecc", "sighting_of_ref": "indicator--1a6440a0-af38-432e-8f96-c0f8dd163e4f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55641c04-9360-4eaf-9126-58a17abb9f18", "sighting_of_ref": "indicator--fe837765-5f23-49a7-9e9b-822533255e87", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baad2ea2-8a6b-4f92-a05e-36207eba1167", "sighting_of_ref": "indicator--c33d0a19-c2cb-4be6-bf8e-e8014fabd4c8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66b88600-2822-463a-9c33-9f6138e541c6", "sighting_of_ref": "indicator--dd529da5-fd36-427d-a9e8-04145ed4b18e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68fbd87d-e0d0-40e9-89b7-48850a3a4e43", "sighting_of_ref": "indicator--70a2b3f8-fa26-46f6-b3a3-166bfcf3c377", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--547a993a-0e56-4701-b1c2-0c1c14ec9ac3", "sighting_of_ref": "indicator--fd0c2dcb-54c1-4189-b94e-a3d5d6222093", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--459111f7-7498-471c-bad2-06cfa6d9593f", "sighting_of_ref": "indicator--9d63b496-7d08-4038-9cd5-62b27e718765", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a782546a-f98f-4e85-a44d-a91ac21f177a", "sighting_of_ref": "indicator--ad5c57e2-a5c5-43f8-ba18-cbcce72665c9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aafc642-a2cc-483a-a990-8841a319fc8c", "sighting_of_ref": "indicator--82f0dbb5-60b6-4cd6-a45d-ef0404a18ea9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b956cfa2-9c65-448a-bef0-4684199439be", "sighting_of_ref": "indicator--1a2613da-2486-40d7-a001-e123cdb9861f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd7efebd-05d1-4281-82e0-aa239fda7829", "sighting_of_ref": "indicator--64c0df6a-9c80-47b9-ae58-7f4c75c4c173", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a34e2d3-a603-4056-a772-a10325f69b6d", "sighting_of_ref": "indicator--c89088ef-42c2-460a-ba54-4f4cd699d0b9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9efa6067-b2f7-470b-9fe3-1be4841557be", "sighting_of_ref": "indicator--09bf2759-0bb8-44fb-8509-6305a118bd42", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--818e3f3b-9bfe-4f29-a4a7-c0c8f7b354ea", "sighting_of_ref": "indicator--9a479773-5e33-43b0-a24f-7eca625d6a14", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f2aabb-ced8-4712-800e-30be3efb70a8", "sighting_of_ref": "indicator--87a5e8cb-1e30-425d-bdcf-0414a6908205", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ea9262-07cf-438d-bbdf-23fa96e25e9a", "sighting_of_ref": "indicator--0bc95393-c2e2-41d2-903c-ce07e295f403", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a6b3f70-1160-4a3e-980f-f8921243081c", "sighting_of_ref": "indicator--dbef0902-ea57-46b9-adfc-3901d45cc70d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bf49ac9-6eab-45e6-9593-f7ccf3f6f918", "sighting_of_ref": "indicator--47f7fdec-68f3-4397-b916-063bfd752b6e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90199259-15f7-4f3e-ba95-bb56b8e3b47a", "sighting_of_ref": "indicator--85cf225b-070d-47b6-bf15-3b0e38e9cd57", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9efff633-5f07-4a98-bdfc-9f87ffd0853a", "sighting_of_ref": "indicator--c1bbc45e-f882-4bdd-9138-66ce0563e00c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--799d8528-55c6-49e8-a7ab-bb0c10eebe1f", "sighting_of_ref": "indicator--d49c0eda-e2d7-4eff-a92c-9eff9151c526", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39af19af-bca8-4ec5-a354-1de3956ef68c", "sighting_of_ref": "indicator--260fea49-04f8-4070-afb7-585c527e1372", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c3ea32-2a15-488d-bc96-32653fea165b", "sighting_of_ref": "indicator--1fbf3406-1096-4860-96c7-191723bda88e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d2d907-a382-4496-90ba-bba572a500b1", "sighting_of_ref": "indicator--af23f610-2f2d-48e3-83e0-04e935a03b45", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76376682-c07c-473c-ab5a-d4b4bf9400af", "sighting_of_ref": "indicator--88309f6f-98c0-4bec-a878-224737d852c0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1259db3-6118-4341-9015-ca3f3f56df59", "sighting_of_ref": "indicator--8f62694e-eb55-4858-9083-35464749ba17", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e6eb7a0-fcb1-4521-a501-dcd8adfeb76b", "sighting_of_ref": "indicator--a6eb4dc4-de77-41ca-8e22-ef3a2d5318d3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f8b9f75-77ef-48b6-8e82-f2a38b11e14e", "sighting_of_ref": "indicator--f132ab77-8708-4ae7-96cf-07b6dd195657", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61924c12-d487-4250-b05f-d31363f2a440", "sighting_of_ref": "indicator--1b570240-167e-493a-9812-bd892e7dcb89", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--932d54bb-2929-4c93-890b-7a29b27ee6a2", "sighting_of_ref": "indicator--8d936030-e677-4d7c-bf02-9d863f8b10a0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab94262-ef24-46d2-a0af-13cd574e484a", "sighting_of_ref": "indicator--7e8b4364-ba17-48cd-88cd-b54bc1d33e42", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f2dd6fc-a94a-4427-a93a-8d312bed7712", "sighting_of_ref": "indicator--d0fa9132-0ba1-4717-96a8-fc8e22ebf7ba", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f48903d-7ed9-49e4-bc3d-f675449c78e1", "sighting_of_ref": "indicator--642c8571-1e88-474b-bbaf-0d187cf9adfc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b4c3fec-1d6b-4c65-844b-5f8d8876f215", "sighting_of_ref": "indicator--41ce1370-1924-4528-9057-9480487dee85", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c28d655e-d4cf-45d7-9fb9-280cd891f824", "sighting_of_ref": "indicator--f32b91b8-1a75-433d-85a8-2b885aa9562d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--327f8490-df4e-4dbb-aae7-85ac5ff00f36", "sighting_of_ref": "indicator--0946feb6-dbc7-4fc6-bcee-440f1661abff", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71995bfd-1b09-4f91-81c6-627d5df23c2a", "sighting_of_ref": "indicator--c3f3053a-3b3e-4dcd-a92e-3c40abb5765c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb4678e9-6bd0-446d-970f-94b062df8641", "sighting_of_ref": "indicator--eaede208-8360-43f7-833c-aa6b07d6a94d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e55c8e4e-11b5-43fb-a97e-73c34c213811", "sighting_of_ref": "indicator--27f855e8-3d1f-405b-82cc-739588ae0333", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d13427-3136-4425-a4d6-8fe212dc0a1a", "sighting_of_ref": "indicator--67e8406c-1a0f-472e-8dca-07f193ddee56", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cc01e74-de6c-468c-8dc9-8c957713f7ff", "sighting_of_ref": "indicator--9c7254f2-bfb8-4e64-8f35-03b1897493b9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec16c96c-d062-47b7-bf3c-97e230a5478a", "sighting_of_ref": "indicator--1c4d6e5a-2e64-46ba-8f2a-e9aadadea999", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d21871f-3cc3-4bbc-bd6b-afa58f431af4", "sighting_of_ref": "indicator--084e08a5-cb0c-4eee-b472-bf42a46c70dd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--189d7ede-a2bd-4656-bb29-9716f81c1bc7", "sighting_of_ref": "indicator--7f873a54-90a9-4ef7-a4ce-96514a9c175c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f60f8b24-06c4-4452-9bcf-9e493a55a990", "sighting_of_ref": "indicator--e901ee78-6380-46e5-9a5b-c18e9b9bbac8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbab1e09-b8df-4264-8af7-364894012d76", "sighting_of_ref": "indicator--5b1b041f-b0ae-4744-8bb8-9f63751afa55", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8644b9a4-4acb-4593-9f07-fc4fc705f056", "sighting_of_ref": "indicator--510522ec-b5a3-41bc-ae51-511d58607253", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--011b00ce-7af5-4c00-b3df-3bf05be794be", "sighting_of_ref": "indicator--e4874501-a3e8-4a61-bd30-dd93808dfacf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e79b2a11-6319-48f5-af8e-3ed95f349d0f", "sighting_of_ref": "indicator--b289a69a-9d8f-4ef9-b6c9-bea2e4f0cd5b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bd0bdaf-75d7-4b79-bfef-2a9f8302efdb", "sighting_of_ref": "indicator--9ce0e934-4e18-422c-955e-d295d99bc35e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16a7212b-b0bc-4f5d-8c7d-23d706b6fc2c", "sighting_of_ref": "indicator--6935acb3-358d-46d7-963d-9ec1069078f2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab8e0c09-3518-4742-80fc-172aa51316f0", "sighting_of_ref": "indicator--ff6ed8b1-e197-4d5c-8a33-efe5da29c48f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d23e3b8-cc0a-4408-b574-b8fdab643cd7", "sighting_of_ref": "indicator--f7ee67d4-9406-45e5-b0df-4913f3f7ae78", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--026cf5c7-868b-4905-a474-0195e30889b2", "sighting_of_ref": "indicator--31e683e4-dd72-4502-8254-d256980d9949", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f98b0d2-13f5-44a9-8006-6a034a4cef96", "sighting_of_ref": "indicator--c568abe0-49bf-43b0-81a3-54033396f72a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f60922-c371-4980-8e4f-41fa0a4921a9", "sighting_of_ref": "indicator--3448c126-7a9e-4af7-8bf3-d7ac93503546", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eec21986-f6b9-49c5-83b4-ce0c1398fbcd", "sighting_of_ref": "indicator--1a9f7312-d9ac-4837-bbd4-d52dd9790b5d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d1be60-369b-478b-bb6d-41bf05226de2", "sighting_of_ref": "indicator--cef1cba0-5343-478c-b24a-665a934fbca5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b1fbb5-c626-43da-90bf-f58646d528b9", "sighting_of_ref": "indicator--df7d16b4-a9da-4a6b-8be4-dbd7fab3e60c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fe3735c-80c9-4c97-af9a-0c5927bb164b", "sighting_of_ref": "indicator--823f4bce-45cf-4bff-ace5-e135a0e10803", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ede25ab-c1c8-4834-8f52-e9fda2ce2f20", "sighting_of_ref": "indicator--374e9525-8f7c-4ef1-ba2e-e2bc2f58006d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2431077-484e-4dfa-96d8-688b54bf82b5", "sighting_of_ref": "indicator--573eeec4-4e24-4a47-8ee9-0255126e0f72", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deea4802-b1ef-4620-8dad-f06d601b8a41", "sighting_of_ref": "indicator--7f10e6c4-701a-4372-9396-38de4eafa650", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1c8cc72-3b26-4f92-8c9c-77ba67e362a1", "sighting_of_ref": "indicator--72c05fc0-8f65-4a1a-b803-4cbc8a0522fb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c14bd115-9c62-43cb-bf04-23ea90648cea", "sighting_of_ref": "indicator--233fba54-bb21-45b6-ac98-a9cf7f6be419", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dadbc6f2-8921-4293-a841-6c9230e0ad29", "sighting_of_ref": "indicator--8e1dd71e-dc47-440e-b56b-f9165c0659eb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b5ca093-ed9a-4e99-8a2c-d86b3ac923be", "sighting_of_ref": "indicator--5daef41c-524f-4832-b010-75925072c81a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28abd7ca-6d77-49d5-9419-4eecf6e62838", "sighting_of_ref": "indicator--3b4d3cd1-a592-4906-8e68-61e72a76f01d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f76085b4-0323-4a0d-9755-9e3817ff751d", "sighting_of_ref": "indicator--cb7fd527-081a-4932-b2ca-81527b0af458", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45999422-3109-4eb9-ad3b-1a194a99825c", "sighting_of_ref": "indicator--ad6f5e17-1a58-4e6a-9127-30ce6d115db0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--800834b9-895f-4591-8742-f5f856ec3c19", "sighting_of_ref": "indicator--e9bf048b-6f2d-4b4f-b44a-67cacd444f08", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac2e8b1f-964d-491d-9ad0-8503e56539bc", "sighting_of_ref": "indicator--eee48ae7-57ea-4d76-ba4f-b49dea8a4800", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b25e00b6-b070-4510-8e00-03907709e77f", "sighting_of_ref": "indicator--adbe63fe-dfa5-41b5-a7ea-69547ad0ab86", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0478d291-afc2-4e38-b0cc-e4f03ee9245e", "sighting_of_ref": "indicator--6694810f-aca8-4166-b2a4-9c3eaa51dd84", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbf62091-a3cb-4cbd-b312-e56a33068797", "sighting_of_ref": "indicator--d35fc85e-06e2-4d01-ac37-c2480b61840e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6720f4f-fcf3-4593-8287-5bc5e48ec338", "sighting_of_ref": "indicator--5f4153db-8b3b-418d-8610-5a091e95a4b7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11fbc4ac-7281-466d-a83e-35d3c81a4627", "sighting_of_ref": "indicator--021b958d-6401-45b1-9e40-ba11f9f30fc0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d2dfca-d9f2-4eac-b248-56ff47047fea", "sighting_of_ref": "indicator--a769016c-d14f-4f5d-a2ab-300b50160f92", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d89a7d3-9dca-40c2-b955-1ca65cd3695f", "sighting_of_ref": "indicator--8b0bbd7f-f00b-41c7-b1e1-4de6f19cdf4a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a9cfc49-cbb3-4534-afda-4af13fc3d65d", "sighting_of_ref": "indicator--e7050ec0-d09b-4305-bf95-a62549ed1b51", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cef0f5ca-f1ea-465b-b061-aa09e21d098f", "sighting_of_ref": "indicator--f3f4d47a-9e0a-4010-b65f-6851f5666620", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ee22cd-8d76-4c7a-a279-f7306d4a18da", "sighting_of_ref": "indicator--6b132bce-c899-4732-bd18-85eb7aacb720", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e13fa55e-8abe-45be-88a9-566ebf40e062", "sighting_of_ref": "indicator--7fd162b2-6f37-4f6a-b270-b512db2cf3aa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02e36a9c-06a7-431b-ad3f-467d5b505159", "sighting_of_ref": "indicator--6c562bbd-b996-4303-8f3c-7f5a55ef5a67", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce0ddb87-beca-4980-a76a-e4036e15be6f", "sighting_of_ref": "indicator--d0882509-c392-483a-84b8-64022600b806", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d857ed71-e591-490e-96a5-80635a0d340c", "sighting_of_ref": "indicator--7ad4e675-9d48-4fc7-b259-de100f8322cf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8daf71d-f6c6-4f0e-abce-252852bc56d3", "sighting_of_ref": "indicator--a0fd2b0b-b46e-442a-b544-ab4f415cd4f4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bbefd85-3902-4c83-89b2-33dd2e98c29d", "sighting_of_ref": "indicator--2fc845f9-ecdb-409a-8bf1-86ef1dd05389", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f1b50f-263e-49e8-a67b-b2c90bd5b645", "sighting_of_ref": "indicator--28aa5181-935c-4f42-a7fe-401df103913d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--603ac64c-02df-4ce0-b5e1-c1b68d19a4a6", "sighting_of_ref": "indicator--23d4be8d-57f3-42af-a67c-57b7cbd60fec", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bead93b-9b7b-434d-9c46-0a89f0b446f0", "sighting_of_ref": "indicator--a2aa11e9-a1d6-407f-b5b6-90827fbb067b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8341622d-597d-41f1-85b1-d69b7962cfe5", "sighting_of_ref": "indicator--8f6909c3-b8f7-484e-ab17-6553fea58f69", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b314db-587a-4d93-8bbf-4d26e8e2a81e", "sighting_of_ref": "indicator--c8b8affb-2dab-4677-ade9-2a1decda9d63", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--853f4cad-7f60-499d-8e19-96516aa38105", "sighting_of_ref": "indicator--4f680989-ab10-483b-b5b0-6d4301c50b3f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--746f0b76-676b-44b1-ae24-58acfd32248e", "sighting_of_ref": "indicator--12341695-ef71-425d-9023-22e905f1011d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8586a483-74b5-4724-8c05-a76e639ff446", "sighting_of_ref": "indicator--766ff1f0-698c-4ac7-8d1c-8d2faa5eaf48", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0b2acd8-6a10-4b25-9a03-634cbec11882", "sighting_of_ref": "indicator--a77d598d-be79-42ac-b6f9-8333ad68f5dc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e43a1de-a501-4660-bdc1-3a3f28d072aa", "sighting_of_ref": "indicator--750e3748-7aa9-4692-b050-1afd095f3d10", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--156cb8a6-11bf-46b9-b86b-793c7eb62c18", "sighting_of_ref": "indicator--d8010b9c-dbcd-463f-9b35-ecf7e07e7db2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--513425c2-2600-4f51-bcd6-289c2b81a471", "sighting_of_ref": "indicator--c10d0707-0a18-4a98-a00b-038736432bab", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb5f9cba-1b82-4863-b68e-8664f256b70b", "sighting_of_ref": "indicator--21f9a036-bf2f-4a6a-b3fc-139661f4ae89", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cd8c44b-09a1-4752-94f9-0976be83f116", "sighting_of_ref": "indicator--a9cad1c8-26be-4e3c-ba47-5ec7b9d63c68", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de2c4da-3bd7-4ee1-ac4c-01d41c9981c6", "sighting_of_ref": "indicator--9e4dd3f7-71f9-4635-a4a7-fdd6ba547492", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b47222b3-6a86-4364-9583-03ad9fb80eb1", "sighting_of_ref": "indicator--9fb1272c-5c57-42e8-a5ad-eb3f16308b37", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f7a8c5f-ce14-41ff-972e-d4adebe1c7fc", "sighting_of_ref": "indicator--26d65d3d-f3d8-4a19-b286-bc93094294e0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431821bf-b225-47a9-8fc0-c8bf4d8d908f", "sighting_of_ref": "indicator--8893d27f-68f9-41fc-b6c2-81cc295c22e0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff13ae7-d177-4089-8e33-4ed5c512f876", "sighting_of_ref": "indicator--c2677a85-d2b4-4f54-9249-64c420732a03", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee6bc77f-58a6-488c-812a-a0ccf2940819", "sighting_of_ref": "indicator--41b36db8-f000-4451-a38a-3200de80aced", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dc95239-8da6-45ae-a062-52da1e2b0db9", "sighting_of_ref": "indicator--ae344626-4db6-4b18-9ed9-fe5412cc1aec", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c10c592b-b540-4f65-81ea-ada60b779807", "sighting_of_ref": "indicator--8ecabc79-c751-4001-95df-99d3b2a770c7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55465ed1-e50b-4bdc-bd50-943837443823", "sighting_of_ref": "indicator--322efc1f-936a-4361-bb99-862b5fe88e3c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a725a92c-706a-42a6-a5bc-eb20f8295aa4", "sighting_of_ref": "indicator--40028ff0-55d2-43e4-910a-5950dd97b51f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6728e3c8-384f-4324-994d-6643da8c8214", "sighting_of_ref": "indicator--0e18f3cf-6f86-484f-af18-7c3fd4fdf8d9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72937588-e638-429b-bb1f-9703c4570109", "sighting_of_ref": "indicator--ff3a6825-2be9-447a-8b85-69bc1fe9be5f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f920b13b-b242-4e79-b4c1-316f998f1160", "sighting_of_ref": "indicator--9d43c0e5-92c4-48c2-9bb6-aeec9ac64caa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--050ad5bf-5905-4ab7-ad57-2c3c253f6b0e", "sighting_of_ref": "indicator--b73806ae-afac-46c6-be28-6460a251807c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9df438e-2a38-43e2-8609-150aa21a1ca6", "sighting_of_ref": "indicator--0a8e1e9d-ef21-4a43-a11a-5af42ee49184", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57173239-bf2c-43d0-a55a-72399ea30173", "sighting_of_ref": "indicator--c2669c66-9461-4060-9523-10f96791cfae", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd84925c-f55c-4ef0-8638-033a2a187ff1", "sighting_of_ref": "indicator--a8b4f47d-60d2-4b0c-995c-d94d81cdd970", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa7ce130-5610-4447-89e5-f6b1b8fb6b7b", "sighting_of_ref": "indicator--955d44e6-297b-4fac-80d0-2d3f0daf9189", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7cd95f1-f8f8-4dfa-a6fb-1bf58fca1f3d", "sighting_of_ref": "indicator--00c7cc51-c48d-40e7-ba99-346a6f166449", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dee1d1c-3ce5-46e7-bb6f-77d883ebeeeb", "sighting_of_ref": "indicator--f780ebb2-04ef-4bf5-87db-2182be082394", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f573384-99f6-4331-8925-4d7f06f0fab2", "sighting_of_ref": "indicator--aa68ea2f-1cf9-4c43-a858-53e3d7a49cd2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--204037a3-d3bb-4614-95e3-38adf1610309", "sighting_of_ref": "indicator--e2e6ed16-128a-4484-a778-64de55ad7885", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46208eac-25b9-4e3c-8a5e-59cf5e6dd3f8", "sighting_of_ref": "indicator--f20610ae-375e-47ef-987c-6028bb1aa4d2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9f2045e-ab86-4d8e-a1dd-a4eccffce4c8", "sighting_of_ref": "indicator--1c07dca5-dc3e-480c-addb-891fcb0f68ec", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f380f4d3-bc57-41a3-916c-08988cd6fb47", "sighting_of_ref": "indicator--2126e676-9117-42f4-9880-a79652652ccb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad226a03-3167-465a-8471-dfc7db4b0ae6", "sighting_of_ref": "indicator--e57884b1-8b4e-42df-9497-4ed6f7cd1e9c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac380ad0-b9d0-49ca-932d-b378ba51b9a9", "sighting_of_ref": "indicator--600558a0-0297-438c-949b-ebfa08b16041", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97be94f6-92d2-47eb-a4c0-65fbb7ae003d", "sighting_of_ref": "indicator--8cc2f6d0-e5c7-4d39-8030-f81c4feec5d0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3973deec-dfa0-4b6a-b8a9-caf997bc1902", "sighting_of_ref": "indicator--d45beac5-44a7-4396-91e7-364c23156e35", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf51eb7-cecc-4a75-8f4e-718b6fb8046e", "sighting_of_ref": "indicator--3a362449-1a6c-482f-bb78-dff5b5f20ee6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02515afe-cc9b-4d38-a501-2dde69046e83", "sighting_of_ref": "indicator--d8f99e9e-7b99-4b59-b4af-78b43631fea8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fe81105-a2b1-4cf3-bf66-61f48821e13f", "sighting_of_ref": "indicator--80ef45cb-ba51-4b2f-baae-614536f5bf2e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1d4ff9c-393b-4908-bc77-1b4755908030", "sighting_of_ref": "indicator--17646810-34de-4111-8c75-c97825b543d3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df245f2a-6b09-4163-84ea-79cb86e8f293", "sighting_of_ref": "indicator--b8b27ddf-a479-44b5-8981-9dd75b44964d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89be718c-31e6-40da-8630-4de20dc3dcb4", "sighting_of_ref": "indicator--d43f13bd-992e-4ce9-950b-9b87c45fa3e8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc014d64-884d-45d7-bd02-c6a2565f9b5d", "sighting_of_ref": "indicator--5a004edc-a544-4896-b4f7-9655940a098e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a904b5-02c8-4b99-8304-55413f7eb5f6", "sighting_of_ref": "indicator--36e0a393-78c2-4299-9be4-e9b52f56f087", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a175808-9da8-423a-a6c3-4b0f6020bcf7", "sighting_of_ref": "indicator--5a94d63c-97e7-4c1a-8058-852b1f8d304d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed68840c-dfce-4c98-9349-6ba8e6f59976", "sighting_of_ref": "indicator--bdd32d77-e260-4097-bd0b-04abf635a1a6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9419cf0b-d32a-4f18-945c-56fa9947dc92", "sighting_of_ref": "indicator--59f7c8f7-9106-4271-9964-2645619b5304", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81339f30-95a7-4d0d-a93c-c62327ebc340", "sighting_of_ref": "indicator--a886a4f0-d962-4aa6-a5c5-8242150c423c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfba7dca-e07e-4c77-ae1b-eabdf9266ccc", "sighting_of_ref": "indicator--ed4dcb3d-6cdb-4051-a824-8db635bd32f5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--235b750b-feae-45a0-9b78-88500c650f70", "sighting_of_ref": "indicator--f4a8bb23-6b42-453b-950b-db64e6cecbcd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b308fb7-941a-4cfa-88b7-61483ac70171", "sighting_of_ref": "indicator--9c8b70d1-56fe-4b1b-965e-88ac4af74526", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4582cd1-c364-47c3-a9c8-ba669a8ad4d4", "sighting_of_ref": "indicator--48fe9ec5-3149-4bce-ad0e-e5759f58f1b8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ae8df08-9de4-48ba-81aa-3713ef9de5bb", "sighting_of_ref": "indicator--a8421edf-6647-47cc-8ee1-4091f3259f58", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f38e7a25-cf9d-41ef-be57-f0b1ccac3a1f", "sighting_of_ref": "indicator--e62eed8b-a9b1-451c-9242-7102387d40b8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f654e3c-be72-4a02-8642-bb1eb6ff5058", "sighting_of_ref": "indicator--b2b931fe-6714-4f27-a90e-66df50b9b07a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5144343-5ff2-49b8-ad39-b08afdce8352", "sighting_of_ref": "indicator--b46fb919-9528-41a3-8d92-e0691cec395b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a5cdbc9-f419-400b-9c03-ff48f2c68acb", "sighting_of_ref": "indicator--a2708162-29bf-4d47-b480-4d29eb31bf6c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a747c4e-3a98-4d81-9905-eb173a700733", "sighting_of_ref": "indicator--4e3e41d4-4f8b-483b-9e5e-b6b93e06ed2f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dafea331-4969-4a53-bfd5-2606c859729a", "sighting_of_ref": "indicator--c3f88a83-b409-4dae-9c10-1c3a017a7df2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--377856f7-7ff0-4ac6-bb63-49bba56f0275", "sighting_of_ref": "indicator--b0d33bb5-af7f-43cb-9ada-8fb50dd8b37a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcbb37e8-e3d9-421b-853e-dbaafc94027c", "sighting_of_ref": "indicator--b5459341-4d5e-4f7e-b7ec-43bdb935d9c1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d86eedb-8705-446f-8d98-a7e762b4dc70", "sighting_of_ref": "indicator--89d8f39d-2eae-474a-9b20-ed8a2032caff", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9106a4df-f9b0-41ab-91bf-a205cb8b05e3", "sighting_of_ref": "indicator--f6035449-d80d-4a0b-b2b8-806924bb904e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae7dc49c-87ca-4285-ba45-30e69eb01f12", "sighting_of_ref": "indicator--0cd38544-337e-46ca-84bf-6fd80e49e1b9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--621114d6-8a49-4477-bf84-96200efdfa53", "sighting_of_ref": "indicator--69b5d30d-b8eb-426e-93ee-a7baee8ebdda", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78807257-ab32-4d06-bed5-6f99e7bfe125", "sighting_of_ref": "indicator--a51fcecc-495e-4724-8de2-f056a83fbc5e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef6bf57-a29c-4134-83b6-0b0c08395654", "sighting_of_ref": "indicator--cab02e23-4600-478f-8fcd-8df320ef1efc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a646d8-e83e-44cc-b0a5-2176747e749f", "sighting_of_ref": "indicator--9984ef31-bec8-4ae9-b41f-21d7561918b2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66416eea-9807-4fed-a5a1-1ea628140079", "sighting_of_ref": "indicator--8eda645c-1bc2-4dd7-997e-6f307badb8b4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46ca8548-53cc-4f5b-9583-0b4547f288a7", "sighting_of_ref": "indicator--353de5e3-97f9-44e2-8078-3fbdf72a7cf7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c0fb131-cf33-4ff4-ba3c-79b3f2f27de1", "sighting_of_ref": "indicator--af003bfe-96da-43da-8562-4c6b5740bf41", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39811600-9798-4c73-a822-46d21bdd0b9d", "sighting_of_ref": "indicator--23344915-b798-4adf-bbce-f396e6fdb032", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--860ba8fc-5038-4f00-902e-cc6107415135", "sighting_of_ref": "indicator--fe1ce1c7-df03-4f72-8935-5f7ea98ff1da", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b7a2eeb-7af8-4b7f-a023-d6f0fee5df94", "sighting_of_ref": "indicator--0c999877-4c67-4621-92ef-b8ad6db278b3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2168afe-a109-4fbd-b098-0161a22679ed", "sighting_of_ref": "indicator--a61b9c47-88bc-4f62-b360-1bf9ab6a8362", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b09b0db-af2c-4c19-b192-abb90edf3735", "sighting_of_ref": "indicator--04638480-c603-424c-bb16-c12290d302ab", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef69d30-acf9-491f-a103-521844670703", "sighting_of_ref": "indicator--430ee227-317f-40f8-8385-3b8398f59cd7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67a2866b-47d9-4255-943d-e40929a7445a", "sighting_of_ref": "indicator--dc8fd128-da18-44f5-ac6a-2396c4ac7911", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8631b9d8-7e5d-4e2d-b021-c4987893207d", "sighting_of_ref": "indicator--bfa68db8-8ad1-4998-b1f7-05600f9b7573", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b75df9b-42f0-4402-9c54-e2ecc9285a1c", "sighting_of_ref": "indicator--0582b275-b0aa-46f4-850f-897f2f7d85ab", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07500ef9-6081-462c-a68a-6c723c2758a7", "sighting_of_ref": "indicator--21eebf56-2985-44df-8dea-e9078bec5b09", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d12953d4-7fc8-4540-b32b-94423e3d6493", "sighting_of_ref": "indicator--e64cd318-6308-4548-a358-5e47c672ddb2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f628b736-35fb-4c8e-8e74-5366588dd236", "sighting_of_ref": "indicator--9ed0316a-ed1c-4c79-97c0-6ef0e1e30ea4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87b2a4d4-9912-4dcf-abb1-e957e59707d1", "sighting_of_ref": "indicator--a6307b8a-d31d-4f88-bde4-3a7ad3309814", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a3859a0-3150-4e04-8f67-84178ebd4652", "sighting_of_ref": "indicator--92b31146-7cc0-41fa-a5d7-18da1841c5fd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb3a7454-1b54-4c61-9e27-433b0ee3d9f7", "sighting_of_ref": "indicator--e6545cc9-12f1-4408-93eb-0a272491022b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e36a467b-5e57-4b65-ab9d-9c86e275846a", "sighting_of_ref": "indicator--70dead1f-5472-4bfe-bca4-c51901161d42", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2409e044-a707-4db4-945c-d64d761abdae", "sighting_of_ref": "indicator--aa7d455c-0b07-4efa-a336-8744e7169c5c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37df9706-745c-459c-b97c-52cbb553b1eb", "sighting_of_ref": "indicator--dcb1d26f-a6e1-4239-8442-8136d53309dc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68e89815-487b-4901-a2a8-0c3610cc0a3f", "sighting_of_ref": "indicator--da5f02f6-e898-48e5-b61f-e3801e8a0207", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ad1bf6-cf13-4185-b539-f159174163da", "sighting_of_ref": "indicator--69a6dd31-6886-4574-a911-d0d648b0f005", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2842b87d-0480-4dce-be02-dc01091bdb8a", "sighting_of_ref": "indicator--e0fff0d6-6839-4eb9-b9d7-8f8f0ded35e6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be5cfb39-dd09-4592-80c7-c1757fa25883", "sighting_of_ref": "indicator--6c9f9509-4be9-4875-a3ad-2ebb0e7db258", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55ef4b2e-47de-4b0f-a147-9dbe262aa371", "sighting_of_ref": "indicator--3d872bd9-21aa-494d-97a2-6534aedb70fc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a1886ad-1f7a-457c-882f-e9b74cd7856e", "sighting_of_ref": "indicator--3c29aec9-f7e8-456c-97fd-b8f6fdc1469f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2637c4bf-d320-434b-83a3-fff67d38b0dd", "sighting_of_ref": "indicator--31406895-6c0d-40a5-b5dd-77c981cf44b4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25b3dab5-2b93-4f5e-8c9b-c3b840121d76", "sighting_of_ref": "indicator--6ab849ff-6b2b-4f1f-a7ac-cdd5cd76dbf3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad30184d-0a12-4f3c-8875-56cb2601de59", "sighting_of_ref": "indicator--8f2c389a-dc65-42cb-a787-d5eee331d403", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd68871-cc4a-42da-93a5-e5865e53a8a7", "sighting_of_ref": "indicator--59b941a4-ee16-4366-9e00-22b8bf92abc7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--159610cb-dade-455b-9d95-1cc1acac93be", "sighting_of_ref": "indicator--db60c847-7f17-472d-9207-4591fdb23243", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4313f50-c2eb-4403-8ac7-761c4858ab5f", "sighting_of_ref": "indicator--3ba7960b-5970-4d4e-88f7-423165171673", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3586cdfe-afcf-463c-a815-015241e10ab8", "sighting_of_ref": "indicator--ec865e0c-becb-4fb1-a5f2-89305f9db098", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90b3073c-736a-4747-8426-a911a4632719", "sighting_of_ref": "indicator--3f308e25-af04-44fb-a42c-b15495857339", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46320f4c-d847-4951-b026-bf4130437481", "sighting_of_ref": "indicator--30d9d40c-2278-45bf-9418-03d06cd2ccdd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf76756-9350-4e0b-a5e0-5935ec5bbe2a", "sighting_of_ref": "indicator--8074558b-4511-4326-9a5d-81f5203a302b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df6ebf1-02d9-45b6-9297-a380a878891b", "sighting_of_ref": "indicator--bdf8a1c0-2d11-4303-afae-af8b5cc4a682", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ec6afa-c14e-4b53-9996-53b78bb1755a", "sighting_of_ref": "indicator--79a9017c-9ea0-48ac-b717-778a316d5f65", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bc018c4-a899-4832-b0e1-df3472962e2d", "sighting_of_ref": "indicator--62a4d5c2-781f-4a27-b37c-dcb8e5f8c675", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--355437c7-964a-444e-9a99-e4d8f510c999", "sighting_of_ref": "indicator--318f90b2-4fba-4f60-8ae6-9e42ac5f2168", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c1bf4a5-b50e-4baf-972b-bd352449bcc9", "sighting_of_ref": "indicator--a37b3e19-1e53-4517-b881-e59b552db0e0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f49c5bc1-3bf1-4525-bd68-d109a7d0e4d3", "sighting_of_ref": "indicator--1a5a932f-5f69-41b5-a6e2-aafa2ae1b683", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d232e7bf-2305-4c91-ab6e-f7445e14d829", "sighting_of_ref": "indicator--4daac8f6-4f73-42ae-89a4-2db0aa01f40a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7050e9c7-6bdd-4970-a721-93e011c78ef0", "sighting_of_ref": "indicator--91ca00b2-78e0-4736-b5c5-8e0fe75374c7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c713728b-d2a4-4be2-a84e-4f093b47bcdd", "sighting_of_ref": "indicator--fab22def-0511-40b2-8486-505c1f9ff6f3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3aa152d-6d48-45b5-bdf6-2d3014b2af62", "sighting_of_ref": "indicator--b89cd18f-b2b8-4c41-ab7b-2697e944ce5c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e5923d-3f0c-44fb-8b54-16e0422565e3", "sighting_of_ref": "indicator--0c849323-60f8-40fe-ad23-a1710c27c08c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27b0941a-c6eb-4b41-b374-9b69ea198fcd", "sighting_of_ref": "indicator--ffac10a8-f717-43c0-a799-bb77d774c2cc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01bb3c7e-3e18-4110-8fc8-d3e4e8f258a5", "sighting_of_ref": "indicator--ac2df6e2-4fef-49cb-a8a0-c15ac6fd7f15", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75b63a67-5a92-4e4c-870c-969a1e25ad2c", "sighting_of_ref": "indicator--e27b2c4d-dd71-4437-9007-dc7017035182", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88eec1e2-d91e-4b70-82c2-7b74740e1eed", "sighting_of_ref": "indicator--31beb87b-a5fc-4bed-a197-d53857ebe378", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e8fe5e-25f9-42ff-bdae-b186712d00c2", "sighting_of_ref": "indicator--167d3cd1-7a22-4cad-97d9-ce28048a1336", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45b12d91-3a63-443f-9190-86b6d14ec36b", "sighting_of_ref": "indicator--bcb4e0da-9780-4356-b1e8-0b27ab7fa734", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7ae3922-2220-431c-9313-f1bec99ecacc", "sighting_of_ref": "indicator--5554ea6b-5dd3-43a2-8bb1-78f9c41ec624", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55fe1e88-095e-40ad-8726-903757d9430c", "sighting_of_ref": "indicator--1a57037c-da30-45ee-8c84-f43427cb0607", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c070048-7103-4aa1-8464-1b4a800536c7", "sighting_of_ref": "indicator--ba7e4fde-596c-4a2c-b6fa-526ecbd9777c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a22f481-a8c1-4821-8356-aa83cca9e572", "sighting_of_ref": "indicator--544176b4-2785-48c8-b4f5-1dce76ce4174", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--575ee48d-1bb2-4f9a-88c8-a1a44ccc5534", "sighting_of_ref": "indicator--5b2eba89-2072-45a0-9578-5628e61c0432", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8784633f-82f8-4e50-ae09-9713905a4b4c", "sighting_of_ref": "indicator--0162f0ba-a0e8-4eda-b705-495d633477fd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92527d20-b6ea-4ecd-bb76-613058e8a0ee", "sighting_of_ref": "indicator--db007097-1302-49f5-ab96-44b62646ff5a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c3756b2-3157-44e7-8b8f-a145ebd793a5", "sighting_of_ref": "indicator--f1be860a-803f-433a-85b0-aed31e234cc1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49dec24b-6d7b-44d4-ad53-871c5667fe00", "sighting_of_ref": "indicator--78eceac0-bbd1-4999-a688-f9031d383189", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af9116eb-529b-46cd-a089-12bc7575d691", "sighting_of_ref": "indicator--95f3ce20-6e45-420f-9763-644ed51f4f79", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a5528a-6ca3-4d01-b5a7-a2124af3c58a", "sighting_of_ref": "indicator--ad756a7c-8440-4a8b-8ae9-f44959c6cf7b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bedac6e-aee9-449f-9101-37f43a8eb1d4", "sighting_of_ref": "indicator--51579e01-9b18-4536-8dd7-8788eef5d46b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78da5a3d-6224-4ee0-9ac9-695803c0c41d", "sighting_of_ref": "indicator--c740f288-4991-4ff0-a7b6-dff7d5db4874", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68c55d80-6eef-4b62-81e6-e38a3bb593ac", "sighting_of_ref": "indicator--7db05640-eb3c-4d3f-b0c2-7eb590b88e3c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff92c645-0833-45f5-af39-ec8140707c2e", "sighting_of_ref": "indicator--ac4786fd-9db2-4779-b9b5-60f64a65a4b4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b8ddc1e-3e89-4e1c-9e1e-3f9f4ad46ae7", "sighting_of_ref": "indicator--85a3a126-45e1-44b4-bb25-5d65cee1ef5d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b20f16f-07ac-4d0e-9004-410e399298e1", "sighting_of_ref": "indicator--182b9c3a-ba36-4b9a-a231-0e2cd775f5b8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9810894b-25cd-4a5c-a0a9-3dc84434bc0f", "sighting_of_ref": "indicator--7a6cceaf-9e81-496b-b629-1c6e5b20a914", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd36c001-788d-4641-9702-0ce7c5461d25", "sighting_of_ref": "indicator--05d6976b-6e4f-4c6a-ad35-05bf80735094", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--261636cd-cf62-4f6d-a731-fd2e62fa901e", "sighting_of_ref": "indicator--40bfb0e6-4d49-418b-92e6-a4237fc7da63", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0ce9c9e-662b-4580-902a-0710f2d1b966", "sighting_of_ref": "indicator--4d523e40-bfeb-43c8-94d1-e42b3b324b3d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecedfdf6-f4b3-443c-baf8-7e4bfc9e164c", "sighting_of_ref": "indicator--96542b48-2440-4629-a12f-32c2132ed963", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2ad4772-264d-4422-962b-21b04bab23b2", "sighting_of_ref": "indicator--6d349ff1-e71a-464f-8c89-65c602149d1a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f8dc57-cdd7-401a-98f2-9c62269ca4cf", "sighting_of_ref": "indicator--41ad25f9-b5b7-4de1-a9f0-01243852b93c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a004ac7a-91ea-4402-87b8-9ae80b68dc21", "sighting_of_ref": "indicator--9c2cfd06-3c30-43db-88b3-72e2979fdc34", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd25a9bb-05c0-4234-a70a-4be38c939697", "sighting_of_ref": "indicator--b892d305-2d8e-4de5-b219-64e2628bebf4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e332223f-0182-4ec0-b41d-ed9811deab44", "sighting_of_ref": "indicator--ce98663b-ee74-4ec3-963c-8af56bea2625", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a955cc47-d6c9-4a26-8477-084d97e38f54", "sighting_of_ref": "indicator--a6ab9f93-ec4a-49fe-a322-c1878dd697df", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b37a31-1bd8-4a4d-8780-0dfef613fa4b", "sighting_of_ref": "indicator--83183527-f50b-457a-b231-dab419e591e3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76eb1f89-a2ce-4b3d-aa68-73b91a03007c", "sighting_of_ref": "indicator--cce89eb6-91ba-4971-b269-1b05e753dfae", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a9104ce-2795-48f8-ac48-fd57817c1b0d", "sighting_of_ref": "indicator--5c9c47f7-7f7f-40d2-9523-dfc2c3827c30", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--775f5157-509c-4e77-9752-d904b8dd1684", "sighting_of_ref": "indicator--a2008d84-e521-462f-8e7c-714a9a0db340", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c6ef311-83f4-4cc4-8ede-17640b649629", "sighting_of_ref": "indicator--00af8a58-aba8-403a-ad51-e6675414d3f2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e1b874-126c-482d-9969-a01d28984cfc", "sighting_of_ref": "indicator--8bb9596c-6c6f-44ca-8274-64899d2554d1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c836765-65f0-492c-95ae-6d79f9a21d8f", "sighting_of_ref": "indicator--7160f921-69e8-4197-82e7-ee3f037090b0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ac924a5-05e3-41c8-b04c-18310df7f16e", "sighting_of_ref": "indicator--7c0fcd35-2b9a-4c73-8174-91f70f84348e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f03fcb55-7310-4f28-8de6-db5cfc41a7d4", "sighting_of_ref": "indicator--3bbeedaa-5e4c-48d8-ba5a-7e10a4111693", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d28c3f0c-489b-4d02-b36d-ed6ec5b59ce9", "sighting_of_ref": "indicator--20457ea2-f6cd-435f-b2c8-5bdefd431a91", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d21f2eda-ba9b-49a1-a5d8-c0197338e0c1", "sighting_of_ref": "indicator--d49d1e0a-6343-4c49-8c35-c68d85cc4f1d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f2737a-af0a-4944-8bdd-ea9fb0d58629", "sighting_of_ref": "indicator--ba1732fa-6793-4533-b1d4-e03f66c5bc01", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d01ad366-2203-44e8-a46a-82d020b51b32", "sighting_of_ref": "indicator--e80c2eb7-b523-44c3-a095-e9f0fb9a7204", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e27f7c2-c6be-4dc9-b21e-2020aa5a6f1e", "sighting_of_ref": "indicator--ff595047-0947-41bc-be14-a750c9895f5b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18626fc7-ec9c-4ec0-a5ae-e7718931a39c", "sighting_of_ref": "indicator--94ccee44-4b66-4c40-a834-d134baae8068", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a8994fd-84cd-4691-955b-369fe6d3bfbe", "sighting_of_ref": "indicator--3934b8ad-141e-41ab-8b06-aa643b04b0e6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe2ef358-7260-4271-b8b9-3806da3fb230", "sighting_of_ref": "indicator--efad5df4-1264-40cd-aca3-f2e533b9b88e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c4f0833-421d-46db-8168-c41f4c886df8", "sighting_of_ref": "indicator--db8a217b-f7a6-4d52-93dd-52e93cc64155", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db311963-7231-4e3b-beaf-907f4da04e99", "sighting_of_ref": "indicator--b2f0c0a3-8fa7-4e77-ba0b-fed40336f496", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1e9b7e5-c2f0-4e57-be0b-670ff47fc9e2", "sighting_of_ref": "indicator--a9904eb5-d644-4003-9038-28374d603726", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e73d1de-41cb-4977-91e2-9b9e573cf800", "sighting_of_ref": "indicator--2ffce8d1-84aa-44ca-a872-c7e4ecc7d423", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df142a9d-d4b3-4c48-ade5-00dbfd2074ea", "sighting_of_ref": "indicator--9da0696f-3b9e-4fee-bb45-503c6147b221", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1de504ad-4aed-409d-be75-83aa503531f2", "sighting_of_ref": "indicator--b73038a1-6526-4f17-bad7-8360dd938d92", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03a26a1e-2065-4225-9fa6-048793778777", "sighting_of_ref": "indicator--f58c82df-e807-4758-b74b-8ff55c77fd6e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4abff72e-d7ed-4626-902d-ddf41542f954", "sighting_of_ref": "indicator--ec3c61c9-b6a0-4229-9dfc-a3b5c81bb026", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c430ff3-6e3e-4dd6-94ea-a41301a5b51c", "sighting_of_ref": "indicator--d2a920a1-e760-4454-9334-877c8d254e09", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--890f61d2-f879-4836-9077-6c8d2145c4ae", "sighting_of_ref": "indicator--42e48f69-846e-4f46-887d-55e78b568b07", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f849a0e2-bfce-48ba-9413-74d2e7c42354", "sighting_of_ref": "indicator--265f1ed8-4154-48f5-a07c-3a544effdf00", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cf9dd0b-f5ce-4357-bff4-a46d8f3132cc", "sighting_of_ref": "indicator--46c59ae8-51c8-4d25-9f7d-b6edbc73cd60", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf405889-a2b6-43cf-98e5-6c111fac6b13", "sighting_of_ref": "indicator--74871235-f261-44f0-ab47-9bffe641253e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65f4fb05-dc70-46fa-a293-e98193f24d31", "sighting_of_ref": "indicator--9e3cf7e3-9091-4155-90e7-c553685ae82c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--869d7d8f-4fda-481d-a2fc-e9841ac486b6", "sighting_of_ref": "indicator--28ec64c9-2165-48d8-8055-ec44d68c5a79", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--406d645a-a28b-46fa-b0ee-c1cc94695089", "sighting_of_ref": "indicator--faa1a4a9-1c50-46be-8327-ddd237218313", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cafac5e3-2be5-404d-acd3-547229f8f7d1", "sighting_of_ref": "indicator--a83cb44b-5b5e-4c67-9f13-bef2971ff11f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7c273c0-e5a4-4d0e-a5ed-ffbd5f770b3e", "sighting_of_ref": "indicator--4efb3083-f617-4b4d-8024-49fa4166519e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--057901b1-e750-417b-8b36-58ea6ede1b8c", "sighting_of_ref": "indicator--1318dcee-1b7e-4013-b335-dec9edec5a97", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c87d790-7a15-4f48-9aef-78385a7bba64", "sighting_of_ref": "indicator--cf080ea9-b521-401a-93a4-0e28bdc00a28", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a9abae9-8586-477b-bf8f-2f2ce30bae7e", "sighting_of_ref": "indicator--6be1bdeb-f8b4-46b2-834a-ff5c3a184545", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e262c503-a9f8-4428-a4dc-3ab8561d709c", "sighting_of_ref": "indicator--8c859df5-b363-47b7-ac31-73c9d1333ea2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--958e042f-4916-4e72-9e3f-2ec03c77b708", "sighting_of_ref": "indicator--210da16e-f7cb-4d9e-bd71-b7df331b4227", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab3f31a1-0af5-45f0-a187-4ff366a31af8", "sighting_of_ref": "indicator--22b20732-5a0b-41e0-be8d-902b0fd2976a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2707a94-85ce-43c1-9b98-f92bb2f81507", "sighting_of_ref": "indicator--f1223b2e-c2f3-4994-a9b1-070da64e44dc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6a497b7-db87-4cf0-9424-2430e55f911c", "sighting_of_ref": "indicator--a2c46f9d-ba75-4159-9c29-f4081e31d7d1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb1ad05-1ecc-49e5-a031-6a3c47dd7c43", "sighting_of_ref": "indicator--4a3e7431-ee93-4205-a13f-8e338ee03b8d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7371ceb2-1445-4acb-82b6-59b2e9effec7", "sighting_of_ref": "indicator--7034cb5c-ec25-4825-ab36-3faf40ba50b8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da2e3a7b-8dd6-47ad-8cfd-3d8e6b1b3f55", "sighting_of_ref": "indicator--ec6bed53-87c7-48b3-894e-f892cd00ba6e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9cf24f4-9be0-479d-9df1-ffced8ef6c07", "sighting_of_ref": "indicator--b1a657a5-70d2-4ff8-90dd-5daa8feabb70", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb4066a-0578-494a-88c8-3919091419f8", "sighting_of_ref": "indicator--6538ab2d-fea6-4d26-8bb7-4792368f1553", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f66be86d-6ff9-4b0c-9639-6ef8d4916950", "sighting_of_ref": "indicator--71a10ced-16ea-446d-916e-1c595dd13c80", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--829b6d0e-bd7f-4076-b263-02a79a9cfe58", "sighting_of_ref": "indicator--1554151e-2028-4057-85a0-881f21cb0317", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--862863b6-b50d-49ed-9b7e-4dc8283f4822", "sighting_of_ref": "indicator--a0578d56-56ae-4b30-af44-c23867dda320", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78123879-a874-43d1-834c-b7a1785590b1", "sighting_of_ref": "indicator--e75bd37c-8ba8-4552-8a62-1c253c5b30d6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74aaeff6-76cc-4e70-b421-a41e6ed0ecbf", "sighting_of_ref": "indicator--eea6e593-d683-477d-96db-9b2538a10116", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cdc44e9-f3ab-426e-8510-f657ca8d95d5", "sighting_of_ref": "indicator--39c2d147-8a96-4abe-9dd2-afcebd0a3c94", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4192a7a3-20e4-4d89-8456-b1402a0890cd", "sighting_of_ref": "indicator--1d68343d-19b4-4950-b08d-87be319aea24", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f4c448c-0f1a-4251-9383-43de978aef35", "sighting_of_ref": "indicator--57f68b6c-7fb5-46f8-ba4d-3ba85e99b0c0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cdc08c0-8282-4025-a66b-ec9143f63dfb", "sighting_of_ref": "indicator--fde52bfd-fa46-4a64-985e-9d6502fa9625", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47caf34c-e7e1-4351-b7d6-4473ae463da3", "sighting_of_ref": "indicator--47b6d78c-ebef-43de-b316-e6db9a6cce20", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7746cb76-b460-491d-9210-17a06f041bdc", "sighting_of_ref": "indicator--a14859e0-f69c-4418-a089-3cec3a4ead85", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd68ff93-b178-42a1-89a6-aa8ddc7e8d15", "sighting_of_ref": "indicator--1b318a0e-6493-41a3-8fc3-e999169107c9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fad9741e-cd32-48e7-b09f-6205842605d7", "sighting_of_ref": "indicator--1ac0fa99-3656-4649-87f6-3f7c015763f7", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45312f15-62cc-4eee-b0d8-b82768893d93", "sighting_of_ref": "indicator--5a7026f9-28d9-4e15-8d46-683f1ca38ed0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d5e790f-a4ac-4500-854c-2e992b17fc0a", "sighting_of_ref": "indicator--035d4590-4ce5-4956-b344-006be5b47933", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--effa6f52-322b-4ece-9d2c-89a9c5187579", "sighting_of_ref": "indicator--07e88b13-3162-44d4-a81c-c85824d71627", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b1c417-bdc2-4ddf-a8a9-a4735195d082", "sighting_of_ref": "indicator--367ce33d-6670-46af-b267-a1a39807fec3", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e89ca9fa-1ba8-458d-9ea1-67ef44a75f6c", "sighting_of_ref": "indicator--36627a91-0c39-440d-9f3d-8b3c59a38679", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--785feae7-9b5c-48ed-86e9-20825132d4a3", "sighting_of_ref": "indicator--ea5c765b-f9b9-411e-902f-767885a1e3e1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6378f4c3-328c-43bb-bbc1-b6cd0cad7a80", "sighting_of_ref": "indicator--96acbb37-f183-495a-a34e-95dc218ddf7e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--197d268d-9116-453f-aa96-8bcc3b7c43d9", "sighting_of_ref": "indicator--3ec4898d-4991-4e36-9af5-84b143a17042", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5229b28f-3c32-4aa7-819d-db31a602d829", "sighting_of_ref": "indicator--b1a15a7a-400a-4753-bb67-6446c98114e9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60877270-f7ae-444d-81af-5601848df979", "sighting_of_ref": "indicator--05f02577-e06e-4cc2-91c0-88e548580b82", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eef2ffc6-40df-45cf-928a-ae2003327a92", "sighting_of_ref": "indicator--a80b21c3-37e6-4ae0-81f3-bb8e7bf335c4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b805592-b311-47bf-806c-0d0798b0d205", "sighting_of_ref": "indicator--50178ee6-574e-4c00-8ef1-5363b99f08e5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6750f869-68f2-443d-bf9b-103d8d07f41d", "sighting_of_ref": "indicator--57fd8ab2-f21a-439e-b56e-792fbb2d44dc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca1ff3bd-ec1b-4153-9738-332c3c9def69", "sighting_of_ref": "indicator--97a86a2f-df4b-4b66-8669-669fb9b5cb4b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74621c38-ffd0-4736-b1e5-f94dd8a958c7", "sighting_of_ref": "indicator--0fc645ab-64a1-42da-b591-19ff6c70061d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd28b8e-7778-4b14-817d-71e230a8098d", "sighting_of_ref": "indicator--0a1d405a-64ea-4744-9a9e-524b5522bfff", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1da0f1c8-6a8e-4b65-a586-63a0b3090a93", "sighting_of_ref": "indicator--6fa1cd42-f8e5-42d3-807a-0950a0c0c626", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e1492f6-ba3f-4e2b-9590-41efed2b4951", "sighting_of_ref": "indicator--518ad994-b043-4199-a397-a5b0c2c804e7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a661b9df-a2b3-42bd-9b4e-d73e7cba4b90", "sighting_of_ref": "indicator--056b13ea-63f3-4dfc-8c54-8fb5b5bc22e9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20afd47b-2976-4bb4-bca3-08c831319872", "sighting_of_ref": "indicator--7cf8c9cf-701a-4ee8-8cce-b82c1866bec8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8048f6bd-bc1f-4802-ad0e-5efbfc4a098f", "sighting_of_ref": "indicator--e1783ae7-725d-4971-b8a6-c2767a512e8a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b4498af-bb3a-45ad-94ff-4e923568be23", "sighting_of_ref": "indicator--6d3e3583-4695-4d43-9580-738e14ac61d1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--134d5cb7-6544-4d4f-8ce6-d821120683de", "sighting_of_ref": "indicator--f1379db4-e85d-4906-9374-f2a891971965", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6453181-2476-47bf-91fe-0b7047b1522f", "sighting_of_ref": "indicator--1b3d21c3-da8f-4b10-9bc7-068f11689d3a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88fae163-bde3-4282-9448-e16bccb3e7ec", "sighting_of_ref": "indicator--6cb81e9b-bb10-4636-8f95-e5fbf765c815", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1180ead1-bc8b-461b-b556-4d45035f26ec", "sighting_of_ref": "indicator--f289e49b-93e3-407f-ae35-4226b9d7c618", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d12ac58-d8b3-44d4-9a14-58d5cbfdd88c", "sighting_of_ref": "indicator--e5e22966-0002-4d4d-912e-e64014e1346e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b69fbc2-e413-4f33-89ee-af55c32be9a5", "sighting_of_ref": "indicator--91401fe7-770d-400b-b906-e7f6d5ea4b71", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17822024-ca17-42bc-a7fb-64ff8980c21e", "sighting_of_ref": "indicator--b29a049b-4698-4823-855e-d29cd7f32f53", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--102e2d19-98d1-46f2-882a-3c4e73d402a1", "sighting_of_ref": "indicator--a3ebe580-d6c1-4691-b7d2-982e0fb19db9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e24e93-28e9-429b-8d0d-9861c4c9ff75", "sighting_of_ref": "indicator--38e4fb0e-5e27-4e8f-b30e-8241424f9a7b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b9ea46-899a-4d0e-b42a-11569bc6b00e", "sighting_of_ref": "indicator--f7f2ffe1-0fdb-4e5d-8ad9-2853b3c2c0c9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adb6ad3a-5151-43f6-9724-8e9315d85d4e", "sighting_of_ref": "indicator--bba34c58-6c18-4f5f-9846-942cb62c7c62", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--829c91c9-1fce-4b6f-a24a-998b275394f4", "sighting_of_ref": "indicator--1c26954b-7639-4b02-a9f1-8933eb274c13", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35068bcd-d9ac-4815-8229-6ac533c63d8d", "sighting_of_ref": "indicator--c8926a99-d95a-44f8-b543-6c474b20093d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1845bc3-bc35-4ac1-a3ae-1c4a02582a57", "sighting_of_ref": "indicator--266e8f5b-55d5-4dae-ae22-973756ba4fe4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ac57bd-819d-4c00-b878-152bbe4c34a3", "sighting_of_ref": "indicator--53e8a192-b5ea-4d7e-a5d0-71151288862f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c437bc2-c002-4ddc-a8d8-372033adbc96", "sighting_of_ref": "indicator--2cf14f99-8865-458a-a8b4-89f8643cce2e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe0ae10f-0c59-4706-b728-e3d6c99c4d92", "sighting_of_ref": "indicator--2b257776-b43e-4d35-8156-2dc6ac5c3e89", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86846538-f13c-482d-94a9-d97eab645012", "sighting_of_ref": "indicator--96dcf586-2a10-4ebc-9d8e-3334d86bd1eb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75680b57-0a16-4438-86ee-5f354b4417de", "sighting_of_ref": "indicator--ef299c04-cbb2-4690-b4e4-1cc64a876a38", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b10f4ca8-7c6a-461e-9d10-a4f7b356f84c", "sighting_of_ref": "indicator--fc776b10-c3b2-4689-a964-2330cfe4fb4f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f1c1745-1a9e-4564-98f3-8b9bdf4c86b6", "sighting_of_ref": "indicator--ed82c06c-5e5a-49f0-850c-61d1653f4433", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--069ec906-7d0e-43b9-8b5d-f7a568abb2e5", "sighting_of_ref": "indicator--3fafe553-0d9d-47e7-aa37-6f70a92b70cf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--144de5df-5ddd-4790-a2a8-ae395e02ab53", "sighting_of_ref": "indicator--d0de9c87-4a48-49e9-a28c-d335db690d2b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd50c03-2b36-4052-a514-3f42a353074e", "sighting_of_ref": "indicator--9cdce9e6-67a2-4493-a9ff-cd75a2e9b51a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8094cdb3-d71f-41f1-b3be-5fba672a4625", "sighting_of_ref": "indicator--ae627fd6-d84d-4dd5-827f-16d9c410d5f5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b62305fe-a65b-41ab-a2fa-d86d16ff79f9", "sighting_of_ref": "indicator--697f2919-985d-49a4-a68c-5407248d269a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--676ca77e-d06b-4b99-8f59-30b74e7df066", "sighting_of_ref": "indicator--88bf7738-e0b1-4f0d-9a6e-f57acd194593", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795c1d6d-50b5-41f6-b350-091746a7eddf", "sighting_of_ref": "indicator--dab14d7b-5886-4890-bd3c-6cfe43541e40", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95be7d7d-ec1c-4821-9b89-c9a657bdf4be", "sighting_of_ref": "indicator--3cb9f436-ca46-46aa-baf7-1580f0555f74", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca2f391-4fb6-417f-a4c3-6fe8a377a481", "sighting_of_ref": "indicator--7a0abafe-fbb9-461c-a1ff-e0b0d68fdfa8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd97acb8-60d4-45d6-9137-d4e053afb6a6", "sighting_of_ref": "indicator--d43f5193-aa39-4226-9558-be13c0ad371e", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0c2286b-d164-4090-b49e-bce1ca9f70f8", "sighting_of_ref": "indicator--eb2a5e87-1420-434f-a15f-bdcd26e80e30", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294da850-f4ae-4e4e-8b89-1be8c011a59a", "sighting_of_ref": "indicator--11e37ec9-7200-4092-b081-1462df097e23", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c0b951-d42e-4aef-9a70-96ca9bb4b630", "sighting_of_ref": "indicator--cfb71da2-cb47-4615-b863-306a5d9e9b5b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--117ff616-3e65-43c5-a165-a686acad4bed", "sighting_of_ref": "indicator--bc527ba8-0ff0-4932-87c1-d48a964e884d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66b79cb0-4505-4ee9-bc26-244eeed16284", "sighting_of_ref": "indicator--98c4c742-c3ae-4b15-b842-ff52c440c4fe", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c69c522-30f9-4532-b922-c17269b09a0a", "sighting_of_ref": "indicator--e6043765-6a1f-4daf-9184-a65f434707d0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fb314b8-de82-4f30-bf5e-17f51dcf730b", "sighting_of_ref": "indicator--e238d024-8c22-4751-a3fd-234c6ab586f3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d44bc4-10eb-4077-aef0-eb0e66908173", "sighting_of_ref": "indicator--bd062f6b-9b14-492b-b328-7ed5ee6946fe", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcc2874d-1f67-4715-8807-f9651532a244", "sighting_of_ref": "indicator--6c110be2-64f9-4bcc-b047-2995387cf2b1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d9520f-7ad7-4008-8ba8-855e13893f17", "sighting_of_ref": "indicator--6c622cef-f483-4cc5-82a2-376ed35af489", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b99790e-41bb-4894-92d0-9154bb1e5862", "sighting_of_ref": "indicator--2d6073b8-324d-4b6e-93a3-d9d709df2044", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5eb5904-e799-4887-a1ab-4803e2782729", "sighting_of_ref": "indicator--e0717848-1525-4b3e-8f68-5746fed1475f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcb78813-cec8-487f-b88b-edf0b4609235", "sighting_of_ref": "indicator--0a99a3a4-58dd-40ac-a510-2fd4f746374b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4d83dbf-5902-453b-9470-e80ecb2ed102", "sighting_of_ref": "indicator--c85835c9-c2de-4e1e-bfd5-81cdc98ee017", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--573f97b2-18e5-4f93-8fac-7e962bdc5325", "sighting_of_ref": "indicator--85feae8d-f099-4620-86f0-7749f9ce9768", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ccbd920-0426-4427-87aa-d796b9ba932b", "sighting_of_ref": "indicator--67d8a67e-430b-45a0-a17d-62c554516040", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--277d8606-83b0-4198-8c62-42b61b57ce45", "sighting_of_ref": "indicator--6570c42e-c185-485f-acf4-eb2c0581d0ce", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87da087d-fe09-4ba2-afac-7d5e0d5538d7", "sighting_of_ref": "indicator--7ca6e26d-2f45-4739-b81c-c02314eeb162", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a4f121c-e79a-4914-889a-f8721001b098", "sighting_of_ref": "indicator--711b8425-d65c-441a-877c-7e4061e910fd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ba0f5a-fd8c-41f3-acc8-1daf8b11a900", "sighting_of_ref": "indicator--6a084ffa-85bc-441a-b172-c725a3b84573", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17f5f031-52d9-4f2c-83d6-69f55af54b48", "sighting_of_ref": "indicator--1b6cd893-908d-4671-86f2-1a165419e280", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7f58ba4-cabc-4222-9f24-11bc2499b0b5", "sighting_of_ref": "indicator--29c10147-336a-4a3b-ba98-021559ba34d4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faadd9e5-1238-40c8-8c7c-720d3025293d", "sighting_of_ref": "indicator--992de442-ff47-45d1-bd13-372babd71774", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a76173-00b8-4bf8-984b-b4957f07c6de", "sighting_of_ref": "indicator--475bc987-c3ed-448f-b2d0-fcf23ca1e262", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e4e0b78-df4b-4e3d-80e2-c27a1765e0b6", "sighting_of_ref": "indicator--e25adf3a-b4f8-4adf-bd44-c017255445eb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5986f7af-6f56-4a94-98e1-aa931fc48870", "sighting_of_ref": "indicator--ff54d185-7e87-4ae2-a190-1f21e782b949", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8709544-4351-4f75-b59a-aafd46d779fa", "sighting_of_ref": "indicator--19ad758f-f61f-4c90-8a5a-7887fad93bfe", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c59c1381-87ef-4316-8ee3-a4ee0cd95f10", "sighting_of_ref": "indicator--c998cb05-9119-49c5-834f-4f96bdf000a8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--049fb7c4-f476-4cee-8045-78afb98d0dc6", "sighting_of_ref": "indicator--6cb5d39e-e559-44e0-9584-e1a97f3925f5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--406776ac-254a-42c4-abb2-51b1322cbb91", "sighting_of_ref": "indicator--3637ad94-cbcc-4caf-b3de-7ab75ce2d364", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d11eba1-4b7d-46a3-b0bb-ae6214506516", "sighting_of_ref": "indicator--8cb79b8e-ea11-46ac-a7bd-c82da8b39272", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a024a35a-fb70-47a9-842e-bf30529446f5", "sighting_of_ref": "indicator--f31d920a-8b8d-417f-af0c-7933c603a37b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f56fdfc3-3165-4b1d-a7d9-9fcbfdf612fd", "sighting_of_ref": "indicator--e85c3674-05f1-4716-ab9f-0b2ba71aa396", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d1ddcbb-3033-4316-9f4f-bcf288fb5979", "sighting_of_ref": "indicator--b7d5af2d-0587-4966-be7d-49848f22573f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a45ebe-6b49-4179-b19a-399c7533f758", "sighting_of_ref": "indicator--162e1892-eb7d-4d9d-9509-744b0c9bfc5c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e39659-a9bb-4495-9e55-61a52e2528c6", "sighting_of_ref": "indicator--da7c7837-5c46-444f-9ab3-fba4e62c2a24", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b0de818-1b65-4351-9f12-9ea74cff2113", "sighting_of_ref": "indicator--d16c14fb-fb9a-49d7-b892-cc9992ebb551", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4178310-dc9e-4180-9dc4-a0f1939ec473", "sighting_of_ref": "indicator--9727c982-28a6-4a9f-8496-003b1b9c62eb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e060396-dca0-435a-a338-4b925ccb1b3a", "sighting_of_ref": "indicator--70b431bb-a2e8-4431-8b12-e4e58ca95f7f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a56f059-cbd6-4c77-b977-33fe9349323d", "sighting_of_ref": "indicator--ab996885-1ddd-4a9a-9b97-50abea729135", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e5cfa96-9a19-4e26-8da4-1b5297a1e166", "sighting_of_ref": "indicator--302c8eb8-394d-47a5-973c-7ad1b118eff0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9202fad2-55f1-49d0-ab11-77d27d205af7", "sighting_of_ref": "indicator--8d8004a1-b044-4a94-b53d-0917a940590c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a77773c-a100-41ef-9bf3-653d921af5b3", "sighting_of_ref": "indicator--4f385322-7f62-4017-99aa-5e2ff57e1077", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d0ad15b-c123-47e7-8c35-a124f8f44032", "sighting_of_ref": "indicator--e9428892-7032-457e-95ce-d1da1ea3a976", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56bfe9c8-8ee0-4a6b-b140-c6b2709dac97", "sighting_of_ref": "indicator--e7e88b14-2989-4a97-b3b0-e999ed005d94", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fa0f2ac-8923-445e-a72c-1dd4ec46cec7", "sighting_of_ref": "indicator--4d46edc0-3bc9-49d8-a50d-99525611f78c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb18fd34-0d46-4073-b7e8-78ea443c1174", "sighting_of_ref": "indicator--5c387965-41f4-49ad-82fe-060addb84980", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a35467a-1e18-4db9-aa7d-3712f8ae1065", "sighting_of_ref": "indicator--77cb8eb0-9d7e-4ba4-83d0-c4d701fe23d8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07dfa2b9-0b5a-4c44-ad64-12dc0821dea4", "sighting_of_ref": "indicator--15834d5f-9be3-444a-a16c-9cd8866356d8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef7fb94d-c62f-4906-a8ce-d937bc41264b", "sighting_of_ref": "indicator--9660fdc9-ed73-4bad-b6f2-6a6ff4583060", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98feba1d-0ed9-4a9a-b019-32bd580cf8b2", "sighting_of_ref": "indicator--c58802de-75d7-49ea-9672-7f583af1759e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca51f02-6792-42f8-9d75-c00d3fd806fe", "sighting_of_ref": "indicator--436d9119-9dd4-4cd3-8a57-be980cd08463", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--475f6012-eaa2-40e7-95bf-a6d8ca7dfcc8", "sighting_of_ref": "indicator--aa551aa3-1bf6-41a2-96fc-35d75b0f8e08", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18615420-391f-4026-86b2-0e2c7fc990c1", "sighting_of_ref": "indicator--2ce7fddd-a722-40ff-9eee-a10e631347f3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39eb95c3-7696-4d55-a25b-19cfd4c9a065", "sighting_of_ref": "indicator--aae359ed-44dd-4683-b0d6-a1f0de2b6b1d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ac388e9-a161-42f5-a831-cb301224b59b", "sighting_of_ref": "indicator--fee2f121-9f69-4048-8032-6e367f1b181b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--578a8752-2066-4e5a-b608-ffd836f895ce", "sighting_of_ref": "indicator--c9f08462-959f-45ac-b073-0af0f42dc151", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eeea9a9-33b4-4bb3-8bdb-12a9e53c393b", "sighting_of_ref": "indicator--f8071784-2d61-4a43-9dda-16c941af5e2d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bde6cc76-1e34-49b8-bacf-4f8c45e422e9", "sighting_of_ref": "indicator--e591823b-87ad-469c-8128-e361e1f029a0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e21bc7e-872d-4f96-99fd-a5970b19a4b9", "sighting_of_ref": "indicator--b12e4d05-c8db-4fc2-88cd-b2a73f084f8f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33bf713d-4d6b-4457-bedc-11381c8d1e23", "sighting_of_ref": "indicator--56b3c3bf-ca10-4707-bf73-9b079f600d63", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0c0af98-e8d2-4ad8-a767-718d02ae5beb", "sighting_of_ref": "indicator--3f5c4d5e-138c-4026-af0c-0709ec226786", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--203396a2-33d1-4d2c-a6cf-3eea4099ae77", "sighting_of_ref": "indicator--3f10594c-dcca-4c78-8edd-4318059710eb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edda78b1-bb88-4a8b-9992-47ee61e43d49", "sighting_of_ref": "indicator--97be3822-3dd1-40f5-b8e0-1dcee6f5ff31", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b5f42d-b0e5-4309-88d1-7a8b313e1cd7", "sighting_of_ref": "indicator--e8fa9ee9-a064-4420-896b-1ea981a5a136", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--823937f0-f016-40ab-a1e1-414e09dd66a9", "sighting_of_ref": "indicator--a092f422-bc3c-48dd-917c-f447b21e72ac", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea26255c-f905-4252-b699-d47630ab7b65", "sighting_of_ref": "indicator--b298ec0e-f5f4-42f7-be20-12e0cf814289", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22ce2bdd-7e1f-4cff-91af-cee65a1c94b3", "sighting_of_ref": "indicator--1da62539-c94e-4031-9a82-35518760eddd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f40e8a5-d0cc-42a1-91f1-31d50a0453c1", "sighting_of_ref": "indicator--2f977e3b-03af-40ae-8de7-35a0ece4fec3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bce5128-8ffe-49f9-bb5e-2645e3b7a18a", "sighting_of_ref": "indicator--018d100c-5439-4964-82bd-506b258d4d0f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acbe113f-6ce9-48c0-bf92-ae59078f6ecd", "sighting_of_ref": "indicator--f16e09e8-7925-4dc9-b0ec-ee7518014c05", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0dced9d-2385-43be-b6c3-e165cf1e18c5", "sighting_of_ref": "indicator--f71e3fe3-1e6d-4530-92e7-03db8092c778", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c661b980-dfa5-4855-8449-a0e07a13fccb", "sighting_of_ref": "indicator--d40ce99f-fccc-42f7-98a5-65d9cf6d7efd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31295de5-bc49-4632-a239-81dc9f0a7400", "sighting_of_ref": "indicator--f4e59531-6ebc-43de-9ec5-158d4b645c0d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b25d0358-adec-4217-aeed-ef06a101b8b5", "sighting_of_ref": "indicator--b1619465-4319-487e-b84e-00d0b8dd95d1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38112f0c-a10e-4d30-9ca4-c0dde2a6ccb1", "sighting_of_ref": "indicator--e47a0937-a295-4178-b243-863e99fab170", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ef91b2f-6e88-4e5c-a4a3-6825ff02e0a9", "sighting_of_ref": "indicator--fd715f37-5fbe-4149-88c1-c40fe6f7d5a9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c07ca6eb-6984-4411-8752-645217e74f46", "sighting_of_ref": "indicator--14cd2f18-68c3-4c8c-837f-862ff57c9de4", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a49fc48-415a-4910-b8d6-ecb23d2feeb2", "sighting_of_ref": "indicator--bae35749-5974-452b-b4b6-47faea61d65e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea3e8744-3fd4-48f9-a8d4-8f8f63eb9d41", "sighting_of_ref": "indicator--6b9821b0-8795-4541-86c5-4b1d4313cb50", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f4db009-0b6b-41fc-9491-3e2b52aab270", "sighting_of_ref": "indicator--28044c40-ebac-4cb4-a1c8-63dd19171675", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f26dcbc7-bdab-477b-a57a-c37b2118fc64", "sighting_of_ref": "indicator--cd5afcb2-ef3d-47a4-b370-f1984a01924d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fdd1529-7c80-4584-990b-136fbba132ee", "sighting_of_ref": "indicator--7b6daf6c-533d-4f63-aa12-455756b01961", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f1081a5-40a3-432f-a164-90b0c65944ac", "sighting_of_ref": "indicator--92178f41-1068-45ec-b95c-4e51b0884825", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d8cceb8-1585-48bc-b149-19787b8441e0", "sighting_of_ref": "indicator--95b5349d-8979-466b-ad79-2a5714767237", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--994194ac-6cc2-418d-9dbe-0e421b64b3b3", "sighting_of_ref": "indicator--88469f0b-bca0-488e-bbb8-f7c6217113fa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--049ff160-210b-4c4e-89e9-8a6b1f75aba2", "sighting_of_ref": "indicator--0b80ac7f-ce7f-451c-8541-8664f156df0f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2961873-6ad6-4ddf-9236-beae153f5ac3", "sighting_of_ref": "indicator--6e04ee4a-b762-4719-9c0d-148479ea6a77", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--345f3d29-94e3-401b-a664-d57c2aaa5fe5", "sighting_of_ref": "indicator--dc9c0225-5132-4028-ae65-1267e779ab4c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b904ebad-6d44-43f9-b5f6-a338e05c64cd", "sighting_of_ref": "indicator--96aedc8e-2159-4d1e-a603-923ba64fc8b3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ea0981-0b5d-4cd1-9261-dae795b03992", "sighting_of_ref": "indicator--840ebf0a-6c2c-472f-b531-4969a150db4b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92b97e5d-81db-4eb7-9d08-5a398d27d8f1", "sighting_of_ref": "indicator--6f1c3abc-21bb-42ad-b50a-bf0a3233a01e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d71bbaa4-d3bd-4dc4-a775-5821473e7cad", "sighting_of_ref": "indicator--1d0160ed-81d7-4283-a4aa-9ee129c31182", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60524e47-eee3-4e8f-b9fd-36cdbe646e23", "sighting_of_ref": "indicator--b36de560-2766-4f67-84d1-d1225ad01251", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f0f393-47bd-4843-b493-3cf668b73828", "sighting_of_ref": "indicator--20ab2309-badb-43fe-9935-2a6729fed691", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b61189-b6be-41cb-8a8a-41fcf2bbe51c", "sighting_of_ref": "indicator--3d261ebb-7771-45ac-ba70-0be5ba5967dc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d028162-91f2-40e5-ba82-ab11627f5fff", "sighting_of_ref": "indicator--cb07ad26-f1bc-442b-8f2f-612ef8813376", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf6756ea-492f-4186-9b71-21a6c1b44648", "sighting_of_ref": "indicator--6e2e7f99-97c3-48fd-8ed1-39f36013f396", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eb0a34a-22e2-4362-adaf-7abbcf008cb2", "sighting_of_ref": "indicator--1b474ba3-a12b-46e5-b74f-92be7987d47d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce2371aa-dfb1-4ac0-bab0-b37411919c25", "sighting_of_ref": "indicator--fd963c72-23c9-4f66-8050-82f930a094e2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb4bb9c0-3cbd-4477-8af2-1098121ecafd", "sighting_of_ref": "indicator--0f1ed26a-bfad-4cfe-8bf2-2a726d96c0ae", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c04a7c-18e0-4ade-bafb-de5b6e5d69a1", "sighting_of_ref": "indicator--30f028be-e8b3-438a-bc58-eafee9883aa5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8eacfc6-1f38-480d-af98-828a882a6bf9", "sighting_of_ref": "indicator--5bf065c7-5b87-4a38-bbb7-594a940fd07c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce1dff4e-429f-404d-ad12-97877a55e2c8", "sighting_of_ref": "indicator--526539ef-5ddb-423e-9d2a-063beacbae30", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a18cd536-ea79-4fa0-b20a-dfb64222a236", "sighting_of_ref": "indicator--478f6381-1b7b-4723-ba6c-b54c1fcc7f98", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee180918-8f84-4df5-ade4-c40e3ddb97d5", "sighting_of_ref": "indicator--101fcc45-0a9b-4818-aa46-78c19fd93811", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dbbe83f-a74b-4514-95ab-74b03ba7f4ae", "sighting_of_ref": "indicator--d8cc58ab-7e59-4834-a768-960bcf734757", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd7c560-fb91-45f4-9241-56c35c92ba29", "sighting_of_ref": "indicator--954e5a08-95df-4cd0-aedc-0bb6a5b9291f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--847c44a5-3466-44d5-ab25-a565ce7c14d8", "sighting_of_ref": "indicator--2838bf8c-0b56-4ba8-b5b1-778d256c7d9d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--942a2df9-9386-4a54-b1fc-394fd45d3ddc", "sighting_of_ref": "indicator--bb93e603-c62c-4510-9642-32a5d1d4a0ee", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11054dbb-8250-4c0d-b67b-d6b07cabcca8", "sighting_of_ref": "indicator--6b002ced-a02b-43d6-8c72-aaa0aa179ddc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c726ea9-547d-4ad7-ac62-45527ea3f914", "sighting_of_ref": "indicator--726eb808-d137-47a8-b656-e72a9b1e257d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89383b67-649f-457e-8acf-6af19fcb51cc", "sighting_of_ref": "indicator--831b9889-3011-4015-9b61-340478006724", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a15818-5294-4835-8da3-c708bd34441e", "sighting_of_ref": "indicator--d645a764-9df0-41c9-adb7-92bf340acd55", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aecc57ac-f864-4d3b-9931-f565670a9ed5", "sighting_of_ref": "indicator--ef06eedb-c7b6-4217-affe-2a1251daefe3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6fcd645-9d5f-4172-b764-559c1138bf62", "sighting_of_ref": "indicator--d4f9aed2-fce4-46eb-8ad0-db695bc23f03", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f332b6e-b996-4521-a691-115f0121efa3", "sighting_of_ref": "indicator--d4ee377d-b7c4-4ac3-b4c7-e86b93b5e4c1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca6234a5-1a88-4941-ac50-c5a29ed5f8a4", "sighting_of_ref": "indicator--c9c55947-a7bb-4a82-abb2-686ce4fa71c8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a75f66b-16d5-4b27-a558-df97b0cea01c", "sighting_of_ref": "indicator--3c66865e-af8a-4600-b45b-388fa0448689", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67a07866-ae4e-4bec-9245-d4098e63af10", "sighting_of_ref": "indicator--3ca496e3-fc32-49e2-92e2-09b1810e062d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02dc118f-3c39-46ed-be7d-6b7b2e380804", "sighting_of_ref": "indicator--a8674914-361a-4aad-afd1-29516d8c4c2c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--438029fa-2dfd-4a72-911a-19eb4f5d6fc1", "sighting_of_ref": "indicator--6e4fcf0f-a098-4f82-9c5e-56c9796ca691", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c56cbc-25af-49fe-9550-ea5d99423281", "sighting_of_ref": "indicator--bb534b0d-2b11-4026-aece-421d3fb1b4e4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--942c4314-6662-41bb-bb99-44d8573f6b7c", "sighting_of_ref": "indicator--c2e2cbb7-1811-4522-85c8-e4ebce20d8a4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77402f72-8b99-4c11-a4da-ecdbed51ae91", "sighting_of_ref": "indicator--a0e7e45b-3f01-425c-90f6-855126995954", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--479d29e0-450d-470e-8e93-2cdbf40794a8", "sighting_of_ref": "indicator--4cb602e7-4c01-428f-abbc-b65a93a1c77a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c3af496-62ec-4ae6-9b7e-d3640c790a5e", "sighting_of_ref": "indicator--d69db247-4795-4887-818f-3272cd0eb262", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a4f404a-348b-4661-9024-1f96c1de1305", "sighting_of_ref": "indicator--e317a1b6-fc42-43a7-8a77-1fed781650ef", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8570b7f-93fa-48fc-afa8-d37eee35f14c", "sighting_of_ref": "indicator--eb0d4184-80df-42aa-a948-ffeee93a54fa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beace214-698c-4484-b3c8-7d5700f8dd5d", "sighting_of_ref": "indicator--d62189cb-63b1-4448-a7bb-08a2d2dcd112", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a31a2ff-1574-4050-9031-f24f943454ed", "sighting_of_ref": "indicator--b11501b6-fe14-413c-b92b-d6d147768c46", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4a5f45d-0530-476e-97c3-a931c108ad9b", "sighting_of_ref": "indicator--b5199ba8-7c45-4a40-902b-c446a977bd57", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b50e04-601b-4829-860e-a30892fba7d5", "sighting_of_ref": "indicator--76651998-cd0c-43fe-ae46-ce35a8cb2662", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93abb667-e02c-4e54-bbde-23e01dace942", "sighting_of_ref": "indicator--3ad89b75-53c4-45a0-9a2e-d06332977c36", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d989c591-32b3-4755-8117-d08de618fb3b", "sighting_of_ref": "indicator--c7ef04c2-faaf-4744-88a9-e59b569d298d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d345b11-c2f0-4c75-9199-94553cd749b9", "sighting_of_ref": "indicator--1c0ff2ec-780b-4129-9395-1afc1c20f6eb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bbc1fd9-06c0-497e-b8d0-1576657648ca", "sighting_of_ref": "indicator--29202f55-dec3-455a-a6bb-b5ba5cf82895", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88abf4c5-0825-4d37-81da-38b689b11975", "sighting_of_ref": "indicator--342f8773-ab19-4fc7-8a2f-c32e0a776554", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e80c12a8-3a1d-4cdb-bfd8-cd6e37231057", "sighting_of_ref": "indicator--e12bcdd9-aa94-4f5c-b947-ebd14a542e06", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f55bb43-b18e-4161-94cc-e7721ca585ce", "sighting_of_ref": "indicator--c696c581-931b-4a4e-a17d-6a1c3cb48e06", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b673a629-be4c-4857-8328-f2ce84445a70", "sighting_of_ref": "indicator--554fa226-31c9-46f4-876f-9ab7315f0305", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eb81b3a-bb68-4ece-a23f-84e051b31f91", "sighting_of_ref": "indicator--5c9c9cef-49f5-490c-93ef-665c3243fbe7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24386cc2-d540-4d1b-9ccf-00241bcbdb96", "sighting_of_ref": "indicator--2806e6a0-7e14-487d-ae64-73425c091e37", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2728afb-cbb7-4402-8778-cbe9c177481e", "sighting_of_ref": "indicator--882e4233-1f59-4d2d-8937-3b8d76610e3e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed739900-fa31-46ab-bc70-fec802e7e738", "sighting_of_ref": "indicator--dd4b0718-86a7-4ac1-8b1d-0cb917165688", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e6959f2-64de-433a-9e0b-5ef5fae65ca8", "sighting_of_ref": "indicator--bd8679cc-750b-495a-a541-ed13818ba413", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f08c945-c8d1-459a-8ccc-d131d1d76d4a", "sighting_of_ref": "indicator--8080f6a9-6a9e-4a32-8dec-2de4d5034770", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d21c24-b08e-40f0-a2ce-684d2943b615", "sighting_of_ref": "indicator--4e1f6be1-3929-473e-a092-070ca652e4ee", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1f34ce2-9bf4-4ba9-b3a8-045034ff0071", "sighting_of_ref": "indicator--0deedcc9-38a4-41be-a913-717775975232", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc3ffcee-be1d-47fb-be03-f4a74c9f1025", "sighting_of_ref": "indicator--24468631-62f7-4fe7-aba9-0f3eafaac12a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a0a3b14-a00e-4b5a-845c-0ddc75f52ffa", "sighting_of_ref": "indicator--38e4e8ab-5168-42e1-9ea3-27c4e930b45a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4291b97e-0115-40e7-a43e-adecabf2de7b", "sighting_of_ref": "indicator--5dd0f816-b1ca-4631-a334-2152be96d393", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--547c8471-bd1e-44ff-aa8e-cdc187f14aab", "sighting_of_ref": "indicator--aeb1f669-b747-4c33-b1aa-1a30f28ff89e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d252c0-c093-4b8c-929a-11633e95f90b", "sighting_of_ref": "indicator--005244df-8011-4bbe-801a-e5594ebbdae7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06eee588-2f23-476e-b42b-8931bd506a0a", "sighting_of_ref": "indicator--46250594-0829-4d35-9cad-192887935032", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42afa270-b5d1-4254-b5b7-333bb30b76a1", "sighting_of_ref": "indicator--26088f39-f174-4678-8807-a010b936bbbe", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7411d405-4788-4f50-81af-3e84f17639d9", "sighting_of_ref": "indicator--751c4a6c-acf8-4c1a-84c1-3b0b4d241a30", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b449a2ff-ec8b-4aaf-a2fc-d78428baf75e", "sighting_of_ref": "indicator--17039d22-be13-46f7-b8d1-6ea07a3ec587", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02232a37-27b1-4970-b407-df2e6b640d27", "sighting_of_ref": "indicator--e01db8f1-69cf-4bac-95f1-a4710332ae11", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0792549d-bae4-42ed-bec0-b300890e4c53", "sighting_of_ref": "indicator--d3c16427-1c5b-4c35-984d-17a3fe1c6522", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40db87d9-42ab-4a1e-a0bb-fd73d4386a11", "sighting_of_ref": "indicator--e1d72f57-fb9f-4276-aa6a-84eade7bea37", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6ab9eb-b1af-4f50-b8e3-86e725792530", "sighting_of_ref": "indicator--e3338d64-0a22-45fa-ac1e-9eefde7397de", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22315764-bb0b-453a-bc0b-ed44fae9176f", "sighting_of_ref": "indicator--25fb4629-9cbc-46c0-9c04-0055c331402e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2472727-a3eb-42a9-8b03-b99f95504a28", "sighting_of_ref": "indicator--33d30487-5ea8-4209-8543-44fe36cee264", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6be8d866-dd05-4233-ad0e-8a94a3da4c57", "sighting_of_ref": "indicator--d59011fe-aca2-4d27-bd3d-b76b22401726", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f87282-bfa8-4b83-b853-f9205795f86b", "sighting_of_ref": "indicator--31620533-8099-43f6-90eb-29f66db87dbb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--000d4f0a-1f97-4416-9c75-550e9a544470", "sighting_of_ref": "indicator--e74b4ea8-8269-4779-acf5-4a8e3b36ab21", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc6e21bd-c369-4efa-a6ee-3c57a761956a", "sighting_of_ref": "indicator--e47bc5af-7b05-4797-99a6-7e36ae6faee0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a18383b9-68c1-491c-bced-ad8e7c4486c7", "sighting_of_ref": "indicator--84d68c28-6b07-4db4-9de3-a2c2a1479589", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b98365-3629-4ee4-986f-39a2ced2e2cd", "sighting_of_ref": "indicator--18cff63f-934f-4a9c-8f75-cf59374a1cff", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f0d77ea-3bbd-4941-a2a2-f3e26a8a4bda", "sighting_of_ref": "indicator--2d97ff5b-05c7-45ad-84dd-ac68f72d620a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea6866e-374d-458b-819c-37074139943a", "sighting_of_ref": "indicator--b28539c7-86a3-4825-8ddb-9b2b0752dc47", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44184753-9649-4d9b-8ba1-291cd43c98df", "sighting_of_ref": "indicator--ef64bb09-8ddc-40a3-9366-91fad7014de7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d903d65-34c2-4665-8cdb-a762993a8bec", "sighting_of_ref": "indicator--fcd79ad3-0db1-4554-a2b7-eea42cf26d0c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--751b4ca1-5c31-4003-9685-cc670e97c61d", "sighting_of_ref": "indicator--7fbd0b23-93f6-4d65-958e-d7eddbc4635a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f0e0172-a3fb-42ca-8b1c-96c9558e14c4", "sighting_of_ref": "indicator--bc419fc4-f7aa-412d-a55c-0c0789a85678", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba3607f9-7977-4590-beb2-31b89ed1b47b", "sighting_of_ref": "indicator--9111c411-9ac8-4bf4-8d51-e5de69525b0c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--139d3465-a5f4-4c77-af9f-671202714d15", "sighting_of_ref": "indicator--38d735c4-de3d-4849-9881-dae9be0b8f80", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--482ab69c-f9ac-4a73-a2e0-eefae9c41bcd", "sighting_of_ref": "indicator--b5893ddb-2389-4de4-8ba4-ac4bf43fd003", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ac5abf1-1478-4898-a1ce-497c5c2bcad0", "sighting_of_ref": "indicator--3e5d1fdb-f420-4756-bbd6-23296ba61566", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f61fee48-c86d-418e-a8a8-60a6708dfbe8", "sighting_of_ref": "indicator--276d9fb7-6932-442e-b31f-b337b830ed7f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5faf63b-bc39-4d83-be82-7da76246644b", "sighting_of_ref": "indicator--2c002818-44b1-46df-b6dc-165f33c4ed64", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f3fbdd-4438-4bba-82d2-f1aec52c6229", "sighting_of_ref": "indicator--9b4bc50f-d4f3-41d6-85d5-78f7d1e2a9cf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa53b61-e920-431e-bffe-6d8b762ab638", "sighting_of_ref": "indicator--ff4a4635-5959-4860-963d-ecb7507b4970", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bac42260-0d69-4467-a586-6fdae9b8ccac", "sighting_of_ref": "indicator--f7db7f61-1a3f-4da7-8858-1696ae253156", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac938b0-5b2d-44f4-8777-6d93450e7f67", "sighting_of_ref": "indicator--b19e0cf3-a6fe-45c6-97ab-25a9c9c326d8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2538189d-dc7d-4efd-ad5c-7eb66384fd73", "sighting_of_ref": "indicator--4bf46770-ccd3-4f9c-99b4-751f26d9b249", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a9ada35-51c2-4081-943a-d41511b972f3", "sighting_of_ref": "indicator--0bca7f00-374c-40a1-b9cc-c547911af0f3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f1689d5-766a-4e92-8c54-e4a2afa75d41", "sighting_of_ref": "indicator--92f22e23-36be-44ef-81b1-dd58158d98f5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c20b2c-6234-4748-9c06-26dbf730bb7b", "sighting_of_ref": "indicator--4da208fd-bad8-47e4-8191-0733b70769d6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b7dacc7-590b-4b71-bff9-f2a048f5a467", "sighting_of_ref": "indicator--a29e05bd-12e6-454a-bbe0-05558241b915", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10eb1eb2-9b70-47a4-82a5-4091f7af74f0", "sighting_of_ref": "indicator--c71357be-609c-433b-b075-89abdd2f77ba", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e21452f-f37c-4205-b44d-096f025e88dc", "sighting_of_ref": "indicator--25bec116-e9e8-4df6-8061-a356dcac84e4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--670d46df-039c-4ce7-8c77-0f8578e05ef0", "sighting_of_ref": "indicator--4bd40c8f-26b4-46a7-8561-ea48700a952a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4241b837-ed3a-45d2-9253-ff76366d83bf", "sighting_of_ref": "indicator--e275bce5-42aa-4418-9d43-c688b2d52ba0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a03724c-b483-4b8e-8652-e275d64ffd34", "sighting_of_ref": "indicator--cb7dee91-f695-4b8f-a646-b612140653b2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af1d8914-d584-432b-84ee-43851990f2ad", "sighting_of_ref": "indicator--f6772210-d8a6-4e18-aefc-30ec22893e27", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f168e199-b711-414b-a390-2b2d18a27148", "sighting_of_ref": "indicator--0a212c45-f3a3-4b2e-8181-2fad0c9c8eb7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2baa0a32-4e5d-4c8a-abe5-342ca56199aa", "sighting_of_ref": "indicator--b347147e-5f5a-40fb-b9fb-1729fd71137a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f9e1554-7c45-4c86-aca4-bead12770629", "sighting_of_ref": "indicator--8d83cb1d-ce7f-4323-a574-5135865607a2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee663dff-e362-4dd8-ac19-d908e36b357f", "sighting_of_ref": "indicator--b8ab0f93-193b-451a-85cf-382c9d778a48", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7fb522a-f558-4fea-8c1a-3567004af53e", "sighting_of_ref": "indicator--bc3dd975-9f1b-4232-88b1-9032b5486a5d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be5c333-86c4-4eed-ba81-edb8fde1c956", "sighting_of_ref": "indicator--628af9ed-2157-4408-a6f6-2beb29099d98", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c03d06b8-b741-44ca-9752-a82ff3ce9cec", "sighting_of_ref": "indicator--1646b61f-7e62-45df-9de7-e26bdfc7321a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ebe5baa-b709-4ae7-bd11-b20156217021", "sighting_of_ref": "indicator--399bcb6d-a96b-4728-ace2-893f9e2702be", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98b101c6-f25c-475d-9ebb-61c4b14da74f", "sighting_of_ref": "indicator--c9c62025-fcad-45eb-80f1-ef74ae3d4084", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b73ce23-835d-4b24-90b1-a8b8d478fdc0", "sighting_of_ref": "indicator--927cd293-7e86-485e-bc87-f562c37c5b06", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca21253-e816-4613-a56d-19a5c76f3c4a", "sighting_of_ref": "indicator--7bfcd27b-1485-4f49-bd03-03c083b9c111", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73fe87c-1482-4c65-a312-97c8940e25c0", "sighting_of_ref": "indicator--f045c892-ebf0-4503-89bb-1a68f5c142f7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--defa5ab5-7e06-4e1a-b061-c8d9753b8f4e", "sighting_of_ref": "indicator--0ca0a88b-a1ad-405f-bb9f-913bd6454226", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd709d92-ceb3-450e-a9b0-e414280455b3", "sighting_of_ref": "indicator--e37c834e-de9b-4367-b169-c926fa7bd7bd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc389f03-969a-4137-9a0a-94e7799937cd", "sighting_of_ref": "indicator--0aacb710-b489-4bc9-9ac5-aacc4abd4319", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78f6704e-cbf9-42a7-88de-784f99e5fd55", "sighting_of_ref": "indicator--aa427cc9-4799-4148-bd19-bea2f1c40e24", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a80c30b5-c0db-42ef-a424-8ee9d1105aeb", "sighting_of_ref": "indicator--169f51d2-6644-429f-bf6d-b5fd62868f7a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7727fe0-4557-49b6-962d-034350aad7eb", "sighting_of_ref": "indicator--7f38a516-56b0-4e7e-8cf9-baf7a58c0005", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9182a92b-9d91-46c2-92ec-a46d79c9007f", "sighting_of_ref": "indicator--befa7eea-3708-4cfd-9f21-6a89387735bc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1712a660-7f1c-49ff-a212-d95553fa01a5", "sighting_of_ref": "indicator--6559b6a6-a83d-478e-9f27-d7ff9dfc28b4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6e56229-5b58-4b9c-98b8-941ff81064b6", "sighting_of_ref": "indicator--c5c61034-c300-46a2-8960-cc6c4dd97cb8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc8e4bad-6480-4c6b-9cb9-edd8ec2837c9", "sighting_of_ref": "indicator--8116985c-2dac-4528-a8af-8145c30b34a2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0c89504-5f0d-4379-9136-f767339e8232", "sighting_of_ref": "indicator--66a74b81-f807-40a7-acfa-17f3cb74330b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49a01c02-061f-40e6-92b7-7c6c9353f0e7", "sighting_of_ref": "indicator--18bd6844-9c1e-49ba-b4d8-9b6dedbb1119", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ab2eb84-49e4-4566-bb87-8a5126b75f45", "sighting_of_ref": "indicator--a60b68d4-a825-4f11-a4c7-72d9935ad92b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19d91bd9-dd33-4e30-9d33-e94d1ecdfa8c", "sighting_of_ref": "indicator--2d666268-91dd-4e87-9588-396efe506341", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbc45069-c72a-46b6-8bb6-7b308e0c9201", "sighting_of_ref": "indicator--695cf4e2-4d40-4f2b-ae12-1ddc64548ca8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5cc3c27-7c22-496a-ae3b-f6fbcd13df36", "sighting_of_ref": "indicator--6f332dd3-0a47-4172-af3c-417caf9c5523", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c4cf82a-6480-42ae-967a-597d7d4a3360", "sighting_of_ref": "indicator--3c023d66-7d13-4e61-8bbc-edf53f310975", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d0b13b-4e9b-4fdc-a540-273b121abdc0", "sighting_of_ref": "indicator--d6f2fb30-e3b4-4d08-b833-7ad5ba75939a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2b81f3a-2184-4dac-9da3-91e5525f9e7c", "sighting_of_ref": "indicator--b3907ffa-72cd-4944-b837-aab0fecb39f1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cecfe502-975e-4430-ae22-56c163fa7ca5", "sighting_of_ref": "indicator--4ea2e0b9-de4f-46e0-b32f-fb343410c1c3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51fc4ae0-666e-46b9-ab6e-d7d50a69d44a", "sighting_of_ref": "indicator--7da4fa86-65c4-4b2d-ac93-2158804e380d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5a83522-e7ef-4a0f-b330-a5d8f59ba712", "sighting_of_ref": "indicator--6835b82a-c09b-4b1c-9f95-fcfaa29574e4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71315808-cafc-4832-a4aa-8e49019e844e", "sighting_of_ref": "indicator--c80812de-7b7f-4e43-bda6-5bfa781ab3e3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35cb92ff-2e6f-4edc-a71b-01a4351e954f", "sighting_of_ref": "indicator--c220d17a-3c05-498f-8132-90e35bf38b63", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdac296b-931f-4a06-9f44-d7ed80c8d6d1", "sighting_of_ref": "indicator--ac9dd600-2bf9-4a38-b9fb-f4ac93a71c29", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5898f1c2-0be1-4f0b-9aa6-ea68c5f4c41d", "sighting_of_ref": "indicator--8801ff1f-ecdc-45b5-beeb-25a5f0cad200", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bad1c36-cf26-47ff-8c9c-dead873f6356", "sighting_of_ref": "indicator--87f002ab-94a5-4f95-acab-0f8caac9ee06", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d01da24e-e942-4e2a-a119-f71abdfab692", "sighting_of_ref": "indicator--6428f2e2-6c21-4545-9518-a32987a5f9ff", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a9f91a-561f-4d80-8138-be68af38384b", "sighting_of_ref": "indicator--21b7ab1f-7ab5-4ad4-a323-3d4dc51766d1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe11083f-7b18-4ab8-b5e9-94ca9c5a59dd", "sighting_of_ref": "indicator--f25274b5-c763-415a-89c3-6a33c613e5e7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8b247f9-d83c-4a3d-a6c4-ad1c9d77e60c", "sighting_of_ref": "indicator--84255b26-5834-4969-a601-e286ef98be4b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6469d882-30fa-4e8b-a814-5ae8985beee2", "sighting_of_ref": "indicator--5a946ac5-98fa-40d2-9bcb-ab9cb1c8b40e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e695c888-027d-444a-af06-9e18d205d5e0", "sighting_of_ref": "indicator--624b336f-4407-4a51-a5bf-5ab3c1ffd944", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd51023b-4a73-46a2-9d08-b4719f006f2f", "sighting_of_ref": "indicator--2bb37c7f-fc8d-478c-a76f-c4e9a844545f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f1faf3f-02a7-45d6-b9f1-4705bad5e72b", "sighting_of_ref": "indicator--43c23366-e4b3-4993-953a-7aee82ee02f1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1610e537-0b69-4dd2-8321-0b138e6b8190", "sighting_of_ref": "indicator--c05ef231-6df9-496f-a510-1216586e7681", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e308837-1b71-4aca-a410-17f3e1a6c839", "sighting_of_ref": "indicator--e0f2f28d-384a-4b32-951a-45c9d117e544", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df8a28ca-c932-4f4d-ad83-4ab7e4328f21", "sighting_of_ref": "indicator--c4d71c60-e0cc-4465-8ead-703876500836", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be26de30-eee0-4b9b-99eb-b73eadfeeb4a", "sighting_of_ref": "indicator--7fd1141f-2c7b-4400-8d72-8f95d37e0c34", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76e9402f-dec0-4604-a6f1-75636a44ad5b", "sighting_of_ref": "indicator--6b3d0b1b-32a8-4336-8387-45466142d1aa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da91da2-6400-4bf1-a7d0-4f7c4d93a11e", "sighting_of_ref": "indicator--14c89975-95eb-4798-bf39-b94fd7aaee92", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3072022-968c-4812-90e2-4e41fc267db7", "sighting_of_ref": "indicator--fedbd4e1-ab03-4e9c-805a-cedd7d9ffb4c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5b002cd-1c32-48b4-b2de-b19eb7da3f80", "sighting_of_ref": "indicator--28882876-2f1e-4d08-8f5a-1d3a3f13e7b1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da1fa31a-25a6-4491-8c30-9fe413dd47e1", "sighting_of_ref": "indicator--1d37e222-c476-4563-9359-f37e6c786007", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d7e0390-b534-4bea-93b5-c377d5a69db3", "sighting_of_ref": "indicator--dce51bdb-73ba-4e40-bc6e-1dc62bb43ace", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90b37499-deee-424a-ae51-701e85b79383", "sighting_of_ref": "indicator--3bcf166b-c93b-4790-aff9-5668ed975baf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e40d58-b782-4371-bd98-cb18fd89c455", "sighting_of_ref": "indicator--d73a30e9-f84e-418e-8bfd-1912047f8662", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0647936-49bc-4b30-ae6c-3a86a3a8e5cf", "sighting_of_ref": "indicator--67dfd20c-b851-4155-8d87-fc8518d03ad3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f30215a9-86a8-4a93-979d-a137ba3ab4fe", "sighting_of_ref": "indicator--654df315-95bf-408f-8754-0c9c72558e9c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aed4b41-1723-4e90-9feb-a205207ef856", "sighting_of_ref": "indicator--67109c0a-7a83-4274-a897-7380b7f69e35", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37dad07d-7e29-4b39-849a-c8f0a3f0cd81", "sighting_of_ref": "indicator--875dfdcf-4da9-49bc-8878-5f7a89986cc8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e51b4b63-8517-4747-a716-c3a135fc8c99", "sighting_of_ref": "indicator--9ebe89b6-cc4b-4ba5-af6d-bf9b8cca6220", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c50a43-3d46-4ec6-90f4-53fe5994a48e", "sighting_of_ref": "indicator--ebf812f8-b49b-4061-b044-26c06b4996b1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6679df2-f4e1-4d45-81ba-f53889073b8d", "sighting_of_ref": "indicator--a67d1108-8318-4088-b6f6-0eb9c2d0b067", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--744c5646-ae0b-4753-a053-152150c09d6a", "sighting_of_ref": "indicator--fefd6948-68d9-4822-bc0a-00f1bd432644", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b589eb7-2a36-43f9-b93f-fb231550db67", "sighting_of_ref": "indicator--cafb3210-3dc0-4431-a362-f9168e312ee4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e2458fc-4144-431d-b9e5-f4ccd9132b60", "sighting_of_ref": "indicator--36e15fe0-89c8-44bf-a59e-ca980295201b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e894d5f9-b8dc-409d-9ea0-0f9abaeb5632", "sighting_of_ref": "indicator--bcc4139a-03d6-4dff-ab00-6fdaa6ed4e31", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a4f74dc-c534-4fd3-8e05-090b1c31700f", "sighting_of_ref": "indicator--4ef6a99a-4c57-49ab-9600-2cbbafd1f377", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51ed9b15-40c4-46d4-8a54-47dfb45cf9d8", "sighting_of_ref": "indicator--961847ae-6551-421e-a0f4-42466c6a95b2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--015b6dcf-d5e3-43e6-b541-90928068ce17", "sighting_of_ref": "indicator--ddce9e5a-5f9a-4ef8-be25-cae12e829a07", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34602548-c892-4089-9190-86dece523e38", "sighting_of_ref": "indicator--944d6bff-bcbf-4489-8c9b-66433cfce957", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9406a62-21c8-4b0c-ab6e-b4e41dc5ebec", "sighting_of_ref": "indicator--6ec10c71-1cee-4887-b52b-6b947c6ea3c5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a5463f0-e607-4ba6-abbc-1f34af65e2b1", "sighting_of_ref": "indicator--ae376688-2145-4717-b96a-24240b94a36f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a94ec340-d78f-4d56-a6e3-8539222c8aa5", "sighting_of_ref": "indicator--b7be95e6-ada9-4574-8e06-acd41be51fc1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a597a8-7258-4ed1-a484-56e7625d41f0", "sighting_of_ref": "indicator--7c1c0962-410d-4c54-aaff-7618b6f26c8e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a863ac50-74b0-44de-98a9-1fad2cebd32e", "sighting_of_ref": "indicator--0a3e990e-f3ff-47dd-a2cb-26e816747c8f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d408fd4-2502-4435-8f94-5506a033e7ed", "sighting_of_ref": "indicator--35bb9b3f-bacb-420e-8197-5a8f92328e7d", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca497b43-4955-4dab-9c53-8cddeced5b18", "sighting_of_ref": "indicator--3437ee95-cc3f-4070-8f62-dcdd334b54cf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30a23b24-166f-49c3-8a61-9a22a31169c2", "sighting_of_ref": "indicator--2b210133-9ca5-492d-8d71-b75d86a95cda", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a68ad6-c423-4d34-b57e-7d4cce4423a9", "sighting_of_ref": "indicator--71c8d18d-7bc3-4305-a289-18f585936823", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--298d3204-c320-4304-9dda-ecc5cc1f4421", "sighting_of_ref": "indicator--adf55b80-6807-442c-91c5-c5dd9190613a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82e9113f-e951-4454-aaaf-99bd7ed2d9d1", "sighting_of_ref": "indicator--3edc1f56-7bdb-45a0-899d-588e28b2ea2d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a8a5d0-8fd8-4218-bc8e-14ab730fd3f6", "sighting_of_ref": "indicator--968aaf23-1db2-4686-8246-bcd51a12558d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31635c03-191f-4fbc-9ec9-eafadf8edcd1", "sighting_of_ref": "indicator--ddf651e8-36f5-4298-b07e-73c4cb8737db", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f18fe308-2d7a-4302-a0d9-38ff970f754c", "sighting_of_ref": "indicator--6ef48708-97f5-437c-b773-964e65ceae70", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c4c8b43-cc03-4f3e-9f68-0f38cd5a12f2", "sighting_of_ref": "indicator--8cc926ee-d34d-4d99-81a4-b11d6b7499ea", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df2a584-053e-4510-8d06-a5050026b63b", "sighting_of_ref": "indicator--8f0d7934-f597-4d82-bc29-3d7f25cb69bc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b9f254d-d609-42d7-a7c9-fdf8e03f317b", "sighting_of_ref": "indicator--59100bfb-7a55-4a8a-bc21-2d73192f1869", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ba6cf32-4c07-4ea8-9ba5-4a452dd3f1ae", "sighting_of_ref": "indicator--c3ea7950-df78-41b8-b065-1e93e96feae7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a6e5890-cff6-42b5-b98d-c517373df3f3", "sighting_of_ref": "indicator--6314b9fc-5421-4013-bced-d949114b6f04", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--470c8276-17cf-45d6-9d0a-1ec345256cba", "sighting_of_ref": "indicator--040e642d-0969-48e3-9d9d-ac11da53af29", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c24d9c2d-5bca-4ce9-90db-edad92927a31", "sighting_of_ref": "indicator--12309e58-da23-479d-93e0-8cb081c0189a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50786809-9967-4f97-861a-541c5c9696cb", "sighting_of_ref": "indicator--020aa608-364d-4d6c-8a51-dea449262a8d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--331debf0-4f6f-4a5a-a9e9-c7219d5186d0", "sighting_of_ref": "indicator--628a8550-a23b-4a3e-b190-34d80b5c02b2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e7bf987-5ede-4987-a175-32659df83253", "sighting_of_ref": "indicator--11717a4c-65dd-4333-9dfa-aab1ca805716", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de8df7e-4080-43f7-a64e-718d24049fc8", "sighting_of_ref": "indicator--800c5001-b091-4fa0-8d53-cdbcc8a08abe", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1e34fd9-99a5-4035-bb9c-d0e0d4d8fe0a", "sighting_of_ref": "indicator--a4d4d0a7-9eab-426e-9971-59f91b958297", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5270c186-dae2-49df-81dd-3819c49814b3", "sighting_of_ref": "indicator--01e6230a-f721-4c77-a5bf-22478721338a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35f2b0e8-3483-4ad7-bc99-983d58918e8f", "sighting_of_ref": "indicator--0510563c-9873-4d7f-bef3-e0b420c12de7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bff94a7b-3e22-4e2c-863e-019a0ef759c5", "sighting_of_ref": "indicator--9c2d43d6-0741-491f-b5dc-337c60b99a27", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2e8570a-43e5-4acc-bca7-33d3413a3294", "sighting_of_ref": "indicator--1eaf5845-2052-43e4-a586-f8619d127e16", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d0ab72d-df4c-4484-b822-ffdeb7501721", "sighting_of_ref": "indicator--4667153d-aa20-4248-a87e-23d78ad50523", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4210175b-1dde-4cde-b8fc-7a4863b45ad2", "sighting_of_ref": "indicator--13f99ba9-4853-4cc0-aaa2-70a2795507f2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf583541-baa0-4be6-a675-146e09c2227f", "sighting_of_ref": "indicator--b1b27b2f-8ca5-4ff2-b044-09d291fb75e1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbbce20c-7f0d-4732-9cd8-2ea38375534e", "sighting_of_ref": "indicator--8bbe828b-41de-44dd-a5a2-434dd643c3f3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aecdc56-e438-4679-8c62-65340115987b", "sighting_of_ref": "indicator--21355a0e-9494-4511-8738-fc5f82e7155a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f782619-3a7d-4b3d-b3c4-11eb6270ccbe", "sighting_of_ref": "indicator--fc165c23-cd78-444e-9426-17e0b5f2b543", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a59ec112-e02e-40b7-8ff2-2c297e0e7b47", "sighting_of_ref": "indicator--97203ada-baca-4ce6-aee4-b34864684487", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c2f80c-d325-424c-8f74-a8a03536678b", "sighting_of_ref": "indicator--35bbef4f-542b-4b2b-9357-cc5146e15f26", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56fdfe0d-e63d-4c28-8e82-9d8b9c2f4f80", "sighting_of_ref": "indicator--fa8485af-06ca-4d8d-b667-31dbe2377b8e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6a5a074-a6a6-4109-a489-98320aa069ba", "sighting_of_ref": "indicator--d09c923b-b875-4778-beaf-514ceacbd654", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f05d346d-e978-4347-8630-da651ad7e264", "sighting_of_ref": "indicator--5b248cd1-51a2-4919-8252-f6b948441680", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74351b77-1935-458e-b73b-bb1b91f3ba75", "sighting_of_ref": "indicator--6a120409-7d69-4579-b2b3-a395e3538c25", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a281872-b74a-4b4a-a319-705e0804a9fc", "sighting_of_ref": "indicator--0df30f0f-df0e-4669-84dc-9e8aca02b4be", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a169236-4799-4e26-98ef-b4abf9ae9b65", "sighting_of_ref": "indicator--8c5cfa97-6c1e-4161-8ede-8d244babca45", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74a68381-fb08-4248-84a2-9fe5ffe9d011", "sighting_of_ref": "indicator--308906ac-2fc4-42d9-8305-6affbcb26dcc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--720e1353-5362-4970-aa2f-66aed652004b", "sighting_of_ref": "indicator--90bf4d23-096c-4e08-942e-2f0c748e50ea", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7cdcf39-2c16-463b-853f-763069624a12", "sighting_of_ref": "indicator--a157b841-36d0-4245-95f3-791de2b9ebae", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b3a30a7-cf49-4058-8ecb-e37406d6cec0", "sighting_of_ref": "indicator--60cc8cf3-86fd-4e2c-a5cc-6044995b99a9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dde23071-2c05-4fc3-b7c0-5da14a539a0e", "sighting_of_ref": "indicator--26bd2147-11bc-46bc-a04b-c0469132aebf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbc20b2e-ceb4-4c11-8f14-8065960986f5", "sighting_of_ref": "indicator--f4dfcbe0-91a5-4562-808b-ab693062ea60", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da93dd67-6d0f-43e8-8bc4-7f96d8b5c95a", "sighting_of_ref": "indicator--d646ae21-9969-4684-acd2-14b70a290150", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f02447f4-e76c-412c-921c-c36703724596", "sighting_of_ref": "indicator--b414646b-c234-46f4-b4b8-742045a90d8e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68888e69-c1a8-474c-b0bb-bcf534501f7d", "sighting_of_ref": "indicator--4f7e6d80-6af8-459a-9539-c25f9f99bc08", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1aeae81-6c32-4a16-af6a-4aa98f2b8c87", "sighting_of_ref": "indicator--137b0585-1e33-4647-b2f3-080621901b39", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b45e39-8d10-41f2-9955-a1802ff1480a", "sighting_of_ref": "indicator--c6437731-618c-4d84-ac52-ea82325ba12f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff60fd22-3e6a-4421-9e53-cdf1d2609558", "sighting_of_ref": "indicator--d354b8e1-51e6-44d1-8823-69c07ff095ed", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--607fc66d-c072-4458-bb63-382d9d12bc09", "sighting_of_ref": "indicator--de47fcf7-60e1-4735-96d0-7c62ed5708e2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e93046b4-20dc-4379-a340-fe9b8abfd7e7", "sighting_of_ref": "indicator--48419a97-08b6-45ed-85c8-e7ce87056a16", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e7d3554-f907-466f-8104-72ae472347c7", "sighting_of_ref": "indicator--18087ef6-df09-4f06-8225-db776fbcd5ac", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c76384dc-07db-4b81-8e7d-0e777f575a6d", "sighting_of_ref": "indicator--4b5bd388-cd13-4416-b778-d2da7a260f26", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3a4702a-465a-444c-8be3-6c3a03984779", "sighting_of_ref": "indicator--4d5e238d-a4f6-4264-8ac2-6d7495b36632", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1184a968-9c5c-4109-b107-d7e7e7e3be72", "sighting_of_ref": "indicator--066a4301-290a-4294-8a40-0c001ac5cee9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--010882e0-b621-400f-a15b-620446ae5f77", "sighting_of_ref": "indicator--969fde94-9a47-455d-a4ca-c0d3ac782919", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19672fa7-3ca0-465d-aa3a-25ddfdcb7642", "sighting_of_ref": "indicator--330e83fa-98fe-487c-8d4e-dbdd0642a96b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a0c0c44-713c-48e8-8a87-e12fbdb60760", "sighting_of_ref": "indicator--919f3ad0-046a-49b0-b7a5-5f39c6e12761", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac491d90-d50a-4953-bc8a-a8402822804e", "sighting_of_ref": "indicator--5dbcf7c2-e492-442a-9cf0-c88e6b65e3c6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--189aa22f-1a4d-42dd-86c9-6b2884d6c70c", "sighting_of_ref": "indicator--dce560ed-0681-4a67-9110-49ab4274612a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8273ad3f-98f0-4931-b58f-9ba3f8c30ac0", "sighting_of_ref": "indicator--8669b8f8-5c6e-49a0-bbf5-ebc1c57be79f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2548b4b5-26cc-4574-99d1-9ccd7efe58ce", "sighting_of_ref": "indicator--411c5091-9e39-4a48-9c9f-46e806837de4", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a190d5-d5bb-478c-8fcd-6569c9729b46", "sighting_of_ref": "indicator--9c4169e5-557f-48f7-a65f-b096766d0bd2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4e6b593-5fcc-4adb-b199-678200923000", "sighting_of_ref": "indicator--f7b0e137-f9cf-4aab-9048-c32bc5ac6638", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdbb8b6d-fd9d-4db2-8c1e-174b5d62fb30", "sighting_of_ref": "indicator--59d527e6-2735-4223-bc30-865d34eaa917", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef4a1626-345f-4d32-9c74-8a37d556a724", "sighting_of_ref": "indicator--b070953e-56b7-4554-8fcb-609cb35f84c8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc283616-04d0-44b6-a4aa-fd453442c122", "sighting_of_ref": "indicator--94aa3918-1cac-4931-90d1-bfe002f90c94", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66b022f8-ceed-4a8f-a504-a51e82c5d009", "sighting_of_ref": "indicator--eca14ce2-61b3-43fa-a748-f4a65d57dcfb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d2b2936-b27e-40e1-b0c0-ebeedc6d22e2", "sighting_of_ref": "indicator--b8100cf7-a765-4591-a781-042e958a5ebc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bf458fc-ef17-4faa-9d85-09a07421ad4f", "sighting_of_ref": "indicator--7db53a8a-c27f-4905-9dea-90507c74e70c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71ab736e-cf23-4911-a696-0f9036265205", "sighting_of_ref": "indicator--8d3ed047-cbd5-4627-8d70-f8844d1766dc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a90fc0d-febc-46c2-b399-14912b27784a", "sighting_of_ref": "indicator--c3752e54-8b1d-4a34-b8c3-a3a4e2cfdded", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12c25db6-0488-466b-ac35-5f33fae10f0e", "sighting_of_ref": "indicator--2e58b7e2-32ed-4973-a5da-e95b8829ca25", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7e0333e-d1e4-4fbe-b78b-730ab8eb0a42", "sighting_of_ref": "indicator--95ce365c-dbb5-4d19-95f6-3bb448a5a89b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c6c1e2d-ae9b-45bf-9597-34754bca456f", "sighting_of_ref": "indicator--dda62ba8-260b-4a23-9e44-6473c436a159", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3ba7885-4e2b-42a6-ac09-895c58a33e5f", "sighting_of_ref": "indicator--f72ea04e-635d-4fdd-87aa-150c04ae4589", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5a9d56e-e1e1-4119-8da4-bc55db5e9c7b", "sighting_of_ref": "indicator--211276fc-e6ac-4791-a356-e7e8469ad669", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3072879-10f5-45bb-a626-4ec1290f270d", "sighting_of_ref": "indicator--c8c971b7-638b-4401-aa86-8d93fc966ad3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4438436e-80de-4eae-a63f-dddfc5523bbf", "sighting_of_ref": "indicator--eb36783d-912e-48d0-934f-21ad6da7ce60", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ad05b6-f559-4f8e-898f-5a3eed747ca8", "sighting_of_ref": "indicator--978a8b95-8108-4853-bffc-e9494f9d18a8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--255950ab-19f5-4223-8fb5-c3d190486a7d", "sighting_of_ref": "indicator--8086900d-9ca3-437f-800d-5cb4f3c7a2c1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc6b13e2-3101-4024-a925-fcc1944dfd65", "sighting_of_ref": "indicator--e2868614-910d-4ebe-8510-c0eb4d03f008", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dafb847-07ee-4264-8f7b-1cd442df2e70", "sighting_of_ref": "indicator--7562ac42-8d94-4777-ab67-43466a1e26a6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7c4c5f2-619f-48e1-bb28-05d3c277f3b2", "sighting_of_ref": "indicator--827740d4-5ca8-4df1-b765-963c719dbac2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c970673-e158-4455-afb9-b6c925d99105", "sighting_of_ref": "indicator--f5e3ee4a-bb85-4883-9b32-a6aca91f4bc1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8a517a6-b36e-42e5-8749-4324e0f029b6", "sighting_of_ref": "indicator--b35e2e3e-1957-472d-94fb-56632fdbaa3c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e21c727-cef6-45be-bdcd-24a2b67e5b02", "sighting_of_ref": "indicator--4c122b46-7c18-4e72-ba00-d151fadc0ac3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f51152-4d01-422f-b64d-82b48bc654ab", "sighting_of_ref": "indicator--51933274-84ed-4a2a-849b-c4329ba8b271", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c764a412-786a-4446-bdd7-b789d712725e", "sighting_of_ref": "indicator--f94d8d0b-e31d-44c3-8c89-5d3ccbc09106", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7fd69f8-b79a-495b-b9c2-eca9d8b8c383", "sighting_of_ref": "indicator--12c1d59f-622c-4588-a4e1-a3b88665e58c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--527e5fe6-4e69-4477-8a06-2ab2e4fe509b", "sighting_of_ref": "indicator--1bcbef0b-c996-4cf6-b41f-19bde76f0998", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79075771-ed57-4b16-a496-8e0ee9d23987", "sighting_of_ref": "indicator--2bb58509-15e9-4a53-b137-001e1549a50f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd1e776d-3da1-4398-96cf-3ccfca898cdd", "sighting_of_ref": "indicator--a188f52e-f38c-42f8-86d9-6505e8e2fa7a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--107b36d9-6bd6-4da3-b593-c7c76f96152b", "sighting_of_ref": "indicator--f4c1c5a9-e4cf-4b15-bb43-c19f215cccd9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b7f250d-ed3c-4011-a80d-703f4eecfe7d", "sighting_of_ref": "indicator--19aa5163-6f47-4b48-a471-b541b48f9984", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b7fb95-e31c-400a-b614-d545b0a697cd", "sighting_of_ref": "indicator--a0320c0c-afab-4cc3-8819-613c34517440", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cccad26e-3d66-4976-90b3-1c156ed1343f", "sighting_of_ref": "indicator--4b43c07c-dbb0-49de-9bfa-0abb320e14c0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307c74e7-4f06-4351-8734-1730a6b4bf20", "sighting_of_ref": "indicator--bf2c16e6-67ae-4fe9-a535-4cb19851843e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61819976-5829-43a7-9cd9-0d08a89ce595", "sighting_of_ref": "indicator--bd33988e-3472-4c7f-b11e-f13e5ed9c1c2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b483842-93d1-4438-bce9-f9d1f3170d50", "sighting_of_ref": "indicator--bde31680-06d3-4cb3-8b58-24e031a933b3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75b026a9-bf77-46f4-879c-d12bd8cbad2e", "sighting_of_ref": "indicator--ac363ccd-ee22-4143-971c-948b9ae2e62a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b0b8866-101f-4427-a83c-51f3d0078904", "sighting_of_ref": "indicator--420b5cd6-3595-4900-975c-e9f297ca7baf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b27132-b8aa-42e7-947a-c50c9729fa7d", "sighting_of_ref": "indicator--35277c0b-8307-4893-83c5-8ad4ff134876", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fafacae8-6a30-4b60-bccf-8c6e2c61b5c9", "sighting_of_ref": "indicator--6ecfd434-a2b6-4f9a-8423-a35d25885ab6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ed0ba14-a6c4-4f1a-919b-9c2f14568c72", "sighting_of_ref": "indicator--211b41f5-15b4-48bd-8a1b-352872faa219", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75f66816-de57-4b63-a356-f2ea27040299", "sighting_of_ref": "indicator--dbff7c56-0874-4eb2-9410-164005d47365", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28e68708-2914-4f46-829f-68c48399da88", "sighting_of_ref": "indicator--f4a5263c-a9be-4aff-8375-d97ae0b59d53", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0e2f43b-f5b2-460f-856c-af13cb54a11d", "sighting_of_ref": "indicator--f63751d5-e9c3-413b-9ecb-3f44a4f0ce31", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73fc6e40-4035-46bc-8909-7a1d42b98bbf", "sighting_of_ref": "indicator--ffef54f5-b011-4e06-bf5f-a8593b041315", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--265ac042-acd9-4a98-a535-d2b640b7fdc0", "sighting_of_ref": "indicator--d5a1e209-d85a-459c-877a-3e0674cca56e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ccfc9d-798a-4e71-9162-9db3053fccd4", "sighting_of_ref": "indicator--b97fcb80-3ccd-4d29-a207-b203b50e0981", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f55f51b0-b194-49f7-9794-ca64bde1be6a", "sighting_of_ref": "indicator--d2f590e3-ed07-4048-bbb8-6c0a6c2b6255", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc97a3b9-a491-4a76-a318-4b2cfe1e213e", "sighting_of_ref": "indicator--c34e08ff-06c7-4e17-87b8-ec024e905e49", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56a28236-f1af-49d3-9c36-a4e4c2ac29f5", "sighting_of_ref": "indicator--6344d71f-064a-414d-a653-6f7614d90a0e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--154ffc76-e344-4125-98d2-12171299d70a", "sighting_of_ref": "indicator--ae5f85d6-0895-4ee9-8c84-f74c991a89fa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cbf93ef-cc72-4d03-9e88-3a8b2e799b68", "sighting_of_ref": "indicator--08185086-09c1-4348-8733-5d9365406d32", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--013ada8c-0d7e-49a1-b67f-60e6effb8873", "sighting_of_ref": "indicator--b1a6b005-9819-4a8e-9977-64349b5ed0e1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--846704e1-a076-4569-9b50-e74dca7aec6d", "sighting_of_ref": "indicator--64cf3043-7e20-4111-8d38-0c7d7a6834e5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c57f0ee-7a7b-4477-835d-09afcab184b3", "sighting_of_ref": "indicator--1de530fe-1e73-41a7-a3e4-8bc886e67552", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f370781e-9f12-428d-8d66-275090572ca3", "sighting_of_ref": "indicator--a56ae881-3383-4d0a-98ca-f48700ed1d3e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--609264e1-b74b-4da4-ba12-c4c9db8a9749", "sighting_of_ref": "indicator--a1e4f140-7677-49d6-ac33-4227d58767fb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a3e6273-c955-459c-8f22-303c5f7c7b6e", "sighting_of_ref": "indicator--8c0e4a0b-06d5-4685-abcb-857ae16d8a3b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d03697-7b82-4a19-8c41-fef40785fd0b", "sighting_of_ref": "indicator--8de283b4-80ff-4c2d-add1-f5954a385dab", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad9ae4a4-2abf-4cb5-b16c-ed0211dbbade", "sighting_of_ref": "indicator--1cdb85a7-9ef6-46ba-95c3-664515fbecc2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd780d1f-3733-477f-bd6a-b3c2a4c0da57", "sighting_of_ref": "indicator--7cc5424d-00c0-4956-b5c0-4b6650a4d312", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f29d1da5-f754-418d-91d6-555123958f7e", "sighting_of_ref": "indicator--8d00a8ca-12ff-4e82-99d9-d2fc86db4270", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf30c460-ff8f-4b39-9ae5-0cc34efd9ec0", "sighting_of_ref": "indicator--09d116d5-5449-4544-9d3f-016565902ef0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--716e5da7-0463-43e3-9cd6-9a17834c70b0", "sighting_of_ref": "indicator--d9b5418c-37f9-432e-ace3-f286eab8275b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b1a42bf-17e6-4222-acf0-7e8d519a523d", "sighting_of_ref": "indicator--6aedd594-9982-402d-a8b2-ba927548acea", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90830b54-0b2a-44db-8889-6cc5a2c2afb9", "sighting_of_ref": "indicator--d1e0d02b-a454-436f-a1b2-833bfa7b7e39", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46321c4f-e88d-41fd-b30d-4a631bf30da0", "sighting_of_ref": "indicator--36b2d6ea-43e8-4855-b3d9-f2b02205567d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8cf4b6e-fdd4-4075-86c7-61870ea11b59", "sighting_of_ref": "indicator--66932f27-6d78-41a1-812c-b25cf0fb0829", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb35d1f8-5777-44a9-8a41-aaa803de8100", "sighting_of_ref": "indicator--c992d835-8b01-4c9c-99d3-9209ecb61c78", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2507122-e940-4f4c-a606-827bcbf30f04", "sighting_of_ref": "indicator--4e4f4334-d4e6-489e-8fa0-3640c9adb1e0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28bcb797-3d80-4646-aed4-741abfdb6f20", "sighting_of_ref": "indicator--9865096e-3c79-440c-a95d-0000f1228659", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f74968ce-0e6e-4c6b-bbf3-9a607264fb91", "sighting_of_ref": "indicator--3d519b4f-414c-4836-bac2-6be040c231c8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d345a7-118f-4646-9204-cd8ed82ba94e", "sighting_of_ref": "indicator--32403975-26b5-4bba-9023-d08f1b5997a4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d93b2003-a3ea-4244-bdf4-d6e25f168c28", "sighting_of_ref": "indicator--7c72799c-7c49-483b-b0c9-85e775a8fd31", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51ba6598-8683-4351-95e5-4e24d176e8e9", "sighting_of_ref": "indicator--dbbe420c-c5b5-445d-818a-3c34d27d1d5f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf0f6136-5d97-41fa-8f63-078d93557f23", "sighting_of_ref": "indicator--89daee36-e66e-4296-9f67-e8adb580b365", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e641049f-731e-4c36-a6fc-232152e4bb65", "sighting_of_ref": "indicator--e4e23e30-0c09-4eb6-9a7c-65332d091ddd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a52016-2d81-42b8-b879-e96a44d45d52", "sighting_of_ref": "indicator--2173f951-c22a-4783-a119-f4f9acea4faf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea030244-965e-4372-92a8-506e45b4b534", "sighting_of_ref": "indicator--bfe77d93-7d45-43bf-8453-036b3f932542", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e971792-1126-42b0-96cf-0bfb2fe5b410", "sighting_of_ref": "indicator--4e8271d8-193d-49a7-b28a-e1fca77bd86d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a09593-652c-4742-8d3d-051d659c6062", "sighting_of_ref": "indicator--2e3c7d8c-a3fd-4161-ad74-e68aa830ffbf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da6b32d-3390-420c-b33a-d7557a312d99", "sighting_of_ref": "indicator--c2c44b6b-420c-4709-bfdd-0689e0051a0a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37dc62e3-a816-4cb8-8bad-c4bfb5787804", "sighting_of_ref": "indicator--33ad4b39-5cee-435c-bd28-c70eaf7b400f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4380c90f-fda2-45eb-b3b5-cff017e20a60", "sighting_of_ref": "indicator--daed4282-7d10-462e-a3a1-d348cd3c7dd9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f386573f-df8a-49b6-bc88-c06fdadf8858", "sighting_of_ref": "indicator--898f86e3-1da9-4ad5-bbe7-cd43dc924a1f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c26a20-aba0-4f43-9ca5-fd3ba6a4908e", "sighting_of_ref": "indicator--9948e9bb-89fd-4ad5-b4d7-3a02940a773f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c13c399d-49a0-4e87-b49e-939330759840", "sighting_of_ref": "indicator--20a298e7-23e0-4c57-9110-e80647c0383c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8aa6d08-0e28-4b4b-ae6c-470403290dc8", "sighting_of_ref": "indicator--2ac28037-2cde-4f97-9277-b1c6180bdb89", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f180c6d6-ebc8-4640-bc22-11f11dc113b8", "sighting_of_ref": "indicator--fc1c3fa4-69a7-4573-b11d-aed7d3bafec4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3da2c01-cfe0-4d63-8f69-51f9be7ffb8e", "sighting_of_ref": "indicator--2f75223d-3522-4885-a15b-4324b784a77f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd043ad-d689-4ec8-9e41-711166d6c355", "sighting_of_ref": "indicator--bd4ca3a7-209d-4309-a115-32ed5acbe93c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b90ee34-4ba6-4537-9dce-6bc4c3a41923", "sighting_of_ref": "indicator--53d2d0f1-6ab7-4804-98f3-134c08eff0cc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9984bc0-bc89-4dc4-a053-1b252e46f7a3", "sighting_of_ref": "indicator--3ca38655-cd3a-40ee-8431-f4f84d12e9da", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--036c105a-032d-4442-9151-ad583d1eb4dc", "sighting_of_ref": "indicator--ae79134a-2157-4bb5-843d-e87267dd8d9b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee1888e-3928-4c7e-984a-69b75a16990d", "sighting_of_ref": "indicator--dfa20563-e039-4491-99cf-d6b89132066b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d70a54a9-cce0-41a3-95ab-445cf88bd570", "sighting_of_ref": "indicator--ea022800-8634-4aa3-8abe-560d917b2a1c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83ab1604-2ce5-4f8e-8643-53aa624955c9", "sighting_of_ref": "indicator--d185a40a-32d3-4cd0-a9ee-9e5e6bb541cf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dc52453-8f5f-4e7b-8f5d-9c0a560794af", "sighting_of_ref": "indicator--28c194a0-be47-4aa0-bf36-3cf6be0d4fd2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba1b6354-c607-4a05-9f36-201173cd54cd", "sighting_of_ref": "indicator--4aa95019-dabb-4f00-9fb7-1923e21fd1e1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e040c56-1d1d-4b52-ab95-d8ba55b847e2", "sighting_of_ref": "indicator--05d73c2b-11c7-4d61-ad9d-77005c49f76e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daa55a88-d9e0-417f-9083-0233468791c5", "sighting_of_ref": "indicator--cf2061a8-d847-4b8d-a6c0-5b533f00634c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0301e1dc-29eb-4275-9fcf-0aa47ccdce9d", "sighting_of_ref": "indicator--1a400517-d48b-45d8-9c33-08dca6f77af3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a1a3302-2085-483e-9513-dcc745b1cd38", "sighting_of_ref": "indicator--3586346a-39ca-4474-a5eb-cbd2132d91a3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf337e34-f60d-4fdc-a8d6-53fb262a25b9", "sighting_of_ref": "indicator--e2f5f712-6f72-42b6-b60a-52863895602f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71960a9a-a149-4a0f-87a0-d4b88d46e964", "sighting_of_ref": "indicator--37fa5db6-c117-4554-a5cf-fcea54a510b2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--434480a1-3331-4239-8bdb-35b443789f1a", "sighting_of_ref": "indicator--6548f840-8b66-45fc-bf48-e11936dd7001", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd5df317-9e49-43d7-ad60-90bcd3bc2427", "sighting_of_ref": "indicator--f5be78f6-4e6b-415c-bd08-78138a23eca1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0444e318-906e-40a4-897c-60ee7f74aa42", "sighting_of_ref": "indicator--8dc58461-892c-43c9-8034-bfb55135c877", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--226fac99-6bef-4479-86ff-cf656a3938b7", "sighting_of_ref": "indicator--4dde5a31-faec-4771-b3f2-2df1d7a6f7ee", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17735fb8-4ca0-4323-9973-7d69e3da2c34", "sighting_of_ref": "indicator--14043f27-0a33-48e4-bcf1-c59506a52add", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f68bb7b3-4e60-469e-9cee-065f2ff9588c", "sighting_of_ref": "indicator--b1f2b0c9-6529-4f81-88f9-c96abcf6b399", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--963dc0c4-9b84-48c8-a72d-ae166fa49ac5", "sighting_of_ref": "indicator--52c12f98-fef8-48d5-96fe-46839c4be493", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de05a645-78c3-4767-a94d-429399186c37", "sighting_of_ref": "indicator--d84d0783-dece-46f4-95b8-5e1d323316e8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f93ee6f7-575d-47cf-9226-a6f4464ac9c0", "sighting_of_ref": "indicator--cd3299ff-9bea-4803-bcc0-63e688aec2ef", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--166f7bdd-9673-4813-ab4b-66d93c2a1298", "sighting_of_ref": "indicator--04c8b51f-d0c2-4fd0-9ef9-1075c33f0734", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c57b11da-184f-46d0-9fd3-5358718dc5b4", "sighting_of_ref": "indicator--97bbbf05-fc10-4b33-9b8c-188e5675d16c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d7bf688-58ca-4ab8-bc24-6f5158186e22", "sighting_of_ref": "indicator--7b5dcaf4-23a7-441c-8d57-2d2d5231c42d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9023a76b-cbdb-4040-bfdd-6a62a87c5531", "sighting_of_ref": "indicator--3786c79e-1eb6-47ae-ba76-19d7f447c87c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5e1f982-a8c1-4f00-9d07-d0ab709ecaed", "sighting_of_ref": "indicator--6fc4383f-1471-4eae-b2eb-a8b2ffe9bacb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51397a8a-f35b-4380-9562-a18d33d0ceec", "sighting_of_ref": "indicator--fefcd37b-be91-4b3f-a376-0984fee8f6ca", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ffb459a-7762-4bbf-b591-568b16359e97", "sighting_of_ref": "indicator--392a2a71-8406-4e33-a4c4-d1f18bf23173", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b42739-730a-46d3-8b42-bf4d1137b2de", "sighting_of_ref": "indicator--694159d9-c3ff-4914-b0df-d1e1b9614e5a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8af90a9-7ea0-4018-9c6f-8b655d7e2680", "sighting_of_ref": "indicator--de35f623-85e5-4c8f-a3bb-756b4547db64", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c26887-5ec3-4814-b341-bdccb44708a7", "sighting_of_ref": "indicator--75c1d760-64c8-4942-b376-cadfbcf4c338", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be73e4cc-7419-4b29-bcf5-1b2f7698bbf5", "sighting_of_ref": "indicator--83b4aa60-6bb9-448c-bd0c-f3734d4d3934", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c19e68-bfd3-4531-a8d6-dc1d75d739b6", "sighting_of_ref": "indicator--0e53435f-4b11-4e3e-867b-e99a8dfabc8a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d4fd88-bf6b-4c02-8a79-09ff7e8bf2a0", "sighting_of_ref": "indicator--9e05d847-f1da-45a9-9621-35310f99c5f0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b112bddd-ae76-40b4-833b-3d3a22db48fa", "sighting_of_ref": "indicator--a320dad9-4760-4b18-97ed-090c59a4e2ec", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22d35cec-6c5a-48bd-8a86-113e6c454e72", "sighting_of_ref": "indicator--eea27662-ec24-4d3c-912c-c412b2126a3a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a8ddb9-8ff4-4a6c-ba85-c0dc39c6a886", "sighting_of_ref": "indicator--78f96b26-d87f-4993-9518-704f808e9189", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62523fcf-b976-45e6-b158-bd1bbe91250b", "sighting_of_ref": "indicator--a7dfb3ad-1960-4387-8187-0da1be44f10f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--043ba58d-9977-4d9f-bb7e-381b55d2d6d9", "sighting_of_ref": "indicator--5afbb4a3-067a-4bff-aa90-52302755f46f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19906af4-6596-4b28-b242-d0592059a1a0", "sighting_of_ref": "indicator--9aa6ee8e-d85b-4862-a9a5-c43006e8f998", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a80efbe-4acc-4399-a152-0cc6aa588038", "sighting_of_ref": "indicator--2507e234-854c-42ec-b1af-610d796ad4e5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15ba8060-1d85-42ab-9dd5-8578341948bd", "sighting_of_ref": "indicator--61868ec7-5972-44a3-b42c-0a2980dca68e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--428c597a-ff5f-48d6-a1df-9952e93dd7eb", "sighting_of_ref": "indicator--b13f711c-2348-4026-a8e7-5326f5a49dbe", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e43f8371-c144-48b8-b330-c809a3d9f3d0", "sighting_of_ref": "indicator--915d611f-20c2-4c26-a7b2-0b6e313abe83", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f498a1b-1edf-41e6-bab1-a85ebcf967be", "sighting_of_ref": "indicator--8b235525-000c-4a47-8e84-1096bc3fa799", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68b8cfaa-807e-459c-90f0-f31f3eb64575", "sighting_of_ref": "indicator--f3870039-26dd-46a1-ba04-cfaa3961cf9c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d29483a5-b69b-4760-a849-159e3df1f854", "sighting_of_ref": "indicator--b7801470-59e5-4a0c-8d66-26f7a26b9f50", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd3e77e-31ee-410e-bc43-e894eb06a82f", "sighting_of_ref": "indicator--2980ebf5-35a5-4b37-9df4-716f722c0d9a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0d4a4e-fe61-43e6-a6f0-d8b61da7d22f", "sighting_of_ref": "indicator--c93185d9-2bf9-48ae-8b62-9ef2f6b41c37", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d5e3fc2-f6ce-414b-a69e-4b7a73ad2baa", "sighting_of_ref": "indicator--7a7e35c3-755a-4544-a8e2-98f2c7216d43", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85330403-603f-4934-9825-7eec7335ae71", "sighting_of_ref": "indicator--16838e33-ad19-4494-897f-0d798ebba2a6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a772ed37-b735-47a7-a9be-2afb274d06ef", "sighting_of_ref": "indicator--7a782056-4605-44a2-928d-210de5e468ed", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88a4a9de-da86-4861-91fc-0d9863050246", "sighting_of_ref": "indicator--a1f13c53-e52f-4ff6-9333-4628464d0cdd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50d64266-f48d-419e-8842-1d7cb35234e1", "sighting_of_ref": "indicator--4c766c5c-23f1-4649-87b2-7bba6675dacf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--556069ce-397c-49f1-a90f-ef736aed309f", "sighting_of_ref": "indicator--535ad3fe-0978-4b29-aef5-ba8fff6ccf58", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--739a965e-3dba-44ed-9cb5-f3f76ba7c908", "sighting_of_ref": "indicator--7eb3a6a6-960e-4a7d-a90a-87caff03eab7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf7be23d-799f-4258-9ba3-19ae7f632df0", "sighting_of_ref": "indicator--0a178881-bc20-485a-a504-9264db1d9b6b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c075706-af96-492a-a99d-2323cc6d5843", "sighting_of_ref": "indicator--06f16161-e47b-403c-ac95-105fa03d5873", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cf2c981-154d-429b-874b-54ba9600ddae", "sighting_of_ref": "indicator--086a8b17-a135-4ebe-bb09-1952fbfd2155", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c74768f-c015-42ff-b07e-a80d9ae9e2c8", "sighting_of_ref": "indicator--b9db88ec-6cd7-49f7-8cd0-fb0935c5e246", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56fbaa9c-2bdc-4b4a-ad49-82fc1a40945e", "sighting_of_ref": "indicator--6f9b3179-637a-4450-b3bf-d940b66ddce6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d5bb52f-edb0-444f-8c72-cfda0c31c65e", "sighting_of_ref": "indicator--c398efef-5cb3-45e2-988c-48254d6a1c4e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f080a283-d1ff-41f0-b38d-c9f1c21b553a", "sighting_of_ref": "indicator--8abec604-0049-4fde-aa1c-cb2d9064fc80", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e25cb0b3-d61e-4103-b4ed-8f17579e434a", "sighting_of_ref": "indicator--6cd47467-e66e-4431-b330-f754321013b9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a8e27ce-fc23-40b1-bd04-e64db984767d", "sighting_of_ref": "indicator--cd54ea35-00c7-48bf-a2f3-64c64d84bd13", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef9e3f40-1e44-43b7-8c8f-0607925759b8", "sighting_of_ref": "indicator--463dfbe9-a0eb-4a0e-b9f1-9fcd46b6626d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05d92524-e31c-406d-a524-2a4461a86617", "sighting_of_ref": "indicator--9178a5f8-0634-4e8d-88c8-054226821b6e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5b387e4-5fb5-4e84-8cbc-bf61dd79c241", "sighting_of_ref": "indicator--3bdabb93-92b4-496e-ac93-db4e01ea438f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f7f347-1fd1-47fe-a34f-5ce0fb401ad4", "sighting_of_ref": "indicator--226583a9-37b4-4a43-82f2-d265ea729302", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73195493-74d2-4628-ab83-b954131eb4de", "sighting_of_ref": "indicator--c660313b-9fab-4743-a6e1-fcfa5f1c4ad7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ae8f65-686a-43dd-9edd-9a84cd50b340", "sighting_of_ref": "indicator--4ac38d76-06f5-42e2-ac35-ba4403ae0307", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82f9394d-ca19-4244-b50f-9d8adb4a4389", "sighting_of_ref": "indicator--cb5c7fc4-94da-4c5e-8c5b-ae0c89ac09f2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a66ff8a-e266-40b9-ae7c-71e4e3f4c255", "sighting_of_ref": "indicator--60d917b7-0599-447a-9787-a748016f0b57", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50abb439-8ce2-497c-bb15-7c38a616ec59", "sighting_of_ref": "indicator--11df0a0c-2b7c-4252-bbef-4abc75ccf12f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e5b39f3-8097-4356-b7d0-a6d18e8cbe27", "sighting_of_ref": "indicator--cffbe048-8581-4395-b65f-70120c8257a4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b461ed44-a672-415d-b9b7-568c98cf836b", "sighting_of_ref": "indicator--fc8628df-dd24-4f11-b86b-5242e452a51f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e35119f-1f11-4785-8d51-8f61fa14e76f", "sighting_of_ref": "indicator--8571d708-86b0-419d-8b3d-da60fe6c678b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9c6f53f-9eaf-4d81-b5de-9ec0f695de2b", "sighting_of_ref": "indicator--22ab399c-8dc0-4029-a3a9-522c5d87fd6c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06f9a414-c091-4f53-bad1-8bdc121c57c3", "sighting_of_ref": "indicator--6467059c-342b-430a-8584-9c0d05bb2c07", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb43aa7b-64cd-4036-80f2-dbca2ffcdae7", "sighting_of_ref": "indicator--b98a4b79-c021-4bf5-a17b-ebab651b3e13", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7800ef11-1e1b-4ce9-881e-4bf79788a869", "sighting_of_ref": "indicator--18145812-f4f3-4839-9a6f-54209bddc51b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb8788d8-9736-4ea7-ae36-57fcd30b125c", "sighting_of_ref": "indicator--96803049-6a5e-49dd-be2f-e6c0ba5a5dbe", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e3335c-fc88-4143-9356-6a685aad21d3", "sighting_of_ref": "indicator--8df6dfac-4886-483d-aeef-d95430b2e5cc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976bbda5-16f7-40ce-8a84-779a2cd2f36e", "sighting_of_ref": "indicator--0620d011-c85d-4a40-ac58-78d85d5f9d2a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e101cf-584e-42b8-bfbc-7cda75afb464", "sighting_of_ref": "indicator--d1db0437-294a-46b7-ad2c-a0413f7bd22c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--063c2261-7cf2-4f0f-9e8f-a5ead9e6161d", "sighting_of_ref": "indicator--ecec0e2c-4949-4977-89b0-f92034a1cd3d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef7b1fbc-de10-460c-be65-e9cb2001bd3c", "sighting_of_ref": "indicator--c366108c-a887-47ad-9e40-759b69813d5f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf510b5-58bb-4427-8058-22b81751f8cd", "sighting_of_ref": "indicator--b353e99b-2a6f-45e9-be5c-b95978954139", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f19d9def-aa50-4410-bbef-0be4be6867e7", "sighting_of_ref": "indicator--d38d3045-a659-4539-a70a-70b112a538f6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd9334bd-91fc-4f16-ac61-4969d20e2c33", "sighting_of_ref": "indicator--becbb27f-5cf5-4ab7-99be-e2b29d399f40", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59a42a73-f8d3-4682-8d10-ce0c5e9b365f", "sighting_of_ref": "indicator--1de6d5fd-15e9-401b-97fc-256eb480a30e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f853ed9f-4e08-4ed7-90fd-906f6d83c45a", "sighting_of_ref": "indicator--f38b4f8a-c17a-4f28-b21b-9133c09609c9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e638a2d-fd61-4e36-80d1-01e282776e5b", "sighting_of_ref": "indicator--18629dfe-c7c8-4a8d-ae9c-75d2a75466b6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf45809a-f568-486a-82d5-df0e7bfe89ce", "sighting_of_ref": "indicator--133905f9-1016-4f4c-8c35-3e6f261d97ce", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4959e51d-c581-493b-9005-fb77115493d6", "sighting_of_ref": "indicator--ba5515ba-9dcb-4e4d-aa55-80827c14a63f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--693205aa-436e-4a8c-b2b0-bfac8df66a8a", "sighting_of_ref": "indicator--c1e04e72-65f2-4695-b87f-890dcf2b4b6b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa875b0d-4456-4c76-88ae-1e2db9b50c01", "sighting_of_ref": "indicator--2c47a1bf-f715-4efa-a7b7-c5d2e693d256", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3585c9e7-bd33-48b4-a73f-d9bd3432ae06", "sighting_of_ref": "indicator--42acac69-f477-46d7-9ec4-812297dd55a8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--266d98a1-2eb2-433c-9886-43ebd4c0695b", "sighting_of_ref": "indicator--a391ecc7-141e-471f-8a38-81403e6887f3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c14b654b-51d7-4a8c-8f37-4b9375767b49", "sighting_of_ref": "indicator--70081c6d-9b2c-4311-8062-89257a032d15", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b7482f-beeb-452d-a761-9bbc00b99435", "sighting_of_ref": "indicator--6c8260e1-03fc-475b-b81b-fcffa5e0a330", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2509545-18b4-413c-b66a-a4928c27e958", "sighting_of_ref": "indicator--b05929db-7fba-4200-b23c-c0d4e07805df", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e8f77fc-dc1f-466d-9aa0-1baeed10fec3", "sighting_of_ref": "indicator--99f94e42-aff1-4e12-95b2-ffdee774f427", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef75bdb0-142e-4dd7-bcc2-5e865b78417a", "sighting_of_ref": "indicator--c8e35df1-7c8b-4894-b508-a58711fffb0f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--550971f0-ca49-46b7-8a1b-21f6f8bc3637", "sighting_of_ref": "indicator--0ea56919-f670-4355-ba5a-e75805b6e660", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8084ad53-61fb-42b5-b874-fc522428f074", "sighting_of_ref": "indicator--87a0148b-cb96-458c-9fb9-a7625426b63d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--144052da-8f00-4a92-ae5c-b19d8458f620", "sighting_of_ref": "indicator--44636af3-1a67-4a62-a6a6-d735aa1b1c90", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--884b271b-7221-403f-94eb-9748cecf4db1", "sighting_of_ref": "indicator--f706f730-ccc5-4ce0-be47-c757ef21b580", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8edfa190-7bc8-4511-8434-8140ab0418a2", "sighting_of_ref": "indicator--50c717e5-16dd-4397-9b94-2ce5c1e34169", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31d42979-750a-4145-86da-8bddf8418a22", "sighting_of_ref": "indicator--97dc8e40-0406-405f-a9d3-21e35163a6f0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df9b1f8b-26a5-4d6b-b543-48313d96692c", "sighting_of_ref": "indicator--466c8c4c-3d2d-4571-95f0-951104cd4beb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf8f43d2-45b8-4b8c-ab4d-d5757f965192", "sighting_of_ref": "indicator--25cecbd9-fd86-430f-9fff-81c1e524096f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a51ce1-b0c1-4095-964d-2c71d04ac935", "sighting_of_ref": "indicator--d676c841-c576-4ed6-a30a-267655060355", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f693bcaa-fae5-4e87-b147-614070a19cb2", "sighting_of_ref": "indicator--f2b103b7-6a38-4e7a-926a-9eb3876cd5d9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43651d26-5cd7-431a-95c5-cee7e050073d", "sighting_of_ref": "indicator--20c0ec7e-0d42-4837-a777-ba47a6e56fc4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0cc503d-2071-4209-9ace-4077ed075653", "sighting_of_ref": "indicator--ea8d2002-339c-406b-bf75-3334c15c0f38", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e54a7358-bcfb-4927-8830-e8c79d551a6e", "sighting_of_ref": "indicator--5ddc3b88-569a-4ee5-8143-909b7e284868", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b6d900c-c1c2-4c7f-9bdf-c8cd2cf6e75d", "sighting_of_ref": "indicator--075ca0fb-aee5-4632-8e8f-92495d9bd4af", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c22c5f7d-46f4-411c-b4a4-dca544fdb597", "sighting_of_ref": "indicator--a53bee90-e103-40c2-bff2-3ee9ffc6bf8c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73757546-3dee-46d9-89e9-88361b805e97", "sighting_of_ref": "indicator--26a85d1d-7895-4b4a-8554-93e82a4e399a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c3a0ae7-ba6e-4c26-be3b-288717269957", "sighting_of_ref": "indicator--9cc6ff25-3737-4993-aafb-d8e3214b86f4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19e158a5-7ba3-4c7f-bb7c-a243aab3c24d", "sighting_of_ref": "indicator--0f767eab-d673-4a80-a140-050d1d6750eb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a2ed7f4-eecd-4743-9cbb-60660383c85f", "sighting_of_ref": "indicator--e9acabe4-61c3-4a10-97cf-bebdda98182f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d58fd029-a5a7-4202-a5f4-71678682255a", "sighting_of_ref": "indicator--97256396-94e1-4e84-8f48-9bbc3f60a263", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77e87094-8335-482f-ae9e-dde4af25cb9d", "sighting_of_ref": "indicator--a4c99d8f-a9a5-40ba-b528-44c41feccce8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--369536ce-46c5-4238-bbbf-12537efef201", "sighting_of_ref": "indicator--c4870da3-3d2b-46ca-bdfe-d264ea286062", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--114fb364-88de-49ab-a8b3-b1a2732e2c0e", "sighting_of_ref": "indicator--63080b95-0964-4c76-9c0a-4c21a5fa0659", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd317a26-c63e-4d6a-9b73-5c80728a63bf", "sighting_of_ref": "indicator--2f4f3877-c38f-4a1a-ad9b-2fa3ac1ec7cf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05344c1c-0812-4c55-a74b-915cec24e6aa", "sighting_of_ref": "indicator--79ca6d57-074c-4a06-8600-1567fb965513", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd227b5-66b6-452e-879d-8f4c954c5777", "sighting_of_ref": "indicator--3c03dd48-8be0-4963-8d2b-2a8c5962a8aa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e2f5bb7-fd16-49a9-b96c-86960ef775ec", "sighting_of_ref": "indicator--9754e88f-b7a1-4d37-bf3b-23d1bf963fa4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceff8352-092b-4f02-9bb9-1e3630840e6f", "sighting_of_ref": "indicator--93ff4c92-9c96-4824-a186-112cbfa1ae4f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c0332d2-77ef-4723-a164-10e257639831", "sighting_of_ref": "indicator--0b46cc86-e88c-4612-a340-12dd09d0a3de", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e684efa-8765-448d-bedb-61e1d5b9baf0", "sighting_of_ref": "indicator--11c2c807-1d1a-4550-adef-10d2e3aa2a1e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1488fbd-0640-42dd-a2ad-725b9c27086f", "sighting_of_ref": "indicator--17e2a515-b1cc-4ae9-b406-bfbc8a4f0383", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--464cc1b9-0e7b-42dc-8783-e275051560c9", "sighting_of_ref": "indicator--5c430fae-b1e0-4c09-8e0f-209600d5ea7d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--006e14bf-7499-47b7-affe-17775e1a11d5", "sighting_of_ref": "indicator--46ed5858-5edf-4d01-907d-76ebf4c91dde", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40548088-a2d0-4280-b3ef-0ff481078457", "sighting_of_ref": "indicator--f6d9646f-99c4-439a-85e0-ab566f38dd51", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--904f288f-4e54-40be-9999-077ab8583c3a", "sighting_of_ref": "indicator--5fcf5966-d71a-4355-b29b-5a7243da00c3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76713642-275f-4346-a562-6a3fc8521f25", "sighting_of_ref": "indicator--5ac52a8a-5ec6-4366-93e1-a20a671fb3dd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b09a0972-ac66-4eb9-834f-55ccdcf5b412", "sighting_of_ref": "indicator--027ba37f-3326-4fa0-bdec-a3fde3e24d2b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faa104f2-2ec4-419d-855a-9b6f7f342c10", "sighting_of_ref": "indicator--7abd0fc2-1505-46ea-b85a-5f725e6fcf04", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc0fc71-1b9a-4735-b576-239891850f9f", "sighting_of_ref": "indicator--250ed132-be24-4a6f-a600-2a76fc952d76", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8764f42-b04a-4bee-bb6c-28712ce424df", "sighting_of_ref": "indicator--77f6a9d2-156a-40f2-b7df-d12f2d3a92eb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8d0eff3-9c78-43d5-8b34-2e2794f178c2", "sighting_of_ref": "indicator--11acf950-b871-4722-b8ed-d6365400e20b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7eed1f3-b045-406e-87ad-8db014a4bb43", "sighting_of_ref": "indicator--6e79a456-48f1-4560-8799-19b37687820e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e07ee47-9c29-4df6-9f54-a3ff24310877", "sighting_of_ref": "indicator--42d434ad-cf94-4374-9165-57ecf9288f13", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--103a1f12-d4e6-487a-a747-452478a4e557", "sighting_of_ref": "indicator--301199a0-d654-43f1-a75a-02b1441124fe", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b59360c-e4ce-43e5-9a89-604884bf7f8d", "sighting_of_ref": "indicator--526f0faa-2c43-4ed1-98ee-193c04088686", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c9e9fa2-5e69-4ba3-8a30-426ed3f435e9", "sighting_of_ref": "indicator--1f925ada-4c06-42c9-88a3-b69cc147f33b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3bc9432-dbdc-4fc2-ba6e-9ff749c7a63e", "sighting_of_ref": "indicator--4b839eb8-9ffb-4f4d-ab62-1c10c1ac243c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fff8958-9ed5-43b0-af6e-266dc93f592f", "sighting_of_ref": "indicator--bd9b5412-671f-4c5a-bd79-c61a87b978a8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d45572-38bd-473a-949d-535beb6b544d", "sighting_of_ref": "indicator--93ad77fd-6a67-4912-9f30-c91a16d3b8e0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb47be0-7a0c-436d-ba71-58b13bb7ce1b", "sighting_of_ref": "indicator--eac7bf1f-6489-4bd5-ba84-cb926dbf7590", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41fc70ae-8e88-416d-b3d5-287264518de9", "sighting_of_ref": "indicator--ece337f0-9e35-409c-b308-e78154bb4529", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5631db25-c91e-47bd-8802-f583f4352119", "sighting_of_ref": "indicator--fd597bf3-dad2-4053-91f7-b763c2954e56", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dad217a2-b6cb-4211-b078-a036fda98784", "sighting_of_ref": "indicator--d193d72e-4592-4f80-a1e7-9219ccf7d042", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a4233d-31f2-4406-bdf3-aa55afe69c7c", "sighting_of_ref": "indicator--f45c8895-4d26-4b5e-a64c-2d36bc14f2e3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48991f5c-e527-44c3-8850-1b92034e2b2a", "sighting_of_ref": "indicator--badb7aa1-736e-44c1-9a4a-33b9b1e9d2a9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67650ba1-3ee5-40e3-8614-27d1bd29938c", "sighting_of_ref": "indicator--eb989a94-4c09-4ce4-a279-81feb02b046d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f9a7cbe-5704-456a-864a-2e908ce98bc9", "sighting_of_ref": "indicator--ab27d1d0-4b0d-4524-beb8-781c97240248", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40bd29bc-5765-4455-9256-eb4ef9afbfc5", "sighting_of_ref": "indicator--ee7acff3-55dc-482b-9850-7d1ed34a1968", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67eca00a-fb3f-499f-863c-309ecc8d9d8c", "sighting_of_ref": "indicator--080cf8b7-18d0-4c92-b643-55fcda753567", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e52b95-69e1-4121-bc2d-1fbe1d5172bd", "sighting_of_ref": "indicator--cef2b6dd-fe1b-4734-af26-fae332d88aa7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd82737b-b41d-432e-b31c-9a28354e6311", "sighting_of_ref": "indicator--d4716647-c851-46d5-8e8b-3e30708b8219", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--696bf863-9db2-450c-af5e-62197b63fb23", "sighting_of_ref": "indicator--9d18a46a-e96a-4fe6-b238-bb7fff2e5b14", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc708010-6af7-4dbd-a8d2-a530a29a9961", "sighting_of_ref": "indicator--02109868-d448-4350-94b4-2032bb4e7e81", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c41d4c5-c000-407d-a89d-63234189b6e1", "sighting_of_ref": "indicator--2a9604d0-eea2-4767-837a-b8847ccabade", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29354472-0d70-4e94-b79a-c209e82f2cb7", "sighting_of_ref": "indicator--cc14e94c-8ce9-446e-b73e-143d97cbafc3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--842e60cc-5b16-4384-8466-4b946608cedd", "sighting_of_ref": "indicator--85c7e7ed-17ad-4fc5-aada-6bfddc6db052", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53439cab-02a1-4850-9bc0-cd5c510eb90c", "sighting_of_ref": "indicator--3fe1cd29-9481-48a3-a643-02fbe42d9f5d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbade389-be94-4dcc-88e9-1ae4a0efc2dc", "sighting_of_ref": "indicator--f0a96154-a276-4e74-acfb-46a8a4cff67d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--226ff2e3-3c8c-496e-bb96-83676a63167b", "sighting_of_ref": "indicator--d9583f39-93d3-4a93-a049-d1c349194609", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1098c025-c9da-4575-8dbb-f9e0cf96f18d", "sighting_of_ref": "indicator--e1480cfb-654e-4f4b-83c7-a03331b88bef", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--656b1822-f9fc-4395-8122-870e511731f5", "sighting_of_ref": "indicator--276bb2f1-64dc-4fef-91ca-285fb38ee6e2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc7ea496-1c2d-4605-9f32-6c1156341c1e", "sighting_of_ref": "indicator--b4864d7e-d321-448c-bf57-22df8289ef22", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c1c4ee1-f487-4f2b-a194-a6652d28fdde", "sighting_of_ref": "indicator--d314fbca-9b32-47ea-bfcb-00be7612ffb8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38788940-9ed2-4573-ae10-b9a8560b33e2", "sighting_of_ref": "indicator--b30aa0c5-d610-4e46-afc4-b9c715daf5bf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00991cc5-cfc2-434f-89ef-bb5f878c73fc", "sighting_of_ref": "indicator--c9bd9f96-42f6-4828-830d-32dae2216707", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--911ddf80-c44a-4f02-af6e-1ddba2c30d2a", "sighting_of_ref": "indicator--794a6467-1143-41df-8edb-5449cad44a38", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d309b66f-526f-433a-bd2f-e1d28d9494c6", "sighting_of_ref": "indicator--35ded171-fc47-47cd-9eae-23a83e12002f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b22fad10-edc1-4b73-96f3-54dae530f1bd", "sighting_of_ref": "indicator--5b318505-4af8-4bc6-946b-df5241af8ba5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ba53027-81a0-4dd2-9008-4e087cc5f974", "sighting_of_ref": "indicator--b8ebc6ee-fa7c-4ef6-9eac-90f33325ea97", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a23cd28e-8eaf-40e1-93bc-10e35d67fdc3", "sighting_of_ref": "indicator--80310985-1368-46b9-bb34-03ad64a311f6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c6ec99-8c59-4dc2-988d-9cd9f376e632", "sighting_of_ref": "indicator--c604e137-57b9-491b-820c-5425cc450f2b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff16edd2-6e99-4baa-aed6-34ef6d3a5cbd", "sighting_of_ref": "indicator--9c568f9e-4d12-4abc-a8ad-1ab63c3b0c8b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--189e0898-7e02-4cf3-b649-9ab8254e9643", "sighting_of_ref": "indicator--8776a2ee-6d95-46c9-a7fa-95be6a28df8c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b8279e-c25c-4af4-ab64-1f505729a190", "sighting_of_ref": "indicator--18c49212-babb-4a35-ad8d-f7848ba4cab3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3caa406a-4f47-48b5-9c5f-b4e03b8ba15b", "sighting_of_ref": "indicator--a3809319-e7f4-4c01-a73a-5ec50eaa4592", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e29d5a1-bb43-475d-8be7-166864f6db5d", "sighting_of_ref": "indicator--29f1f47c-4a4c-4e4a-b5f8-3cb4800f1abf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ffa0de7-b603-451a-8ec1-feebe9098a9b", "sighting_of_ref": "indicator--2f8ef2c7-6f7d-439f-ada5-829f4e876ac1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--987e2cc3-7fb0-41fd-aa31-4a5a2839d01f", "sighting_of_ref": "indicator--7611f74b-14a4-400c-99e8-38a1e7f46343", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ae6d20d-8cc0-47a7-8589-8cc7aee8c306", "sighting_of_ref": "indicator--36c9dba7-9104-4e3c-865c-5f4e9a5525a2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e105132a-8a82-49ca-9603-56836174d696", "sighting_of_ref": "indicator--2afbdf50-a33d-4d9d-8110-15af6b431e8f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--385b6497-6335-4277-b6c6-1b53b45174cb", "sighting_of_ref": "indicator--e2caafc1-ace8-46bf-b7ff-bac16ff32769", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e6bbbee-8846-4464-a0a3-3da8d1a581ff", "sighting_of_ref": "indicator--9a17aa9f-a026-4e07-8f45-6b6b11ad3dd7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26b0bb3e-104d-470d-83a3-0c6d0e4a0b0d", "sighting_of_ref": "indicator--a41cd7e0-4862-43b5-9ad1-268cf5e7e152", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45e6307a-2003-438c-ac7c-20190a558327", "sighting_of_ref": "indicator--ec75f112-ea41-412c-864d-11061e3fec03", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b48e436d-9bea-4102-8e28-53a972053de3", "sighting_of_ref": "indicator--f81c103c-021f-4b4a-81a2-e234c62db0b6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b128e38d-c795-418c-ad30-df83cdea6f0d", "sighting_of_ref": "indicator--c67b7aee-7dd4-47cd-859c-0f6b3369d53c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14db3966-3ec0-4392-aea2-7dcef37373da", "sighting_of_ref": "indicator--94c3b6ac-1acf-484c-b547-a9561c9dffeb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e03b2aa3-043f-43ad-9d85-d53227af5fc4", "sighting_of_ref": "indicator--ff06beb7-810e-4f60-a83b-a536a90c0be5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc5eb6ae-e471-44e5-bf15-c4e562b72255", "sighting_of_ref": "indicator--6c66aada-4c85-4e90-85f2-f4dd6caba4cd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8df052d-3095-4c9a-87e6-e48a407e1212", "sighting_of_ref": "indicator--48b84f99-28db-4c84-9a93-a91c8435cdf4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef0e71d6-b538-41a7-88b9-d7e2cdb2cb84", "sighting_of_ref": "indicator--73a45d6c-b85e-468d-92ad-791d6742d019", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--189bcaec-3708-4552-967f-cb2dd2d56cd5", "sighting_of_ref": "indicator--3d764108-aba7-48ef-a16d-6b6f8057b465", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4eb91bf-8d03-4d52-86bb-3c134abb4594", "sighting_of_ref": "indicator--38a60edb-8dba-45d1-b91a-34e4093d0a70", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f29732-2b0b-4fbf-96bc-c56024eed8cc", "sighting_of_ref": "indicator--762f7e39-b980-4e7b-a4b3-cdef73cbd1f9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3524c8e7-ee97-4087-b1b2-ba8b02c8718c", "sighting_of_ref": "indicator--0c068bb0-2ada-408b-b96c-21afdc52bb87", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df46e183-e3eb-4726-b54b-f3f7576f86f0", "sighting_of_ref": "indicator--78b09eef-21a1-4ac7-ada6-60c45fca1e96", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c7a0b8-7d3c-45de-ab90-ad7f8b2587ab", "sighting_of_ref": "indicator--dd377b34-07ee-49a3-bbcc-64ca77092851", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ca5e20-5cc7-49ae-8838-a958fb192d44", "sighting_of_ref": "indicator--0b234ad8-897c-480d-8793-81ab486c631b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14953913-ec6b-483c-8e30-62b064394231", "sighting_of_ref": "indicator--8f41cacc-bd35-4dbe-9a26-8697700491e5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79c2c3c5-df38-417d-a5c8-c81ef0f111c9", "sighting_of_ref": "indicator--d7a47404-44db-4aa9-bc9a-5ee37b02199a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a461ab4-91b3-40f9-b403-a5626b24167c", "sighting_of_ref": "indicator--3ab0373d-6255-42f5-9cda-a69fb29e8e76", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d5f671-56eb-4684-92bb-fbdd21816767", "sighting_of_ref": "indicator--0ad81f25-9657-40e4-93a0-7e36d0233299", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a8265c1-b135-43a6-9699-7c766e2aef04", "sighting_of_ref": "indicator--b93bccab-ee7b-4e27-8dc2-4bda00916167", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--717a67fa-8d84-4716-b8a7-0e677bad4dff", "sighting_of_ref": "indicator--c9a68907-135d-4e3c-9c4a-760e0511359d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d98c9f-7979-4769-aee7-328529cefd7e", "sighting_of_ref": "indicator--97f097a3-9b54-46af-8135-7f2b7a97dc81", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be076239-f216-46c4-abe0-b7ae62d942f6", "sighting_of_ref": "indicator--acd1fdef-a24d-40bc-8293-55c7bce68941", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faf7fcb1-b4ce-48af-8e38-ac8c3a28da41", "sighting_of_ref": "indicator--995e9b1d-9f18-4b81-a6fd-615149201bbb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e944db54-e49c-4591-a56e-53206285a24a", "sighting_of_ref": "indicator--dcfb55ba-cc50-40a4-bad3-2943c3e449ab", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b247d618-355e-4b33-80af-9c2ce745ffb8", "sighting_of_ref": "indicator--2d01ff80-7cd0-4b5f-8a9e-33ca06c86e13", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1816b41f-b82c-49ad-950f-cf26d2fe534d", "sighting_of_ref": "indicator--0138e397-da1f-46bf-b42e-8527ec98afc5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1d45ee-ee1d-4375-9e30-5e4e49e53f8f", "sighting_of_ref": "indicator--bb6870c5-b37c-4204-82e4-ef3dbdcdb50e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc0fb84e-c60f-41bd-9362-8c9da3a53781", "sighting_of_ref": "indicator--2ad5e97e-9ff5-4a61-8198-39d28f7d581a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10cc7be1-bc78-4907-ab70-07e9ec1bfdd3", "sighting_of_ref": "indicator--f14b46cc-f67e-4a71-9fa5-5181e7e29f07", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f325e136-8c86-4cf9-a8a4-b9e76bce278e", "sighting_of_ref": "indicator--8fd51c40-cd89-423e-95a9-54f3b1ec3ef6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9081b9c-3092-4bb2-88b4-5933adabb1e8", "sighting_of_ref": "indicator--be3ba1e0-5cfc-4f4b-a275-592c52499c08", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b7c0fd1-8b60-43db-bbaa-dff6d4372758", "sighting_of_ref": "indicator--d0cdba91-0803-4923-9874-bb0284ff951b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f3aa12-1533-4083-80bc-06b5549be10d", "sighting_of_ref": "indicator--72e72612-3109-496b-854f-e7b96c14dc20", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5596fb3-1902-4f50-a1ce-eee3623b922b", "sighting_of_ref": "indicator--c345600e-835e-4546-9502-2591e833c4f9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1693abfe-34dc-4b31-9d77-a4c1b75ed6e3", "sighting_of_ref": "indicator--b348e554-573d-45de-a804-30c6a57bde53", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a236c9-e26c-4327-ab0c-54b319f9a92a", "sighting_of_ref": "indicator--ec68be4e-f8bf-4e1f-ba9d-81ae472ac455", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16de4825-820f-4432-a111-a03af5782468", "sighting_of_ref": "indicator--f76546ca-9fe1-4c22-93cf-945ff15c9d65", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5536d6d7-0390-4950-aaa0-1903c2a703f0", "sighting_of_ref": "indicator--618ea68a-d17a-44bc-8b62-7ac7f1c8a957", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f045739-532e-4baa-8057-e31160c3036e", "sighting_of_ref": "indicator--183791e1-749e-49f2-ab82-7bad35d2d5b0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d34a754-c3cd-4c0d-b72e-004c843348b8", "sighting_of_ref": "indicator--7c18ddc8-632d-477b-85b6-55f443676881", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ffa4a9f-87ab-405e-bac7-3791cfb77dc4", "sighting_of_ref": "indicator--76d9879f-06f7-432e-8574-bffaa970c1af", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceb65584-51e8-4dbe-b36f-e35eb382d2f9", "sighting_of_ref": "indicator--3e62c191-6806-4282-b903-f086a2fe2732", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38e0c491-06da-4899-865a-0f353398045b", "sighting_of_ref": "indicator--be274814-82ac-47d6-be0c-3a6de3479aa3", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f046cc7-1eb4-4723-9861-2d6b29490365", "sighting_of_ref": "indicator--0d201b8a-459c-4604-b6c2-2c1d11ec9834", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ca52350-d30f-4680-825a-c93efd907c55", "sighting_of_ref": "indicator--e099d8d7-9e9c-400a-9770-8372726848c8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e65dc61-048a-4ed4-86c2-9447d1dedc58", "sighting_of_ref": "indicator--5ae4f73d-1ff5-4508-a32b-ab9a343bd363", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d342924-07cc-4610-8dae-0e6ac4a5bca7", "sighting_of_ref": "indicator--bb56609c-295d-4a29-943a-156ff62372e0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b7a6cbf-bbab-472c-99d5-d1ec85bd5caf", "sighting_of_ref": "indicator--7cd344a3-7a79-4c84-8d9d-08c8d5672a43", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ba1e434-8bf3-4be9-aeee-c8f57dfdce85", "sighting_of_ref": "indicator--fe73437e-d9dc-4fb1-a7ca-c55e86d6bdbc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66f5084d-90de-4ed1-8c45-e0f2bab14be9", "sighting_of_ref": "indicator--eb1c18aa-52db-4839-84b3-280029778b92", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88788ed9-3408-4411-a9c8-d6ad5cd83626", "sighting_of_ref": "indicator--f9471236-44d0-4b56-8e4a-d1e6bcdd1f44", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7efcc791-dd0a-4d4b-8e51-a346e6babd86", "sighting_of_ref": "indicator--8522665a-7107-4f0b-a553-171844b7ceba", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54f16cf6-6428-43f3-9230-dd880abd274d", "sighting_of_ref": "indicator--dd193271-ecd3-4915-989b-c18342115331", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74f379e3-ad41-483f-8142-db20983ab1aa", "sighting_of_ref": "indicator--c7928a28-8bad-4b8a-a178-a6254c3c3a61", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2718f1ad-4fb0-4fdc-86cd-faee16a5adaf", "sighting_of_ref": "indicator--510d4882-bbcf-483d-a95b-614e4a8661e7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f73472f-a067-4da3-8247-fc5fbba6145a", "sighting_of_ref": "indicator--ece5bda8-391b-4406-8f23-626fceaa6146", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a354ea26-23af-42eb-9ef5-3756a4e784c6", "sighting_of_ref": "indicator--63895c5e-f4e4-44fa-8336-12a704a85635", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--867d76cc-347c-4357-b650-4aac3b36ec2f", "sighting_of_ref": "indicator--09c108e8-1df0-4cbf-b5a7-b6faf129f747", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0c2605e-de16-428b-89a1-669bf3414029", "sighting_of_ref": "indicator--e41e8b65-808a-4fd6-9abb-870c7c930f9f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bae6a37-f51d-499b-8bf9-abc3ef99b81e", "sighting_of_ref": "indicator--4433c018-831d-43c4-a837-a81991724485", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c459e10c-0bab-4123-82dd-0d526accfe07", "sighting_of_ref": "indicator--893d9395-5d62-4e30-9d6e-d14ffc5e4197", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84464a7a-ca10-47be-9598-208e168e466d", "sighting_of_ref": "indicator--95a909a2-1128-4f74-8d2b-d0c9f8ccb5c3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dec8228-e266-45db-980c-aac84f6e978f", "sighting_of_ref": "indicator--b0b3302d-0cd1-4828-b7f9-2e94e86feb61", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06141637-c1e7-4be2-84ab-11992641b06e", "sighting_of_ref": "indicator--2b1318f5-0d3b-4dbf-be1c-804729ed42f2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82458ac7-5413-478a-91a3-9f8d0142e9db", "sighting_of_ref": "indicator--5beea604-fe50-43ac-97d3-7c3204137dd3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f15169a1-2542-4440-a53b-adffc23d1c29", "sighting_of_ref": "indicator--98dbee2a-5806-4b7b-a318-ff1a71def003", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bee3fd4a-1d9e-46b6-9814-a21435b17c83", "sighting_of_ref": "indicator--71a0f8f2-d25f-419b-875f-2d4541199459", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--154823bf-fdd9-459a-a610-1d7a642d585f", "sighting_of_ref": "indicator--3d4cc4cb-03f4-473f-8e5c-3a4bd758dcc5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b61ea5bd-f5b0-4580-beb8-1b1f53c2831d", "sighting_of_ref": "indicator--f36d2fb9-624d-4023-89fc-9f257f5e9b18", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae788435-5634-4f20-927d-2ed75af7b25e", "sighting_of_ref": "indicator--d52ab9f4-43b6-463f-aad2-6caaafc51946", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd286178-c386-4f5f-af51-391fb4c1217d", "sighting_of_ref": "indicator--af6350a4-b8c2-4b4d-a9bb-9be650d77e6c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b587d7-fc3c-41b4-b2b1-c26e854bded7", "sighting_of_ref": "indicator--1acdfd92-80f5-429f-b6ff-efb902f76728", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1e6f211-6555-44e4-a976-9c549242b128", "sighting_of_ref": "indicator--402902ec-9e24-4acc-8bb9-693c726b2291", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f80b7465-73fd-4e71-8772-979a4d4d9c90", "sighting_of_ref": "indicator--60363d2f-2ac5-45b3-ac72-2207e31a6a70", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b16186-9fc2-49dd-84df-becb76e2843f", "sighting_of_ref": "indicator--b766e2f7-466e-469a-b4d6-d784c26bdf3f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bda4b35-1757-41ff-b1cf-d2ba672552d4", "sighting_of_ref": "indicator--64200ad5-c52f-4821-bb7e-34921eb256e2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd63b734-c8c8-4d16-90bd-14d96a3e1ae5", "sighting_of_ref": "indicator--ccd25b0d-dd65-41dc-9953-3d226e41e970", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeebc6d0-c37a-4396-858b-e3647be95b7a", "sighting_of_ref": "indicator--dfcf77dd-a5f7-4b2a-9f72-27a3b6dfd9c9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10c1a21d-9b73-4d70-814d-df141e059a67", "sighting_of_ref": "indicator--cfa778c9-4936-417e-8b4e-c68dbc6c209c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a67a015-ac3b-4ba9-8c59-b7dde3e4bee9", "sighting_of_ref": "indicator--b55804dc-bd84-49f2-ac08-59c42ffa06b5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8d8a895-5509-47ff-b96d-708a1c987214", "sighting_of_ref": "indicator--ef88f95d-4826-4733-a229-5d8f10b511e0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b044480-7816-4941-ac52-c39bd1dcb009", "sighting_of_ref": "indicator--12e9a5c8-0285-49b9-a744-f5bab74b6667", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ec7e177-04a2-4457-84aa-b71f5ecccc14", "sighting_of_ref": "indicator--6e7f73df-c69b-4cfa-af1c-a1d88eac4bc4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a4143d1-b749-4be6-81cc-f1933b20e540", "sighting_of_ref": "indicator--86f2bd8e-aaa2-4a79-9ff2-b013f705124e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f20e228-4f59-4a79-ba32-df37fdd0b2f9", "sighting_of_ref": "indicator--371c9916-5ef2-4994-9061-81881d8678f6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d2427e2-e2ea-4a5d-a83e-d341fa501f8a", "sighting_of_ref": "indicator--d5da3da1-e188-4888-a070-c3a6e938104d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5161dee-1684-4030-a16d-cd19dce52c71", "sighting_of_ref": "indicator--6c00e552-60fd-487c-aa55-c3de64c937c5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5ad0084-ae11-4ca7-a0a9-4b5129f21b80", "sighting_of_ref": "indicator--08507a80-b0cb-4cf1-b8c3-3340c6cb3926", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d58aa7-05b8-468f-8d42-8f658a586bc2", "sighting_of_ref": "indicator--c7d276a6-8502-41d6-a988-6dc8b90aa0ed", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--261af86e-2cd0-40f9-8a41-0daa509a3dc3", "sighting_of_ref": "indicator--18b09b7b-e9a0-4ff6-a665-28b630349b9e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfc8e92d-f73c-47ae-b638-622f9b2ee2d5", "sighting_of_ref": "indicator--14fd2365-9c58-479e-8e24-f37b144f1a9d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cffb470d-ed44-4b1c-9d23-7706cc4e73c8", "sighting_of_ref": "indicator--60b523ec-f243-462e-aca9-29531f78f13f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f482ff11-b268-4db1-a1df-5e3cbe5c9550", "sighting_of_ref": "indicator--c88d5cc3-e141-4d6c-9dd5-e38ad6578598", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99677663-9539-48df-88c5-3b7dd0015f5b", "sighting_of_ref": "indicator--5c1fcd87-de72-48b3-ba8d-bb92ec9e1745", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--414c1ca8-027b-4e8f-b3b6-ff718db3df6b", "sighting_of_ref": "indicator--1ccc0393-92db-46bd-bdc6-d5faed4bbd4b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc28a899-f7a2-4013-9106-108f0fd82631", "sighting_of_ref": "indicator--f72395e3-8d5c-459d-9e9b-19490f52b48a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ae1aef8-7b4c-486b-a924-1fddc0c21028", "sighting_of_ref": "indicator--de818076-e467-460f-8340-f6e76ad4affe", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9174b15-544c-4072-89b9-bcf15598d758", "sighting_of_ref": "indicator--26877f3e-24a6-4c4b-8e11-33454bda56df", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d05cf407-0122-4e27-9978-78e7ad83a58e", "sighting_of_ref": "indicator--1532d134-2210-4db5-b0fa-e1a2526bda9c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1295acb5-ae7d-4c04-aeff-9577441b4a92", "sighting_of_ref": "indicator--e0b80b5d-1650-417a-9e45-22d0e67c2ec6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aee8e7b-467c-4b14-a755-4c6e679daf40", "sighting_of_ref": "indicator--7d642b2f-cfbb-4cf7-b2dd-4659cb83feb0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ffa74b-fe9f-4e8f-b3c4-28717c585e9e", "sighting_of_ref": "indicator--8362caeb-9cd0-4805-b84e-674b60de4f85", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15dedcd2-0de4-4833-8b85-7ac0971d15da", "sighting_of_ref": "indicator--551e5cb0-8f73-4404-b846-23778b8762fd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f57839-ae7c-40b7-913d-0a5c027ea40f", "sighting_of_ref": "indicator--abcb6b19-f75e-4516-ac2f-2c60d2b28995", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb07eda-599b-4734-be6b-825d5225891c", "sighting_of_ref": "indicator--b0fcdeef-befe-47b2-8020-6bef1ea10131", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f07359b-9551-4d24-a60e-3763913a13d0", "sighting_of_ref": "indicator--6c0452a1-1c74-4492-bbce-1c1c1d78c6ac", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9897ea4-ddda-483a-97fb-dc701cb4e4bf", "sighting_of_ref": "indicator--1cbfe2b3-3d54-41f6-9c10-ee6c5cf39966", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea5b76f9-ea22-4064-96b0-08eee2d1d80c", "sighting_of_ref": "indicator--800494f1-b7a4-4dfa-81ac-ea93d35b923b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37511d84-a92d-4b66-b8ce-be7f23de9d47", "sighting_of_ref": "indicator--abef4eaa-22c4-4371-b32f-4ccda50d216c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a3fbbac-f8cf-4a33-997c-b7d61da9b50b", "sighting_of_ref": "indicator--1c013203-88cb-469a-9659-6aaae1fea4f8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394642a6-94a9-4d59-af07-e81cef75e3e0", "sighting_of_ref": "indicator--749a1807-3e09-40d4-bb4f-064e8a92585a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4eecfcc-61f4-43da-9acd-4579f93d07cb", "sighting_of_ref": "indicator--06e2cbe8-9fe8-4be5-89c7-21d9f0dc9bf4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b56d111-9cbb-4a8d-a114-87fed20960ba", "sighting_of_ref": "indicator--9d1d95bd-5b1e-48aa-b463-d85f6823343e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82f41d5a-9b09-4c16-a8fd-fff5ad03ea0f", "sighting_of_ref": "indicator--f2ccad33-d935-4e7a-83b8-f1a5d55cf82e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9839020c-6a5a-4359-91f2-0a2d2927c682", "sighting_of_ref": "indicator--21896f6f-8d2e-4b60-89a8-4718b28f0e37", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a705e4-e813-4bae-8444-5d5dc153fc39", "sighting_of_ref": "indicator--4aa3d29d-bca3-4328-b0a2-ef6efeadd142", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04d4f707-228c-4274-a999-8b221dde1952", "sighting_of_ref": "indicator--29de5a75-2fc0-4747-b3cd-f32904e0aee4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--911c1bcf-9f62-4635-9c78-54de0b413af1", "sighting_of_ref": "indicator--a506a00e-aff0-4054-be58-92d76214a863", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6fe2e01-70cc-4999-aab8-68b3c1cb97ac", "sighting_of_ref": "indicator--558d3ad8-64c8-491e-8a63-c00a26b5625b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cadefa27-a502-49b8-9f3a-c0f8bf7e6d78", "sighting_of_ref": "indicator--e0a1320b-7ebc-4397-a728-0a9903d30601", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--086a38e2-47f0-4d47-befc-d991cc045ecf", "sighting_of_ref": "indicator--42c19512-5e6c-4116-9260-28966891a746", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4780537f-0527-413f-8b8a-b932c2f999c2", "sighting_of_ref": "indicator--c4c56ec5-4286-446c-875d-c9c6f90c9416", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--364d67ce-cbf9-4ff3-b30f-3ab6c4f6cad9", "sighting_of_ref": "indicator--5b6c0742-9154-4f0a-838e-77931a823c2e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c8b27b-0ce8-40c2-8198-b6a87b259023", "sighting_of_ref": "indicator--cf77b8db-8a35-412c-a580-4bd23d947a3b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01599e7b-cecb-452f-97b8-07584c3414ea", "sighting_of_ref": "indicator--1f938f4d-0c4c-4827-ad25-08fc09d907c6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a71560f-3547-4a7f-a7be-c1c85cbf73b0", "sighting_of_ref": "indicator--1d00a25d-c5cb-4aba-9606-0ba765fd03d1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ec22ad-949a-46f8-8b91-170601a3d890", "sighting_of_ref": "indicator--7e3a36bf-0b6b-44b5-8024-d009e2340f1f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b2c678f-f692-4f09-8d3c-46b73ca8ca02", "sighting_of_ref": "indicator--56571807-f8b0-4be2-9e76-1ad3c7c9e0b6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18df7844-9b3a-4b95-8165-8a7f48cebf55", "sighting_of_ref": "indicator--5535e054-bddc-40ac-bd37-ebee44f8bcba", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31e48ea0-f50b-4de4-b931-225011b4ead7", "sighting_of_ref": "indicator--d0e553de-2de1-4a04-af70-ccf29658c29b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--805b6c67-0119-4162-801b-46834916cb26", "sighting_of_ref": "indicator--94dc3391-182c-4192-b7ad-6b7a90c206bf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--042b372f-80fd-495f-be9f-61c7d0738669", "sighting_of_ref": "indicator--c5898463-3dc3-4c00-8c0f-ee9227bd22a4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eaa1085-b8cf-4a4c-b39a-135bf1de9315", "sighting_of_ref": "indicator--0a6d7453-9151-45f3-bfb0-7bfb870c2cbd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4be3fb6e-84e8-4815-9678-fd44afcd0ecd", "sighting_of_ref": "indicator--1a3ff6c1-a920-45f1-bdd2-ba3a6a5875b2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7b10755-7752-4907-b75f-0d30ffa0d26d", "sighting_of_ref": "indicator--01363d4b-23b0-437d-a7d9-26f9e370ac47", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37f43525-31c6-4136-80ca-bb0ec565f61b", "sighting_of_ref": "indicator--72d6da10-e800-41d8-80a1-1233e14fe779", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c6d2f35-027e-4fc5-8050-8a2eebd61171", "sighting_of_ref": "indicator--8732ec28-e74d-4fc2-b5de-14ef50fedd5a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c7c4c75-6c93-42eb-bc83-f85a33444311", "sighting_of_ref": "indicator--50a41124-5ee0-40b0-829e-ac5571164844", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f5b11ab-3e4c-44b5-8a2a-770cba4c6b7d", "sighting_of_ref": "indicator--55bf97b7-2e58-4184-9bf7-147bb4e0f3bd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a49b87eb-fb88-4b3d-a1b7-5f663e353d81", "sighting_of_ref": "indicator--619f037d-f404-4632-80c0-d60a578782b8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ddc928c-678d-4add-8b89-25a148c6ff9a", "sighting_of_ref": "indicator--25fea065-0604-4ac2-a157-051b35b47635", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9d307b0-7398-48d2-a733-89372d8a1848", "sighting_of_ref": "indicator--d2881fc7-78ec-4375-82a6-fdf90745d624", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01087e9b-3b22-4406-8a34-da2c5487958c", "sighting_of_ref": "indicator--8662d3d2-2b64-4e49-9741-8cf525f01ba9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3676438-c218-4a76-bbf7-a255f24b73e6", "sighting_of_ref": "indicator--f7f29a04-9144-4c02-9be1-2f493e6b7588", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa5424c7-31ae-4cf7-b4e9-92527c09ccd7", "sighting_of_ref": "indicator--2025cdab-ecd7-444f-80d9-efeb1f30dc36", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45477b04-21b3-4116-a526-4cdb4131b5e9", "sighting_of_ref": "indicator--c8bea919-c893-436a-99e7-4f9c5762e5d6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a4f3118-b86e-45c6-a8bc-36e1afc2cdad", "sighting_of_ref": "indicator--0c2b6bc3-ad42-464c-9bef-806bbdeff475", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4c5b363-8e10-4f2a-b4b2-369b3de1c1a4", "sighting_of_ref": "indicator--a12b0e7c-109a-487b-82f5-d6e80eea72f4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10070c82-c361-4797-9632-533d8da39cbc", "sighting_of_ref": "indicator--5e007287-f0c0-4ba0-8cbd-5a40f0e34570", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af317154-365f-427f-ba11-e629c5f14cb2", "sighting_of_ref": "indicator--bf77d7c2-9f5f-4f91-a704-8948bfcb3598", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5d4e708-75c7-4e1c-81c3-c8c297e8e119", "sighting_of_ref": "indicator--00e18389-b165-41cf-a246-fef3a51daba8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f13bbc8-3f12-4936-85db-30d5ba955d04", "sighting_of_ref": "indicator--3e909f0c-e136-4d6e-8acf-5b42a002816b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52cb6a83-5d41-4407-83be-ae9715fe668c", "sighting_of_ref": "indicator--4a304225-8869-4430-869f-a479d799d578", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb8d8481-bbbe-4641-8fe6-3dd3afbf1d59", "sighting_of_ref": "indicator--db783535-7af3-4e27-acd0-349d57d38250", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa2ef66a-d602-4679-8709-1b9634fc512e", "sighting_of_ref": "indicator--ee9fb58a-0053-4a32-a96e-0d1ccaeb9805", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--809c0590-0ea0-4312-8d7f-afa10385cbce", "sighting_of_ref": "indicator--23b282e0-2a65-4e95-bb85-41aa2339862a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bffcde97-403a-4888-98c8-1498189bfa05", "sighting_of_ref": "indicator--e7d5d459-92d4-4098-b7ab-abda975c789c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c44e08d-5410-4fdc-bcfe-732d15c4d528", "sighting_of_ref": "indicator--32e44d17-4647-4643-b859-874f47afe5ca", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5bc9d86-ff9b-4065-b4cc-e874f729d9ed", "sighting_of_ref": "indicator--14d6d0d1-197b-4189-ac91-6d08ae4be1a1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08cf4f8c-15f6-481a-a83d-e06b5fb516f3", "sighting_of_ref": "indicator--5675308b-449e-4996-9674-f0ae7dd4279e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--442e4d17-ac6b-451b-8ccc-e41f1bcf369f", "sighting_of_ref": "indicator--4d368138-dc05-45b4-88e0-2af6455613d8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7825fc09-ce81-4dd5-a54f-91d2163ee118", "sighting_of_ref": "indicator--26513036-62da-49da-82e6-2548fb363910", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45376042-ede3-48ff-b4e0-4a9bb6d2c920", "sighting_of_ref": "indicator--7564050e-2c97-4c9e-86ae-812c708a7463", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8659fcd-5e25-48d7-9722-a67dbf551748", "sighting_of_ref": "indicator--f22c092b-3d33-4f5a-987d-9674fc8f12be", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3be855b2-30ad-4490-85ad-67bd4d4dcf2f", "sighting_of_ref": "indicator--0e7ed964-31ab-48a5-a5e3-6c74504c50c6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f444b61-8f06-4ad8-9c6b-c0f6137239c5", "sighting_of_ref": "indicator--666b7ff0-7593-4d51-9380-9b0a8551ae58", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b679a33-42bf-453e-a275-71036955e51b", "sighting_of_ref": "indicator--dfe6a1dd-f40e-48e6-b8a9-07d7040d5e02", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b74ec694-ccb4-4ae1-9792-834dc34a02c0", "sighting_of_ref": "indicator--a823f4de-d207-4dee-a8a9-d45fcea482ba", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bd2fe6c-ce1e-4309-b2a7-db5956425a0a", "sighting_of_ref": "indicator--3c7dc5e7-74c2-49c7-a092-b40e65751edf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f980344-d8af-463d-9871-8bc497c73ea9", "sighting_of_ref": "indicator--aae0a940-247d-4633-82ca-663d0fb5fde5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17c52bf8-22c8-410b-b8c0-a2027ddae0c5", "sighting_of_ref": "indicator--cb280453-6cd5-42ef-bd5f-2cf06f010ad7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d49490-99f9-418f-97a8-04bb796ea249", "sighting_of_ref": "indicator--44b6d058-3bc4-48f6-bdb8-588d113e3105", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40cf80cf-31d1-4d9c-9f2a-dda7604ff87b", "sighting_of_ref": "indicator--66ad1738-098e-4ec5-a452-9a6d2425f0cb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7966de5-eff9-433f-b3f9-485eba5d9384", "sighting_of_ref": "indicator--fc4bad2c-3a76-46a3-80d9-42a324f5d07c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87b8bfbc-e3f7-40a1-97d6-2205a34cfa22", "sighting_of_ref": "indicator--d88ae17f-3c17-4dc3-a255-84f6971df779", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b05a05d6-0e43-4478-835b-0838ac47d4ff", "sighting_of_ref": "indicator--c9585431-d7ee-43ef-a933-4b09986e4659", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ac94eae-49c9-42b5-b0aa-3ea9ad35b953", "sighting_of_ref": "indicator--4c480070-a0a7-467c-9a9e-8b40c4826f96", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f54d81c3-5ef6-4972-abef-193f66246b01", "sighting_of_ref": "indicator--679d56fb-5ea4-4123-8b5c-a9930ed66849", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b58aaf-4838-4bd5-8837-92c9a2b3586c", "sighting_of_ref": "indicator--2b69e446-8901-4f0f-9ed7-7c1b1b573718", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ce5950-1c50-4afa-8369-1619a5926eca", "sighting_of_ref": "indicator--91707ee8-2258-43aa-9f40-b3279b8635be", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb57e45-5d03-4b4b-8a9e-6a6fef9dc2a7", "sighting_of_ref": "indicator--ccbabfe8-c2e6-425b-b52d-a04a5171eb9f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0424604-edb5-4a0e-a00d-9ffe0d206164", "sighting_of_ref": "indicator--d4aaa5a4-7369-4cab-a19a-c9bc744797a7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7108ede-0efb-4760-a8e1-0c25cfd9a422", "sighting_of_ref": "indicator--bf00608e-c0d3-47b0-9ebe-ac3958e05270", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aadf96a4-c8f6-4442-926f-667cb5352655", "sighting_of_ref": "indicator--7811ffa9-4730-4adb-9d3f-cf6156729ab9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--239b6bac-d906-4942-a63d-656d36aa2459", "sighting_of_ref": "indicator--1fb1f7bd-5800-474d-9f41-eb0f2270c4e5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e12aed8-0502-4073-9549-007dcf660a6f", "sighting_of_ref": "indicator--e8be5a61-f55b-406a-95ef-7aefc2390eb6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fa84ccf-a92f-48f3-b11c-be749f68b699", "sighting_of_ref": "indicator--1c0c1bc8-2b3f-44fd-8fae-b3d64c86c481", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89aa1728-8ec2-4c38-ad87-e5589d0cfe80", "sighting_of_ref": "indicator--aee19db4-4f14-4dab-9530-82a9e662986d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f0f6ffd-b65b-45f5-8aa4-0570e5de18d8", "sighting_of_ref": "indicator--3e330c76-e2ee-443f-9484-e57ecf8f6952", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a42d016-255f-40fc-afee-b0a1681c0907", "sighting_of_ref": "indicator--c171a36d-27f0-492b-ba0a-3afdeee2d5aa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ce9b2e3-2315-4ccc-83fc-2cb643245c41", "sighting_of_ref": "indicator--9e6de094-7459-46a5-896b-5939451e532a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef2f0f22-49b0-4bfb-9a10-a319977014d7", "sighting_of_ref": "indicator--28772f12-1483-485b-8aa7-01f6d900bbca", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--268531b9-474c-4e07-815a-2b708993ca64", "sighting_of_ref": "indicator--f21f906e-c43d-42ba-a285-39fbdd0dcf01", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d0af62f-ff8c-4c16-86e9-24a0a80cc9ad", "sighting_of_ref": "indicator--03db77e2-738e-4992-b983-0fa97ed46409", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff67214b-81a9-4302-8ad5-e8257b16b6cd", "sighting_of_ref": "indicator--3e2afe28-560c-477b-8e23-ed080083d36d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0483fd19-ce64-449c-bed9-e6033b1c4ce2", "sighting_of_ref": "indicator--ca3bcf95-6ef6-4fda-8895-69b4377b4b0b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ced5ee-26c0-4087-8875-0e0576d1415a", "sighting_of_ref": "indicator--c4fc9e2c-4a37-469a-b569-fbee5464c6c4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbaef093-ca63-49e0-96ec-fedb4ce3c899", "sighting_of_ref": "indicator--77ae1863-4fd4-415b-a742-83a2f301d7fc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9285f9b6-abe0-4ac7-9be2-0759f0ddbd85", "sighting_of_ref": "indicator--b32bf99e-91cb-4eb3-9756-0fba65e05c81", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd2c3bec-be1c-4657-9c19-26f0ebce57a0", "sighting_of_ref": "indicator--3a6b00e5-26d7-4dfb-8023-7bfb06fc658d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2542232-f8e7-43ad-8be8-f313b0f41d12", "sighting_of_ref": "indicator--1601650f-001d-4223-9818-c81670589986", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1ea6a7e-32bd-4ed5-9848-498dec18c243", "sighting_of_ref": "indicator--a59c284b-d0d2-4dc9-8780-efa100b8bccc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b815c227-fd42-4bd2-b37c-b1eac60b377d", "sighting_of_ref": "indicator--d9934391-e4b2-4490-aee9-44b56584c7d6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e3477ff-6ea1-48af-b119-4b4153b0c5ca", "sighting_of_ref": "indicator--5444204b-a0db-4cb4-a0a6-b542a6c1896d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07718a12-6b41-478a-bc06-cf99925a7968", "sighting_of_ref": "indicator--837a4297-3f7f-46cc-a819-82b5593e1e0b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a58b12a2-0f99-4c23-9621-530a3c5abf80", "sighting_of_ref": "indicator--525e0d2a-0c3c-4b75-8982-fe6ebd5a7d77", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5345acfe-1854-4f5c-973f-3bf4d40cc40e", "sighting_of_ref": "indicator--e06289a3-dfbf-4e26-8bf8-394639f0029d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--080e9fe2-402a-41b9-91e4-c27c0063ffe0", "sighting_of_ref": "indicator--8ca16e93-5ed7-42e7-868d-c31c304847e8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51370b5a-ca83-4a82-be3f-2fe1c9660209", "sighting_of_ref": "indicator--5ed8f1ba-8545-464f-b734-43fb3e3b6434", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2979a5d3-0070-4d39-985b-b541b6a0c234", "sighting_of_ref": "indicator--2238a10d-0677-4c04-89d1-a06a857a7684", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--308b7633-6476-49ea-9732-4ea6807dd7b8", "sighting_of_ref": "indicator--48c441cd-d735-49e5-b411-cfb66ca0dc7f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1928445-07e8-4021-996a-52190b002f7e", "sighting_of_ref": "indicator--29681a61-0f1f-4e25-a1f7-41f1a028e6dc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41705749-aacc-4745-b582-8118c96fae02", "sighting_of_ref": "indicator--9244db83-c901-4cc1-9ca3-242af5a52589", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa3a4143-cb4c-4ee0-84b8-e2686f797779", "sighting_of_ref": "indicator--1a19c8f0-4824-43be-9b89-7b36759d583a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c8846e8-39b0-4eb5-8f87-e1574ef14a18", "sighting_of_ref": "indicator--66a14a75-d62f-4e95-99c8-0565d63d14dc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c770160-a444-4f00-87e8-a8a397378320", "sighting_of_ref": "indicator--a086bcf0-35f2-4520-b536-8d31ea92b2f0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21553047-b6cc-44da-a179-105c15cd2182", "sighting_of_ref": "indicator--b0f4b3d4-379f-4b6d-b68d-90ead1c8a54b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f93c6de-405e-47f9-a472-815c99b34c45", "sighting_of_ref": "indicator--42cd8bd9-a3dd-4ce8-9b58-678c63d81e00", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c88a9e36-c17c-46c2-8107-f4bb3dbe9bbe", "sighting_of_ref": "indicator--73309408-4405-4fad-891d-e61fe633ddfd", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff7c0dad-625e-423a-836d-53bfb0c0b070", "sighting_of_ref": "indicator--beabae6c-cd2e-47ee-be84-6b0254ed6966", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e9a57b6-0c39-4638-bd7a-a92642d7af3e", "sighting_of_ref": "indicator--856e8d34-6bb7-4ebd-a08a-b10240d414d4", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c8895a-5420-4eb6-bb69-fd480f002747", "sighting_of_ref": "indicator--cf7cb122-0809-4d02-9274-08c69a77914e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eec15ef-9a85-4865-bee2-09c956c98007", "sighting_of_ref": "indicator--c875aba0-9fd1-423f-9de3-c83d8072ca02", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f44a224a-6eac-42d7-bcfa-1bca24d787e0", "sighting_of_ref": "indicator--f0e2a06e-80f0-497c-bf9c-a60bec5d101f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6899290d-6f57-47c9-b403-69cc13b0a8df", "sighting_of_ref": "indicator--fcdf19fb-1a36-4795-8353-9e56e2a9891a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--834af781-92f7-49ea-aa97-1250adb7305d", "sighting_of_ref": "indicator--6cba6697-9ddc-4b57-9cd9-7ea3205d48c9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f87c41c-af14-460a-aa31-c6a7d1cab65b", "sighting_of_ref": "indicator--1b920d94-d3c5-44d0-bc9c-d240f265d989", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e357599-ee86-4d81-94df-e3b02aaacd2a", "sighting_of_ref": "indicator--a9c49570-6450-4a95-98ff-87893e927156", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f6169e8-a5db-4a7b-9b57-f137d9e0ecbe", "sighting_of_ref": "indicator--e690e139-8b78-4c9c-9aa3-43bf53a4fdc9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8e5b8e6-e17d-4e48-9763-0b863a85bdd7", "sighting_of_ref": "indicator--0b6316a6-ba35-447c-907c-e0f9359a4ae9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dd6fa24-6711-4f5c-a22b-b8fcbf8378c3", "sighting_of_ref": "indicator--1b649761-d1a4-41fe-a7cc-24ba4c3c3c6b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa228f31-0926-4265-a52c-3c657460f69a", "sighting_of_ref": "indicator--cfbcd825-746e-490b-9921-98d3533fbdfe", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad3c9a08-c586-4cd8-89de-d928d07d5eb7", "sighting_of_ref": "indicator--ee61a514-c725-4fbd-b8fe-51e3e5b1b4d1", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d7ee5fb-8383-405d-9d50-b66c91a51d57", "sighting_of_ref": "indicator--dd422081-b3ec-4327-b894-3dfd8df7b464", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0cad8f7-5b3e-4e69-86e6-a636f145ef4e", "sighting_of_ref": "indicator--5dad77b2-ae6a-4ec1-8364-53d8bdb1d42e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fe89898-622d-4571-9baa-75693010a2c1", "sighting_of_ref": "indicator--4f70a16b-f6bf-44b9-941e-1dcd22454767", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e72cf588-6d42-4bbc-8973-862e34619bd0", "sighting_of_ref": "indicator--f88a02dc-1c62-4b35-953f-9131cf3513cc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c57f5755-4307-41eb-ab49-f2610b1bb2f7", "sighting_of_ref": "indicator--cc2b1064-b97c-48dd-a269-498cc45632f8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c52d514-2f22-4a19-a1fd-b7e30f28653e", "sighting_of_ref": "indicator--4285b385-8c38-45fc-aa4a-2350c90e5d21", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25ec5ab1-92f8-441a-a491-06ed82bf1345", "sighting_of_ref": "indicator--d3bbdd7b-130f-45d6-ab54-d04229bd40ca", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--242bc9c9-8cb5-4c26-8958-6675084aa86f", "sighting_of_ref": "indicator--ceba758d-4a7b-47e4-afc3-264bedab9f04", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--287823aa-71c7-4960-898e-3a0d77e4e526", "sighting_of_ref": "indicator--a31d6136-176e-4893-84e6-01b3c5c8c62a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac563698-0433-4bd3-a3bb-eb3907223a5a", "sighting_of_ref": "indicator--45b5c651-a9bb-4381-9ce3-337f9bfe31ed", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4464d49-dd5f-4163-b1df-af94fce46611", "sighting_of_ref": "indicator--027071a9-b3ab-4dea-ab54-e9e523d33a75", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c5f1ba4-b4b8-472e-97eb-34f799c68023", "sighting_of_ref": "indicator--2a55dfd8-00e6-4f96-ae4d-b29ef36e6c9d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0caf2bd2-7fe0-489f-8dcb-30ddb3aacd87", "sighting_of_ref": "indicator--8279e8ec-92c0-445f-924a-77a454bbb3c3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b52a91a9-a35d-487c-901f-4aa1118d46c5", "sighting_of_ref": "indicator--dae9abad-ccd7-408f-99cb-4e222322f495", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be04291d-f7a3-40e8-9a04-a4bf2919bffb", "sighting_of_ref": "indicator--ef91789a-07ab-434c-b3b8-ab78e8487b93", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb6f33d-6327-4445-8044-6f6819aa14a4", "sighting_of_ref": "indicator--f5befb8e-61b9-4840-92dc-180630d0b9cc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4366468-063d-4709-b008-55f1dfdec11c", "sighting_of_ref": "indicator--132f7cec-cbce-4e5b-a085-3990a7474480", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a931935-ee09-4f9d-b9a4-d00aba88ae47", "sighting_of_ref": "indicator--77dbb516-663a-4d40-85a7-9054c08cb31b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6188456e-4e14-4733-b4a1-86f3c1b98a19", "sighting_of_ref": "indicator--bea1b480-02af-4d78-a25e-a9527810dd58", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3f2adb3-f572-4598-9a41-95e0d48f0d43", "sighting_of_ref": "indicator--ca4faaab-da5e-4579-a3ed-7d91baf2ce5b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5920acc2-e774-4451-9612-5ec54071f5a6", "sighting_of_ref": "indicator--fd5a6cf6-4c09-482b-84f5-bddf78a2c2e4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c10e6576-5ac7-48e3-9ff8-b2d857aaaab7", "sighting_of_ref": "indicator--e57f193a-1e4e-428a-99a9-23d21706bdac", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb11870-3abb-4688-96a4-117a91a6ff35", "sighting_of_ref": "indicator--a27c570d-de3d-4824-973e-698ef23c5478", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6734b736-622a-40da-9b27-273bac2c00fd", "sighting_of_ref": "indicator--bc97c82f-88dc-42ae-81e6-556dfd98f3a0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--258859aa-01d4-48e3-9353-9a98b4e21943", "sighting_of_ref": "indicator--29bd19a3-7981-4ddf-9d78-35b90f7a6a86", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9541bf15-896a-46ea-a17e-8354bd32f647", "sighting_of_ref": "indicator--0e0c440b-1caa-4ba2-bcae-e1372db72138", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf092dbe-01f1-4269-8619-0e3e4be43fde", "sighting_of_ref": "indicator--b4b10c9d-afa1-4b55-af25-60f967382128", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--633ad34b-830e-427d-bf03-ef6b09f8e100", "sighting_of_ref": "indicator--878c789e-0e4b-43e7-b1d9-04a308611b9c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c7eb58-b88f-4fd3-94b3-8ae9cb3deda7", "sighting_of_ref": "indicator--6fc7a91c-cd2c-4e97-afa0-3e5a4f98d0a8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3582ca1c-0f13-45e1-aff9-6cb23c05f780", "sighting_of_ref": "indicator--564afb08-76ee-46fa-a5fa-fc22684e9053", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29ae2c20-83fa-4a2f-8521-73083acfae2a", "sighting_of_ref": "indicator--f83791f5-3f3a-4902-a686-fbf028bd9bd2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b966964-9cd0-4472-afaa-a7aa5ce99e27", "sighting_of_ref": "indicator--6ad406cb-9812-4435-afcb-c8d1402fd143", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a9e668-54a0-467b-98be-0fb011f0dc68", "sighting_of_ref": "indicator--c988d404-ce36-417e-8332-f6af1c97feeb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--327d3b7d-e8d8-4010-81ce-70391aa7ef60", "sighting_of_ref": "indicator--b6c627c5-1763-4de8-af7a-ea3e044fbe9b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d9e95d-1c65-4858-8fa4-6d8c07140cca", "sighting_of_ref": "indicator--1fb38763-cdb0-465d-9ca2-c468d66dac6d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf5e9958-8a67-47b6-9310-dfe98cfda34b", "sighting_of_ref": "indicator--d1d43f5b-2e8f-4df7-9e58-2ad59e12906a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05f9ac54-4304-4141-8a43-e0fb7e096bf1", "sighting_of_ref": "indicator--f73b6f12-5066-4ec0-85b2-d22663185ba0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4adafbb8-2d51-422c-8884-33e666c2f52c", "sighting_of_ref": "indicator--e276f8e1-0b82-4456-a820-651f50fd5666", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfeb2d87-b8c2-4dda-8652-5722f4293b4f", "sighting_of_ref": "indicator--e3d77a26-f0d5-40d4-869a-63e6918b7df1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e052091-3249-43eb-a88e-f35a44c8e07b", "sighting_of_ref": "indicator--835d0d2a-15e9-4c42-9b45-ece49b73601c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f180384-8ae0-425c-ae57-48e78a8944d1", "sighting_of_ref": "indicator--55f8b7c7-7ff7-435f-990e-9b7a44263b5e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba008882-4c97-4f13-bb4a-84b447004bbf", "sighting_of_ref": "indicator--0802275d-28d0-476b-86fc-0b1321fda08b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--564245b2-a4a8-45bc-a878-85c79bd5047e", "sighting_of_ref": "indicator--9a75bae1-6ca1-4f94-a79e-4ef41c9d1a24", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6793df75-b9c1-463d-83b4-7c3eb39c2c05", "sighting_of_ref": "indicator--e9239360-ed97-4fc1-a42d-b4ad821d883f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b03ba1-b485-48ed-b359-9e771904473c", "sighting_of_ref": "indicator--c98f1568-39bd-4d65-a141-12af7630e469", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--237afe10-0556-4b15-8d47-69b843937ec4", "sighting_of_ref": "indicator--5e58b4b3-953a-4259-b01b-eafc320846e4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abf82b72-7a20-4eb6-9328-ace161248c0b", "sighting_of_ref": "indicator--ce97dbd4-eee1-4cf6-a913-0adb95a91e3f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88dcca2a-bd43-41b6-b4d5-1e0897282e28", "sighting_of_ref": "indicator--ebb5726a-b25e-45f7-b167-0f7bc69baa2b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc1ed085-9105-4105-9260-8e5b6fc80e67", "sighting_of_ref": "indicator--2b8dc0ed-1434-4db4-a860-524a2beb2eab", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4031145f-78af-4afe-b0bf-4d98febf1f86", "sighting_of_ref": "indicator--d8cbdaad-8e54-402b-ba11-f03482d78930", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bdd6ea0-52eb-4188-b775-27511978f9ca", "sighting_of_ref": "indicator--c2952301-0914-4df9-9f38-e8ab9448b11b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94da5c02-7ef8-40c5-abb5-9b8f6bbb0779", "sighting_of_ref": "indicator--3c783208-f00b-4f71-9c65-64685a3d657a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb2cc395-596f-41d5-b939-e584dc997a1c", "sighting_of_ref": "indicator--c6af1ce0-dd30-496f-980a-2b19e5df6316", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e0f9971-2ae8-452d-b028-4220028908ee", "sighting_of_ref": "indicator--711a3886-6c72-4fb4-8036-b24918b4c4ae", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4732ecef-b149-4d60-9a2f-dcc6a7b469f6", "sighting_of_ref": "indicator--ebb02eab-336e-466c-a1eb-9f8dc9d2e41e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49423d8f-ce1a-4f4e-a092-5a07491f48d5", "sighting_of_ref": "indicator--6e6590df-d04c-4d0a-8107-e4015f65e7da", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf2bf27e-71a8-43be-b27b-99bd62abec61", "sighting_of_ref": "indicator--17280e7f-d9e3-4083-9e97-3150b7e104a3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b7f404-5e9b-4d40-9b4c-92966c7d46a9", "sighting_of_ref": "indicator--1aca50c0-72bc-492f-a0dd-1e28a76e0606", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d429c2a8-9ef4-493d-83e6-daa5ad69bdc4", "sighting_of_ref": "indicator--8655d9fb-e593-43a8-94d5-c8ae74be75fd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c6e83a1-a5bf-4f6e-b266-50cc7b8a1ef6", "sighting_of_ref": "indicator--24748e9b-b4de-41db-99bb-fa99bc9c39d7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f748836-5c86-4966-b1d8-472dfc7bc7fa", "sighting_of_ref": "indicator--fe7b0634-a25a-45ca-aea9-c9a6d03cee96", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9093de73-9c35-461c-972e-7aca0fa126b3", "sighting_of_ref": "indicator--8d765d53-ccde-48d9-ba09-c645c7297b8f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd867d1-068a-497e-9d05-80906f24de89", "sighting_of_ref": "indicator--df7bc055-fe67-4b40-b619-f3980ce624b7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--329f5cce-4098-438a-8010-4b5980041bec", "sighting_of_ref": "indicator--e8b4295c-8e03-4d80-a567-23d3b1e732b6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f672ee5-d74f-4a4a-a5ab-735ad23d93f9", "sighting_of_ref": "indicator--989d23f4-30b4-496f-a187-cd3567e588c2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1482d792-66a3-4a3c-861f-e0bb8349bcdc", "sighting_of_ref": "indicator--7b9f9c99-19a6-4a3d-b300-716ed5f04eb5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81a6da22-e4fa-427d-89c9-58ec39f45a29", "sighting_of_ref": "indicator--64ffe9b3-f4c2-4402-91df-7f3be796382c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1957bfe-5e07-4761-9901-9ef7d23b9650", "sighting_of_ref": "indicator--570cf845-e3b8-4598-8de8-bf5ae00f732f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49bb8ee7-151a-4fef-9fe4-daac9cb641e9", "sighting_of_ref": "indicator--ecdb7c6f-fe09-418a-a9d3-60edfe96a47a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4962fe1c-e017-44dd-b825-0f791d755d20", "sighting_of_ref": "indicator--95a0b080-f0f5-4f12-bffe-d5c861aa0f21", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f07e2785-e51c-4de4-be94-268d780e2f62", "sighting_of_ref": "indicator--c9dce8d7-0e83-4e5d-818d-296b45a5a0c3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd1c774-5263-450c-94b7-5d109bfaa420", "sighting_of_ref": "indicator--ea5ca6a3-218b-42d8-a0e4-7c0a2abfd805", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--262e3aaa-a289-47e2-b365-12a97f219ded", "sighting_of_ref": "indicator--329dadea-8970-436b-8e30-c803b32b6f01", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--072b284e-8faa-4003-a1f6-bb65903ab6ce", "sighting_of_ref": "indicator--c7b745c1-af10-4757-b759-6ee4eeacd203", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51637d05-d640-4ae1-af0d-d27e93f764a2", "sighting_of_ref": "indicator--eb12a244-3829-4210-b1d0-416bcd95e8e4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b53840-fbae-4cae-89f1-b68fb8208f72", "sighting_of_ref": "indicator--a5229aa7-67cc-4f55-96ad-88359bc8f310", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f6bb94-c8fb-4f7c-9f65-7f68be6a3b89", "sighting_of_ref": "indicator--ea2fcad7-a9b0-444a-af27-c6950e67932f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79049578-eb3c-48da-9b5b-9744525c7e5f", "sighting_of_ref": "indicator--5b5c59a4-0b1d-4fb4-81f6-a846927fc37c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23bc5d69-711f-4735-a157-c8a979f621e8", "sighting_of_ref": "indicator--b0d6d811-b63e-4a4e-813f-b725ab70946d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6a9a239-f694-4f61-bea1-d4f110ccc7b7", "sighting_of_ref": "indicator--6739c418-274e-4142-8915-45cd07a0d8d5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e76deb33-0c27-4c62-a320-2f0efac53d91", "sighting_of_ref": "indicator--76b4b369-2cb8-4182-96f1-caeaa19952e4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76adaa44-d928-4877-be5e-0747d6709450", "sighting_of_ref": "indicator--bd76a0f4-1756-4350-bb7f-ac54b23328a1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ddb230d-5d2e-4b7d-b850-499b9b4fd2f9", "sighting_of_ref": "indicator--dd7d8d78-513f-49b8-b8e7-6fa652a07bc3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd0e4ed-ec32-43b3-a99f-5b5498d4a60b", "sighting_of_ref": "indicator--013d8416-250d-4c72-a297-21e434ff4dac", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b773a58-8373-45ea-8825-1f780179f61b", "sighting_of_ref": "indicator--71c96ba3-f740-4784-a0d5-c2821f3a1191", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc5ebbcf-3f59-477c-a8ce-4ed04add1c09", "sighting_of_ref": "indicator--425c53b6-a405-40aa-bbb8-3384966c9a92", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ee95b2d-450a-48b1-a10e-6d15c7adb7ff", "sighting_of_ref": "indicator--807e2ce9-7da3-4df5-abcc-d21f76d69626", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b68741f-c07d-43fe-9689-299f3db079de", "sighting_of_ref": "indicator--4469ca9e-aa25-4ea4-8f33-d65b7f2b9df6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a329161-2929-4189-8537-c14ad60a8cb3", "sighting_of_ref": "indicator--0e19dd3e-bbd1-43a0-b4a3-3884590a792a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0302f96b-79d2-47b3-be72-319352ffa27b", "sighting_of_ref": "indicator--a9d512c2-7382-45bd-bc3d-09e788250fc3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47adddbb-9d1c-4118-a7dd-98ad6fb1776e", "sighting_of_ref": "indicator--6dca160d-f90a-4ca2-9bdd-f22d6334250b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85791216-b969-4da2-9297-6720b59fd9fe", "sighting_of_ref": "indicator--096f4fbd-d18c-452b-941e-10026fd84c1d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2073e980-0605-4e3b-9cb3-65175e08d9e7", "sighting_of_ref": "indicator--7c61c514-393c-46bc-8a04-05c10cb958d9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67600ecf-9c9f-4ad5-ac82-7d37608d7c29", "sighting_of_ref": "indicator--8571d6d0-a9bf-4d1e-992d-70f4253c02e2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0d20f39-26de-464d-a30d-05fda338af50", "sighting_of_ref": "indicator--4082ac82-58b5-4368-8ffb-ea809c0023b5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f4453d4-a6ae-4347-971a-882ab0a16de3", "sighting_of_ref": "indicator--3cd52856-d0fb-4690-86c2-57e99290d34e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3d006c1-9008-4ae5-ab06-749b8b178d8e", "sighting_of_ref": "indicator--b6c92b07-c940-4b9f-82a0-45baa943725b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf19fc7-829f-4330-ad33-4fb01bdff0d2", "sighting_of_ref": "indicator--b76d590d-ae32-4fd1-8479-79ab761de52a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--720a99b3-246b-4abe-9cdb-b26465be4fbc", "sighting_of_ref": "indicator--351489bf-4fea-464f-bd88-545dabb3b279", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ede7275-616e-47ca-a621-95d4a0495fed", "sighting_of_ref": "indicator--7f601908-8f20-440d-9993-4c74cfc56f2e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--add72244-6022-4017-8289-0ac61723ab75", "sighting_of_ref": "indicator--dd322ede-602b-458e-91f0-30c4fce294fe", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3cd8658-db8b-426e-b82e-aaf2c9f11ce5", "sighting_of_ref": "indicator--2a4144a4-c597-4f06-9884-2e281119f403", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--815e7d1f-9041-4afd-8648-1638ac0a7bff", "sighting_of_ref": "indicator--a57055c6-56fb-45c1-a16b-1f22d9e6fde1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae351569-1beb-47fc-a3d3-b915f8fcad96", "sighting_of_ref": "indicator--2109e9e7-b618-45b2-b2df-14f5e0cd8b83", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99a945da-10e5-4495-989a-5b376cf3cd82", "sighting_of_ref": "indicator--cc4e55b1-498b-4351-bc39-5982e20b8213", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e58a57b-70d2-40aa-bbd5-0c57ed3283c3", "sighting_of_ref": "indicator--2d7cbb1c-9a79-4185-84ac-8350f6746fdf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ea750d7-925d-4c57-aeda-97b18561f0ef", "sighting_of_ref": "indicator--bd096d38-8b82-4603-85d8-93a925018d4c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2836dbb-e05d-4fb0-8b6a-fee72b87af2c", "sighting_of_ref": "indicator--a8c91cff-075b-4790-9a63-682866037dff", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3f48230-d000-403d-b03a-90570f951d2a", "sighting_of_ref": "indicator--8cb2d5ea-9283-4d88-94d7-bfc8701f7190", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2566427f-f3c6-4006-af3c-25dd87e83117", "sighting_of_ref": "indicator--fd07fc8a-0fa2-409e-b331-384c9229e1c9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a09faa01-4293-484d-9a93-c841c10509f1", "sighting_of_ref": "indicator--f880bc37-1878-49a1-b396-a590fd8353e2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12bd27b0-2527-4971-8b5f-4113f85a46b5", "sighting_of_ref": "indicator--c0567c2a-06f5-4b43-b497-94111e906049", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc688251-4e49-4b51-97c3-b861c4afa970", "sighting_of_ref": "indicator--5421978b-4cb6-440b-be92-5ad96329bb20", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--104c24ba-83fc-4d24-a9ec-3185670c7b34", "sighting_of_ref": "indicator--3ac950cf-d3f7-4fe0-b816-298a08b27794", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada4a429-521c-4389-bd12-cadb5e30efe7", "sighting_of_ref": "indicator--68a4e39c-11bf-4960-a068-d03fe08b9409", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f67d79f-3c37-4bb4-a729-a24d6ade1c4f", "sighting_of_ref": "indicator--2999321e-93a5-4327-9cf0-dffb4177e07f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fbf7252-7876-4377-b4aa-71272e079919", "sighting_of_ref": "indicator--7215e8ab-e671-4fa8-840d-8a17dd6c7a90", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf10747-934e-4ffa-8a01-52a1402e699f", "sighting_of_ref": "indicator--a72db90b-214d-4db7-a0a5-899e65ff8a50", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a90ba65b-adf1-4727-b3dd-1b7a41b357df", "sighting_of_ref": "indicator--49d94899-92fe-424f-a3b1-3c7a8073a98b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--273fb13f-da98-4be1-987b-cbc593767fd3", "sighting_of_ref": "indicator--7a87a92b-c179-4420-a010-28d58f38aff9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f9a7af-5046-4277-92b3-40eb9f907002", "sighting_of_ref": "indicator--30ee4821-b228-4fa9-a8be-5b3b25be1a0e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8c6673a-af84-493c-b676-a1f8d4140709", "sighting_of_ref": "indicator--aece95b3-6d87-4b82-8bd3-1af73882cc94", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9789648-c125-4e20-a687-b239b686407d", "sighting_of_ref": "indicator--5087c4bb-e9ae-49ab-b111-44b7e7d62db6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07320ac0-afdb-4966-8c44-84b3e6d79066", "sighting_of_ref": "indicator--c5a0be4c-82a6-441a-b6ab-e44de2c895f6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bab58c3-0030-4441-90e4-b187f365e420", "sighting_of_ref": "indicator--b652314a-cffd-4365-bcc0-d978437f564e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d028b39-bb2d-4810-bd37-45d1cc22325b", "sighting_of_ref": "indicator--c8a46e89-b84f-420d-bc57-65a2ee4bda9a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4adff87-a404-4b1f-a478-1853a15c4080", "sighting_of_ref": "indicator--b989b721-2534-4770-a0ca-225bb99e91ca", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ffa351-1cb0-4bad-8383-e7929181225d", "sighting_of_ref": "indicator--d17ca992-beed-4154-9588-b9deeb8eaf3a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d7a744b-c73a-4034-9ad0-29d659c951a6", "sighting_of_ref": "indicator--962a5581-ed7b-487e-aed8-3171ae2bdd14", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--905d8610-e91e-4319-999a-ff6c644fbc76", "sighting_of_ref": "indicator--fce39a19-4b80-4805-90a4-459e0904f734", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--568b1eb0-c61e-4e45-8c43-1eb82bea99c6", "sighting_of_ref": "indicator--2d656d2c-5734-4866-8677-594328803270", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b6ac0e4-4d60-496c-99a5-52a3fd7cefcd", "sighting_of_ref": "indicator--5b2423c5-4aba-479a-b994-a1a18ee604f1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8997d439-7f92-410e-af14-b700d0c791b4", "sighting_of_ref": "indicator--1f85b5df-8e84-4862-9d57-63e9e6271340", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf8e7803-4db4-45ba-aa1d-39c79db4646b", "sighting_of_ref": "indicator--1f0d0ec8-03df-46a5-a2fb-f48559bd3ef4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--865ee167-9dd0-4926-8712-9c3648b37f67", "sighting_of_ref": "indicator--48324066-9237-4a0b-ada6-184207670b63", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--571f9975-1434-43aa-9532-be0c4d03f66e", "sighting_of_ref": "indicator--cf1f00c2-cac3-4239-84e5-5760f989da7a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf543249-6e71-43b2-afb6-9c13e73a5a44", "sighting_of_ref": "indicator--65f0c626-69ca-4a13-9ba5-f1269e1e1af7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eac2a5e-3ae1-4ac2-b711-987892434d64", "sighting_of_ref": "indicator--3fe78e7b-1021-4f91-8f0b-a90659531acc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--597f913e-e892-4c47-a04b-e33d71d6a68c", "sighting_of_ref": "indicator--8e502869-02b4-4cfb-8ff3-183ad7902539", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--767264a1-9684-49fd-bb8c-296754af0dc3", "sighting_of_ref": "indicator--80bb76c5-5ece-43b7-a922-ff921196ace5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5673b13b-9112-42a7-a46d-eb2132392f23", "sighting_of_ref": "indicator--18e9779c-72d9-44b3-8558-3061e9d37176", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f03b5c1f-3edf-49a2-9878-bc2ae0a2ed09", "sighting_of_ref": "indicator--0ad5aaed-c4f4-42a0-92b4-90f1638f99b7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--849e866c-e862-4286-82ba-69bf32417b13", "sighting_of_ref": "indicator--debe1bf1-bbaf-4d2f-b3d5-7956d31708a9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99c02528-0466-4d8f-a48e-d561dce50b83", "sighting_of_ref": "indicator--62bafc5d-b10c-45d9-b319-2178393615cc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a85ddb-0bc4-4877-a9d8-0c211941c6ef", "sighting_of_ref": "indicator--52e2d9aa-e513-4077-9eff-c8840f6af736", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc22ed3-beb9-4b6e-b33e-d8cff77e6fdd", "sighting_of_ref": "indicator--d88e7f7d-8152-4adc-ba28-d071e1976866", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d34815dc-fb3f-4ca0-8c68-91c86901a595", "sighting_of_ref": "indicator--dda34d92-8069-41ec-a4de-0b99942c715d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--981ba270-2399-4753-834d-40cc3b114c9a", "sighting_of_ref": "indicator--4ac5bfe5-678a-4c81-9052-55949121875e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb3f487e-d3ea-41d3-96a3-a504875fcced", "sighting_of_ref": "indicator--d6c215e0-74fa-4b7c-a4dd-a0ef39e648e2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--957062e7-a896-4cf6-b81f-d903bb0efc05", "sighting_of_ref": "indicator--82063005-6025-4c67-8644-f103b53372e3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a36cc94e-c37d-4d01-b115-dd9ece5c9cb4", "sighting_of_ref": "indicator--02ca0d2f-fa13-4790-ba9b-ce97e309dc07", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c941f493-5e09-4719-ad7e-2d05aabed677", "sighting_of_ref": "indicator--09ff6ccd-ea8d-4523-8955-bbaefc35575e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eb37b5d-b6c4-4963-a8da-da6f7c1dab56", "sighting_of_ref": "indicator--982f086c-fd40-4613-9504-a01a18fafd2e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f9dc146-2f47-4c6e-8995-0c3aa76b2f70", "sighting_of_ref": "indicator--71e5c3bc-094e-4d36-a89b-9f75d8ce010c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--015ee301-a918-4509-992a-6c575e400d77", "sighting_of_ref": "indicator--a06d2a72-75a6-46ad-8dd4-7b2895e43115", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83c35688-407c-47e1-a0a1-8847dc6df0a8", "sighting_of_ref": "indicator--63f46ce7-ac28-40c3-9f2e-b34202579127", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24124888-d163-4b0e-b83d-3fa98118b925", "sighting_of_ref": "indicator--2dee1c68-b675-4834-8891-f98b40b1eb5a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfa6cfc5-fbc6-4631-9c15-725c0368e445", "sighting_of_ref": "indicator--5641a1c0-59c2-4194-957e-d5d800987c67", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--864b71c4-19f8-41bb-85cf-079202dbcbed", "sighting_of_ref": "indicator--07e6a4f0-d340-47d7-9b04-e05024db1fe6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d969c3a-4bc8-4cc9-bcc6-19f46da35af2", "sighting_of_ref": "indicator--f0265aea-9c0d-4c9c-b03f-98eaf1a4bd93", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--686e149c-f7f7-4312-941e-0910c7e8f7cb", "sighting_of_ref": "indicator--ede73ef9-ac41-45be-8e1a-d211b7c51f58", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d8fd1c6-23e8-4689-948a-66e50912bf72", "sighting_of_ref": "indicator--f24b899f-7acb-4f5b-8353-83ac220d2e2d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a900eb-36ef-4eec-beb5-273e5de8ff3a", "sighting_of_ref": "indicator--7e3a08ed-5a1b-49a7-bed2-aeace54a41b0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67144617-8720-4a4b-b32f-d387fb70301b", "sighting_of_ref": "indicator--cf4d7de9-5e4b-4e1b-8d91-2aa6fecd3255", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0fbdae8-8ae5-4f8c-8424-e821eecc61a9", "sighting_of_ref": "indicator--0b1f672a-0294-4dbf-8bf2-5e4d43b65688", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5c0ef2b-2774-4821-9891-bb1a1cbc9aea", "sighting_of_ref": "indicator--b023b5e7-79c0-4a34-9add-98da7b666252", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed652bbc-f6a4-4f5c-93bc-cb75a70b6c1c", "sighting_of_ref": "indicator--deeed9f1-ad96-4cc5-b805-e81da0c1412b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9122067a-058f-4f42-bf9e-7f9d05bcfbf6", "sighting_of_ref": "indicator--d7131f64-fda1-4f85-9d98-148ec873b486", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82aa06e2-5cd9-4384-9450-240ca6af5a56", "sighting_of_ref": "indicator--ef6c55d8-a42a-4b55-bc4a-e96679c6b42f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef14c319-6367-4ceb-83da-4b2aedeb9b6f", "sighting_of_ref": "indicator--932d6ef4-2d02-4913-92c0-98fcf545a150", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebe8ebdf-9a89-4139-b3fa-97d67b0b5be4", "sighting_of_ref": "indicator--ec11b78d-f845-4406-bfa2-2d51f9060fba", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f842d95d-abf3-4891-86e0-4e13dfde3a20", "sighting_of_ref": "indicator--ea691978-c8c3-45cd-a636-9787bc73bb71", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24ecb209-8506-4865-82cc-6ee8abd6ca70", "sighting_of_ref": "indicator--432d0330-c1a8-42f1-b072-2284914aeec0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53b45ad0-ce91-4d98-a346-1963ce8c833a", "sighting_of_ref": "indicator--8eb42e95-d399-4bf1-b821-10f569de02c5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26131287-af15-4f3d-bf2c-61aadd861970", "sighting_of_ref": "indicator--d1470f8f-7478-441f-a06f-ae392bcff891", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57a0f13e-29cd-496e-bae6-3d9320d71d0a", "sighting_of_ref": "indicator--9ffe0d2e-2c24-4842-8702-5ceb4b7bc20c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ef0e257-2e54-454b-942a-4b563b2a4af9", "sighting_of_ref": "indicator--f45faa0f-05b6-4fd9-85d0-e6611b25525d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976f1843-c384-4877-90c6-81553cc44f21", "sighting_of_ref": "indicator--62a3bf34-4ddb-43e0-a149-3821ba8ff9cd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fa561e5-f32e-475d-9101-0705cc111f53", "sighting_of_ref": "indicator--258952b8-ee90-4d63-8617-0ba74ec5b707", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f91377b7-c08d-447b-82bf-54cdc0cfcd62", "sighting_of_ref": "indicator--0d87c4f0-bca8-46b7-8c16-8436e81ef380", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e745820-9274-4fb2-9590-229ddbf15734", "sighting_of_ref": "indicator--bd8cfc67-57f2-4d9e-9a63-afd8dd85e09d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0496a6ab-2490-4b4a-bd37-c7da53ffba31", "sighting_of_ref": "indicator--c8a64302-a788-40e4-9fae-7d8d5907b351", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f228601-103b-41f6-b0e0-4a2f0fb76d67", "sighting_of_ref": "indicator--168f674e-ac36-46f4-8ad9-800b7ffcd35b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--660c2965-beaa-4490-bd91-0774b5e9e72d", "sighting_of_ref": "indicator--1d7877ff-afe8-4a05-b745-e87aae1fb5cc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83392030-b5c9-4d66-aa0e-867fa0bf3fff", "sighting_of_ref": "indicator--3c2a2a3d-c396-4ef5-b6c8-d518728887c5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1e843b6-46dd-4892-8649-59d37c6fcbf9", "sighting_of_ref": "indicator--fe8fe0e7-0b62-45f8-ab57-1f2796ca8e92", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6934505-7a67-406a-aa43-bc128a3a954e", "sighting_of_ref": "indicator--71a8b54a-b224-4dce-8325-150182af1191", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eff697d5-f112-4c33-b863-aea35a6ddf30", "sighting_of_ref": "indicator--4319a1db-982a-419e-9358-049a1955701f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89451fff-8b81-4c6b-aab2-b7540eae50b4", "sighting_of_ref": "indicator--9887ab26-49a8-4041-b80a-ab681bd5d24b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--261eab70-c1c9-4ad2-9696-c76e81d0d1df", "sighting_of_ref": "indicator--f7d86483-f065-4ec9-b866-77e8644dea5f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f73854fb-2022-4884-ba62-2a3b7a3a14b4", "sighting_of_ref": "indicator--406c7dbc-df7c-4272-9e59-27382141c13b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf81e632-7338-4f3a-9aa5-a53d6cdd0bf3", "sighting_of_ref": "indicator--771f638f-1be6-4de2-9850-6cee735ef1f2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35881c5a-6958-4e88-ac74-5f65e6cca208", "sighting_of_ref": "indicator--3163d951-cba1-4c43-ad8b-02b3d65d98ff", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ba49ff9-86ef-49cc-ba45-fe054f353907", "sighting_of_ref": "indicator--4000ef9f-0870-47cb-9a3a-13abfc7c1afd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e230492-db51-4426-92ac-0588e0743c66", "sighting_of_ref": "indicator--30140f61-3579-4254-bd68-e9035e6a21ee", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--036f2657-a753-4f98-951f-51af6002df70", "sighting_of_ref": "indicator--580a4b0c-dd43-41a6-9161-01033f767283", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d7fde3-4039-42c7-800d-7ad192151343", "sighting_of_ref": "indicator--33849d1d-e72e-4064-affe-160e6fcfe74a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf97d0d6-9cdf-4871-b6fa-0570d1fa218c", "sighting_of_ref": "indicator--4e5b7a65-6ab4-468a-9d8f-57c89f6fafa5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ff54e0-02ac-4127-9a55-95e88ea06bc5", "sighting_of_ref": "indicator--788db783-6818-420f-b198-814c489d425e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b362327-f88f-4821-916b-ad362caa22c0", "sighting_of_ref": "indicator--1cf0a3d2-116f-4628-ada7-0407e2eeb612", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a784ee-3278-48b1-883a-d5cfccb7ff35", "sighting_of_ref": "indicator--1502229e-80c3-429b-8848-ca162804623a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ecd3a5f-1da2-4b5c-b498-85ff7560384d", "sighting_of_ref": "indicator--ae73764b-aeea-4ec3-9b9e-fed86461f042", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--983e7d88-dc05-4490-a173-22076e378332", "sighting_of_ref": "indicator--00b657cd-5b10-4323-a14f-31dd90da9cd5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--758ed1b7-f756-44ae-91e4-4ece7de1e2ca", "sighting_of_ref": "indicator--7051febb-b08d-4fb3-bbff-8c5dc8e137e5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd71bea-bd37-4f01-81a9-83e1ba17a2e0", "sighting_of_ref": "indicator--7fc5700c-e859-4f73-a246-59c6b0a84596", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee410d3f-bbf2-4a3a-a58d-1b0f9d9d11c7", "sighting_of_ref": "indicator--998e7e62-e30a-4830-afbd-14f5ef3fc171", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b5a3366-5dab-4c77-b718-1158427a22ee", "sighting_of_ref": "indicator--5f44ca79-d135-45da-8275-447593c00c0c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e68b97-2c57-4bde-b210-4fb3b5942c86", "sighting_of_ref": "indicator--66d990bf-9e84-4093-80b5-8847f20c57fb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0084913b-1a66-45a3-aeb0-70a937b4bcad", "sighting_of_ref": "indicator--41e65cb7-a9c1-403d-8673-c1dbe451709a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbb77026-142e-4643-b4a9-94e1bbe902d8", "sighting_of_ref": "indicator--af7ce6d1-c72e-4058-b53b-649f30281968", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a0cd4c-0761-4e6a-ae53-eb041900ac32", "sighting_of_ref": "indicator--80758f14-e92d-45eb-b22c-12204ba161a7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec6c2f0-0494-4fab-9b2e-0fbeeb9f6afc", "sighting_of_ref": "indicator--9b2e36d5-d822-4e94-ae30-0ea512193c7a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--745ba9d0-42a9-43d1-a3fb-92e7b04b44af", "sighting_of_ref": "indicator--9805f0d6-f859-43e9-ab87-f6571bb3807d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0412b6e-84c4-4b27-b566-c56767ad7310", "sighting_of_ref": "indicator--c783947c-1aa0-4659-9cc3-1dc361091085", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae68c14a-b2a4-4b8e-b800-8380605cf2e3", "sighting_of_ref": "indicator--4bfabe26-33fa-41d9-b310-462504475e62", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2815a68-6cca-4645-8571-b03214dc390e", "sighting_of_ref": "indicator--03dcff77-5fd8-4394-a215-552cfb82cf32", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e99ca5e-e743-4b84-8562-6f0a02120e4b", "sighting_of_ref": "indicator--e3fb04dd-9e02-4458-a7ce-df02dce932d8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1464eda3-36cf-475d-b53b-192016f75452", "sighting_of_ref": "indicator--f0e09a3b-8a69-4a66-9b30-ffb0545fd38c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52d4d414-ac5b-47dd-9475-c334490f907f", "sighting_of_ref": "indicator--ca6430b2-a5eb-4524-97b5-3be2d8440899", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--415fff0c-b8d4-4397-9167-648ce1543ecd", "sighting_of_ref": "indicator--50c36ebb-9d2f-4efd-aa81-b379b133b582", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--123fd7a7-9a18-4d5b-93f5-0e17dd4d1c7d", "sighting_of_ref": "indicator--fea42c2e-12f5-40d1-bb6e-12cb56b73b79", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b20e2f2-212d-433c-b9d0-0a06d3071ded", "sighting_of_ref": "indicator--2a9c7a39-d95e-4adf-ae61-1d9632618b73", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19878d76-1e88-4496-8dee-18d5a6639028", "sighting_of_ref": "indicator--564f899a-e377-43d7-af30-83254dd58a01", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6a85b7f-6352-41d3-951f-594d3d4f3286", "sighting_of_ref": "indicator--c6a8306a-7b15-422c-93a3-586dc82b2d19", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cc04168-0e08-448e-94f5-56750c671226", "sighting_of_ref": "indicator--6bce86cb-fc0c-467d-9f68-863f3100a1b9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--839864da-91db-4c3d-a6b0-0950c421546e", "sighting_of_ref": "indicator--c066d6f8-dd35-4b1e-9369-7c7bdba4053e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b98675a-5aad-4fab-aa99-80e0add9ffaa", "sighting_of_ref": "indicator--381a72b5-21c1-4d31-9a95-8f2eb7f2bcf4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbe4c377-7338-41c7-b1d7-90e0952ef258", "sighting_of_ref": "indicator--d7d76084-d4e4-4828-a808-4b11c617cfd7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f25a876-b0f4-41bc-8675-fa9219a66d0d", "sighting_of_ref": "indicator--3021ef8f-4066-494a-995a-fff51efadbff", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f184bab0-654c-4afe-89ad-b45913ba4c65", "sighting_of_ref": "indicator--f9d38fea-e43f-45eb-b667-3b5cd589e830", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50c40e93-1a45-4d1f-8b30-b27732750d78", "sighting_of_ref": "indicator--eaee223b-209b-4c11-8e8b-8e08816e3661", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ba00af8-05db-4968-b97b-456e247319a4", "sighting_of_ref": "indicator--1b2f6faa-22eb-4c3c-8234-c6abb63dfc22", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--721e3efa-b1ea-421f-bd66-c6df32b37081", "sighting_of_ref": "indicator--5402d0a8-eed9-43a9-a4b3-179eecd2a598", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fca2eeb-6c1f-4eed-a321-58aa2725d7a1", "sighting_of_ref": "indicator--7653dd86-fa6e-45f0-8df7-f0dc5ce439c6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d57ec5-2e20-46ba-a384-055504685054", "sighting_of_ref": "indicator--0428f240-eb41-44ea-b578-ca28be080059", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9737fe4-dbcf-4d7c-b476-de1fe2c3d421", "sighting_of_ref": "indicator--cbd8064e-720a-46a4-8554-86d4aedf3459", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--990d97ba-78f0-4429-964a-13660037a8e5", "sighting_of_ref": "indicator--34775ae2-aea4-477e-ac58-c3298d661b53", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--978f8abd-9add-4b40-9357-5c90ddf87116", "sighting_of_ref": "indicator--c3b4aa54-2920-4360-9f6f-fb61300bc73d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--930d259a-accf-44fc-bf5c-d87a0098d148", "sighting_of_ref": "indicator--3577aa6e-7d4e-451e-9408-4c834d0acae2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6025035-3c23-4f25-9a8b-b5f5b3f209e4", "sighting_of_ref": "indicator--ff1d2938-ee9c-4c2c-b77e-4a2d3ccc8b99", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c6ae2a5-936b-4c4c-9db4-ff96b399b823", "sighting_of_ref": "indicator--7d8cac1a-ed92-4f0a-a1be-48a7546bb5e6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24ad38aa-4806-494b-b0a3-da18050786ff", "sighting_of_ref": "indicator--f720a40f-e924-4f62-93ca-22c4675b95a3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73769005-81e8-4abc-9b7a-03e3a8020eea", "sighting_of_ref": "indicator--08b229ef-ccc1-4e2c-81e5-9fb2124515fa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42d334cd-8cda-4768-92a6-7ebed21008dc", "sighting_of_ref": "indicator--5ff287a8-b96d-4588-bb8c-9e0c9dd7fdd0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94502b06-cf15-41c1-afb6-d172fea5b2ce", "sighting_of_ref": "indicator--fa79eefe-c177-43a4-b108-ade5f19c8358", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e7da2e-6e9f-48fa-9d76-ab7114999c65", "sighting_of_ref": "indicator--1338047e-b9f3-49bd-a93e-0f65579ebe6e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0e8cc4e-f7ee-4eec-89e2-4073624821d6", "sighting_of_ref": "indicator--bf17d83e-05dc-45d4-8f2e-8e3519644596", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ccd279c-eccc-4ee8-9c1b-976f38bd5cdc", "sighting_of_ref": "indicator--925f8050-7058-4e4c-b137-caa7a863b8f5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c73069c-5927-456c-9373-1a4342aa68b5", "sighting_of_ref": "indicator--34602238-9118-487b-89e0-57b90c671190", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bf7f93e-26af-4b84-b81a-12134cd554ea", "sighting_of_ref": "indicator--28da26e6-b8cd-48bf-b6c4-31cf3b76151a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49d696c3-815d-4f7d-9cee-9ae0fea3a212", "sighting_of_ref": "indicator--5907ed63-06eb-41f4-b3b0-eed078a5d49a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3fdd5c5-981e-41c3-aba8-1ed6f478444a", "sighting_of_ref": "indicator--1cb807ca-d599-444c-96de-2fe281347ee2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52046da5-8b7d-4adb-8f22-179fc16bca1f", "sighting_of_ref": "indicator--e87c6489-b263-48e8-92d1-7382c6181f6a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a81d31fa-bc33-4d12-8c5f-b3299acfdc6b", "sighting_of_ref": "indicator--19257e11-e476-4297-a3f7-9ab96bb65c89", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5110a10c-9a39-427b-805e-d8ab5a63bc5c", "sighting_of_ref": "indicator--64948005-4b54-4949-93dc-d9fda31afff8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8442bd7b-2141-4e7c-b53f-b0ca1b35480d", "sighting_of_ref": "indicator--3d6a9e9d-0428-4809-bddb-05adb32c72cf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6650aea3-0021-480e-b9c8-a15f19763cbb", "sighting_of_ref": "indicator--65ef82ad-895a-4593-9a0a-f5a0a669eef0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e98121-04e0-4653-91b6-1ee23f1b17a9", "sighting_of_ref": "indicator--1be7a10b-f7dd-49a7-a256-5adfa4d5ab47", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e07a8ed-1e10-4c81-9f74-a85b49094c41", "sighting_of_ref": "indicator--5f9fb674-7b25-46ba-a04e-5ef39fcb1285", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1fbd7bc-6e7a-4453-9ac9-55e18480fe90", "sighting_of_ref": "indicator--f099491e-4db9-4690-8f99-c8290adac2ec", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63fff00e-e62a-497a-8269-52d46127f9e8", "sighting_of_ref": "indicator--028b1dc7-a236-4540-8fc3-6a30ceffea00", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4785500-a7ea-4bb1-8a2f-9028d329553d", "sighting_of_ref": "indicator--15f09eb3-2133-4b9c-a67f-2a30572cda11", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19b60b24-98aa-4328-b009-b5e7f14a7496", "sighting_of_ref": "indicator--071d1d42-5a62-4f89-b051-82c1180106c8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ac7f76-d5e2-450a-8da9-97c4061ee728", "sighting_of_ref": "indicator--a81dec36-578b-4aab-9cca-4050a632b4cb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7802f098-e41a-4c73-adfc-22b517c756e0", "sighting_of_ref": "indicator--4320c3d0-b90a-4575-b941-dac828e40fae", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--340f39c5-ab94-4bb7-bad4-6b3b92cf0d3a", "sighting_of_ref": "indicator--4589c903-915f-45a7-916e-7226c40eaf8e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--641b7cc8-20b5-4f4d-be99-f276187967d7", "sighting_of_ref": "indicator--a86c51a6-dc94-489f-aedf-6591d106a93a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a41e3c1-0295-4471-95ca-8b71fbc07720", "sighting_of_ref": "indicator--1c127442-2542-4e81-abe3-f372bf01c3f1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f82929-a022-4bdf-9567-45dde8246f26", "sighting_of_ref": "indicator--81d394b5-6659-4312-8ab3-1eacce7454cc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b489a86e-a55c-4277-b923-70ee38d298b6", "sighting_of_ref": "indicator--8f09b2e6-e25a-4058-8ca5-e096e1f7e5e5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e2572bc-d2c7-4c3d-b865-2c12172baa68", "sighting_of_ref": "indicator--4dc10fdc-1fb7-43b5-8e02-c89da9a6dcec", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d4eb363-8683-4c1e-aa03-4577a53e2a26", "sighting_of_ref": "indicator--243c158a-6934-4b00-bb95-4589d893312b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--485a1e31-39ab-42d0-a68e-f215dd0de8c1", "sighting_of_ref": "indicator--9cdbec6f-ab45-448c-944f-9bc17b7e84ab", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab0dc9b9-e1e2-448f-acf7-daafc61eff17", "sighting_of_ref": "indicator--b669ce2d-1b2a-43a1-983a-bbe660236e68", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84ef625c-f458-4e42-8cdf-42ced33326b7", "sighting_of_ref": "indicator--1be551c1-919f-43ac-b2a8-db0ee2391e5e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a54f88-b774-4553-a8c2-0f0f68248feb", "sighting_of_ref": "indicator--350adbef-bbf3-4ba2-a4b2-1737055cef9d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c3f8941-4ab9-49ed-9fc7-239769266e2b", "sighting_of_ref": "indicator--26d66d61-1022-4c22-9640-3f2e2032c836", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff6357fa-99e2-4a14-8abd-5450144e19d9", "sighting_of_ref": "indicator--ec5ef1d7-7dd4-4f70-af41-1998ad55b151", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a96a446-20c5-4c5a-af17-911ed2da6fee", "sighting_of_ref": "indicator--9a647d0f-514e-4592-a73a-5e1bffc46ca2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb103d99-9234-4ab5-a0ed-f4d6584fff55", "sighting_of_ref": "indicator--67dfea85-aad1-4672-be78-533d54870c6e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c94fc6-1ae2-424e-bbe2-30c2925606c5", "sighting_of_ref": "indicator--77f7e9d3-7d61-43eb-a4c1-471054d00e22", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6112ddb-5708-41bf-a1a6-4270782bc7fa", "sighting_of_ref": "indicator--6515beda-807d-4ea5-8a71-cf546125828a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deaa8e38-d45e-4810-adf8-a7e251681661", "sighting_of_ref": "indicator--c259dcda-ce10-4084-879f-ba5f6f631dda", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--838ed86d-88ec-47e1-8dd2-134637aa3f90", "sighting_of_ref": "indicator--c657da96-83f2-49b6-a73e-ada9462b49bd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--214d48c8-cb55-47b5-ac94-dbee477f667a", "sighting_of_ref": "indicator--f3cd64a4-2349-4b4e-a43c-9e183fa6bb34", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f0c9e52-2643-4d8b-bb22-54a90e736617", "sighting_of_ref": "indicator--e1b49a07-68fb-46a2-93e3-f89cb32ab684", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baffb330-bbc8-4ca4-b94b-c7d6423332db", "sighting_of_ref": "indicator--c4b0eba1-ceb2-4623-a668-e82d6def8c43", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e02989f-d0c5-429d-bccd-8eff2b6370ac", "sighting_of_ref": "indicator--3b21299e-bdcb-4ea7-9ef3-59509a0c5eb2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--912708c4-9894-457b-829a-50b7735eb117", "sighting_of_ref": "indicator--39472289-edb4-4132-9065-a44fce8a4f60", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4264246b-f3a4-49f1-a2b2-f7fe36a4acb2", "sighting_of_ref": "indicator--384edd48-cb68-43a1-be84-0df17d2a32ea", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ae00da-da10-408b-b769-a00ac5e2efdb", "sighting_of_ref": "indicator--32949a69-a55e-4812-b619-b7f9d268ce56", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec90e67-5d82-4b83-8328-bffbb91a09d0", "sighting_of_ref": "indicator--1a5ff62f-7931-4441-a702-888839e8b82b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aab4ebe-07d9-4d25-b6dc-8fb95f332b21", "sighting_of_ref": "indicator--8c7bcb20-4670-4d98-ba53-124c1c9e3072", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f08324b-2beb-406f-9960-649443d980da", "sighting_of_ref": "indicator--41f11e1d-c846-4cb6-8381-3e7cec0d3b1c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4460e2-eb11-4a8a-81ac-ffa2d5dbb3f1", "sighting_of_ref": "indicator--48af21c6-f059-4613-b0fa-7a28ca9c6c05", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e8d9357-1156-4aa1-a195-3aae8566eec4", "sighting_of_ref": "indicator--2992b81e-7fef-47e4-ae9e-3fa3a4546db4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f377fdde-87e7-42e6-a9e6-0bd551531b0d", "sighting_of_ref": "indicator--6613a0ef-83d9-4490-8478-a3ae19083a28", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c938ff6e-401a-4179-b1e4-38dbbbba5357", "sighting_of_ref": "indicator--d518c275-7535-416d-9ed7-f96910588091", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24661f67-539d-40fa-a5eb-ff1ced36c748", "sighting_of_ref": "indicator--da4647fc-be43-4200-a4d9-b47a861c99ed", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--108a2ae5-5447-40a6-9b09-0ec57badadcb", "sighting_of_ref": "indicator--87bf328b-0f57-4021-850a-d9b3048cd576", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b5dc73-99b0-4941-aeb2-ec2f9e48fe34", "sighting_of_ref": "indicator--782632ea-8473-420d-a8d7-f66f986dcd19", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df9295eb-7cd3-4495-b4c7-bb43d9c930b8", "sighting_of_ref": "indicator--1f1161f2-0db2-4f93-851e-ace6bc3b18c2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db0c6552-7bdd-4556-a13d-817f5951f89f", "sighting_of_ref": "indicator--07ee80d5-6eca-49fd-bc4a-8e345711ac8e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bffa98c-4b69-4c14-9ec6-cf6d25c9d476", "sighting_of_ref": "indicator--2c098418-392c-47a1-9014-dcf7daad5709", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e4642c-9150-4dd8-91fd-2323aac4d861", "sighting_of_ref": "indicator--ae47bd8b-6409-43e6-9386-530acb67e5b5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b79b8c29-51a6-4485-83fa-fc1832f20170", "sighting_of_ref": "indicator--2c6c6746-f1ec-449d-a54f-fb0b27e03b5c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c9a8502-0429-45ef-a7e8-ac1e8dac8863", "sighting_of_ref": "indicator--93f13f98-7932-4b84-92a9-4b4c78f40122", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8d2914b-a9f0-4956-a034-0b39f9e7a748", "sighting_of_ref": "indicator--75121ac6-deff-4772-82ad-931a3db34402", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17bc1d80-a76b-4ae6-9aae-668fd1d41cad", "sighting_of_ref": "indicator--bcdf98d5-22ed-459c-bf81-d3cc971e97e5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a8b724c-61bb-414b-ae95-46f042c93519", "sighting_of_ref": "indicator--cba3d491-7eda-46b5-9658-9a8700b8caba", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1b313ed-f8d2-4d3a-9ff7-d1b564ad0bc3", "sighting_of_ref": "indicator--678a6fad-1efa-4d69-b2d2-71e36225f453", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5422d04-6b79-4503-a639-b17817b45627", "sighting_of_ref": "indicator--f9b683b9-32c2-4f37-940e-8efd9e4b1e8f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee65f80-a312-4319-a68f-b10fddfd3f25", "sighting_of_ref": "indicator--ac56b0e0-fbd6-4c9a-af50-1d0e577c195c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4098e40-bbee-41a9-b543-69bdc38f9966", "sighting_of_ref": "indicator--f0790b7c-386c-4d7a-9c7b-fd0f43beb024", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63cef8d4-3f1f-47cf-9c75-904cf2a7d547", "sighting_of_ref": "indicator--142deae4-8be7-46c0-806e-4e09b08d2e95", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40a7992d-f567-49b9-8ea8-b2024b601ef4", "sighting_of_ref": "indicator--439fb284-d464-4484-9a8f-d2d233fd60d2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e269823-f9e1-48aa-80bb-558359719dfa", "sighting_of_ref": "indicator--82c85bb3-b78a-4c0e-9e4c-bb767ac932a8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be0754ab-54aa-489b-b0f5-89e29f3fc534", "sighting_of_ref": "indicator--ac3ad0a6-78a0-4a4b-9778-36369bc3a112", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f37dab95-f92c-458f-8660-47a44b44c0a2", "sighting_of_ref": "indicator--77c60ec6-deda-44b7-8739-de07007be741", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e6e8da7-a208-459c-9f5e-4c62807e1a7c", "sighting_of_ref": "indicator--e444bb62-7b88-4292-bf19-850e874b4ae8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b782910-804a-4973-b9aa-3fb252957e35", "sighting_of_ref": "indicator--45f89dde-e1a4-48d0-a338-2602a7e6361f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a15206-50dd-4b6d-be5c-59dece4513d9", "sighting_of_ref": "indicator--9803d313-91f2-4764-bbda-a2e08ea08f8a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f6734eb-f9a4-44e5-b2cd-c8d37c074ebf", "sighting_of_ref": "indicator--1c5dd452-4d40-4502-a2c3-e1f6bb7157e8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6bc9e76-fe8f-48ef-b226-d60184a6e038", "sighting_of_ref": "indicator--53816fc0-d2b5-4560-a4a2-7fecf2aadbbd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b3c52a-2aa8-4671-8191-951ae702f8cd", "sighting_of_ref": "indicator--c550e23f-666f-4ee5-bb6a-f3dd1d016af2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ef212aa-7a68-4d06-8794-92cc77098632", "sighting_of_ref": "indicator--394b7138-ad1a-4146-b790-16718eb552fd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c183a71-f627-4f88-8584-f117288dd9ee", "sighting_of_ref": "indicator--d22d88e8-1339-47d7-bdbe-2ceb493633bb", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--562185ea-80e3-46d2-9410-80ac56c11546", "sighting_of_ref": "indicator--5198a51a-047c-4a6b-8a27-fc24941b5a49", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05441af0-313c-4076-9dca-bc4581686cf7", "sighting_of_ref": "indicator--82d0232e-c73a-46ed-92c6-fb9c3293e7a5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc8d1b23-b383-478f-8124-b051d890319e", "sighting_of_ref": "indicator--727c0472-e39e-4830-bdc4-78c6738cf68f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35cbc0e9-095b-4534-b294-9ea7020bc6dd", "sighting_of_ref": "indicator--c88085fe-3d9f-40a0-bc72-b08b3ad41570", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca00e894-de81-4f35-8881-f6dd066218cb", "sighting_of_ref": "indicator--b4485a31-d134-41dd-890d-a7d372938a8e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--844b9319-01bc-41a8-9056-4b3d0cd12d71", "sighting_of_ref": "indicator--45598a66-4e43-4f9f-8c92-3942ece7e37c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b0e6858-ead6-404a-ac08-78893c103651", "sighting_of_ref": "indicator--cac56da2-d1b7-4099-9d50-776ca274ef41", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--752c5dc8-8510-4373-a74f-51903f512f2e", "sighting_of_ref": "indicator--dbd46462-461c-433a-91a4-7f3075a345e0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc321e4-8a99-4eb1-b2fc-024af7500530", "sighting_of_ref": "indicator--a0eba962-4088-4557-8b90-47026702105e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a665e1b6-e218-42bb-ba05-4057db959d06", "sighting_of_ref": "indicator--ef7211b7-e3c6-4eca-a0ce-323aad3f303a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ddb3e1-7d90-4d7d-aeea-078875b5801e", "sighting_of_ref": "indicator--6ff8bf48-e810-4920-8d16-4353f0c9208c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61dcad7a-342d-4da1-a48b-8c361258f5c2", "sighting_of_ref": "indicator--230806d5-993b-4e30-8105-343a9caf4bbe", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f38d83-8319-4161-885b-fbbf7aa9d39a", "sighting_of_ref": "indicator--6a67c21a-4f95-4d68-b836-e73829d4da70", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce10dbf-fb1a-4fe9-a4de-55db14e84240", "sighting_of_ref": "indicator--9d764f52-8830-47b7-adfb-628f156b122f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d9c433d-1cf3-482c-a9b6-6e76f207c162", "sighting_of_ref": "indicator--1142de34-7d53-41a9-a22f-83022eb57276", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a333aaed-4273-4b4c-9dd5-c01157f1cd80", "sighting_of_ref": "indicator--591649d2-5b86-4a79-8403-40caa1169e83", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eb4a615-a6cd-49e0-bd26-de7f500249d3", "sighting_of_ref": "indicator--7d514da2-b46b-463a-9dc2-f64371bc2d38", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be28b21-57c3-4a7e-939f-785b568a63e6", "sighting_of_ref": "indicator--6fd76ba0-928b-488e-aac3-f83963abcc5b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--563bad54-5e46-41b0-b432-0bbf49456030", "sighting_of_ref": "indicator--d44ab452-10d2-49cb-b597-35bb4679d0a7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--190d4265-8e90-409a-afd6-71eab4ddb549", "sighting_of_ref": "indicator--4d16f6f3-9263-473b-a018-dfd151b5ae38", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffa1b803-6533-472c-9928-37040a4e99e2", "sighting_of_ref": "indicator--fdcd6af3-a6e5-4c3d-9213-ca32736c1539", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c93c663c-e6ff-4542-b86e-6dfdd450564e", "sighting_of_ref": "indicator--ede91a66-0115-4ad5-9660-eb2402f1684f", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--387612ca-cd09-4b4a-bc3a-9d62201a7109", "sighting_of_ref": "indicator--9396ce1e-5c4b-4141-a084-4e8f2a650175", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--febac96b-20ab-4f59-b611-04e7daffd468", "sighting_of_ref": "indicator--73b7350d-3ff0-4525-93df-b1cf71d2d223", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d67ea0-764b-47f9-adc6-bde358fb0d98", "sighting_of_ref": "indicator--05c6b584-709d-4596-8d1b-66d83f549641", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--667f5c28-b4d8-40ca-940c-5b62113019ea", "sighting_of_ref": "indicator--38a4766b-b9fa-493a-bd1e-b544b477c0ff", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ebd31e1-8678-40ed-ae48-9f87b22d6730", "sighting_of_ref": "indicator--a5558df5-1534-4f72-b213-c488d15ce716", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0d94d9e-4028-460c-a372-786e47d0dbaf", "sighting_of_ref": "indicator--220e2f12-b5bb-47cd-a0ac-8d33c5af2a7a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0483465-44e8-4c05-b76c-5ecaf72758cd", "sighting_of_ref": "indicator--e30626e5-4f29-4022-b900-6253eb07b122", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f09a690-c21b-411e-8e57-7eb1a37850fb", "sighting_of_ref": "indicator--df6baef1-a394-42e2-a28c-e293d021b109", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17331558-0de6-4ddc-a1df-3f7e85621d4f", "sighting_of_ref": "indicator--bc9ef23a-ab42-4f9a-b7d5-207b57a8e1d5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--343ff1d3-2231-4a75-9b83-f6f565832e88", "sighting_of_ref": "indicator--762e74b9-2c07-4c50-b18e-6519befb11fa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae300720-8007-49f5-9b91-c8de8b9beee5", "sighting_of_ref": "indicator--0aee7c5f-b62d-4a16-a76c-9f0f537e9cc9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84ca84ca-f346-4f7b-9580-b58190fb0278", "sighting_of_ref": "indicator--b39123b7-12f6-425f-ad92-b5c8858a414d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e71e78-605d-47c6-a17b-609e286db908", "sighting_of_ref": "indicator--3e9075df-226f-488a-b0b0-2c386bef419e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cd779b6-fdb2-45a4-bb38-9787632dc57e", "sighting_of_ref": "indicator--02a7054d-dbea-442e-8618-391fbc7ff664", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b21aa07-8014-4d6e-a389-1b196e969e75", "sighting_of_ref": "indicator--84a5a4fe-fd5a-413a-85f9-4ce7f38805b8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54cd9a1f-a781-4d5f-bc91-2e6f4be14ac8", "sighting_of_ref": "indicator--0b1e55f9-5986-42ae-a00b-cc2d5ec64cbe", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c736454b-c6f7-49d0-9b6f-c085d3a43907", "sighting_of_ref": "indicator--e88cb2bc-8e28-48b5-82b8-363158c430da", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34812718-5a80-4b74-9506-6412c9465d49", "sighting_of_ref": "indicator--3775adac-11eb-433d-9c59-82f71c6d6437", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adfac7aa-7afc-4ecf-84e5-1d7bc0e0d827", "sighting_of_ref": "indicator--398d652f-406c-4a15-b85f-26b4e9827b06", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3784b7d-c8b1-4a3e-9546-b6fbf1aff076", "sighting_of_ref": "indicator--2254f51b-c06a-4581-9691-734b62e54ac6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06f164aa-26c1-4e19-843c-a6d62d9acf83", "sighting_of_ref": "indicator--43ea6c08-2eb2-46aa-a322-48533947a336", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e759eea3-ebc4-4470-bdaf-488facbf8164", "sighting_of_ref": "indicator--e18f7055-4a6e-4150-838e-e4f2b5c4a176", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9702695f-d431-4777-bed6-4b1db4628dc1", "sighting_of_ref": "indicator--48d0e304-17dd-43e5-afd7-62a1db8dd4eb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b5a9d64-9c42-48a7-ac45-88684a8c4fba", "sighting_of_ref": "indicator--003e349b-eafd-4801-a8c8-2165a42871f3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78506d13-a43a-434a-8a6f-d5f5671ea931", "sighting_of_ref": "indicator--56b92f20-8551-4daf-959d-b67adc3f51ed", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d73e424f-76de-456f-9411-69b42293aaf5", "sighting_of_ref": "indicator--e4480b72-6471-495b-91c4-8c5cac01a569", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a245e90b-ad20-4fa3-8d79-df26d82eaa63", "sighting_of_ref": "indicator--fa2d663c-57f3-4d79-8f6c-0714cb63d8cf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b49282e-24af-4a23-a507-2ac4d307241a", "sighting_of_ref": "indicator--e5320f53-21ae-419b-a788-739a4beab8ed", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e20295d-a96b-4158-8cee-4dc38795ef03", "sighting_of_ref": "indicator--82779567-b1c5-4601-a428-ba7a5ffd106d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3696a388-713e-4429-987a-376ddcaa9423", "sighting_of_ref": "indicator--0cee1e15-ada1-40f6-91f8-f502ee1b153c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--724138d8-5b7e-4d25-b668-d23b16e6b32e", "sighting_of_ref": "indicator--28ed7cf0-e947-4b32-9701-7610ade6e5b6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d990f62-c3ed-4586-86a0-5bc2d2940264", "sighting_of_ref": "indicator--a169a961-d0ac-4487-a9b0-54aa50140c88", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e70488a-0278-49fb-8c64-8eb537aebfaa", "sighting_of_ref": "indicator--49996252-a356-4ec9-8c98-3b65813eb262", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5df319b-35cb-4a86-858b-0192497541a8", "sighting_of_ref": "indicator--a6c31cce-ea77-49ec-be55-05cbda3337db", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--896f7413-c963-49bc-bb11-3a7938bbc546", "sighting_of_ref": "indicator--17bb5e55-7417-4552-97af-38a774cbbf3f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5da7f6d-813f-4f8b-83b5-8ad18450fb42", "sighting_of_ref": "indicator--b11dfafa-13a0-4d9c-917a-3cefe56ace74", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0d3aa8f-da77-4532-ab5c-ca1604b830ea", "sighting_of_ref": "indicator--eac4e0bf-b2d0-40c2-9d2d-04860c75ef32", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e5f8153-1487-47ff-9d5b-e3433150409f", "sighting_of_ref": "indicator--616c3762-b730-4c03-bd34-ed9f1686d91a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa015495-3b79-458d-bb7c-6f257a208125", "sighting_of_ref": "indicator--d673481b-4ea1-491c-929b-92a87d2ae300", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d403e8d-eda3-4dab-95d8-bcb86806b28f", "sighting_of_ref": "indicator--1aa79d6c-f91b-426b-afd7-2123c94ce50d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--268644aa-4374-43ff-b7f5-9e32174708d6", "sighting_of_ref": "indicator--b04b116c-59c8-46f3-9977-c10824f43711", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c7ab0b2-cec0-4a0c-ade1-5e19ac0da887", "sighting_of_ref": "indicator--62e31571-15e8-43c4-881d-409420cff54f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f59dc04-516f-4213-9f0a-7cd3d86350cb", "sighting_of_ref": "indicator--bcba78fb-4f5f-46f9-a887-fb6182f05593", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aba06c7-bcf0-4de3-b373-96f89005a987", "sighting_of_ref": "indicator--963bdda8-baf9-4faa-a734-e060c2b00d04", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--533d31d1-5520-418d-973b-0d39460034ec", "sighting_of_ref": "indicator--c4e01924-9b9f-46e3-bf61-f2223170248a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--851d4bdb-3ae4-4589-8192-8ff30dc3deee", "sighting_of_ref": "indicator--35a2628b-3a7a-42ae-a30a-e551de00ec1d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f92eac29-bfdf-4415-8367-078180ebd886", "sighting_of_ref": "indicator--e7b17cae-d06f-4ace-afc3-391c23508e48", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deaef342-b4cf-4312-ba0d-520d36afa5f7", "sighting_of_ref": "indicator--bae5e905-2567-4ef3-aab6-cb080c334376", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfa189fb-1bc6-415e-a1e1-9b2e70fe4911", "sighting_of_ref": "indicator--b5ede9b0-9aeb-4fc3-87af-1ccb5209ba96", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8d35d20-85d6-49d7-97ef-176e1c46c573", "sighting_of_ref": "indicator--44055280-a469-43d3-9575-31a63696f0da", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fca7d101-ea5f-471f-8cb8-36b6728fd3cf", "sighting_of_ref": "indicator--7acb90f0-bcf4-4493-a6a5-78e25ae2769c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4477e547-5b79-4a64-b51d-3f5641b18bd1", "sighting_of_ref": "indicator--ed9901a6-bd7e-4b40-b49e-a013a60680da", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c603c3-542d-439f-961e-c76f8321671b", "sighting_of_ref": "indicator--16741bd5-ef1c-4496-9174-337b12eb38ab", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d7924fc-abe7-4523-8be6-1891d24e5f74", "sighting_of_ref": "indicator--2fc85783-ab01-4791-baed-f8f3484e6f1a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a0f3197-9ebd-455e-b556-11d23acd6b70", "sighting_of_ref": "indicator--3f03b03b-ef41-4af9-93aa-9acb3c31b4fe", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be99e9b7-a746-4743-a81b-0abcd5b4393b", "sighting_of_ref": "indicator--0a966371-d52b-4245-b71b-562ff2677462", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4646f801-5421-4b98-8d3f-8d853fc6216e", "sighting_of_ref": "indicator--2f503968-447c-4498-9b09-ccb7a7ca9857", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f4fa304-6839-4302-9ca5-9e621a8127de", "sighting_of_ref": "indicator--b79a3031-d743-4404-bde0-ce1187329f30", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0a4aa6e-8a3e-4446-b765-5049ed53687b", "sighting_of_ref": "indicator--5450e350-bf60-4491-affd-1426569ad666", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16dbc8f7-e022-4ec3-a052-f529f7754e94", "sighting_of_ref": "indicator--fc1867ec-6e78-4abe-bdeb-b23ebacc4a2a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a19fba31-d4c9-4db1-bcaf-47ed649f08bf", "sighting_of_ref": "indicator--ba267004-3c2d-4f72-86d2-ed921b6866fa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4da1849-7d72-4a21-8d26-ff6231d882b0", "sighting_of_ref": "indicator--b40a9e4c-b7a3-4b62-b6bf-333ab25d9807", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fbf6463-2929-4f93-9dc5-a6fbfb8db193", "sighting_of_ref": "indicator--3dad5482-e6a9-44b4-b823-8170e285ac87", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--281b228b-9968-4c08-9a60-fb44cb366794", "sighting_of_ref": "indicator--233e627a-c952-47bd-963e-2cb1f41911bb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca2b2672-160a-4058-a2cf-ab5196de3b69", "sighting_of_ref": "indicator--25ae889c-d4c9-4591-8751-11f645532c8e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eef41bd-1093-478c-884e-492e2612ec23", "sighting_of_ref": "indicator--d9c1a597-5538-418f-be73-8ec61c6a3907", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--946760bc-eb58-40c5-a250-85d608bda082", "sighting_of_ref": "indicator--2e0af1db-7dd5-4476-a033-0e7b331c6664", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32b36488-bfc4-482f-8512-98db70290f30", "sighting_of_ref": "indicator--06831295-ff6a-41e7-8d9a-661c9256c15b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad6e3e1a-78a8-425b-bc71-f5083dd305ac", "sighting_of_ref": "indicator--8fd1f7d3-cd06-426a-b0a7-61dc79463749", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77bd1d93-3209-47a3-a148-7a4ffd08e346", "sighting_of_ref": "indicator--083b729e-e576-461b-98ec-aa7fccb9716a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b79b1a8-6eb1-4289-a0a0-5a3ce25e7218", "sighting_of_ref": "indicator--9c808571-fd97-4da2-a56e-472d7ff033da", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--273ac7e4-1778-4b28-89dd-0bac94e888ba", "sighting_of_ref": "indicator--01e9c4e7-7cde-4009-829b-5c57be72a043", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5437b7b5-cd52-4e2a-bec7-c6552042026a", "sighting_of_ref": "indicator--af1a9fa4-d88e-4a0b-ae25-df5caff825ce", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb153a6-68c8-4117-a412-274b1e2c5fb4", "sighting_of_ref": "indicator--4e538a53-012b-4fb0-99ff-bd5b88133cae", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d41e2c-8ce2-446c-8669-0d7a964dc6a9", "sighting_of_ref": "indicator--d22534ce-697d-4fa4-b4be-5fc9c38a4e35", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec489958-ebdf-4dcd-a078-d6c4e0fa4825", "sighting_of_ref": "indicator--7a8124d6-1cf0-40a3-92b3-299d007d49f3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b990d9c4-93ac-4bc5-98ef-f78f4cc939bf", "sighting_of_ref": "indicator--cfaf67e7-0358-4792-81f1-9b6f72214cfb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--924cec3a-e131-4cdd-9638-b267f27272f3", "sighting_of_ref": "indicator--74148b36-91b9-4ffe-8efe-9f83218eab85", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4841ed83-9fc3-413b-99f6-774d7d775fd4", "sighting_of_ref": "indicator--2269f8f5-eed1-4974-bb50-038f2aa75489", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2abdbbf-732c-4908-a70b-3cc7441e2f0f", "sighting_of_ref": "indicator--9f13eb74-29eb-44b0-b1fc-4ba6a1fbd5e2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa2395ac-7385-47da-885c-3e40e4165b81", "sighting_of_ref": "indicator--5e6509b8-2e74-4574-9568-e19f1fcb2a11", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--890e9c88-4201-47f1-a7d7-1775680df10f", "sighting_of_ref": "indicator--bcb7dd6d-0ece-4583-8d61-01c97b8851bb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80ad1a3-3bae-4129-a634-fb4e2bd0fdb3", "sighting_of_ref": "indicator--cfd3a9a7-b45c-41ec-9cdc-32b0e7275a21", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7897a105-07fc-45fd-a90d-fadc286a4d4b", "sighting_of_ref": "indicator--c1fb74d8-dd72-4a77-a423-88d111fbd1b2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ae9739b-8f54-47ff-bcbc-54c9c4e2903a", "sighting_of_ref": "indicator--e2311e27-39a8-48ec-ae9d-bd26b0d805ee", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be63b8a-9d11-465b-8deb-573b3f44b251", "sighting_of_ref": "indicator--5679b43a-6a79-4874-ad9b-15cdc7311cd9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcff587e-8945-4b9d-9a8f-ac6a6421ba34", "sighting_of_ref": "indicator--874aebf5-4472-4ed1-a82d-34887c026c28", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b682bc9b-527a-4efb-ac24-901ab3342fd7", "sighting_of_ref": "indicator--b58fd573-e140-4fda-ad71-20d987b0bd2f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80e63a22-8ed8-40c3-8a65-203fa38fe61e", "sighting_of_ref": "indicator--617cb3aa-3c6e-46da-af47-5c8ab249316b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede72d7b-7c13-4bb5-b173-9914eb20fa3b", "sighting_of_ref": "indicator--2b81c8da-e846-45d9-b7b4-f8874fcf94f6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfb39200-6ce0-430c-8cb5-d27f9b7697bd", "sighting_of_ref": "indicator--1866bd17-5158-4f6b-8bfa-b12d2afc9210", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e46b5f96-842b-4684-999a-82b1e7b5f5a6", "sighting_of_ref": "indicator--6b7f9f03-4c6d-43c6-924f-e5d470d6a149", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80c449b3-cc81-4a78-bda7-44cd8ba6b1ef", "sighting_of_ref": "indicator--139f1149-0988-426c-935e-823e3a527a8a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd3d449-a29f-442f-ae78-a22f4ab4ec5e", "sighting_of_ref": "indicator--4e95215f-db57-4422-a340-149e7d5f8e8e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f71281a-051d-4693-8f69-9c25e721f620", "sighting_of_ref": "indicator--e123b7fd-38ad-4a15-b750-a63560f84041", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b60502c4-96c5-4745-b27a-1e0fa6f64584", "sighting_of_ref": "indicator--87b0697c-c69b-4c13-82fe-77cc9be1b869", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a73344d-ea2e-4468-92e4-88223c0702b3", "sighting_of_ref": "indicator--d297d202-c9c2-46d4-8e0f-77b50a3fb636", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9124b7fb-85fc-4fc4-b726-9aa0da16b6fb", "sighting_of_ref": "indicator--2ace055b-2734-4e23-a98e-737d0c0cad9a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6f2ec66-a686-4181-a0e4-3aafb472cc68", "sighting_of_ref": "indicator--9950c575-9629-43bd-9941-cbbc8bf87047", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e584b1-6ef5-495d-bab1-5d76e344c66c", "sighting_of_ref": "indicator--cdafb3cb-24b1-42ed-a4c6-508624c67e3c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e8e23c8-717e-4a48-b19e-553f7cbbb00d", "sighting_of_ref": "indicator--0d07322f-6283-4a88-a8c5-968644fd8cb1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf3da2b-5434-4ba9-8fd9-ad765ee8df15", "sighting_of_ref": "indicator--a68186ca-26ee-4ed5-a0dd-74dfb261ddb6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb58a43-34bd-4f30-bd58-2b2209799261", "sighting_of_ref": "indicator--79c8c9a3-1d9e-4b3d-b1fd-866354b3943d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c829758-b716-4f1a-a817-a34fd1ae9906", "sighting_of_ref": "indicator--333a57b7-fb41-4865-a708-db4b3945cb68", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de451e29-9635-48b0-8dd7-df4668d9253d", "sighting_of_ref": "indicator--588302f5-68c6-44f1-ae3c-9bb273ed983b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64301f82-8e46-4b06-9fea-df0c81deb015", "sighting_of_ref": "indicator--e89fc9a6-3794-4b77-a315-29590e2fd66b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797a97bb-7edf-435b-967b-18f2cc3e9524", "sighting_of_ref": "indicator--e6658977-416b-4a9f-b8c5-0ab5621cde23", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d0cfbf-1257-4482-983c-5793e3d7ba8e", "sighting_of_ref": "indicator--f1b88f27-8ea4-4d08-9a84-cb133b43c9ee", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a93e205a-fa12-4457-b8dd-cc6b7d1a0c30", "sighting_of_ref": "indicator--8106700a-8dd3-43e9-ac84-ecb68cb5682b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da52f0b-a096-4d0c-82b4-331dde639f17", "sighting_of_ref": "indicator--cb28d366-2566-4d5b-900b-ba2ba5230484", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb9e8e73-8dac-49ac-b222-92e3aec2d7d6", "sighting_of_ref": "indicator--4160e9aa-0627-4747-b551-bf82d96eb932", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2846cce4-5f63-4802-b6ba-a289dedc204b", "sighting_of_ref": "indicator--ceaee9b8-0502-4dd7-8e53-a43e262ecce2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f175276-fdb9-485b-a889-f8d7b31c614b", "sighting_of_ref": "indicator--57b1ec71-5999-4372-a7b4-c728a58a8d74", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bcb74ec-189e-467a-893e-3fb3227b63c0", "sighting_of_ref": "indicator--eccc48d4-22dd-4a81-8e2d-2b31bbee65af", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39a383a9-82b9-47f4-b636-6a90cf24eaf8", "sighting_of_ref": "indicator--2abc8ed3-7d9e-4ddc-817e-9ffa5b0e2aa6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc2e824-2f69-4788-83ed-a1eb1c66b16e", "sighting_of_ref": "indicator--da1a2475-1cba-445c-99e1-4e4aade62cc0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--467f17b1-a9a6-4e89-a8c1-3be0ff3e0558", "sighting_of_ref": "indicator--6078881f-a01d-4a5e-9197-cbaa2f67c4e0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--826309fe-27ac-4f65-a17d-54eb4365c4eb", "sighting_of_ref": "indicator--65560cef-4e47-4122-8063-a15f4c113e7e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--691c714d-728d-466d-b008-59958bd2efb6", "sighting_of_ref": "indicator--7d2c9106-e3ea-45d6-832d-8a31e0b5ae3a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8dfd37c-c1cc-43cc-bfa6-6a59031ee25f", "sighting_of_ref": "indicator--da459753-8261-4958-a85e-b67d2be85760", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e3211c5-815a-4dc7-8280-47c6a4a193bf", "sighting_of_ref": "indicator--101e8a8a-8b79-4c29-8db9-15563f4190f1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2e339e0-14c0-40e0-a711-b3e931353649", "sighting_of_ref": "indicator--d784b06b-6f05-4bba-a8eb-c92a5c3190f0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ab1c13-bae1-464c-be00-e1085dcfd321", "sighting_of_ref": "indicator--7cc6938d-3ea2-4758-b7a2-6600924dbbaa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a494f8c-8a2f-4ffa-a96d-0c0ae25ae467", "sighting_of_ref": "indicator--44ef29f4-ece4-4b96-bab6-9275ed96c38a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a735f666-9489-42bf-b30c-7615f3dd5190", "sighting_of_ref": "indicator--4f733f8d-2841-407e-a1b6-c04e5fb481cb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c12e973-f296-4dbd-b1c9-9502f647e292", "sighting_of_ref": "indicator--630d4e3e-1f79-4c41-8c1f-111984708b0b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294e3a18-39e4-422d-b873-0ab88a41baf5", "sighting_of_ref": "indicator--316afbf9-c159-47fd-bb81-6a9726b8483f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--384daa90-98fb-4869-9c06-b8961f961228", "sighting_of_ref": "indicator--4c14b8f6-e079-4bef-ad35-ba37a5a9bf70", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--311b697a-7238-4432-a64f-b067484a8551", "sighting_of_ref": "indicator--53407952-4713-4bb9-a8f5-2f0061f2352a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac2610c-367a-489c-b8f6-e523f3b2fdd8", "sighting_of_ref": "indicator--0b9dec1d-29e1-4429-b639-cbc98380a0fc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a87063a-9f82-427d-815d-6009483e5fad", "sighting_of_ref": "indicator--c843139e-a0fd-46ab-aabf-7fb7b1126a4d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6942f48-496a-424c-8518-1487b5df8f2e", "sighting_of_ref": "indicator--7cb532e6-5c4c-4569-b2a9-7ed04ac02aae", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f54b2c13-fe20-40c4-a59c-eecfc99a5e4f", "sighting_of_ref": "indicator--3332c525-546b-4ee8-a915-fd36e3e61d86", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f99b5659-a2d8-48e4-b542-7e64d8a4276d", "sighting_of_ref": "indicator--33d1ea38-318f-4a8b-97f2-bda426bcca74", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a2cd1cf-c155-449a-969a-d84f5804f4ff", "sighting_of_ref": "indicator--9185e222-ae0f-47c0-9490-43da92b39615", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e14010b6-830a-482b-bfc3-2e1853804468", "sighting_of_ref": "indicator--15ce8e9f-1fba-42f5-a7a9-81e8ed8db7a4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf4a66e0-5f31-4b55-afec-37c0385750dc", "sighting_of_ref": "indicator--d49f7d0d-294b-41fa-aaac-f329d7c75fb6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--113bd631-3097-4e2e-8b01-82d9a72e7ac7", "sighting_of_ref": "indicator--9684962f-7fb1-4e03-bdfe-3ea58b1bf230", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ad29a1-8b39-4314-9f19-09d6ab1b3303", "sighting_of_ref": "indicator--f20ce372-0515-428c-8dd5-df77c105fa95", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450c0c92-8ac8-48ba-85c9-2cde8aaa4f15", "sighting_of_ref": "indicator--7e8001c1-d0fd-4edb-98e2-47722c3acb5a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8679d645-ed27-46c9-a29e-49a1e1a7547c", "sighting_of_ref": "indicator--ebcc1982-979b-418d-8df3-92a25d6cf1ae", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa52a13a-fbd5-4d78-a24c-c27e56245cf3", "sighting_of_ref": "indicator--3168727e-9738-4d4b-bc65-ab084e98183a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70248cbf-02ca-477e-9965-65df0784e17b", "sighting_of_ref": "indicator--37ee7cca-b95a-46d0-bda0-63c9120cae89", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a44f5d-2b05-4d03-afb3-07dbdf3aa30d", "sighting_of_ref": "indicator--dd32fedd-762a-4ba0-b042-af12b6bfbea8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb2fcf2-6beb-483f-8473-d6d926fd84b8", "sighting_of_ref": "indicator--f7a4a383-9c7e-4faa-86ff-fefe53f00fda", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c2615f9-42d4-41ef-a4fc-0cb75cea95ff", "sighting_of_ref": "indicator--bcaf150c-aac1-4b90-ab48-cf3a4ec2b8f2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2119f76-d8ab-4b9e-9537-ddbfc0948108", "sighting_of_ref": "indicator--7fcc67f4-138d-4052-a445-a7ad425e0bb8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c70673bf-1714-41ae-b2b6-c120f3e6a0c8", "sighting_of_ref": "indicator--5265b077-3a8c-4e53-9c7c-8f3c00721e3d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbeec220-c32f-4e53-abb1-6d99735a77b9", "sighting_of_ref": "indicator--c744a8ef-2679-40ef-96d4-480a3ddd75a4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57dbd912-6763-4645-bd87-571cb7a04ee1", "sighting_of_ref": "indicator--44c622b5-62b0-4b07-84b9-290db963aa09", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b358db76-d4eb-4b99-ab06-664c4211f68b", "sighting_of_ref": "indicator--7fc2770d-0ea2-4830-b17a-a2344849da28", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae77571-d36d-4118-8a4c-8cf80c98cdac", "sighting_of_ref": "indicator--512a7af4-7326-4ff4-af41-f9c7d59e5acc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f5c5a8d-8194-486d-afad-36a09696c94d", "sighting_of_ref": "indicator--d12e2543-e01c-4964-b74f-1bb209aee198", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--322f3baa-663b-4917-a383-911d78ff9f40", "sighting_of_ref": "indicator--cc2fea36-fdca-458e-9872-6149b7d13de9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e096937-5a5e-4d3c-a588-365f26a64990", "sighting_of_ref": "indicator--0fce211b-9d30-4381-ac51-a67fcdc2a030", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea298abb-b9a9-4ee9-b937-a966114c03bb", "sighting_of_ref": "indicator--0ddf5d69-fcb5-4ed9-9bb0-2917e9541a26", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fad1076f-3501-41bf-95bd-e9ec5ec763b6", "sighting_of_ref": "indicator--be380e1f-70fb-46ef-9280-96fa1375d163", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1755b3be-ff35-48c4-b3d2-c3a37824ab14", "sighting_of_ref": "indicator--53cc5794-f58e-4038-bb11-5225f1eab61a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09511052-d60a-435e-9ed6-76fadfbc70e2", "sighting_of_ref": "indicator--4a52b422-c819-4ce5-b502-2230a3aeabde", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc41dee8-446e-4816-8654-788fb0aca185", "sighting_of_ref": "indicator--4897af2e-949b-4cdc-9fcf-e444f6e6a3ee", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4936df92-56f8-4d8d-9372-55933d294a9a", "sighting_of_ref": "indicator--84b53b35-6921-45fe-ac25-6f0409912aac", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b3fcd18-a1dc-4dc0-9db3-4b29046dc985", "sighting_of_ref": "indicator--f198e727-b066-4d56-b650-c32e74f8310a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b90b3828-aa4b-4a34-9aac-5aedc626c190", "sighting_of_ref": "indicator--76ca0934-3ec0-45ce-a89a-a8ed6c06571d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec1de19f-0e95-463f-9ea2-f050e387159c", "sighting_of_ref": "indicator--d3986f33-05f7-479c-b814-743f1b41e81c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0300c54-e6d1-4247-bcdb-b259469c5911", "sighting_of_ref": "indicator--fe31e72d-3597-42b5-acd1-4a715be3b36f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fcae7c6-95da-4a06-a331-c81f0573081a", "sighting_of_ref": "indicator--de501286-81b5-4c0c-9829-806352d660d3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1965566c-7191-4213-86bc-c7d0b127cdac", "sighting_of_ref": "indicator--41ab3474-6ac6-4b95-b0d9-70af7a00fa19", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3576c34-e05b-44c0-9c43-63b7aad8a855", "sighting_of_ref": "indicator--61c70676-d9b5-4d42-80b1-7664c59804dd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc137da7-d270-4bfd-ab77-064f2898e2a8", "sighting_of_ref": "indicator--ccc215c4-d7c0-4e16-b095-994468c4717f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23bcc09-a07e-4bc4-af7c-ecb37195b1d5", "sighting_of_ref": "indicator--71ad7270-cf6a-42ed-8a8a-2fe35a911d42", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b034cb6-17ba-4b4f-919b-48334891c124", "sighting_of_ref": "indicator--017bf8a0-5810-4325-8bbb-a74cd5250da5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caa0cdb5-6bf3-4ff5-944d-65f9c16dccf3", "sighting_of_ref": "indicator--2a5e68a1-c9f1-4eb8-a64f-a9d7a72bffd3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f6952ea-a9b2-43a6-84d6-fdfc2ca49373", "sighting_of_ref": "indicator--77e555a9-39bd-46b6-b124-618a8369718e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--581537d5-e7ed-4e5a-b36b-02e3000264d2", "sighting_of_ref": "indicator--e4f09dad-56e4-412b-a033-e2ba536d99b6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ab0d368-ef6b-4bce-a8a8-bff73d677617", "sighting_of_ref": "indicator--602b2f02-b3a2-492c-933f-73b897c90e2b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--485338e5-3943-470e-a601-82f61bf928f8", "sighting_of_ref": "indicator--76a4144e-7908-4b8c-b6a0-0b8fee71c243", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6688ada-efea-4254-9dde-b28805d02d02", "sighting_of_ref": "indicator--db21885d-d70e-4c31-8ea7-4fa518bb04e3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac6362e8-2bc9-4a6a-950e-260cc4eb6ca1", "sighting_of_ref": "indicator--76c0b0a0-f890-4654-b6e4-31d50255099e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dfe78a3-67aa-49e4-afbd-7c0db74675e5", "sighting_of_ref": "indicator--c3466ab6-c251-4680-8023-1350bb773442", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db4453b8-e0e3-48d6-80db-9b9d38685b4a", "sighting_of_ref": "indicator--e1080d92-631f-4126-9d43-86eae4577fd9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c416e0ef-b085-4a96-9273-dd2df47493a5", "sighting_of_ref": "indicator--11261271-e395-489a-897f-46791fe1341f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fed1f04-f6a3-4487-a1b5-e70d6d5cf073", "sighting_of_ref": "indicator--45a5e3dc-fb7c-4e2c-96a2-e8f35d76ffec", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--835c13f7-a2b0-43bc-814a-9d308b039ccb", "sighting_of_ref": "indicator--c24332b6-4c70-464a-abc4-987c793d8f81", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71127183-3158-43ef-a645-1c9a977c4bb7", "sighting_of_ref": "indicator--51bdd1e3-d16e-49d1-a662-c6608258638a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d9fffc7-7154-4383-a9cf-60928c0fb1c6", "sighting_of_ref": "indicator--67089ed0-f70e-4b86-aebe-8d1c96a82c5c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d6e43fb-c106-4e3c-95db-74cc29c062b4", "sighting_of_ref": "indicator--5bc0e534-175c-41c9-9665-1f1638ea06ee", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f05d749f-d304-4c9e-a1f4-5061ab75fd8c", "sighting_of_ref": "indicator--51357f46-98b3-448d-8b7b-89f5e88c28b3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fe1afbc-7acb-47aa-b1e8-35f0b6766e31", "sighting_of_ref": "indicator--3409d283-1cf9-45d8-a1d4-44ae59972643", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d09274da-5f8d-4575-bd0e-b91fbfef3300", "sighting_of_ref": "indicator--11b33e05-3d2e-492b-9554-dbab105b29a6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dad2637a-e0b9-49e3-bb5b-431287f0b888", "sighting_of_ref": "indicator--43203713-8a72-4a92-bd80-49c8e9b3503d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db3fe467-a7b1-4327-b92e-52f8d41d2128", "sighting_of_ref": "indicator--021e5b5e-9eee-436d-8dec-3c38c83fa819", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27af4e7e-82e9-427f-b7ac-e21aab834661", "sighting_of_ref": "indicator--d2520434-acdc-479f-8a05-f1ce5f3400cd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--970b5ed5-4aae-4217-9e1d-394fcea400ec", "sighting_of_ref": "indicator--9892eeee-b13d-4fa5-b197-de3f41caf8c3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77f32f0b-27de-476c-a54d-41dcc62d1eb5", "sighting_of_ref": "indicator--46c3fe6f-e3a0-4aaf-a65c-0032cee857ab", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b2507f-b577-42b3-ac97-72ad0863a101", "sighting_of_ref": "indicator--b936a142-9d81-4786-9a13-d8dc0ab1d45d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8834d447-ae48-4c43-a079-59b778ca4287", "sighting_of_ref": "indicator--aeab8440-3463-4a8f-a3b2-343ca077edbf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ef50b4-9ab0-4777-9b7c-7a364659bacb", "sighting_of_ref": "indicator--66fa3dc6-4e43-4e3f-95ec-08e707d54069", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad16837b-d4af-4552-a1b4-8643ab1436ef", "sighting_of_ref": "indicator--6c8af76f-8e24-43e6-b504-b87e33509ee6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d662a280-f55f-4c1b-b012-64e3efa8d842", "sighting_of_ref": "indicator--7e823616-8d02-4114-acce-24c235bfc117", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b88c8d3-5281-415f-9959-64c48b48bc5e", "sighting_of_ref": "indicator--64b4876e-f3ef-4f01-ba49-7de01465d31d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b06c02-707b-40bf-9244-e969b07aa16c", "sighting_of_ref": "indicator--7e22355e-c547-47ad-9bdf-9feedfa39746", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bf274b4-51a7-40a5-8809-47223a3ddc56", "sighting_of_ref": "indicator--d42fbaef-0e49-4179-9fb4-73d0edb20a36", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97de2dfa-264f-4c83-9507-2379a597d210", "sighting_of_ref": "indicator--ac3d9ecf-fc56-4203-9722-222bc168e1f4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01d0cf7d-42fe-42e7-a84e-f0e4ca6453e2", "sighting_of_ref": "indicator--34acb39b-1c64-4f4d-9980-5f0aca05316a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cd4641f-38e6-4003-8eea-bfeba64b6985", "sighting_of_ref": "indicator--06ea94cd-f926-4ea8-aa40-21943b40940e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36af0c5c-1afa-4a7d-9e8c-0c8fad990932", "sighting_of_ref": "indicator--a9606764-ec52-481e-8993-fba5a54b7051", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3156d9b-99c0-43c8-859e-57896042f571", "sighting_of_ref": "indicator--7d0cff99-efe2-4eef-b99d-b94df69b15db", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9f12306-3f6c-4cee-8f65-9ae0f1ce5a0d", "sighting_of_ref": "indicator--cdfa8ef7-19a6-41f4-9545-5260a082e44d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a166825a-ebbe-4d8a-845d-67294c2d2848", "sighting_of_ref": "indicator--785f07bb-5fab-4a8d-85cb-e31781b07349", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f23936a-c90f-40f3-9690-e53f2a7755ef", "sighting_of_ref": "indicator--7f4a685c-0e26-4a4f-9835-c9772f82f90c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--102a308a-d469-4ec5-b546-53c928116503", "sighting_of_ref": "indicator--7b8e00e3-ca75-4d12-9f21-38390c34a95a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa763fcc-988f-4e5f-99da-08c28f7f06d9", "sighting_of_ref": "indicator--6f663182-717f-4849-9be3-dd8e327a4643", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a82788-15c8-4eac-aafd-01be2f72e862", "sighting_of_ref": "indicator--67c78a0a-af58-47ee-892d-6d75058264c6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--474c6a5d-2f62-408c-9bb5-caa957920d2b", "sighting_of_ref": "indicator--4c5271ef-0910-4658-9349-9ce4aa588634", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d46824ee-084e-4b50-835e-c401db832588", "sighting_of_ref": "indicator--89d4105a-3cb4-4bd3-bd39-223134ca36d8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c6dae59-34d5-4f18-9909-d3b462b14533", "sighting_of_ref": "indicator--694760a8-697f-4f88-bf99-a7b5a2a1d3ff", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f7e7b9-4cf9-426b-b750-491136579517", "sighting_of_ref": "indicator--e1ffc7a0-33be-440f-b1fc-2581e20b971b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c135bc2-44e8-40bc-93a1-8cbfd77c2cf1", "sighting_of_ref": "indicator--4bb3c9f7-ec09-4ccc-b04e-93c522e3a10f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9938d33f-085b-4cc3-8ddf-3d61d2b459da", "sighting_of_ref": "indicator--ddf275ac-7ab8-4a1c-9458-53eb4bce579c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6798c955-206a-4b16-971b-64ebad455e96", "sighting_of_ref": "indicator--68ef3a94-4af7-45c6-a1c3-af20b22e59fa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8b792d3-f4e5-4b76-a68c-3e7044f5d7fe", "sighting_of_ref": "indicator--c872db33-8c69-4267-ad68-c0002f6e7350", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd5cd89-aa55-45d6-ad9a-2af155f1ae70", "sighting_of_ref": "indicator--9cae03aa-7e49-45b5-bb45-02c3c5ec6cb8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfa387f3-cac9-4001-9463-ee37c670fb69", "sighting_of_ref": "indicator--bbd40d32-c976-4af9-9b0f-3a0f40cdf73e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b60ac5b9-c9a0-4d60-9fb3-4c525b5e0221", "sighting_of_ref": "indicator--524c69e3-22dc-43cb-b4aa-5feae8f0a715", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c91e2f34-2e2e-4b65-933e-5f02680c3a43", "sighting_of_ref": "indicator--0e734d21-8331-40ec-908c-f14975a02c79", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c303513a-45ee-4f70-9ee1-7092e2082fee", "sighting_of_ref": "indicator--4c94303a-d003-4b58-a269-2ab051d164a6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1d324ed-5cf1-45f0-a01f-b5cd40cb82b3", "sighting_of_ref": "indicator--d7bcee02-d593-4af5-a110-8de324c56a88", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d725bdd-8f05-44c0-91e9-9969bc7a4e97", "sighting_of_ref": "indicator--ece8dae9-5890-49e0-82b0-2b7a36d6eb78", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bfda218-11d9-4f12-8973-f5fba84fc91a", "sighting_of_ref": "indicator--aba043ad-33e7-4984-a4c0-5f648829ca18", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bdb6f2c-b600-4ff9-a575-6153deea776e", "sighting_of_ref": "indicator--40e90270-2c34-4291-b770-63beb95a44f0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--634745dc-5b5d-4384-8b1d-4221fc0c9a52", "sighting_of_ref": "indicator--47511c7e-e7bf-4ea9-a9ce-fed3d4995abb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d73a5d6-4651-4307-920c-0c52d664751e", "sighting_of_ref": "indicator--d4db966d-57c6-402e-9580-fe7dae135320", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22f9d9b8-e36a-498d-9e9a-124a54541f0a", "sighting_of_ref": "indicator--0bed48ed-f10f-4385-80f6-2a18a505c50c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f28ead00-9089-47a4-b9a0-5b3db8836943", "sighting_of_ref": "indicator--7fa82ae9-dc37-4bb4-ad34-677ea295278f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f9ed48-afc5-4872-8598-522368b552d8", "sighting_of_ref": "indicator--5d72059e-b033-4199-95fb-32a319358a54", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19389077-6580-485b-96a5-59aa68cf62aa", "sighting_of_ref": "indicator--9e270295-c74b-44e4-af0b-c6939d97f245", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d63eb133-1e89-4fa8-96a7-297bbf752aa4", "sighting_of_ref": "indicator--e4fe03c4-c8a8-4674-963e-5e56504da826", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dddd9a0-1a06-4ce1-a3cd-4f823a94e4da", "sighting_of_ref": "indicator--3da98591-195c-435a-93fe-5f44cb878780", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c92d4f61-4659-48d3-8aee-fceffb419385", "sighting_of_ref": "indicator--0b9a1dfa-5ff5-4971-9d7f-aa3e05ddf1ee", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d089b8b6-0d41-43c1-8166-30467bb09541", "sighting_of_ref": "indicator--1e8f508f-e0e1-4e79-9e0f-1ba5d09f08c2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf67e370-c205-4626-a944-936ded5d21e9", "sighting_of_ref": "indicator--83d6e0a9-b461-4e89-8068-28c246450fab", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2616cc6f-5d45-4291-a080-402fd1e09121", "sighting_of_ref": "indicator--075cb5f4-196c-404b-9995-bc7d049814d5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5bd169b-0f60-4ee5-8687-a0158c4b765d", "sighting_of_ref": "indicator--ce54bc58-bf39-4238-8c04-b6250ed2b823", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5afcba5-75bc-4f7b-8ee4-274e32feafaa", "sighting_of_ref": "indicator--41890826-fa45-43dc-8f0b-47bc69d8467d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e531524f-f506-45ef-94f3-4cc821294f70", "sighting_of_ref": "indicator--aa9c298d-53e4-4259-b525-f79eb77f5b12", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8c1dd8e-c88d-4e32-a803-c7a5ac0b28af", "sighting_of_ref": "indicator--1fc830de-94b7-498f-8300-75be5ea91c2a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--696e2169-c349-4df2-b6a3-5ab3586f0a04", "sighting_of_ref": "indicator--2642defc-5c9c-479d-9d12-5ef922bc3b8c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--055e119a-cc68-47d9-bab0-5c21bc369f48", "sighting_of_ref": "indicator--7ecf2100-8f53-4d91-ae42-019aee20572d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdd7f024-7e6d-487d-80ef-2f9d5d3b3a9d", "sighting_of_ref": "indicator--98b58219-2837-4f32-a362-058bc366d0b7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b38fe99a-0cfd-404f-a775-8a2814d0d554", "sighting_of_ref": "indicator--e861212d-eacb-45bb-8edc-bd85eae29f93", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ac6ba1b-0a29-440d-a2f1-90707fb85f69", "sighting_of_ref": "indicator--d48ebdf4-074f-4060-bb3d-1b32f30d17c7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d5c5909-6d79-4633-ae44-a1ad474d9de6", "sighting_of_ref": "indicator--a814e43d-2274-426f-83c8-bd6ac25cb5df", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f2c3a4-2c70-4ee6-a85f-71c53b96bde4", "sighting_of_ref": "indicator--8b03a752-c8a8-4d38-a6c8-49242ba0e0c0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12955dce-bd0b-4ea3-9b50-862e0e070643", "sighting_of_ref": "indicator--20152d53-aca8-4291-9fec-d85ff5768503", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad1cc733-a245-48c2-80b3-3136b3503282", "sighting_of_ref": "indicator--955b302b-782f-41b5-ac71-85ab2c1dbac4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b023a1d-faa0-4319-9d8b-4c167ff8afc2", "sighting_of_ref": "indicator--55a6ef81-cd4f-45f0-b183-d827d6d1261f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22223988-8b42-4332-9fc4-19c01a67fbc3", "sighting_of_ref": "indicator--f7c5c642-2b5b-4d65-9508-c70fae9f06c7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd25550e-6f7a-4fdc-b73a-4cc3d10f2666", "sighting_of_ref": "indicator--13312d52-ddd4-449b-a583-6c28803ec603", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e9c599-c9dc-4244-a1d4-acf4f5d6064d", "sighting_of_ref": "indicator--88c60e87-5a0d-42b7-9217-f88fdd681335", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c56b0a4-e988-4859-9aa0-f6392e9a9a0f", "sighting_of_ref": "indicator--de3e382f-8181-452b-b72a-513e904ca0b9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b57b15-3b22-4fb0-9db3-cabbb345e8ce", "sighting_of_ref": "indicator--7aafd9b8-ad43-467e-a914-659409a40a79", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4279c42d-5f32-464b-a60a-847ade8c638f", "sighting_of_ref": "indicator--f3cf7010-6916-4150-bf57-27ae4950c732", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8f70a40-2176-4036-90b8-5048b77c5da9", "sighting_of_ref": "indicator--ca0329ee-1446-46b9-966f-325cd0b69045", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e692dfec-4051-4704-9c0f-c8ea3c1e8b34", "sighting_of_ref": "indicator--65981508-0374-4c03-83ec-24b716910322", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03b52156-3be1-4b30-8a1d-335700d80974", "sighting_of_ref": "indicator--60f4600a-126d-4f1f-9309-d434fcd0cfd5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45d1008f-21f9-4a72-9cd0-b0863a3ad1c4", "sighting_of_ref": "indicator--415e20bc-945f-4f19-8ba6-2f94692818f3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d5854de-8a4c-49aa-a6e8-59e710071768", "sighting_of_ref": "indicator--7f1d5306-6a93-4a74-bffd-11030ee7c041", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--770ff53e-36a8-46be-9f08-0302aba8fd3e", "sighting_of_ref": "indicator--d519fdf5-a005-4768-9e25-98d13e078ae3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ebde11-018c-4a0e-857f-711e2ca34c3e", "sighting_of_ref": "indicator--a190eb1e-e310-4e57-a477-6f6bdcd3bfd6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--823e67db-aafe-4da2-9716-377939edf9ef", "sighting_of_ref": "indicator--322ceff1-5844-413c-b681-6ee402f9f8f1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad818b03-fa8f-41d0-8ef7-cdf0e82e9945", "sighting_of_ref": "indicator--9683b839-67d7-45c2-b11d-5d384b1230ba", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--243b321a-10c1-44c5-9a9e-a77f5b095540", "sighting_of_ref": "indicator--b5ba5280-0cb8-4007-86d7-1e1b07f2f655", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b6fa59-3caf-4164-9d73-633416288c3a", "sighting_of_ref": "indicator--b64ea191-8a05-42e0-93b9-f8c572962f0e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d0c14ed-8db0-47a8-b05a-b54ab5f1330b", "sighting_of_ref": "indicator--fe19d7c4-e251-45c3-afda-23d5665bd481", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b42a1efd-dfb6-4fc6-8b3f-ccabaea3474f", "sighting_of_ref": "indicator--6fedd4be-2733-4638-8c99-98ab1cdb8e29", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4f969e6-e63e-4a42-a37f-3017de65b5eb", "sighting_of_ref": "indicator--6792b4ff-7da6-436c-8042-edf76083ae00", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bbc1d78-ba6c-4d73-80d6-b86d8097783a", "sighting_of_ref": "indicator--6e07dea8-6aae-4df0-9738-e54623dbcf99", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--554ccce8-9145-4796-9b21-5fed590f641c", "sighting_of_ref": "indicator--774c3e30-d066-41b1-907e-cc04218eb7c3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--566efb6b-ee66-40e9-aa6f-486276a849df", "sighting_of_ref": "indicator--95564102-a6b2-4647-b63c-b487635eeb34", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e7723ef-b15d-479a-8728-1af098f977c2", "sighting_of_ref": "indicator--371c1978-7636-41d2-9bf6-d57d24c850b6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74a2fb4e-5d06-43d6-ac31-294408c1aa9c", "sighting_of_ref": "indicator--9f915f4d-2943-4e7b-8da6-b97f0470cd1a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f42abcc4-aae9-4322-91d5-e1fe1ae26021", "sighting_of_ref": "indicator--b02f59e1-d425-4470-aafe-29ecd2c95fd0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--833bf665-82c4-4817-b1cc-7c338eaee4c6", "sighting_of_ref": "indicator--04eaedb0-614f-4d45-9518-19e1e74e723c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1eb0a72-719d-4e6b-8b37-cc090e9cfc9c", "sighting_of_ref": "indicator--127efb70-0b3a-48bb-8b43-76fcd182b7bc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db076417-61c4-4813-b637-f1ebd5b9fa41", "sighting_of_ref": "indicator--7956e35d-9e43-4819-baf5-268bfc955bbc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76bb50c5-8ffc-4a3a-94e7-f9ce2c97b604", "sighting_of_ref": "indicator--141aaab9-cc89-4200-af00-0440483bf896", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--def9dd46-9abe-49a0-afd4-0428bc5199a7", "sighting_of_ref": "indicator--8ec6fc0a-6901-41af-85ef-04acf71a74f4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c4edec-bf0a-4692-9944-ed8e49529f82", "sighting_of_ref": "indicator--d13222fc-5a18-42d2-aee8-656370a2b1e4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cf38689-742e-4a70-81ff-3a64ade419cb", "sighting_of_ref": "indicator--8110738d-ed73-488a-a5b2-66cc486bb01f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c440d8f3-a7c0-434a-992f-d8390029a1e8", "sighting_of_ref": "indicator--5784aebf-89a6-409f-a2a6-ba871534f57f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8660a990-0515-440a-a6d4-daf2820c1c04", "sighting_of_ref": "indicator--976e7070-d4b4-481a-a812-1511d91d5f72", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b522d60f-146c-41f7-8a57-971ba7199304", "sighting_of_ref": "indicator--1b155959-0e05-439a-8695-3a1adc9e69fc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17dc3a0e-6d59-4c30-a7c6-9b3db65f3c68", "sighting_of_ref": "indicator--a3b1838c-abd4-4401-84f8-25b52e1875da", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e73f477c-2f9f-403e-9835-2fc39fec5ab6", "sighting_of_ref": "indicator--45e65a68-9136-4d52-9d14-9e575d0c1aa8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac6d3fb-980d-4e42-938e-f5ce729f5397", "sighting_of_ref": "indicator--034f5454-103c-46c0-ac87-b9f592a8bb8f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b93f31e7-b454-49f5-a69d-e3059ca85db5", "sighting_of_ref": "indicator--eb46df7a-52de-4582-bb64-4c09c5f4048c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b13e19e-cb8a-4c4c-91ca-557d2b7147ae", "sighting_of_ref": "indicator--90a9126c-6a3e-443a-bd7e-650e462da461", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2f3674e-f3f2-457d-9361-b3770b4c2569", "sighting_of_ref": "indicator--fbd49b9b-4512-41f3-97b4-0cd0cd02efc8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d018d0fe-07b0-4605-83ff-c63ca7a62502", "sighting_of_ref": "indicator--6cd0be71-89af-461d-81ab-47f250fc1e66", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--363e503b-eb1f-4769-8af7-d16014bacd26", "sighting_of_ref": "indicator--b6f518d4-b9c1-4ba8-8c43-66e9e1642aa2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dafd123-737e-44a1-9f4e-e7925ae88ea6", "sighting_of_ref": "indicator--a0e16294-e80b-4a0a-ba0c-651310ac074c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d631850d-3c3b-4b81-bb31-1dd3c66708da", "sighting_of_ref": "indicator--4689e68b-316d-4654-bb19-6739bd9433a3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c796e4f-35ca-4bb8-bac6-52f9c4b093a6", "sighting_of_ref": "indicator--27cf479e-5ab8-41df-aafd-f0ace16a414b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55dc36da-c6ce-41a7-9f8f-5118faba5b0b", "sighting_of_ref": "indicator--2325a048-95c9-44ec-9437-14c20d298d86", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b42a533-09ee-4bf4-a711-a78aa881341c", "sighting_of_ref": "indicator--57fa9544-95e0-4108-a9ed-eea9b9edc59b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c45bd178-91d7-418e-b46e-af2c75c83c93", "sighting_of_ref": "indicator--39d60c91-6012-40b3-adb7-62f827fead45", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--627bf079-1688-4148-98e1-0b54ba962f57", "sighting_of_ref": "indicator--763d7613-e8aa-4dca-9b56-a5bfa2508a75", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ed14317-b996-4cc3-9831-bdb404432eaf", "sighting_of_ref": "indicator--ffc08c54-c05c-4677-9999-f30d0c39a929", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aeea9d1-e3f6-42ed-87c6-c99f370f7698", "sighting_of_ref": "indicator--bf4cc2f1-b477-4c2e-8d11-496412b61587", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1369afa1-533c-49d1-b4c3-ed106df396ce", "sighting_of_ref": "indicator--4604f467-cdc7-4827-8d9d-1b8a61ab6f28", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ab359c7-8ed3-4497-ba76-d15a97f837de", "sighting_of_ref": "indicator--f48e6ba0-9242-4fec-953e-5b69be8b9900", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e7314ba-7581-4521-8cec-43fc9495d865", "sighting_of_ref": "indicator--ce7c36db-8233-40f6-ab18-2cf40fc872f3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17978f67-a3ed-4bbc-8ae2-c024f42b7a12", "sighting_of_ref": "indicator--64d56679-32c4-47d3-88be-bd13b7742204", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b3dc02-d990-4225-9249-4bde3980717d", "sighting_of_ref": "indicator--fedf548e-7fa9-41c9-8047-b591d0b5b2e7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--997c7eb0-09a9-4f38-b3e6-94f72f5bf266", "sighting_of_ref": "indicator--b1e0e776-9882-4ab7-ad88-5bfcf07a2372", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bb3d58f-c03e-4945-8cf0-eaafea1f5c8c", "sighting_of_ref": "indicator--0f2afa6f-37ba-4380-92cb-78455c5d2cd1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--820273fc-2b0a-4e25-9017-b7df8987349d", "sighting_of_ref": "indicator--138d57b0-e9df-4c2c-be70-8617c762c51c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca8a3b09-ef5b-4ace-a3b0-6ed251d6f81a", "sighting_of_ref": "indicator--97400624-e327-48c1-9d94-b8464a7b5c5f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48a36b7a-9ac4-4017-8195-6583517b14e2", "sighting_of_ref": "indicator--491b9e6a-f62d-48e1-a221-ca9e92ab2052", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28be460e-b0b8-4f1f-9157-4e72897a36ce", "sighting_of_ref": "indicator--8687f4f7-ef64-42eb-a09d-b491c6516ffc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--195e0618-d704-4d18-a82e-901461f3495b", "sighting_of_ref": "indicator--10fe1ef0-52d5-42b8-bc23-3477337c7255", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c1e21ec-3d32-4d38-bec2-e9915caa7ec5", "sighting_of_ref": "indicator--620b6125-e272-40ab-a76c-f10b2a84613f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82f5cb22-129b-4ba9-8e69-a82e933e10c6", "sighting_of_ref": "indicator--d7a0e7f4-483f-4481-8490-394cf956743a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70cdbdad-aaa2-4b23-ace0-c07be160d74d", "sighting_of_ref": "indicator--4484bcc3-a152-46b6-b4eb-3972e7b5e039", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76af6bc2-767e-4e0f-a4b6-100c4c94689b", "sighting_of_ref": "indicator--c2688805-cec9-482d-92dc-32595d6d0cf9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b96c330-3985-405f-a7ce-0b6912464ad7", "sighting_of_ref": "indicator--bebf43a7-0391-40d7-84bd-f9017344a762", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a685cea4-5568-47e3-ac0c-28199a8c8e7d", "sighting_of_ref": "indicator--de037334-9122-4233-9e35-86f9c0c55aba", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b76919d3-3949-4cb4-8551-23b3de572759", "sighting_of_ref": "indicator--f170489c-0fe1-4ab8-bac9-f8323e8127c2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b2f211-2330-40e2-adf8-59964f8904c6", "sighting_of_ref": "indicator--de5cf047-6c5c-48d9-93f6-050feb3ed69d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c86f31ab-9182-4563-b75b-604b319a37a0", "sighting_of_ref": "indicator--03ab0724-4bdb-47d6-b597-a62af46bde23", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb657463-dfdb-443e-8d84-37e2767a7d57", "sighting_of_ref": "indicator--26b6dcf1-79b4-4807-bac9-5c38d2623f89", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a366a143-d859-43bf-9084-322f1ed802d7", "sighting_of_ref": "indicator--47c40766-34ef-47c3-994c-faf819da1a72", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--972bf1d7-aa1d-40a1-832c-c74a22a860d7", "sighting_of_ref": "indicator--d3d07b78-6602-4da1-84c2-1cd0b697dd8a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80b9966-702e-4aa6-9de8-c2fdf7a0da17", "sighting_of_ref": "indicator--7cb798c8-cd53-4044-bac5-09c9ced8a2c1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53825137-14ba-4131-af72-f483d692b113", "sighting_of_ref": "indicator--2452fa58-c746-42ce-ab0b-3ee718a4018d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f14b9697-e8a8-4c1e-85bb-b6e2c299d4ba", "sighting_of_ref": "indicator--79d2bc31-29ef-41a1-97a4-9f9924de63dc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e90a322-4966-417b-abab-f8ad47d9952f", "sighting_of_ref": "indicator--70180d5b-ed5f-4f90-a5e8-3aaecd84381e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6986d6b2-c33b-46f5-8ea6-630ea40ece66", "sighting_of_ref": "indicator--d6862c4f-0634-4c8e-9eaf-6928072fa764", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cccf97e2-7ad9-47c0-91f4-744081a1fd71", "sighting_of_ref": "indicator--11963f78-c00c-4f09-99c7-be2b439aa1df", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ddcf19-9ab2-4c0e-97e0-5dd1746ff649", "sighting_of_ref": "indicator--24bb3bcc-7aa3-491c-9795-43dc313fc97f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa15a8b-6af0-4c2c-bf48-c02c386d54f2", "sighting_of_ref": "indicator--6245780e-fea3-4802-b9f2-0180b7799f89", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bcd0ebf-c55b-4973-a1e5-0c641259b8b6", "sighting_of_ref": "indicator--7d497f9c-13bf-4cfd-893e-963b56a06de9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97989ac7-395e-455e-956e-6a5f4ff22145", "sighting_of_ref": "indicator--1661db46-4353-4107-b44b-a6ad07828c50", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a87f8e1-ab0c-481e-bc38-d4a983633f20", "sighting_of_ref": "indicator--5cbec062-33e1-45e8-a4a1-2e02d1f20f83", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9c15540-86e4-488f-a694-c105c8ea6805", "sighting_of_ref": "indicator--a7316bb4-e5e0-460f-a2fd-b045d49ef115", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1910fbe0-f13f-4346-b58c-ecc380b12d83", "sighting_of_ref": "indicator--da53f05a-d7f8-4ec5-ae3c-14f9cb244c8b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a3a23f7-03be-4e24-a75d-7ed51dd7a221", "sighting_of_ref": "indicator--af0e7438-f98e-4af6-86f3-d036b2eaabce", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--317f0a0c-d768-4d13-b640-e169e2fefc24", "sighting_of_ref": "indicator--b2acbd2a-fef4-4d73-a6b5-6fe489427b2a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d56ef8c1-f8e3-4786-b9f6-5afc99e18cf0", "sighting_of_ref": "indicator--7b98b53a-0512-4c3f-a2fe-22ca9a2a9c72", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--967ae2e3-e05a-464c-8974-d8347f524407", "sighting_of_ref": "indicator--3bbed06d-afab-4827-897c-d75e136823ad", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cb1dba6-4be3-4c34-b659-212e87645dd0", "sighting_of_ref": "indicator--0f6944b1-529e-4459-a67e-842a1de2f752", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1367970a-8fa5-43ef-b158-4b3b6842e544", "sighting_of_ref": "indicator--69993908-3eea-4f55-a5a1-6e7ca55457c8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da214d02-9c7d-486b-b8de-a39536b26b76", "sighting_of_ref": "indicator--4f929b21-6d3f-4099-8765-e4ce8a946f2e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2546d96-fca6-402d-a59e-6037c60bc06c", "sighting_of_ref": "indicator--dfee156d-5a8b-4ed4-9b6d-b693ee995922", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfb99cd8-e87e-4655-bbf5-109cf78c42de", "sighting_of_ref": "indicator--f9d4b950-ccaa-4de9-a644-6814f9705b84", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d24416-ee6b-40b4-998a-e57aa1e753a6", "sighting_of_ref": "indicator--10e3845f-1d3b-414e-861a-56ebc67196a1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf0edb1f-b92b-4054-b98e-cabae6f9c730", "sighting_of_ref": "indicator--f8a5ef28-5fa8-41d6-b087-c39b5f438a4d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0ddff38-d0d1-458e-8ad8-4db3154b8a4e", "sighting_of_ref": "indicator--00b48708-017a-445b-b714-20aa99ecb373", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea1f6db2-5ecc-499c-a1d2-02edeb995dc1", "sighting_of_ref": "indicator--15a941dd-87cf-411b-9743-4358192de7e4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--747ce1ff-ba92-4a58-aa75-8120dd73c81b", "sighting_of_ref": "indicator--542ebf43-6493-435f-9fa0-414bc1f338b3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1003fa4-b974-439d-8941-c2a9d71bf356", "sighting_of_ref": "indicator--c4f73c23-ccab-4092-a8d5-7343746df76e", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a917d584-9e59-4831-af87-8a2dcdc74acb", "sighting_of_ref": "indicator--3905b495-7db2-4c2a-b477-2aaff47d2578", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78483a2b-8eec-4e43-9386-8e8aaef22ea6", "sighting_of_ref": "indicator--8c44ca6e-7d67-4bf6-8487-94fba2577cbc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8fe83eb-357b-4c4b-bd94-5ee97ac1492d", "sighting_of_ref": "indicator--1ee330d0-ee3b-471f-a232-fb0e231bbdc7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--453edda9-8131-43ef-89f5-17fee544da27", "sighting_of_ref": "indicator--8fa700be-a0f3-48b0-97cc-4abbd30396db", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8501aa17-f235-4be7-b8c0-e32e03a43d5e", "sighting_of_ref": "indicator--0d9c9785-2f4d-4390-a8ba-3c7a7fc8a8f0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aa159c0-c2bd-46e0-a991-81faedca6468", "sighting_of_ref": "indicator--a5ded417-418b-4897-9fe6-eb94aaec0076", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2f315b6-3200-4f45-affd-793b55f393c5", "sighting_of_ref": "indicator--122705f2-4555-401d-8735-a50c7c7adb87", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c48842d-51a4-46bc-9f69-ce0ec8219f1e", "sighting_of_ref": "indicator--c54c0e88-9fbf-46a0-9d88-2599fffe48db", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fbc98d2-9dc8-406c-b3f3-61d1966b2fd2", "sighting_of_ref": "indicator--0d84484b-062b-4e1c-b0b0-c298bb414ff4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33c4f65e-63d3-4d23-8434-825ffdbc277d", "sighting_of_ref": "indicator--05419f00-a7d6-4c38-9930-1afc3ad32bc1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c2d588-c285-4f56-9a9d-5dbcc4e5611b", "sighting_of_ref": "indicator--c793e262-7f85-4ea4-a607-0f5ac4c8c807", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c25ce767-6844-4321-b0cc-1d13ee5242ae", "sighting_of_ref": "indicator--07941ba2-c10e-4413-a8c0-1c585267403f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5341f27-410b-426a-afe9-be0633b3809a", "sighting_of_ref": "indicator--39c91614-545d-4538-87b1-84b4814393f2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a17fc8bb-5dde-471e-a3f1-4f71fd457fac", "sighting_of_ref": "indicator--88197260-e192-4e5a-95d4-5356ac9fb1b4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--912ae15e-a2c8-4af0-9a84-d325315459d4", "sighting_of_ref": "indicator--879d07ba-baed-41fc-a90f-c7be1dd9334a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56220365-dbe5-4d15-86ae-fa8a1499f4e2", "sighting_of_ref": "indicator--f56defe4-b4e9-450c-9849-042c0b223bc8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de7c0d42-3f77-4b19-b07c-e85c30e7b928", "sighting_of_ref": "indicator--6bfc2e8e-88ef-48ef-8ca1-5ac3fabe65c1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f65772f-9539-4c82-9b5d-85481011ce8e", "sighting_of_ref": "indicator--a279652c-2c7d-4e9e-81fd-bf91ee0e899f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d0594ad-f6df-474b-aa69-a94617818ec3", "sighting_of_ref": "indicator--2a2ea47a-28f0-45f2-b58a-2caa11ef59dd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0865fba1-01df-4d3e-be96-e6acefbe11b6", "sighting_of_ref": "indicator--33db4879-8092-45b8-99ae-b97893441943", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afbeadec-3447-4a66-b04d-15a2084a54ce", "sighting_of_ref": "indicator--1b90ec12-c65c-4da4-b140-1e7d50b29f05", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02c4575a-efdf-43f6-bf8d-6c8738776f0e", "sighting_of_ref": "indicator--11f10d44-ff25-4d0f-ba14-7ee978f447dd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ac057ca-9c93-48ad-b2df-93eb6be0d264", "sighting_of_ref": "indicator--e558189c-78bc-418b-acc9-9f5d2f8bb6a8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e01f8b53-9b3c-446a-a7f3-5d3e7043dfd4", "sighting_of_ref": "indicator--523a8c8c-a390-4055-a3df-51665c360699", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe477d2e-1385-4c82-9f78-4a8104101369", "sighting_of_ref": "indicator--28150ee6-7bd0-4442-b9ae-3d4c3a548cf6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25157d61-f415-48ba-9c6e-330b6e48128a", "sighting_of_ref": "indicator--802650e3-1be5-4dfb-a8e2-2bbf61116709", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bed13bb6-b879-4ca8-bac7-eff5eb95e51d", "sighting_of_ref": "indicator--0c3053df-bbf3-48e0-a03b-17ebf69ebdb9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62f87979-2c7b-48ed-82b7-64d1b12e315d", "sighting_of_ref": "indicator--20dc2e82-34dc-4e6c-968b-073e9e83d6e7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e92cc2f-99af-4ade-9a9e-5c953d0ea890", "sighting_of_ref": "indicator--6ba4d362-ccaa-4bd2-94a0-07d1ab5331af", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef549cc1-e2fb-4a12-838d-1331e1e89424", "sighting_of_ref": "indicator--ad975620-febf-4a87-a673-b0ae9ec44da8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14fe994a-4cc0-4aa8-b856-f38318ab9427", "sighting_of_ref": "indicator--fea8ef80-c8be-4e61-af7f-451cdd30b19a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b22dc943-3d78-4b61-984c-c6acbc0ca500", "sighting_of_ref": "indicator--1d2783db-0ce8-4386-bcf1-3c208c132e07", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee95b99-9033-4473-ac02-6fa89ea2778a", "sighting_of_ref": "indicator--ef469891-e376-4955-a561-b36c36e8b8ef", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64636adb-5a07-4038-a5e9-7d2305fb9a64", "sighting_of_ref": "indicator--b2d19bae-ca34-4885-9688-aebc41273c09", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394597be-314f-41e3-8e99-95ae04c82d68", "sighting_of_ref": "indicator--0446a1e0-4f6b-406a-9e78-1469deaf53c1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a0cde39-170f-45fa-aefa-0ea9f3a03ece", "sighting_of_ref": "indicator--6d572aba-b9cd-4a36-98c7-1ab05edd561a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a3b507-5714-4bf2-a967-2015591e2ad4", "sighting_of_ref": "indicator--ef7a1688-6d21-4d29-b187-e62ef64cd051", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f968e91e-520f-4d52-a1ea-1738426cfa83", "sighting_of_ref": "indicator--70a562ab-4896-4b56-a91a-86c4b2ba7468", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99990fa9-587c-4985-b939-bfbb08e330ce", "sighting_of_ref": "indicator--cbb222ad-0511-4a02-bc61-24758fa9cabf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37860e7f-ceba-403e-a512-010223e0bbb5", "sighting_of_ref": "indicator--d02ed69b-782c-4b3f-a96a-869b3d2c814e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57e0f96b-641a-4c85-9764-f46cb584b6a1", "sighting_of_ref": "indicator--7bc8e36d-aab9-4abb-82d9-14a97d7c8d7c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0298aec0-c3eb-41c1-a106-9f379b4de8dd", "sighting_of_ref": "indicator--36bae7d8-1684-41f8-8df2-bc1c1b6e2fc4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14c978c9-c608-4a4e-8cd8-612f0e4fb1fb", "sighting_of_ref": "indicator--02e23e00-6a9b-4a24-a41a-d30ab06d23ea", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2225a951-8755-4968-ae37-bc130cd8f6d8", "sighting_of_ref": "indicator--13f45599-f336-49cb-b903-2aa515ee1dd9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb42c5c-ef03-426d-9a74-daa6fd6bcf07", "sighting_of_ref": "indicator--d4b43760-af18-43fe-87ee-d06d0d07739e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c4db24b-2221-4b3a-9ec7-a7c2e70a6653", "sighting_of_ref": "indicator--188977d6-49b4-4f70-8066-4b65f1410563", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e38c0373-7478-4345-9b8f-f7ef2cb81f48", "sighting_of_ref": "indicator--e258abc8-8b0a-46c6-b925-cad6df11be7f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--666689cd-1234-48d5-a799-17a08860be40", "sighting_of_ref": "indicator--61eaca15-5930-416d-a762-a2f22c64920a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a8cbc50-da7f-4e6b-a5ae-cbf373dbaa65", "sighting_of_ref": "indicator--bc92f7a4-5c66-4ea6-ab02-528a853e1222", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1bf2444-4af5-466b-8ff8-e3fab8fc535d", "sighting_of_ref": "indicator--09719d06-8401-46a7-9845-53e1976dd153", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72528b27-997c-46fb-a32b-59a9fbd85fae", "sighting_of_ref": "indicator--e5840a09-389f-4852-84b7-e0a9a2114a6c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceaa1436-700c-4e6b-92e7-e0f8089ab1b7", "sighting_of_ref": "indicator--14899554-a771-4b7f-b23f-d21499844c94", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5c37d72-e80a-4c57-8e75-80291725d540", "sighting_of_ref": "indicator--a206748c-501c-40c9-a06e-ea0914176472", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3b86127-9173-483b-9dd5-e405377858d0", "sighting_of_ref": "indicator--47f71af6-0d5e-41ec-bb71-dcec79e0c9f8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--735f0ab9-937e-4143-88fc-699114ab7c17", "sighting_of_ref": "indicator--066b0952-a1eb-45c4-8fd1-f246c66f3432", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47663075-f363-47d9-8a52-34174718492d", "sighting_of_ref": "indicator--93d85d54-5849-4126-96e8-8308801f50f3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ec3d017-4bf0-40de-83a7-39c916401bad", "sighting_of_ref": "indicator--a3b98b39-aa91-484e-b73f-f162efd885b9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cef99c8-caa1-4ca9-b687-2062f949ef32", "sighting_of_ref": "indicator--f6ca04d2-81dd-4d93-84c4-39a3f8a7a55c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55d7b831-53a4-4641-a9ee-3f577aab63fc", "sighting_of_ref": "indicator--ef4e32e5-42a0-4fe6-a78c-09391767d709", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--572a7c9c-d093-453e-8167-0640388d894a", "sighting_of_ref": "indicator--32ac0558-3b2c-4588-bf29-b4a87d84d93a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93401137-d6f8-4325-bb4a-7da482d3150e", "sighting_of_ref": "indicator--c15907f9-a706-4198-840c-208512f0ac22", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0818a06e-c310-4408-8dba-3c1136bb86e0", "sighting_of_ref": "indicator--9a498d9d-2ddf-41c2-a227-09f8faeeb6bc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8106c2b8-efec-4a7d-b86c-f4a677636783", "sighting_of_ref": "indicator--b91e401c-fbad-48e8-bc82-87eff5b2351a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b785e7e4-6dba-4296-8703-2bbc068542b0", "sighting_of_ref": "indicator--f7884f46-0f2a-4b47-87f5-1af473350bec", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f224765-bb9c-4dcb-b06b-8da844ae2973", "sighting_of_ref": "indicator--bb9cf335-3f33-4167-bfae-0aac7ea4ecfc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c58c4323-c5cf-402b-a5e9-692de2c83f0c", "sighting_of_ref": "indicator--5edd6a86-9be0-409d-ac3d-ec74bf29a332", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a64d136-bb0d-4d68-876a-9e608defb351", "sighting_of_ref": "indicator--c84ec151-8c1b-4b1a-bd64-3050e23977e0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93fd3044-f5e5-441d-a712-5385376f97ef", "sighting_of_ref": "indicator--06adf708-1f98-4b55-aad5-08c00807eb28", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e30c6555-a192-4696-a5e9-3f33678254d1", "sighting_of_ref": "indicator--aac7848c-d37e-457b-a413-72d4f7aa5726", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--306cba5e-c9dc-42c1-b2b5-653f8bdb9ecf", "sighting_of_ref": "indicator--b43107a2-5207-4243-9ba3-17d00081ba3e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9d0ba33-c310-4cd8-bebe-6680a48ae98b", "sighting_of_ref": "indicator--79594052-14cf-4439-9735-d95c9abc995a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--682e799a-1f6f-4035-889f-8eeb263300b1", "sighting_of_ref": "indicator--927de04f-cc31-4382-953a-c842f3217e63", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e5b3e78-a3a9-433d-8ffd-5cbb251980c1", "sighting_of_ref": "indicator--2927a23a-a164-4d76-bcce-be5bc70293cb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35a920aa-16e8-4134-b1a7-1a6cac4f5d05", "sighting_of_ref": "indicator--63da3d7a-573c-4ab7-89e7-c0fd9c9e488f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6e5fc3c-3a7b-42f2-8016-2eef474cf2e8", "sighting_of_ref": "indicator--e2a84453-3a91-4c7b-b889-e8d1f512b858", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3023cca-9bd1-40bf-a563-06579f17b95f", "sighting_of_ref": "indicator--e85cf19e-1fcc-41ec-94ca-57051aaecbc3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5d85023-90a8-4510-9ca3-16a1373aba55", "sighting_of_ref": "indicator--5ae83456-0cc0-4b6e-a591-a83b7175dcef", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ac0e29f-9680-4b5c-8848-c4f13e94be9d", "sighting_of_ref": "indicator--16c36dd0-00c7-4530-a1bf-7495941ad388", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fdc905e-9fef-479b-b704-b04740e92eec", "sighting_of_ref": "indicator--1c18b93c-18ad-483c-9a46-e144c2a4d96a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f7f5e90-f030-406a-962f-fae239c99959", "sighting_of_ref": "indicator--1bdaadb4-cc04-4f73-ba01-46c8973c6749", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e24fe06-361a-427e-8ae9-7ba83dc3e96b", "sighting_of_ref": "indicator--d2b03b72-4d2e-4812-a156-28826e7b52f1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e78f564-3630-40fd-97ba-42bea486f6eb", "sighting_of_ref": "indicator--60165273-b6ca-4eae-aec7-35be7ef2cc4a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf963de-0d58-4fac-88a3-b17fd1127b2b", "sighting_of_ref": "indicator--290ca48b-a856-499c-b12b-fe50ad53ce54", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4221ea73-6e25-48e1-8c1b-33690b1afa0f", "sighting_of_ref": "indicator--dc9d946f-8e96-4f83-9028-9c700f16ad56", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--269ffda2-7d8f-47a5-b227-473653f1d367", "sighting_of_ref": "indicator--4b523e8c-726b-4600-9c92-3fbc24e131e1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0a617d9-af72-4a31-8f5a-7e30d367669b", "sighting_of_ref": "indicator--12e65cdc-6eef-4d2d-ae93-bd76149661ff", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d5d598f-fb43-43b8-8385-01ee1cfacad1", "sighting_of_ref": "indicator--97692c42-6b2c-425c-a38a-9fd926f404c0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8420b2b5-4953-4a93-853b-e39255170705", "sighting_of_ref": "indicator--1435c945-77f5-4e59-90e6-d5052156085e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f662e0a8-1c7a-466f-8aa2-2d16051471ba", "sighting_of_ref": "indicator--362377a5-2f06-410c-9b2a-b39a5cad6d47", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc8de81-b870-4c28-8c96-08482bdc6ff4", "sighting_of_ref": "indicator--eef55d44-7327-4898-b71b-dae27069cda5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f37afffb-ce68-4fdd-8493-f98e39ef1d58", "sighting_of_ref": "indicator--2071cf0f-3248-41e9-a164-48248501c831", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8887586b-8580-46a2-969e-e1de71360da2", "sighting_of_ref": "indicator--5fdf529a-2a3d-420a-b6e1-26b5e405ac5a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1973aa57-a60b-4201-99cf-6114816b2f14", "sighting_of_ref": "indicator--b2be54f7-8e56-4e52-afab-864d3e9a829c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bee1bbe-97de-4832-bfba-486c6b66de93", "sighting_of_ref": "indicator--450be0b8-2ce6-4b91-a8c8-5c93798f0175", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bdc5772-997c-46d9-a5e5-f7b926864064", "sighting_of_ref": "indicator--094bc8e5-0daa-40af-9667-1850a9344901", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e994f1-8b7b-4e44-9b29-0ebcf2d55c30", "sighting_of_ref": "indicator--f62b7adb-9cbd-486d-838f-68c6429760fb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d54385d9-0beb-447a-a5b2-10cbd17ae351", "sighting_of_ref": "indicator--73d1a4a4-f537-43bb-a6bc-f453fa830ad3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b022b004-fcc4-42a6-ab63-198cea844854", "sighting_of_ref": "indicator--0b9026be-2c14-452c-bd59-b7c7a904bdaf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54c92bc7-0085-4fb7-9ed5-f39257d38f03", "sighting_of_ref": "indicator--1ce3a20d-2678-40f3-8e65-5e7146739099", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8323d016-93d4-4c6d-bf85-c6492b389fb2", "sighting_of_ref": "indicator--d1662061-930a-4401-addd-da2b8424e01e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d2fbc9-419e-4827-864e-7427ae4dfa71", "sighting_of_ref": "indicator--2adef8cc-b6ac-44f6-ae3d-22b85446121d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4454eb2c-3eac-4b18-89f3-741193476838", "sighting_of_ref": "indicator--f2b7a05e-c9ee-4259-aa10-0a9cf2c27b8a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ff346b-9923-4a7e-b404-59c6a29f2f77", "sighting_of_ref": "indicator--4baddb80-3613-4d54-9588-14cca56be40d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cae6d26-97b2-4135-958b-314e235d5bf2", "sighting_of_ref": "indicator--819ccf9e-e807-42a7-be5f-205cc4f7e92d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a41ee0-fe9e-4330-b063-3d7d27861f83", "sighting_of_ref": "indicator--600d0466-74e6-44cc-a452-35fe4985dcc5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7975151b-d179-40cd-9379-15314825443c", "sighting_of_ref": "indicator--bc1af451-edb4-485e-869a-6d03d1f41533", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--173acfd1-943c-411a-baa0-e74559e1dc78", "sighting_of_ref": "indicator--ed640909-2267-409f-8aaf-bf3afd419d53", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b9caf66-34c9-4aba-b869-c0e6b2af7fd8", "sighting_of_ref": "indicator--1b4dad15-0460-43a3-811c-9a9edd5195be", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcd98546-d3e3-4e1a-adad-0e2827d6bfa3", "sighting_of_ref": "indicator--a97748f2-e956-48a4-a5bd-47fc67652f34", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74ae1b90-89df-4846-a6f3-d42d5726c8ed", "sighting_of_ref": "indicator--b76d9f54-eea8-4157-831f-c3c0ef7a17f6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc6db048-e1d4-46e1-a273-f85c5a653c44", "sighting_of_ref": "indicator--ef915eb0-fd86-43b4-9740-84ff70ac3360", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d69c2d5-5e28-437d-9eff-03bb87296d3e", "sighting_of_ref": "indicator--c403592d-40ca-4a2f-8047-7cc55c2b0a60", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d23077aa-4d15-4914-b185-7b75ce9effc6", "sighting_of_ref": "indicator--918107ae-472b-4f33-b2fb-385d11f24684", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8a2a257-8228-4b1f-820f-dc56099dfc81", "sighting_of_ref": "indicator--f3715de6-8b79-4a15-93ac-92a62ca032b5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c4a545-7523-4b2b-875f-aff97a9061ef", "sighting_of_ref": "indicator--f455aeff-9f43-4d02-be35-a5a249272665", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2aea9d5-0ea7-485f-8de1-ae5a464cdbb2", "sighting_of_ref": "indicator--e5af6391-d47e-4551-9214-6f67f9fa4fae", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--318f9ad4-6373-4d5a-b456-bb90d64ffe5a", "sighting_of_ref": "indicator--c4c7d53a-f602-4c5a-a4ec-2d962d8cbe41", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba106b96-ab9f-4691-8726-b76a9fe31eaf", "sighting_of_ref": "indicator--943fdec0-2473-4c04-bdb9-d5ac39417979", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b11582e-6569-46f9-b61b-e3a8152e82b3", "sighting_of_ref": "indicator--b4cb977d-530b-4f08-a7f3-279455edc398", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a69f72f-6e92-4a21-a1a8-cbca50a4330a", "sighting_of_ref": "indicator--c4939f05-12db-452a-b8b4-6b7373b0249e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5047263c-2c43-49c2-b8be-1cd69b655407", "sighting_of_ref": "indicator--9453d14a-5247-4288-af42-804d1555161d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb8bd69-bf5d-49d8-8461-e14e8f1e14c2", "sighting_of_ref": "indicator--d5cfa4f2-d985-492c-a2fa-b5808493a0c5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa4d65ba-98c1-4ba7-a468-eb79e6006629", "sighting_of_ref": "indicator--19e6c369-7a86-4a06-beb4-ff8eaac677ef", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd187901-b48f-41c4-a245-62fe217af7ed", "sighting_of_ref": "indicator--588e1eb4-6276-4072-9300-4b555c875292", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e31cdfbd-c6cc-46db-924f-65fbde4e08d5", "sighting_of_ref": "indicator--b901cae1-6722-4156-b35d-ad15dd46f55e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--395dadbc-d595-46af-9adc-161ec28b014c", "sighting_of_ref": "indicator--b56ab84c-4978-4a2e-8df6-ddc25635d8ab", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c114267-0401-447d-abc6-c56f5ce3689d", "sighting_of_ref": "indicator--0c962e39-ec77-49d4-b9c0-0d39e246910c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73429852-38ba-4f5a-b322-601bd4fc7f58", "sighting_of_ref": "indicator--814177e6-a544-4183-8c47-e7ac069718dc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce922608-3577-41a8-bc36-ebfe98be90ea", "sighting_of_ref": "indicator--ba500a1c-cd62-450b-8fb0-71092a765626", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61b9cd14-5382-44b9-b1ff-d5fa13f03d10", "sighting_of_ref": "indicator--f32abbe2-5d35-4267-b55e-edeb00136d13", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--704ff104-cd5e-475d-8c19-0190872231ea", "sighting_of_ref": "indicator--a3a764bb-7193-4f37-b605-8c6b68bfaa63", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36e4a54e-a580-4c4b-95b6-bc725f3d4f48", "sighting_of_ref": "indicator--f07b41d6-8f3d-4f29-95f0-cee0a4b863ea", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8083e09f-e17b-47cc-9a63-fbd96c7591f8", "sighting_of_ref": "indicator--dc876659-5148-4ab2-b526-a3a2ff155a38", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24435ed3-445c-415d-970f-7cacd08aa602", "sighting_of_ref": "indicator--a236a7b7-df42-4d85-9602-1d7b580d4f91", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc2324bb-a978-4398-977e-ddd7a6104d31", "sighting_of_ref": "indicator--f5251fdc-60ab-4c99-a350-b3847dceeb19", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a570fe09-28a7-447e-8fb1-74adc15c0781", "sighting_of_ref": "indicator--fb1eff87-eb89-4c9f-bb40-4497b393bfce", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c6db38-4986-4b97-92f6-e2212ee7dbe8", "sighting_of_ref": "indicator--b014ab9e-2808-4063-9315-5c15ec7065db", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6555c737-61c1-4047-9366-e24f652e34dd", "sighting_of_ref": "indicator--94bfda8e-853e-462b-9656-36252345b06c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--955d81c6-45ca-4272-a963-195b8732d6f3", "sighting_of_ref": "indicator--68c9e10d-ddfd-4418-8a7c-2d3e65a86902", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bd763d4-74c1-4e92-b7e6-299b6c74c3bc", "sighting_of_ref": "indicator--232d9427-5faa-4d31-949a-a7d7bc94c901", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--febf0dcd-da1b-4832-abe8-5978e44c2ed9", "sighting_of_ref": "indicator--4e669c07-1270-4143-84bf-12b4d19dcfa3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7390570-8fcf-4164-b8e9-d5726a6f9a90", "sighting_of_ref": "indicator--cffd3d8c-47d4-474b-a459-bef7d934d7c4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f4186c-d72f-412e-a12b-697f07907d26", "sighting_of_ref": "indicator--adb70152-7567-4f4c-9207-d6ec1c862ff6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d420939-fda9-46e3-a27c-3a4422e9cac4", "sighting_of_ref": "indicator--87e4ac19-4e86-4f13-b535-bd4e0d031c27", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e79d3ce-54b1-4118-b347-51dd68ae6290", "sighting_of_ref": "indicator--b395355d-086c-434a-9521-bc86f6ae8d1c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c257550-4527-416f-b35a-2660632a9e07", "sighting_of_ref": "indicator--95e89baa-4883-4c53-b04b-0ecf73b78b59", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dedf528-3527-4c33-b552-4a913efbd189", "sighting_of_ref": "indicator--37f5bcd8-c30f-4dd1-bf81-014e3fe1777d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f77174d1-e516-4162-9aa8-0207b27bf8d5", "sighting_of_ref": "indicator--64915846-5c08-4672-85e6-1f67f210afc4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a18aa45d-f552-4bc1-a070-c1fcc0ad52fc", "sighting_of_ref": "indicator--ea9e38b0-2fa5-4845-bc38-adfdfc3b5d31", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7135babf-738f-4ef6-bcc3-d8f3a797369b", "sighting_of_ref": "indicator--7512df20-1dc6-42d1-b744-5dedd7fc920e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1800b4d0-d36b-4027-89e5-c070acfeec35", "sighting_of_ref": "indicator--08705ae0-b023-4101-b9fe-3ccadce8184d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31c70453-78c1-45b9-8fb4-dadc8bb21b0e", "sighting_of_ref": "indicator--39e1dcbe-b13c-40c4-800d-668237578794", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecbd4cdb-e732-432c-9eea-0a3e7cab73cd", "sighting_of_ref": "indicator--54ec6d8f-58c2-434f-b31f-e32e6e03a3d1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--272ddf99-4c21-433b-956a-495f72e50557", "sighting_of_ref": "indicator--8e1d86e9-2f8d-4817-a385-776f520b719c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b71335f-92b0-4b58-95cd-9b6b9f882546", "sighting_of_ref": "indicator--354497a7-ce8d-4c4d-8f1d-824d29826541", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b448b00-b2a6-4848-816c-4dd53e90f47f", "sighting_of_ref": "indicator--7e894490-2a33-460b-a509-3d50f70c7caf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0800cfb9-f87c-4f2e-96f4-4d52bde1d5db", "sighting_of_ref": "indicator--61929dd4-5a12-410e-bce3-cacaf563e1cc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98b122ef-b9ea-454c-9bcb-163512eac185", "sighting_of_ref": "indicator--1db80344-9bd5-4760-91c8-4aa04d404a11", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e989b676-d3da-4528-88de-c44a32ddc23b", "sighting_of_ref": "indicator--12d43f64-12e9-4d89-a111-ea4fae337fab", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60da97b3-4229-425b-a41f-5d8042cc1f29", "sighting_of_ref": "indicator--1fe8f3ea-813e-4479-988e-84f6d7dad8ac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf055a59-6fa3-44ab-8d7d-9cf261e4bc5c", "sighting_of_ref": "indicator--3b2066b3-52b5-478e-9f9d-c9179e3cc92d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d9beeed-0a7c-4e96-a8bc-26f458a7b36a", "sighting_of_ref": "indicator--820d97d2-c519-4968-a38a-2c4405cf569d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9af5ef5-895e-4241-9c56-ed2a5d008f71", "sighting_of_ref": "indicator--c04a2996-c9cb-40b5-bf44-bc85848ee472", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb66c66e-d7d6-4916-9e34-5c455caf863e", "sighting_of_ref": "indicator--252fc116-663e-463b-beb6-4bdd822ebe6a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5f53935-d68f-4422-9247-af7d7c147266", "sighting_of_ref": "indicator--04e80f9c-9cb8-462c-bf03-6e6cae58adf3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01585fa9-0a42-439c-b1ee-273dbf3ba632", "sighting_of_ref": "indicator--375737e2-29ca-4718-a7db-5db623440e6c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a311884d-fa25-4fa1-bf63-ecaf72cc0112", "sighting_of_ref": "indicator--611c63f3-f903-4fca-923a-852d61546744", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e794ad2d-b4ed-44f0-9a7f-828f87a1ac13", "sighting_of_ref": "indicator--bb19b293-38d6-4bd7-8769-59607d637d80", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b5297bb-6a5d-4c5c-af9f-1395be44705a", "sighting_of_ref": "indicator--29971386-2e07-4906-a3bc-bca7cda1f973", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ca5be0d-7df0-4097-84d6-169c67d3a514", "sighting_of_ref": "indicator--3a12ff7a-6c0f-4d86-aace-1a81fc501b6c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52716778-31f1-4994-b8f8-d231856038f3", "sighting_of_ref": "indicator--bcb29811-9f96-46bd-824c-7c59942935d7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f190c1c-c7e1-49ce-9dc4-753e0567fd96", "sighting_of_ref": "indicator--27841ab1-37c9-42c3-8089-4c01479407b1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c1e15a2-f287-47ff-a008-51f509d0eff7", "sighting_of_ref": "indicator--c12211f0-1f12-43a2-98f2-b0cef9f34076", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8cb13cd-4532-4f80-962e-0c54899eb861", "sighting_of_ref": "indicator--5ab0fda5-374b-417e-848a-d317f857c1a7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40e38028-6ddf-44d2-b378-136b8e57095d", "sighting_of_ref": "indicator--d98b28a6-9cc3-4642-b5cb-062a489d74b7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a741285b-aa59-481c-b171-33b5308ae9be", "sighting_of_ref": "indicator--e556051e-5856-4d4c-92be-9385bb2d8c35", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a5216e2-8d97-4744-9f33-2346cab8b90b", "sighting_of_ref": "indicator--88825e82-0c9d-4c77-a737-11b0aa1faab7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b59e96c1-0b27-4add-9d11-305c3d2e5548", "sighting_of_ref": "indicator--08752c57-ac26-4c31-ba64-bb18fadb0f9c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797edf2b-85c6-4bbf-8a54-af8be699f2ef", "sighting_of_ref": "indicator--75ebd69c-c635-4007-b281-9e677af97947", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cad2f44-406c-47fc-9b55-23618f0c0eae", "sighting_of_ref": "indicator--03ece340-48c6-4e31-9327-f2fbd5bf6259", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04f97e83-8296-4cee-9ced-d756acdafda1", "sighting_of_ref": "indicator--acfe3805-fe83-4d91-b859-0a62c8eb3be7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e91668-4583-44f3-be1c-a1a653d42717", "sighting_of_ref": "indicator--87d6499f-307f-4986-b1ee-db5d509d3bfc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc21de0-8d79-4916-986b-9a76c65c6e51", "sighting_of_ref": "indicator--cdceb7a2-067f-4ed9-9a90-29a721950c0c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3619cc9-51d3-4d58-8068-4d833fc931d9", "sighting_of_ref": "indicator--d7b92ef1-ca55-4cc3-bdf8-7b043432897d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--427e7ba2-8be2-4649-b434-7de9a7181b90", "sighting_of_ref": "indicator--fdfb5a3b-93b4-44b5-a4b8-78a5072da883", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95136130-a316-4f5d-8b64-91c7594473fb", "sighting_of_ref": "indicator--c8f6c895-bfc8-4dd3-9c24-0f640c542be9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4bb3de5-b80a-4b61-8d3c-9394a8581ffa", "sighting_of_ref": "indicator--4ae7b888-c0dd-4210-8be5-b4eeb6955c60", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e0c1acb-5400-488b-a530-4c48b26eaabb", "sighting_of_ref": "indicator--1885b903-3f56-42ad-99dd-d4044903068e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--741b9ebc-0771-40f2-9440-9b58f9b8d9d2", "sighting_of_ref": "indicator--f8264da4-09c7-47ae-b2b3-2428c845da75", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e21322-c1f5-4c92-abf7-afd348648bf6", "sighting_of_ref": "indicator--d0fa078c-ee42-4270-b140-3678901d5bea", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceca89f7-d0ee-404b-a405-a53a04c98a66", "sighting_of_ref": "indicator--d0f02754-4166-46b3-a161-3412795cd965", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ac31317-0dc0-4718-adb3-66f3638b6367", "sighting_of_ref": "indicator--1b15713d-02fd-4cd3-901b-396ad5ded16a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c4ca7ba-2744-4482-b3e8-fd5057c3fe65", "sighting_of_ref": "indicator--a597e931-c881-498f-bbd8-9561b89208e3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2213036-313f-4055-a69e-7dfb807c9f75", "sighting_of_ref": "indicator--11579cbf-9528-4e0c-adc6-dbc06552f3c1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac02dc91-4394-4ccf-be88-14ad7f3382bf", "sighting_of_ref": "indicator--097b95bd-9363-4825-8283-44f5957d2879", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8295a4bf-7c58-4b99-9c7e-2d4ffe6b9e23", "sighting_of_ref": "indicator--6e764f35-2a68-401a-bfea-201801025913", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f4db7b7-6e52-4d40-bfb0-d98b0a472d82", "sighting_of_ref": "indicator--aa424ceb-0a17-46f4-bb59-4f899f7920c1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6341f06b-4bed-4140-ab88-672dcffb0de4", "sighting_of_ref": "indicator--a45d8b6d-7a78-4aea-b81d-9b0b74f6b50a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df433ee0-e886-48ad-9236-c23e9e37299c", "sighting_of_ref": "indicator--f21f5d93-94fc-47b7-8c81-ed385f9cf7d7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36dcbf03-49ff-4932-93a9-faeeebe6473a", "sighting_of_ref": "indicator--41e3e0fd-e93b-4ddf-90d6-d8fc419d53a4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a27b930d-dec9-408b-a021-706f23873d06", "sighting_of_ref": "indicator--aad533cd-6964-4c8f-95d0-88e287197c76", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad7914e-cf61-424e-83e6-504cfd6e02b0", "sighting_of_ref": "indicator--7e1b8acf-bdc1-442a-9cb2-0931c5672b73", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a628b01-af11-479a-b9ac-83bf0e5907a1", "sighting_of_ref": "indicator--185dcdf4-9cb9-42ba-85ed-17f644150138", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d256d23-3e71-4b16-9647-94a2eec2a02c", "sighting_of_ref": "indicator--185dcdf4-9cb9-42ba-85ed-17f644150138", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c312e647-9994-40dd-8506-444c3f72e0e4", "sighting_of_ref": "indicator--bdc3a2c6-0f71-40a4-aafd-c562c40d6695", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6570d2b-9d8d-423e-9e67-6672799efdac", "sighting_of_ref": "indicator--ea8e6d84-3bdc-4d91-836c-b871270d4290", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86887bec-7ed5-4f22-a560-93ffe86948dd", "sighting_of_ref": "indicator--d7022094-8b19-492b-a2de-7812933a56f0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57950b1f-f4bf-4c47-8535-246eee80d9f5", "sighting_of_ref": "indicator--75995946-1895-4ce2-802f-3a92ab3c8126", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb7810c9-cd6e-4ff2-888f-239d6a9189cd", "sighting_of_ref": "indicator--92e7a584-bd8f-48a1-a9d7-95f3c56af8d0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--070f3753-a662-4941-b6d1-1fcd99d6913f", "sighting_of_ref": "indicator--f8b5a296-1daf-46c4-b5aa-459d6be843d8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58e1e5cd-e639-4847-905a-a94d106feb33", "sighting_of_ref": "indicator--2015693d-d938-434a-8556-7b1a270b69b5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--339090e3-b1c0-40f8-889e-5cad85cbecf0", "sighting_of_ref": "indicator--6f005a3e-f316-44ed-b369-53549cbe5d3f", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dd03adf-d6e3-4428-8a99-dbae8a451345", "sighting_of_ref": "indicator--71a1cb99-1cb4-4148-a35e-c80ccddef9a3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc467718-c4ad-4bd3-9a23-5cb1afec12cf", "sighting_of_ref": "indicator--2d4b0ac2-fcd6-4203-af18-55b15c793a9b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70e12d24-4fa4-418f-89e2-c5550da42d30", "sighting_of_ref": "indicator--03dcba03-8d00-4a07-9997-94b78bf4f202", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba120ad3-c720-4779-941e-dac61888c3ed", "sighting_of_ref": "indicator--d85e487f-ddf6-4de4-89c4-569a47d7f55f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a3658ad-c505-491a-9043-1fbf003cea71", "sighting_of_ref": "indicator--53adcfeb-c8b1-414f-a4c1-1443c4af8066", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cddd9de-33e5-47dd-93c4-208e8adae479", "sighting_of_ref": "indicator--7aeadb01-7ded-45e0-8353-1ade3eb011c9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f83a4d9-0cc4-4909-853c-050434f7d913", "sighting_of_ref": "indicator--adb1e766-a3c7-4157-9534-a621ade48ffb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e738ff67-9c69-481f-be0b-05de07d83a5a", "sighting_of_ref": "indicator--ec8657b8-efea-4fb1-b50a-02aedd21beed", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e98f16b6-bdfe-465c-95f9-d089a3781a02", "sighting_of_ref": "indicator--8c9f408e-08af-404e-ace7-679b72ee96b5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cb21dac-cd9e-4130-822c-65a97ab9d8d5", "sighting_of_ref": "indicator--43af6801-308c-4570-a0d4-380360ca0e62", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd66c8f5-ae5b-410b-a69f-1d89ff88e5c5", "sighting_of_ref": "indicator--80bd0589-a78e-426d-bfa1-54e9e2c7bdf5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52e596d8-9960-4270-8da0-56c9207acf92", "sighting_of_ref": "indicator--9085ab1c-94f6-416e-853b-5bf6ee159526", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b779b46-9f60-48a7-bbd3-067e8901f09a", "sighting_of_ref": "indicator--7abdda4e-3962-4e45-ae18-57f0e58afab3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7636e661-f586-418c-960e-8d551a81aa5d", "sighting_of_ref": "indicator--1c0b1f7e-568f-4b24-aec6-a8c5bca6aa3e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad3da683-277a-4dbc-9dc6-7c9d95d764b3", "sighting_of_ref": "indicator--dcdb3d20-1ef8-484c-9269-519e066d26d4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c01e955-31ac-40a2-be03-95d9a0c672f3", "sighting_of_ref": "indicator--6c71b895-6db7-4668-850d-f5087763583d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa1251eb-8916-4e79-802b-c83dad75738e", "sighting_of_ref": "indicator--5553f8a9-1198-418a-b13b-0bd20c60f4fd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5edffbd-8e81-4369-b87b-579a4c0b7f19", "sighting_of_ref": "indicator--f36491bc-bbc1-4482-abd3-51b13165533c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56b0729b-8b90-41f8-b172-1f40e7eda18b", "sighting_of_ref": "indicator--96e6b8bc-f1ce-498d-85f7-7a2d999c432b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb3608b9-4dc9-4405-91c4-18ecf421bb0e", "sighting_of_ref": "indicator--51f41f0a-a115-4314-9d28-16264ca6b996", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcb0848f-3dda-4cfa-ad8e-d0492b775616", "sighting_of_ref": "indicator--2e8db8ec-2d7f-404d-89cd-763ac3c3cff1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52120b63-4a10-44d0-8888-82f598fd7186", "sighting_of_ref": "indicator--aa34ad88-5dce-4d8f-9cbc-0b7ff837ae52", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c82ee7d-b861-49df-959b-9bb0c9e5fed5", "sighting_of_ref": "indicator--ed0c3196-5b98-48e4-8275-a744da98c7f7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de71c704-1f75-48f3-9898-40ef750e1250", "sighting_of_ref": "indicator--ea595391-6d96-4332-81f7-ec571a9a0c0b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a2a4db1-df47-4482-8156-40f735f695f3", "sighting_of_ref": "indicator--4d0addba-8758-4b3b-bb20-641c3309d9ee", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4389e5a-e3b0-43d6-a9b6-828aeebda37a", "sighting_of_ref": "indicator--2c812be4-ddf5-4b33-8353-a86facfa63c5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27259c0d-e7d8-4b25-9857-d2e47e8c8af5", "sighting_of_ref": "indicator--c719dad5-8a46-4197-b500-68d46d80c4e7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb0e7c8f-7aef-4fe3-90e9-65c1441fe9f1", "sighting_of_ref": "indicator--7529b2da-4f0b-4326-b5ef-93be9484a94f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b936af0-801a-4bd3-bb84-24c86d692773", "sighting_of_ref": "indicator--c1ce6218-8e16-400d-9e89-487c10feafc5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--083b3ce5-83e1-4eb3-9711-6652e65e9f72", "sighting_of_ref": "indicator--b238d33e-e167-44df-8fcc-791d1e149b85", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02856da0-16a5-42db-96c6-194c00524746", "sighting_of_ref": "indicator--06c6320c-bfa6-47ce-8787-f5a172517210", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17cff9f1-46b7-458f-b717-6578f90b4966", "sighting_of_ref": "indicator--6a870948-59a7-4479-8685-550c1d68383a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--029bfab7-e672-4ce0-971e-3cd015c60457", "sighting_of_ref": "indicator--63cdef9b-ebfd-4f3b-a41d-9f8ce772df88", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3ad2708-3ca9-4d53-b2d8-99a505ce56d9", "sighting_of_ref": "indicator--575b80a5-2ad9-4d85-86df-522e53895d74", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06bc8e27-969e-4c10-969e-7686999725d1", "sighting_of_ref": "indicator--e95ac604-a41c-4dd7-a05e-607289450372", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfa8f8f1-17bc-4782-a032-8cdc3d74ee09", "sighting_of_ref": "indicator--cd79996a-5f33-477e-a9bd-7bb047242307", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d408f5-3420-4b0b-a78b-d87c551c8b5c", "sighting_of_ref": "indicator--57a14c6e-db5f-4495-ac97-56c3f010141f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f935e379-a0d1-4244-8886-ba2e1ebfcddf", "sighting_of_ref": "indicator--a3fc51d2-e7ba-459a-944c-a65cab9de4c2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b055da76-be6e-4df6-abd5-8ece7e273885", "sighting_of_ref": "indicator--1105db0f-14e9-4246-9b77-d38c01c08951", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e6e16c-f7e5-4f23-9b9e-697043ed6532", "sighting_of_ref": "indicator--411efcda-3f2c-4a9b-bd1a-ef65a1669264", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--877603f4-599d-4bcf-a24e-d9ee3cd07314", "sighting_of_ref": "indicator--373e7125-c3a0-49a4-854d-58e1d0d4e546", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce8fe91-9669-4cc1-8091-f931d553ac4d", "sighting_of_ref": "indicator--8e5ce0c0-bf8b-4334-9286-4168757cc460", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf8ff4a1-6690-48d5-bb11-0a4c3dacc4e7", "sighting_of_ref": "indicator--4a380cd8-fce1-4c77-86cd-67e4268be93b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5dfa8d6-f8b9-4da1-b723-a81d624d72ca", "sighting_of_ref": "indicator--b0ce040d-ed77-45c5-b93e-e878f8e4fc2b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c322a39d-dbe7-4559-a8ac-2118d9fbbb51", "sighting_of_ref": "indicator--6e0a101b-102f-490a-a511-7967e4872673", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae21e0d-240a-4bdc-874b-39f46e3cd019", "sighting_of_ref": "indicator--77f9ae88-76e0-43a4-934d-b827a5bcdcb1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e9569c-a358-438f-b49d-bc5c7b4e16cd", "sighting_of_ref": "indicator--420bd6ae-f89b-4c22-b9a0-3d6c5db63c9d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d325d0a7-52dd-4f73-b797-405d7518ca51", "sighting_of_ref": "indicator--9e9781e1-b246-4f31-8e77-ee711e2253a9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dda0c21f-7fc4-407b-9e0c-8023119bfa50", "sighting_of_ref": "indicator--8bb2304f-44c4-4b9e-851d-441170758bba", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b389d77-3cc2-4d38-b934-a6725b7fd2f2", "sighting_of_ref": "indicator--883c4c19-4aa9-49e8-9ecb-9ae18cd6a535", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8369d232-ac3d-4f2e-bafc-79ae110680c4", "sighting_of_ref": "indicator--414b5d2a-b1fa-4adc-b8c2-1dc18a40330c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a028ded3-e328-4593-b881-709ee8afd1b6", "sighting_of_ref": "indicator--388b0480-7b2b-4eb4-b8f4-6c6723e07fbc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2480f3eb-aa0e-42ad-928b-18ad1c436150", "sighting_of_ref": "indicator--847a19cb-aab2-431c-b02e-c7025ac3b319", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc817357-3187-4da7-87a6-291fc9710bc1", "sighting_of_ref": "indicator--c10e2f50-84e7-4784-84bf-ba27ca3b463c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec96a38a-f73b-4937-a4b9-4f82e23e2c01", "sighting_of_ref": "indicator--dd8b7703-f468-46fd-8272-c16457fb4f05", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5759e86d-347a-49cd-b3cd-b7c47ddcb92a", "sighting_of_ref": "indicator--bd5755f9-3c5f-4e2c-8c56-7071b470bcb4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--227f4d67-7807-400d-adcd-aa9b9b723df3", "sighting_of_ref": "indicator--412d7b99-01f5-43b4-935e-6d3431976435", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--995ff7e1-251e-4c28-be25-0facd3108a12", "sighting_of_ref": "indicator--eec4ac0c-0ae7-4c58-bc6a-35ba208f4e50", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5605a98e-e049-41d6-bc78-d6a099f83991", "sighting_of_ref": "indicator--c5eabf4d-a492-449e-9a81-65d728621111", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84156891-35ff-4adc-a172-6c177c5c4649", "sighting_of_ref": "indicator--98372211-dde1-42c5-9380-60803b178c7d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9aff71c-896a-4b54-ae75-bd17719c6b29", "sighting_of_ref": "indicator--6766981e-f84c-40ee-b9ad-4dfe878858ff", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae5eaccc-2f05-4d5e-8c41-f4813a879daa", "sighting_of_ref": "indicator--2f2681ca-7e07-4c24-8ef6-3ee942eeb68e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbafe242-3c48-49fd-adf4-ef87af11202e", "sighting_of_ref": "indicator--da21d52b-1fe9-4d3c-8ee5-c760d4dae7c8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dde9576-8e8d-4a54-8987-f484d74e3a17", "sighting_of_ref": "indicator--0d55059e-4cf3-409a-bdc6-b9854e0e35a9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8f95b73-45c0-4296-97ba-17d8ab077792", "sighting_of_ref": "indicator--79baf7a8-fc99-4c6d-875d-afdec14989d1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3fb2e79-6f9d-4f24-b522-335ac1b69268", "sighting_of_ref": "indicator--73eb7066-036b-4198-bf68-fcebc90f678d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--632fae94-e58a-4168-8cf6-b04fa59ab49d", "sighting_of_ref": "indicator--0866b241-8b95-4c77-8afb-b4e6d1b41e93", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c3ec2d-3b08-41ad-8517-caeb96a140c5", "sighting_of_ref": "indicator--951f24ec-6867-4867-b05b-f8b10920f3a4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc81b6cc-84ce-4756-a0b6-d40c1a2c2efc", "sighting_of_ref": "indicator--bc56f35e-9c82-43ee-a793-167c58ea5985", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c36895a-a033-4b6f-b974-7a82c5599f73", "sighting_of_ref": "indicator--7a533958-75b3-4f23-87cd-b29f788f669f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--465198f2-1624-452d-b343-62ea6dd501a1", "sighting_of_ref": "indicator--2bece02b-bcd4-4eab-b684-e700f7a0d58e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12b42eb7-ef4f-4064-89a3-ca1f33bbb86e", "sighting_of_ref": "indicator--643e4b22-6104-4513-8436-f4ce713782ab", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--686b53d5-d0ce-4c22-b7d9-e3f9a547435f", "sighting_of_ref": "indicator--97ddcae4-c620-4542-a16b-4df5c9cf83e1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd22cb4c-2a4c-4c8e-833a-255f48ead353", "sighting_of_ref": "indicator--2bc3f379-8616-42f6-bf5b-a4d1686512de", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14914f97-a9ee-41aa-b21d-6a86d66551ad", "sighting_of_ref": "indicator--20d52c07-2b69-4fa3-b2a8-34c9a89d5169", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5660fcd8-3283-470f-a049-4ecee9eb49b6", "sighting_of_ref": "indicator--6a083c34-8070-4a0d-9209-b74b01492921", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0fff50d-db65-4733-99f4-f3f08cb83266", "sighting_of_ref": "indicator--cb2bc03e-264b-4607-a166-6465e6ef7fdf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f921297e-c73b-401f-88e9-5b9319fb547f", "sighting_of_ref": "indicator--11c17278-a88b-4a91-b5aa-95afec3edbbf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7bfd68f-36ab-4257-b07e-8f1309991bf2", "sighting_of_ref": "indicator--b6faa73b-86dc-4c81-9a25-893e980437b4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5894454c-e5ee-4435-9082-af44a099ac83", "sighting_of_ref": "indicator--15bbf979-57c9-4273-a2d1-15e6e1e5ad1f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e74f2d34-9e00-4a66-a8c6-55370a8a9063", "sighting_of_ref": "indicator--ed64dc19-a274-4d37-a1de-808e80826d8c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7f1ded8-5291-4ef3-95b5-afc64fe1ccf2", "sighting_of_ref": "indicator--9945a53d-6dd1-4af0-977d-d9bdcf014607", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07518c46-a9f2-454d-99e1-5dead692b738", "sighting_of_ref": "indicator--69f80521-7d04-4321-985f-7a3780d22380", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9f481eb-a084-452d-b975-d5c331919fbb", "sighting_of_ref": "indicator--4b30b577-17de-4b7d-9d5b-40342c2d8a8d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cd2b829-a3b0-4281-83c0-e004953cbed5", "sighting_of_ref": "indicator--4ffa34b4-6d46-44ca-a29b-432807c00931", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d9dd51a-8173-405d-b095-8cc1c7e3197c", "sighting_of_ref": "indicator--88b9dd7d-7972-4abc-8b1a-83604d90aa50", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d68e9e-f70f-4115-82da-cfbf3d1af12d", "sighting_of_ref": "indicator--984341ce-f064-4bbf-b106-8f70eba9779f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--712c5f94-dac1-4432-a49e-c50e75734aed", "sighting_of_ref": "indicator--2ad6fe93-bacf-4152-a81f-a81389d61cbc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c67e3e8-31e6-43e1-9a69-9ff09463541d", "sighting_of_ref": "indicator--fa8017a6-a672-4e53-96cd-2f063ba05b63", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee26ec6c-3c77-4851-a930-d4120f408798", "sighting_of_ref": "indicator--d7d9408f-4399-408b-b7b2-f362a98295a0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6240510-de79-49f9-849e-275e6f4f0738", "sighting_of_ref": "indicator--dbdd4eb8-4bb4-4b6b-9835-cff1c59de379", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6351b8e8-a934-4a46-bb2e-3101d10bb542", "sighting_of_ref": "indicator--69da867b-f899-455b-835b-da75b94e33d1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38dd3300-9b4a-4840-9550-55c5b3d8066e", "sighting_of_ref": "indicator--63cf6c85-7921-4ff8-b981-e8fc31e678e1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef258a66-3abb-449f-9cb7-7bd36e163bd9", "sighting_of_ref": "indicator--24f04480-c2ea-446c-aad8-cf2bd07a2f15", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fac706e2-ed66-46fc-8cdc-dc9c694b957d", "sighting_of_ref": "indicator--a1b49c2f-b704-412a-af5b-318f184732a6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5265c2a-f99a-46c7-8abb-c3c37648ab19", "sighting_of_ref": "indicator--79ca6a66-9d00-4fbd-8fa0-e5a06b17294e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd457123-a678-43a7-8b5b-8edff9fbaa47", "sighting_of_ref": "indicator--cd5528b8-9159-414d-b6c9-1df11da2c3ae", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f0c5fc9-6ea2-4d0d-a09b-ef98abf922d6", "sighting_of_ref": "indicator--ddf9a052-6a18-4377-a95f-7bf517f3c384", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--621805b2-c121-462c-92c3-20c302c3a837", "sighting_of_ref": "indicator--94e466b5-cfd8-4eb3-9819-7fd373d22c9b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a650ee95-9665-4646-bc7e-36c066b9ee8c", "sighting_of_ref": "indicator--98a2253e-b614-47d5-aa1d-db05e9d849d0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32a3f8b1-906b-4224-95be-75832f1486cb", "sighting_of_ref": "indicator--2be46e9d-65d5-4012-99f9-f8d5cb63d717", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09bbd685-19f8-4bf1-8151-6d8e97653549", "sighting_of_ref": "indicator--a9f1d312-c4c7-45e0-918f-7a0bb3517f14", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c3af4eb-d15f-4d5e-b71b-9267bcd13522", "sighting_of_ref": "indicator--7d05022d-9565-4d1d-b6d7-399e5476f84a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffbce39e-3f54-4b9e-b6a8-f5972426938d", "sighting_of_ref": "indicator--453245c0-a2f2-4632-a46e-a0b9a7392976", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3d59020-81c3-44b4-ba73-19f35caf8a15", "sighting_of_ref": "indicator--b24c2ebd-ce25-4764-ad6f-b56b6441f1b9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d24fb9e-1411-4e0a-866e-253cfbd26318", "sighting_of_ref": "indicator--fbeda2b9-a96d-4945-a328-2265c7910a01", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61abd8d5-bf4b-4e53-a9e8-655814f83a77", "sighting_of_ref": "indicator--51d63431-4102-4a0c-abb6-b868af790fb8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--845a4b2c-9d67-4aa1-8fcd-de212dc53f13", "sighting_of_ref": "indicator--450579be-c865-47c0-9d00-b92fc812d6de", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--039c20ec-7330-4b51-8cde-c1040056bd06", "sighting_of_ref": "indicator--3d5f07ca-87ec-44a0-9de0-5f9dec0ffba8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4350bf1-c546-4db0-a103-38a0a1d2d9a3", "sighting_of_ref": "indicator--c3dae526-3515-4aaa-b61d-1c6fa0d35782", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f12422a-7c7d-43d0-9bb6-f85af3ecf171", "sighting_of_ref": "indicator--84e831e9-231e-4fdb-b703-b47920558a25", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d578fa49-c477-44f5-8f14-f70feaa48685", "sighting_of_ref": "indicator--bae564d3-23a7-45e8-b0a8-5ac692b23f95", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--810e39b6-c679-44c9-b7cd-2e4d4e88f86e", "sighting_of_ref": "indicator--2d9ca2ba-8052-4097-ba63-e47bffb0bea4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f3d1fe5-dc59-47ef-959e-a457e5349b09", "sighting_of_ref": "indicator--5269067e-30d3-4969-aefc-9edc141d4228", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1524c81-1516-4a79-945b-196f4de7727a", "sighting_of_ref": "indicator--8131f1e4-5c84-4cfa-bd50-d459176b7830", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9ae341c-0eb8-4dc0-a25d-8753ae4b7362", "sighting_of_ref": "indicator--7ed8d0b2-4700-4aef-b0ee-432882da2d62", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3302f9f7-0576-4d9c-85fc-61f0c79009d3", "sighting_of_ref": "indicator--6707b88c-952e-4ae6-8565-badc51e6d9f7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46acfe4a-e0c3-492c-9e41-c2c5cf74eeee", "sighting_of_ref": "indicator--d023cd87-3aed-4b0d-9953-60c03017bcb8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec6dd33-8b9b-468e-83e6-c4c315ff1d78", "sighting_of_ref": "indicator--55f2e76d-ad0c-4782-98f2-4a9da17bcc4d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c34917df-1b82-4a8f-8bb0-2f1cb4b443a4", "sighting_of_ref": "indicator--77f6d966-5b49-4c1b-8d62-088fee75a162", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a24a43f9-3114-4632-91d3-ba4f8c42a85b", "sighting_of_ref": "indicator--f73e5854-168a-452f-9c05-218c4beca96a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4988bc7-ec2f-4615-9f3f-96c529f45e85", "sighting_of_ref": "indicator--8b54a0d7-6979-4c9b-94bc-b3083ea83d1b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2137844b-c72c-43c3-b88c-1016d9f545e5", "sighting_of_ref": "indicator--09c0b112-fb24-45e7-bb99-6df8c450dfdf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d082318-af2f-4882-b11c-b1ba5fa25c66", "sighting_of_ref": "indicator--dc50ac5b-463e-46c6-b740-17723e5211d6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3989aba0-2ba0-4def-b4f2-b83bc08391d0", "sighting_of_ref": "indicator--617e8e39-aab6-4d1e-983f-7d5b72917272", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44dd00ea-c670-4f24-b466-bb9ac501559b", "sighting_of_ref": "indicator--e5d8b81c-81d5-43cd-b2e4-5463b9fda43d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b28b8644-90ab-40e8-b494-9268c3425d39", "sighting_of_ref": "indicator--ca782f2c-ab79-49cc-bbda-f3c230d24eac", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a3f788f-341e-46f4-8298-ef3193b09a68", "sighting_of_ref": "indicator--3ae73654-4d8b-4a6f-9796-d01511bf8994", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c06c5f-9e14-4d26-8433-46861343cbfb", "sighting_of_ref": "indicator--55b4abae-c479-4479-b397-46227762f0b1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25fd3bc0-04b0-46ba-bb5c-abe4181d3d32", "sighting_of_ref": "indicator--c349063a-b849-4608-8f76-8feada920133", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--868dd125-9e6c-44ea-94ba-ebf2ce80a455", "sighting_of_ref": "indicator--d4ec2a35-73de-4796-9e68-a14aa5b958e2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61a59ddf-35ac-4b84-8e14-8aac99f534ea", "sighting_of_ref": "indicator--acfe47c9-5614-4535-b4e6-2ac04b82b169", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--734399f2-1ca5-4c64-b0e0-d5c34946851a", "sighting_of_ref": "indicator--405aa20f-db7a-40dd-b38a-a70c704414a8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb412f2-a86d-41b3-9a3d-589d2b7ddd4c", "sighting_of_ref": "indicator--566c2121-6c94-47e4-8c15-763d6f9f0a6c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--766dc7c8-0e86-4459-8452-7ca21323fa35", "sighting_of_ref": "indicator--1878f9a8-4737-42b8-8f1b-b7e26b31b9cb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa3a644b-02f7-406a-a4cd-9be3ed0f50a5", "sighting_of_ref": "indicator--5e075c48-fc85-4770-a179-5029acd5fb08", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b68c2c-9d60-45d2-af0b-3dba98e22599", "sighting_of_ref": "indicator--d8d49d5e-d8de-4a1b-98b2-5df7c41311e8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4eb9d57-657c-4820-b93f-1ad0d2331aa2", "sighting_of_ref": "indicator--2df6fb61-b273-4607-a86c-63df33672e5f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f09024c-e24d-4072-923b-760d7c9b659a", "sighting_of_ref": "indicator--922b379b-adbe-469a-a67d-bf094fd00a7e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b5c50e2-4045-4e7f-8ace-ae3c63b59d5e", "sighting_of_ref": "indicator--7829c836-6ec4-407a-8b5b-f3c485108e41", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5622fa0b-9fa5-4a51-938e-4d9002f4e0c6", "sighting_of_ref": "indicator--cc55c669-a9fe-4e11-9621-f6d5e29401a5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd088298-4139-4e20-820b-451376576632", "sighting_of_ref": "indicator--3ed54c52-4754-44f6-a54e-66343ed775d7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa686624-12b2-4e48-9e14-1fbc456fa38c", "sighting_of_ref": "indicator--e16b6d25-d856-4a99-b879-cc76ad772740", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f23fa5-c929-42c5-82dc-11be85e1679e", "sighting_of_ref": "indicator--04bf2600-bfdb-4d90-8506-14bdcd97d72e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--080aa4c7-1af4-4923-867a-4e81e47f4f68", "sighting_of_ref": "indicator--cc2ad201-023d-48b8-a800-3dd65bac82b7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c60803dc-99c7-4566-8553-ae3d04398d20", "sighting_of_ref": "indicator--9a2039f4-af6c-4476-af39-fbbe10780e82", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a416ea4c-2405-4e31-8f25-b471b7c1598c", "sighting_of_ref": "indicator--e81b8621-5729-4646-ac2d-3b02832c42a3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2ca0dc4-06c2-489c-a39c-1667f578b0cb", "sighting_of_ref": "indicator--5bb85ed0-9d09-4f4e-9667-2df7a54845fa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b461cdb-ae57-4bf1-9010-1856e29f680f", "sighting_of_ref": "indicator--20a62655-b76a-4000-a3f0-85bacde81e0f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4447f101-7172-47b6-af88-971d387c7aef", "sighting_of_ref": "indicator--57136ec4-c407-49d3-a549-eeb37044ac60", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf0d088-cc17-46a8-88ae-b13524160d98", "sighting_of_ref": "indicator--c013db8b-4df2-4b2b-acb5-398fa085cfa5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5823d110-6f30-4bbb-9684-ff75edc5e357", "sighting_of_ref": "indicator--33ffcaac-810a-4f83-a213-cee957be6302", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb2ea3ae-812e-4db5-a0ac-3e6dd51ae472", "sighting_of_ref": "indicator--d658a7b2-caef-403a-b876-0da5262e6336", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb0fa92b-e3dc-456a-bc9d-3d8caa1d577f", "sighting_of_ref": "indicator--b188c686-98be-424c-8a25-6c73ae0a27f6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad4f9b3-3b96-4619-ac94-e56021127958", "sighting_of_ref": "indicator--b2ab1945-40d6-4596-88ca-4262a68d1e33", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb9796e0-6621-4a55-9cd6-c411659518c9", "sighting_of_ref": "indicator--fdea8358-4ddb-4a3d-bd36-cafdcfb11bd9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--071741f0-cbce-4cd1-89a6-e7d22ffdb4da", "sighting_of_ref": "indicator--45cd04ac-754e-47e2-9d6c-1ae70e0c9d84", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4342ddd7-a79c-49bf-812e-7e4b92f25c05", "sighting_of_ref": "indicator--e21a86a5-df69-430b-80a8-6b31fac9662c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af330394-4069-4cdc-8440-4d9abe8a25cc", "sighting_of_ref": "indicator--1807c9a3-a513-473b-8a46-ba8a9a2b32e9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--771e3856-e134-463e-babc-a481bb18431e", "sighting_of_ref": "indicator--67552f1f-5634-4b7f-a8f4-20c7119ee96e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6712b335-c9cf-416f-ab9c-041f28b40f82", "sighting_of_ref": "indicator--cf0e3daf-07f2-43f4-bba1-84dd7d5e9cb1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d171bb2-cc35-426e-91f2-1e74c3b2cf46", "sighting_of_ref": "indicator--95e55af4-a94b-4263-9755-03eb82b037e2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eac58aa-f101-4d71-b1ca-dcf1c9f8f57e", "sighting_of_ref": "indicator--10ce9229-6d4a-4933-94fc-2c5783ff228a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9825d7ca-db48-4788-a048-e760858176e6", "sighting_of_ref": "indicator--1390cca1-5149-4429-8c07-bb970e7710df", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec5d5bc2-3b59-41ba-8697-7ee9398bb14d", "sighting_of_ref": "indicator--1e3501f2-5700-4e15-9237-3972a7a53c7c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c6f6e91-2428-4f54-bb7d-f074b012e252", "sighting_of_ref": "indicator--92486bbe-128e-4421-b93d-83d286bafc4c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c52d4e-62a2-4ebb-8714-a60febffdcd9", "sighting_of_ref": "indicator--9268e0da-18ab-444b-bfab-fd038dc4c30f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73990f05-6527-4759-83dc-548430c836af", "sighting_of_ref": "indicator--2cb87bb4-e896-429a-8678-b720dd865f9c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba18b187-8713-4f2c-b583-c82eeb64d56c", "sighting_of_ref": "indicator--566ddd3a-5f8c-4464-91c5-e28f0d57ef4c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b1265b-edd6-41d8-a332-0ba7603b5ced", "sighting_of_ref": "indicator--29ee6ce5-4549-4842-a8ac-6b9aed7d1631", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e46f558-79c5-44ae-b51c-c20fb6e1dea5", "sighting_of_ref": "indicator--59f66f5a-f23d-4fcd-9e17-6aea1af9339d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--436cdd9c-bc9b-4152-9a73-d5ac694dc098", "sighting_of_ref": "indicator--830bf46e-c96f-4066-a229-8154bd252316", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df106fd-a46a-4194-85b8-49cb2a73a55f", "sighting_of_ref": "indicator--e86a3e8c-773d-4976-b003-dc474a343de9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--846e328e-9a75-4b44-8a59-e5d1a5050ffd", "sighting_of_ref": "indicator--f15c373c-f0eb-4caa-ba0f-eac27fe8c69d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fb59700-11f4-4cec-8a63-66cecd54cedf", "sighting_of_ref": "indicator--c8aa9dc0-d793-4c59-aee9-ec5a2b5ae379", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f4e90bf-738d-49fe-85cd-849371783c17", "sighting_of_ref": "indicator--fe4dbdac-1d8e-4359-83ca-e57808975188", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--930bda13-0376-4b94-9f83-fdcc71254f31", "sighting_of_ref": "indicator--f67d4bfb-4bd4-44ef-9544-7f5c7c11a7c8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10314a98-755b-453c-bff0-e25737eee40f", "sighting_of_ref": "indicator--eec13ef5-feb7-46a7-895b-146e3e5ca871", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec21b4d-d8a5-4bb5-affb-b5bbf59ceb24", "sighting_of_ref": "indicator--75bd004b-0b5c-4e15-b32b-8e9fe1899687", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--810640ed-1e3f-4000-85da-487d0b5873c7", "sighting_of_ref": "indicator--985d6a35-79d4-40e3-a1c0-bc95bfcab1a1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20fe0113-a7ac-4097-851c-32731faa8e64", "sighting_of_ref": "indicator--8559f86e-0880-4860-b8a0-d0930f127989", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7649cd53-8f06-4ff7-8288-3495b40a4411", "sighting_of_ref": "indicator--a8fcbed6-3a13-4720-b9ae-6c48e9dc9cc1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a18850db-9d89-4b78-820b-b23c8fe3a8d7", "sighting_of_ref": "indicator--43ee7da1-fac1-47d1-8139-859ba400a980", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52b201df-8a2c-44a1-b6ee-8d450182872f", "sighting_of_ref": "indicator--60ad7188-1e4e-4cb9-a825-ae5561e1b5e1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e7fcf1-5ccd-475a-ab78-e70fc3fbace1", "sighting_of_ref": "indicator--f7083577-9adc-4f3d-815b-903b65845ec2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dae7b1d-5c76-4088-8945-cb3eaa9c5d03", "sighting_of_ref": "indicator--e4a7da75-9334-4aa8-92be-2f229f8f9402", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f508f35d-4e74-4f53-a783-70faa0a2bd9d", "sighting_of_ref": "indicator--f576bc71-ceeb-437b-b74e-7a8dc3d7207f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae51f632-4447-41ec-95cc-112319c9a60e", "sighting_of_ref": "indicator--8a5d91e6-b676-43eb-9711-32a154aea087", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f9baa72-fc8e-4f15-ae9b-a8e1f301ba72", "sighting_of_ref": "indicator--ea35da89-91d4-49c3-b9d1-adf5f27fe9f6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--add0afb2-ac1f-4a8d-b9f8-bd43a1961559", "sighting_of_ref": "indicator--f5b2bdfe-2f4c-4daf-ad1f-968db6320d4d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a507c9d-502d-42fe-a7e2-8d4d0eda0cf6", "sighting_of_ref": "indicator--78e4b5f8-885a-4253-802a-e1b1d90009ef", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40a97c22-d89b-469b-be80-139ef16ee18d", "sighting_of_ref": "indicator--53a7625e-58e4-49db-a808-e3b7e394ad02", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4cc2820-d896-490d-8a7e-c580a657c785", "sighting_of_ref": "indicator--f801565e-4797-46f2-9d9b-8a21cf0dbdd9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42883c74-145f-4ba5-bbbc-44a427270ad6", "sighting_of_ref": "indicator--03e6e7b9-df93-40d5-b877-c3c254eec687", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33235676-3cb2-4ade-a65d-16f870e056dc", "sighting_of_ref": "indicator--b47b1b38-a001-4a40-99fb-bb6bdad8910e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--619cb44d-6bb3-43e2-869c-4a51b44d9914", "sighting_of_ref": "indicator--7e0a87cf-fd1e-4b77-9003-3878a1e1a3ae", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9065aef4-934e-4593-8559-0b9b4d8d9bbc", "sighting_of_ref": "indicator--67bc8499-1236-4a5b-bca3-40223a0771c9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--389899b8-d13d-4d9a-84f2-84090c988f5b", "sighting_of_ref": "indicator--a029496e-912e-489e-b664-d3f7ae8738b5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d325bcc1-765b-4a89-8f70-ae1b29405a3e", "sighting_of_ref": "indicator--81407912-cf88-4d74-9402-530735be77dd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c3896a8-162b-4972-93ce-966700076fe8", "sighting_of_ref": "indicator--75f53a8a-129b-402c-acc4-34840911615b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f523045-fba1-4b39-a757-f3d75bb84d3f", "sighting_of_ref": "indicator--0764cca1-f78f-4aea-9481-e6204226404e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b54ea0ea-f634-4373-8401-d27dd3c88d32", "sighting_of_ref": "indicator--a8c57ea7-5ce1-430c-a071-a4816137acd7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f498227b-9702-4615-9820-f203e49b4f83", "sighting_of_ref": "indicator--9150b416-30e9-4155-bfeb-f3743ab96050", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4e4e46b-5467-465e-be83-6911a6800fb5", "sighting_of_ref": "indicator--7651422d-ec21-4ee9-b407-7f816eb3a693", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8b2bcde-e0b7-418a-b9b1-3905391b34d7", "sighting_of_ref": "indicator--455503bb-6920-43d0-b2ba-da91f9fec189", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eab0237-8e73-4590-9bd0-c64c3f521d15", "sighting_of_ref": "indicator--74d72f00-b190-45e7-a02c-6373cbdf9c9c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4793ce30-4a7a-4c64-bc0e-43d45c578cf0", "sighting_of_ref": "indicator--34d02f50-1689-47eb-b0fc-6e063392c8bf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d58f1af6-15ee-4cf4-a72f-6ea26731a330", "sighting_of_ref": "indicator--4262ccdc-1aa6-4599-be2a-64221677916a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa302770-3fc0-4e27-9380-801f8ca02e18", "sighting_of_ref": "indicator--60d5acbb-b730-4698-82f0-ade8af68321a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--282045d1-303e-47b0-a57e-1b5d3e4f6c88", "sighting_of_ref": "indicator--eb8e7a77-6765-40fe-913a-3e9171caebb0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be924669-70cb-44be-8178-0000754a01bb", "sighting_of_ref": "indicator--7ca26119-62ea-4996-8173-ac7749a7dbf2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--858608e7-ff43-4b5b-8fac-ef2896134698", "sighting_of_ref": "indicator--f8e2409f-0f55-4e0c-abf9-0b46e64be547", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41eae914-0618-4ecb-abfe-bc1d3dde6f38", "sighting_of_ref": "indicator--1ccfd89c-587f-40c0-8cc1-bb3a8f055748", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--840d6de6-86e6-480a-9b7c-8422ac997fd9", "sighting_of_ref": "indicator--b8495c32-4ff3-4750-ae2e-e187dc9a3394", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94719193-e243-4fdd-bfd8-af0e1602bf83", "sighting_of_ref": "indicator--f13ee1b8-8429-45aa-aa75-dcb2195e55c8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a7b9113-b949-411f-970a-88075c78d97c", "sighting_of_ref": "indicator--349e714c-9bb3-43ac-bf4c-7c3d198e7259", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc7ae4cb-33b8-4149-8b8b-5c1f4856fcc4", "sighting_of_ref": "indicator--3cb525d4-6a48-4287-8100-6e4eb1aeb1d6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28bcf628-7f98-49fa-8ed4-064c6577eb05", "sighting_of_ref": "indicator--112c19b8-b41e-4678-aaa4-1cd3ec13fd2a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f96480e-15a4-41f3-927c-a029bafa9788", "sighting_of_ref": "indicator--1d268b3b-a3ca-4605-8e77-454761c5cf89", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--655e7e31-4f76-4a4b-9ec7-c4b5ad8d72c9", "sighting_of_ref": "indicator--6045b5ef-cae0-4e62-bc71-4881b489fbd2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d25c9ac-ecff-4ba4-8cd4-a793b4bf26ce", "sighting_of_ref": "indicator--abe11832-4d61-478a-a234-e88d73bf1c8d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b36f6d5e-a0ba-4b88-9984-0eaade7f70b8", "sighting_of_ref": "indicator--86b45604-ee12-4df8-91c8-26a2d60137d3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cabea2ad-c786-423c-8530-5a259a0cc982", "sighting_of_ref": "indicator--55202ca6-2123-450f-8548-1c1795d476a5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e6cf931-71f0-4ff5-a298-2a88ca9de066", "sighting_of_ref": "indicator--bca01b9c-e255-4334-8c25-a888904c988a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f5bb2f0-dcb6-4b3e-9ebf-2dd9c22e5972", "sighting_of_ref": "indicator--c1d29b4c-7135-4513-bfa6-ad661520c283", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--684afe13-bd74-4b36-8446-f5e6089d96cf", "sighting_of_ref": "indicator--0b0bfe0d-7553-4eb9-bbcc-c236583c167a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--326a3783-724a-46c1-a02d-0f64a65d5461", "sighting_of_ref": "indicator--c586443c-7a09-41e4-800d-6d95c16eedca", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d099853f-c452-4a6b-ae1b-92b6aebbd88c", "sighting_of_ref": "indicator--eef9cd0d-1234-431d-8fad-52ac59d6934a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec87c3ff-337e-49f4-a1ba-3745292c377e", "sighting_of_ref": "indicator--1b18b55d-60c6-4c78-92c5-32a75f998a43", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58e5c182-4f20-40e0-89ae-218b8ecbb02f", "sighting_of_ref": "indicator--f9e67df3-e471-45e3-b3c4-424165748ef7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd8634ff-229f-4c06-b717-c3cdf7fc33af", "sighting_of_ref": "indicator--56a3d9e9-8565-4558-b29f-bd4fd9f37698", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0e1a13b-af0c-44d8-86ed-b18cbbf77043", "sighting_of_ref": "indicator--f1612773-8417-4176-a4f1-1f7f4a40f2d8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78404767-cc73-4502-9c68-9ca284599408", "sighting_of_ref": "indicator--2a6babe7-99be-4fa0-83fc-eb133826ec8b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43850397-69fe-459b-9472-fc2b9bfb8be6", "sighting_of_ref": "indicator--10b31f79-a19a-47d6-9a33-ce66b8da4bd2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99a5514e-e1f0-4b96-ab0f-e4574c342b53", "sighting_of_ref": "indicator--50c4c59a-7183-454c-bff5-075f7d61b66e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c60a69c7-d5e1-44d8-9b4d-884a38e58ac1", "sighting_of_ref": "indicator--15cd36e0-cc85-4917-95f1-4a337c12344f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24579729-3162-4531-acc2-c1c6df2956b9", "sighting_of_ref": "indicator--03adeadf-398b-4c8c-9c14-42af37988974", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c49fde15-6aa9-4748-80e0-d08b826ff4fc", "sighting_of_ref": "indicator--daeeee6a-ea66-474c-87f0-c61e3d1b938d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dbb3590-13ed-4ff0-9402-355d453d48d5", "sighting_of_ref": "indicator--b99bdf33-4bfc-4b0d-982b-aea9177af1f5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e496c1e-d385-43e0-bcb2-2dbf62cf69ed", "sighting_of_ref": "indicator--a7fe51ca-b89f-4b2e-b9cb-8d1d235e95d1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3866176-75a7-42c8-bbd9-da6ee244920e", "sighting_of_ref": "indicator--4fa62438-a52d-49de-a9fa-1ca50732fa5e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62f5511a-320b-4ea0-9c04-987192cb02fb", "sighting_of_ref": "indicator--4e119f2d-b6ee-416c-8d34-915721e377bf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f557ff8-9fa9-4e4c-bd70-5e6075a1caa0", "sighting_of_ref": "indicator--75b1f538-6bcb-44fa-8c05-010dc564215a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e82db8-deef-41d0-a55e-d0f20760be8a", "sighting_of_ref": "indicator--8f0e3308-b056-45c2-8cb2-c7dcb1284937", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0dde960-47b0-422c-9e7f-3f0050732497", "sighting_of_ref": "indicator--b8fb1ccc-03ef-4ed5-8295-0d93985b09da", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5072536b-0c3e-4241-937a-88e43f8c16c4", "sighting_of_ref": "indicator--1ab32531-ea6c-4a84-bb7b-3d35353bc56e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f438b173-b8b4-4673-99d3-ca53f2df850b", "sighting_of_ref": "indicator--5ff22a0b-b887-4939-b3eb-3d73a14eadd3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e4761cd-7b84-4ce4-b3e7-28c014b75670", "sighting_of_ref": "indicator--f1c82090-2c59-41cf-bd35-f1fed8a56e56", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c4e241-2ea2-4aee-af1a-2536f0d8428f", "sighting_of_ref": "indicator--9b0b3d2b-8208-4861-8cce-4e3134733adf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa2a0269-2057-4a39-8c87-9442a5e78603", "sighting_of_ref": "indicator--866ce51a-3513-4bc2-9ba5-129a7950e0af", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd78ee2a-ca80-4e3c-831b-e1694bd00e4f", "sighting_of_ref": "indicator--d63a6fae-02f4-4ea8-b967-94cb51f04c54", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c874aea-a05a-4562-9603-a99b82099503", "sighting_of_ref": "indicator--a85da1ef-f308-45b9-a66f-c6572321f0ff", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10c74b4f-67cd-4105-a53e-a11c67a7fc1d", "sighting_of_ref": "indicator--50a0065f-345c-402c-90e4-9644fda3e57d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2139680-2573-47b1-94f9-28d68b4b5a24", "sighting_of_ref": "indicator--1c44f455-e76a-43ab-a503-426afdb54074", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb66a4a2-1379-4605-8cc4-9f7e6fb4174e", "sighting_of_ref": "indicator--fb129e23-9987-485d-b4a3-40c170365d3d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--856dc07d-6561-4d33-a1a1-9ae4efdf05a7", "sighting_of_ref": "indicator--07876379-d0ac-40fc-96ad-09ab852fc6d3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21472882-acc5-4a6d-911f-9c1db23c2196", "sighting_of_ref": "indicator--527393fc-d9e1-4ee8-a2ea-4db37eaea55d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab11ecea-b608-44e1-be6b-e4749d0b564f", "sighting_of_ref": "indicator--f678a143-36f2-4644-a972-95f1e0dc6847", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5482e59-c4cd-44c7-be38-14e76c1dfdb5", "sighting_of_ref": "indicator--f8599450-c9c5-4b33-a0ec-bf923e65d032", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f65ec24-2eff-407f-b91a-a11815598f0a", "sighting_of_ref": "indicator--dec093d3-b535-4d3c-8160-6e3fe560eace", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec1838ba-e4b6-4bc5-83b4-1ed8360d31aa", "sighting_of_ref": "indicator--0546eff7-c424-4326-96e9-7216620e930a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a1e7a60-1eac-4bd1-a433-bee887470eb8", "sighting_of_ref": "indicator--37bb0701-9dcd-4d49-934b-30804f5545fd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e177aaf-e467-45d5-9dd2-3e6898a68f3b", "sighting_of_ref": "indicator--399f88bb-1a68-4c6f-b99c-9617adb3e324", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf10a6d0-5c96-47a9-89f2-09430dd55de9", "sighting_of_ref": "indicator--1a998173-3e59-466e-8a0c-92049578ac1e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--541d8081-0eab-4bbc-9e60-3311cfaac39c", "sighting_of_ref": "indicator--c04bf6de-f070-4a88-b78c-666fad93d194", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8448551-4ceb-48b6-b10a-63a6b8718f64", "sighting_of_ref": "indicator--a258b734-a5bb-49c3-b688-651cea0962b5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3db4ee2-6777-4120-96c9-cf7be1568f5e", "sighting_of_ref": "indicator--b0c93223-9527-4139-a232-2939f93cc84e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17444c40-493a-47fc-ac5b-250446146d21", "sighting_of_ref": "indicator--378e6bb6-8a32-4fb5-9aa1-a5ab2eb84f19", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd40a9ac-5fef-4f7e-a595-d61f9096bd36", "sighting_of_ref": "indicator--56b60071-4781-4b13-97e8-0fb030ee2707", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b6a3294-afb6-4ca4-b5ce-025ab09c0ffb", "sighting_of_ref": "indicator--cf67ca76-ac67-4d0e-ae08-1d91e63a2684", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2819a254-7762-40ff-87f4-f9dce459b205", "sighting_of_ref": "indicator--b99e689f-0c8f-4c08-88d1-156c49c212b0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a03898-7bdc-472f-83ad-87c20896322b", "sighting_of_ref": "indicator--3c3715c3-e1fd-4c50-b24b-8e29f7ae3e3f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf038b8-e670-49da-9ce5-a975fe34842e", "sighting_of_ref": "indicator--4ddc6e19-a948-4612-bc69-36fbae7a3a38", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3c27857-437a-4a73-a966-510ca1800f05", "sighting_of_ref": "indicator--e784e9bb-4709-46c9-b670-7b040dd8d202", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2849f0b-96d8-4493-81a2-46051dd57202", "sighting_of_ref": "indicator--a298ecb2-d8b3-4b79-b637-088c79893828", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65a96e42-10ec-4305-8275-70c55fd78e36", "sighting_of_ref": "indicator--66599634-1978-4dfa-b132-c676b5f02250", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3828ca9-f13a-4263-9568-b1a7f9f6d78b", "sighting_of_ref": "indicator--7a7cacb4-4cab-46e9-868a-bf8b23daa17f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5f504e9-bba9-4683-a3de-9d3caa971e6b", "sighting_of_ref": "indicator--fe23f17c-329e-4e70-ad6d-1f5247573283", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f6b9b1a-230b-4d08-b3e3-2b492c0fa840", "sighting_of_ref": "indicator--ad9f5dbe-d3ae-4ee5-abbb-0dab1c75e8c0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eeb1f64-6371-47a1-ba10-6a892db5cdbe", "sighting_of_ref": "indicator--ecec5ed3-4315-42dd-b634-4c328559cdaa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0719e7bf-f6c7-4a1a-a12a-3e944a43759b", "sighting_of_ref": "indicator--98ee76da-7d6f-4bc7-8ab7-e9cdc7e40c71", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed6e8156-905e-411b-a811-a27cae2e2477", "sighting_of_ref": "indicator--05da8504-d79a-4d6d-9392-9520202e3dde", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--216d0d69-71f6-4235-a402-4ad75c471e76", "sighting_of_ref": "indicator--59125675-d581-4146-a38f-08df57bd20e7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf0571b3-a010-414f-a5ff-f7f16a42d1b8", "sighting_of_ref": "indicator--92fa95a1-da5e-4452-b4f9-66867ab8dd02", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faf46dae-99d2-467f-a078-bdfb603c836d", "sighting_of_ref": "indicator--a7e94393-79b7-4b26-b038-0d5fb606caed", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca85fdc-916b-4f72-a3c3-d6f5a138fd65", "sighting_of_ref": "indicator--31fea511-fe1f-4026-b1e1-76476f8c4130", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ebf2fb6-4270-4482-9149-6650d85fe343", "sighting_of_ref": "indicator--fc5e4491-3a9e-4e7b-9d61-79f76b55a3f1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba7225dd-4fd8-4024-80af-b860c71bf2a7", "sighting_of_ref": "indicator--cde6454e-40d5-4d99-9f5c-967360fc8bf5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07dd0b63-643d-4dd4-8c2d-fe1862670a54", "sighting_of_ref": "indicator--38f207c7-40db-4db1-9e77-555663e59eec", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fdecd03-65ba-4863-a37d-20718fc79223", "sighting_of_ref": "indicator--6e9a5bbf-46b4-412a-9a1a-ad0ee21c9440", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f392900-cbff-46a1-ab3f-fb402b4eced7", "sighting_of_ref": "indicator--0e4a8360-fe8a-4717-9342-967d72c71425", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--950ea962-9165-4237-b6c3-3226348853cd", "sighting_of_ref": "indicator--3f43668b-a362-4827-801c-7c1be52a6b33", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa71355b-82e2-4982-a5cd-0d019951525a", "sighting_of_ref": "indicator--49e47cd1-77d3-4060-bdec-f1b5071a7180", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ede9ae-244c-41e6-9db3-7f44904dda9a", "sighting_of_ref": "indicator--c0f3d937-7928-4706-8017-9498ba3f36cd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a101cd54-0ed8-4af6-a26d-02978469a7df", "sighting_of_ref": "indicator--29319d64-9bb2-4a74-b17d-d83b874f0888", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a3dd31-076b-49c5-a4d4-051fc57ddd92", "sighting_of_ref": "indicator--24054c22-eb99-4da7-9806-9f3bf08e53b3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58f6ff3d-a5fd-4805-8db9-f6f9e24b71e0", "sighting_of_ref": "indicator--d1e32900-4e71-4fe5-8243-03bc5be7c2cf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4a0405-53aa-4eea-b12c-20c271e9eade", "sighting_of_ref": "indicator--47571c3c-714b-40f1-a673-5b5a9a39e532", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e6d60b-2c10-4d15-b7e3-c9182d0d7d25", "sighting_of_ref": "indicator--57e9071c-fb00-4bf4-b48d-03cabdbd2cd0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94eee388-64ba-44a9-840a-ad56ce6b2efe", "sighting_of_ref": "indicator--de0eb956-9d59-4f8f-87ed-cd30d33531ca", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bb12877-8184-4657-a4c1-57a5f96a24c4", "sighting_of_ref": "indicator--808adcb8-1ec4-4429-89fd-b8de2cf6fb0c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96527399-533b-4f4d-b7f0-18b8c23d34dc", "sighting_of_ref": "indicator--37fb5d12-c256-4767-abfd-ce2f5ab18f2b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1bdeece-1d3f-46fa-8505-cf85136a59aa", "sighting_of_ref": "indicator--35f890e3-ea4f-48a6-b681-dbdae77b7510", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7875106-2426-4425-a701-94501cabd1e2", "sighting_of_ref": "indicator--7a7f27b7-30af-4665-8e05-f6545602dd88", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40326d3d-3d12-46d0-8ee3-7213332352df", "sighting_of_ref": "indicator--00e5c6d5-7efa-46bc-85da-c7543b39113b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40bbdcd9-827d-45fc-9f68-c32c16992968", "sighting_of_ref": "indicator--44be118a-4a98-463f-82a0-d1482676f408", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d5fecc-c974-4ad7-ab74-65ad6a6586cb", "sighting_of_ref": "indicator--ab7f5dde-9b7e-446d-b021-cf105418fcdc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--392cd48e-a8f3-4602-912b-ee3cc9acb1dd", "sighting_of_ref": "indicator--f28b1b8a-1fa7-4d5d-9455-e388c3f183ff", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe597934-b6f0-4339-acff-70da8723dadc", "sighting_of_ref": "indicator--e3535f63-9b93-4ae1-a5bb-2c80f7d73745", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed3b6d30-a4b0-412f-830a-c33b840fa95e", "sighting_of_ref": "indicator--2555569b-e848-4986-949a-43ae3c437d1d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9bf29b8-ee24-4074-8671-0204be9c73e2", "sighting_of_ref": "indicator--a462614d-bfbb-4413-af0b-6128a278916d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--013b9cde-3097-4dab-9be7-053108916db1", "sighting_of_ref": "indicator--ed7be71a-defc-4f79-887d-4870088686c3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd1fcb87-3add-42e6-be98-713cab50927c", "sighting_of_ref": "indicator--9615325c-b0e1-4ad2-a7bc-8406f70ae84a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbb19707-2ab1-497a-b99e-1a77efed899c", "sighting_of_ref": "indicator--df4c292d-37d0-4a4f-99e5-d9c632f9f58c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3967e5a-9772-41f1-822f-f6324992791b", "sighting_of_ref": "indicator--1d7de2d0-fb09-4b2c-8b71-c573371d5920", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce94f6d8-5645-4eb5-a5ba-e63f6a7b21b1", "sighting_of_ref": "indicator--5f4bf5be-170a-4e7a-990c-8574aeb143f3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b01a2e51-2f6e-42cc-80fa-95c287bc2d56", "sighting_of_ref": "indicator--1298453d-19f7-497e-9620-c06c1ff88c03", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b6eba6-8e03-438a-aca0-a2d2d3121d93", "sighting_of_ref": "indicator--014a843b-8dec-4168-99a9-a93aea9cc557", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34ca13f4-f10a-4136-8f3b-e770b8a99e4c", "sighting_of_ref": "indicator--e593a7ca-b33a-4599-b40b-eebfc844c129", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aea214a-96bb-4d11-9454-f294fae8f194", "sighting_of_ref": "indicator--d9ac5453-f796-428b-8972-4de81fb03955", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d294d0e4-6b9a-4e64-b51c-8d6f306d3215", "sighting_of_ref": "indicator--dac91948-ab3d-4cff-a957-b22fffb27ed3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12581a15-c3d1-48a8-b0ec-ea4f25267bac", "sighting_of_ref": "indicator--4cd8a349-dc2b-4d23-90fc-9a06411fa146", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90ad99d2-98cc-462f-83aa-c4532d6fb931", "sighting_of_ref": "indicator--091bdb86-95c8-4b54-a0f7-b7cbb6e77d8b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--312e056e-0677-4ab8-bdc2-c22347217de6", "sighting_of_ref": "indicator--71be034e-4492-4457-ba3f-7e41bb56716c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--508d43fb-5a52-4d58-a694-b0646096be9e", "sighting_of_ref": "indicator--41a6fa22-1ac5-46bd-993c-3eabb0bf1e16", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26161d98-d88e-4b8b-8c74-3a3e0c3ed387", "sighting_of_ref": "indicator--cb3263d8-0b52-4de7-92da-bee93d031f63", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16363eed-8e8f-4024-b860-73a6670d2d1d", "sighting_of_ref": "indicator--e3dc28b7-4d96-440d-8100-ac998e7b1958", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4862485-4ca9-4924-ab0d-87e33796d5a1", "sighting_of_ref": "indicator--5835aa0d-ee13-40aa-9809-1368efe4e0a1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2c2f7e9-9b22-4ff1-9d00-e0e269155afc", "sighting_of_ref": "indicator--e2860b82-1699-4845-91a8-7e51f7eaccbb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d41dac8-daf6-429b-813b-cd51067c78ca", "sighting_of_ref": "indicator--cdfcd447-d9d5-441b-ba6a-c5159d4c6c03", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a3052f-2fb6-41d7-b0f2-26d796753a29", "sighting_of_ref": "indicator--827fb68d-056a-4cd6-91e0-4e565e13e96d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa25701c-8012-4a08-9961-f60f1eb3f329", "sighting_of_ref": "indicator--e1889e6a-43d2-4f40-9230-3023ab858ed3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e3a2d5-a91d-4c8d-a7c4-16d4bc611c19", "sighting_of_ref": "indicator--374804b2-7725-4f81-b8ad-76f0da0d09be", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f9ea64-bce8-49cb-997c-62444eb435b5", "sighting_of_ref": "indicator--e57a5a15-9926-4b31-8956-a08906257760", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f4c7643-2c04-47dd-bad6-af9574e5343d", "sighting_of_ref": "indicator--328a010b-5bff-4136-ba03-a5c0fb8279e8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bff0bee-9ab4-41fc-99c8-b64185b1b8c2", "sighting_of_ref": "indicator--c012461e-ace3-477d-9435-714ceeebf76c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eb2ff01-e054-448c-88fa-cc09b673c634", "sighting_of_ref": "indicator--47f39705-b689-49d5-9b42-e6c3d344b5c6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94055b2b-1206-4877-8e08-85c68559442e", "sighting_of_ref": "indicator--1b20b68e-0fca-4340-ad32-454f400c26ce", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--351a5390-9974-4043-b0d6-1aed8c8a2954", "sighting_of_ref": "indicator--2288f20d-08b0-4946-8c01-726f44208327", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fd35c99-1c12-42ab-8c5b-8b27dba7eca7", "sighting_of_ref": "indicator--66dee6d2-59dc-4be8-9a7f-43de52b79d70", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--249c4dca-c2b7-4d4d-89f4-ab0523878e4b", "sighting_of_ref": "indicator--99d4990e-31f7-440c-9e45-44aa5f7d4982", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5790e59c-64d4-49bb-8b0a-fb31c8f641da", "sighting_of_ref": "indicator--b4833932-f3f6-4ab4-b0d4-368c49578e6e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b88a569c-6f64-4b87-94ab-01e3e7957879", "sighting_of_ref": "indicator--0a89701a-1383-4d70-9f05-91da389f5df3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af80a9ac-bc72-4de4-88be-974da10ed1c4", "sighting_of_ref": "indicator--e9169457-d40e-4fc4-a6d5-f17e0e7a2eb1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1decd753-cb14-4819-93c6-fb8920fdcf84", "sighting_of_ref": "indicator--d29a4749-3463-49f7-a9a8-cc04c14d2275", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e13324-f0e1-4502-8d3a-d2d13bb0880e", "sighting_of_ref": "indicator--70cee809-f13e-4357-94d5-fc7fdbdfbe43", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c238746a-6fe3-49da-be18-e3ff9684b8f3", "sighting_of_ref": "indicator--4a6e5b11-47ad-4aca-8f18-98e59c0c71c0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3bbb8a8-84a4-4b01-ace9-69ebc2918d6d", "sighting_of_ref": "indicator--8774ee9b-7845-4164-974a-769603dbc488", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e4267d2-02ac-4666-87e2-0102dd23682e", "sighting_of_ref": "indicator--d20092e2-053b-47ad-8f09-9d82b4e7d002", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96aa8665-d740-44b6-9289-d3f780edabf3", "sighting_of_ref": "indicator--38a7ae18-5eb1-4ed5-8c85-56f4b0fad782", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32fd9fd7-703b-4d73-8f07-6bdab5ea97db", "sighting_of_ref": "indicator--b04b0ccc-3d8d-41cb-9a1c-14b3c34a1437", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f82f59df-3b80-45a2-b790-3aa0b68070a3", "sighting_of_ref": "indicator--ec89661e-6097-4896-b2f3-98fbc1eb4dc8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--259e208d-10f9-462b-8345-10d99f803b90", "sighting_of_ref": "indicator--9cb90962-52c6-4180-bf9d-31d26f3c7e3c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f81cc435-8eac-468b-9682-95aea5827c41", "sighting_of_ref": "indicator--c310e941-863d-4cef-8a3f-52dd92ed90bf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9312c4ac-061f-4c84-a819-1280a1a4a0f1", "sighting_of_ref": "indicator--ba658c31-c86f-4aca-874f-8feeffa838eb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706b91e1-1a18-48e4-b81d-59e58a1ad689", "sighting_of_ref": "indicator--51bd1d13-fe86-40e1-8472-890f49ef3404", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a7f88c-25b8-4097-9596-6052b88c5919", "sighting_of_ref": "indicator--ef030e8c-86f6-4fe1-8e15-c47690b790ea", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--687e7fdc-c85d-4972-9a39-c3251897c974", "sighting_of_ref": "indicator--4b293d5e-0b12-4fa9-81f5-13c0eccbceca", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8724baf6-4923-41b1-9472-9f97c46075af", "sighting_of_ref": "indicator--63b39953-aa13-4a8a-aaf5-3bf483600bf1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a335681-91ac-4af9-a354-abf8e9bbcfae", "sighting_of_ref": "indicator--830530e2-f180-4bdf-84e1-e67e91d3b762", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--514ad7fb-730d-4d3f-8ade-3bf59ecb8601", "sighting_of_ref": "indicator--f394217c-25f6-4f54-9ffa-11d81c99be80", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d249412c-0225-4383-b9e8-b5b47b8b6493", "sighting_of_ref": "indicator--6b3f010f-7acb-45b9-bfa3-d90acdd09727", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--405456c2-0e10-40f1-8a97-318ab45361e6", "sighting_of_ref": "indicator--c9093e88-bbf7-435e-a283-f4c52a1f0616", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81217413-d5e0-4743-9fbe-46ec4ed66b02", "sighting_of_ref": "indicator--6ffe3002-c1f7-4d5a-ba54-0b46e5fc91e7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b61fb42a-2a55-4886-b7b0-266a0c4ff92e", "sighting_of_ref": "indicator--1238c049-9640-480b-b005-a7f09e332aa8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66b6205e-cca3-4dbf-8601-ff309539a4bb", "sighting_of_ref": "indicator--76606b7f-e985-4e1a-8ebd-56a80c08e762", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cba51a8-7d64-464d-8477-eb7935577ff2", "sighting_of_ref": "indicator--b305124c-afa4-4214-8ab8-bee5d4ba8c7c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9649b0f-d27e-440a-acbf-ac434418ba68", "sighting_of_ref": "indicator--1f3719ab-6b1f-4c62-a010-1ca7ef0a3589", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee46d9dc-ebcd-4dfc-b069-dae5fbf19f1d", "sighting_of_ref": "indicator--671f6030-06c5-4b7b-802c-36b2b922bfda", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fd03606-3853-449d-bec5-26a4254f3bac", "sighting_of_ref": "indicator--a5d203c8-b928-4f66-8a2e-1d80b27d991c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96f57c9f-23aa-46a8-92cc-e1be944b13a8", "sighting_of_ref": "indicator--47e36685-5dcc-41b5-9533-13c037418b31", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d04e0353-5c0f-4158-a6f0-f9152aa96f64", "sighting_of_ref": "indicator--2d4092f8-f0a9-4fb2-996c-71f3986b6462", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea6289c7-810c-45e2-baa8-0be2625e90c1", "sighting_of_ref": "indicator--86a2a176-6881-4448-8c61-70ad85be3814", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a5a0da0-12aa-457f-a775-49d0d2991426", "sighting_of_ref": "indicator--e11a716b-4ddd-413f-b279-fd92a5ade207", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--289e3d94-ca88-467c-9928-c0587f6c3fa6", "sighting_of_ref": "indicator--770f3d4f-39fc-4da8-9395-e42b693b287b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e6965e-270c-498e-99e9-5711ac67662c", "sighting_of_ref": "indicator--e0011a7f-e2aa-4411-93c5-085048b16f9b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09bce7f9-0946-4b00-991e-686ab6dfcc23", "sighting_of_ref": "indicator--81a67532-bf32-4a96-8393-dcf2efd66e7c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ec3c4e-ae24-40b3-96ed-0142112ae03a", "sighting_of_ref": "indicator--d4346829-eaf0-4305-a7b5-aa86661bf35b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc8db986-8082-4710-8e3d-918f306e690e", "sighting_of_ref": "indicator--1caccf18-0b06-47e7-87d7-072df66e0c9f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--104bafc4-184b-495f-a8a5-ece0cb70eaae", "sighting_of_ref": "indicator--3cbecab2-1c5b-418d-a511-703f68423416", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5539ed3-0ed4-4abc-8cf3-5376f8292619", "sighting_of_ref": "indicator--d200391f-5198-45c1-8786-ab893f1b60ed", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c276765e-7dc0-4b31-a463-777126da957f", "sighting_of_ref": "indicator--9971a7c4-a46b-4885-97ad-c0bff51c3e81", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9178d287-dbe2-432a-ac62-43bd8442e9ae", "sighting_of_ref": "indicator--c188b418-59b1-44b8-b570-8782b56078f2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a37115-f249-473e-93ad-eefdcc8166ae", "sighting_of_ref": "indicator--c08c672a-93b3-4d22-83cd-ff4159799be0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a196908d-66ee-46c7-92e0-e8a1a7ca7c64", "sighting_of_ref": "indicator--9bc9f38e-878e-4877-b20f-db72aa713c1e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ed61166-f096-4618-bcd7-ce4ae7e3a789", "sighting_of_ref": "indicator--33a8ff70-b8f9-425e-937d-40e2926285c3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c5bbd8a-96cb-4386-af70-b704b4891593", "sighting_of_ref": "indicator--2579620d-877f-4b73-8ccf-197556988363", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee4e864d-7ae2-4d6b-9cc4-44632ad77d51", "sighting_of_ref": "indicator--40d73384-5277-4995-a4ac-d0a4b4813629", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e68402dc-e5a7-4f46-91dc-9ba674a64b6f", "sighting_of_ref": "indicator--4a6ee588-49e1-48a3-82a8-c8321ef7839e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07165e47-aa1b-4313-909a-1b3b4a0fd8a0", "sighting_of_ref": "indicator--00153364-4d3a-441e-b05c-9e385f2d90e1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2704319-b0b1-4e0e-a111-4f59d70f0335", "sighting_of_ref": "indicator--f88ce06f-f49a-4936-a0f0-5024fdb3cde2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50fbf4e8-98e8-4124-8455-9d6251422712", "sighting_of_ref": "indicator--4ec8db26-b60f-4465-8bd9-1a91eb0c24fb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f0f941-5744-4ddd-ad7b-ad435ae88115", "sighting_of_ref": "indicator--4c9f7771-bfbe-4c97-9a66-52ab3e9253e8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14ee70b2-c827-4391-baeb-633d4c52e600", "sighting_of_ref": "indicator--481a9905-6de7-4e1a-ae19-7ef8b5d29819", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6a5a045-9d41-436e-9435-75b0a8b845c3", "sighting_of_ref": "indicator--5c24320d-29a9-410c-a047-45aaf0ae2a76", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2e62b49-11b6-4dd5-ab4c-53949e1b40c5", "sighting_of_ref": "indicator--67283cd1-c8f3-4627-8e63-2bccda9c0bfa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d062039-cf7c-40c5-a82a-033717109a7c", "sighting_of_ref": "indicator--d93050d5-0247-4981-aa18-3fc7981a277b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd3286f1-06c1-46dc-a6c8-f57d42b3bfef", "sighting_of_ref": "indicator--61f18bdd-0612-4447-89ba-8c48916e3d74", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62d859f9-0b10-421d-8c0a-a1ed090e0a4b", "sighting_of_ref": "indicator--44a23467-bb7a-41e3-a8ee-849a686aa953", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--962bbb38-8921-4b74-b576-c89247cf7f76", "sighting_of_ref": "indicator--07eeeba4-caa5-456f-b422-5b8f64129a76", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff8b9f26-e67e-46f8-aa3e-134487cc4071", "sighting_of_ref": "indicator--6bbe0a9d-7da4-45e6-956e-2fae4d5cacd9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdf12ba4-caf5-42d9-9134-c2e99e4604b0", "sighting_of_ref": "indicator--2dbf4e62-3733-44c1-abac-0601e7f843ce", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--572647ae-4455-4952-a925-206ff3042ba6", "sighting_of_ref": "indicator--904548a0-80b0-4123-9f27-d9d93a2e6ef2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c444bca4-6d65-4bc8-9a25-a1e1a14bed0a", "sighting_of_ref": "indicator--f4c9db4d-5043-46d1-b28a-1b7e05bf20a6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e54c0a-17f1-4f46-adaa-6d8f5720c282", "sighting_of_ref": "indicator--21ec4a6d-b14c-4d4f-afe3-d0a7d4d9f172", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6311c5b-c65b-44cb-b35e-4cd68c724f3e", "sighting_of_ref": "indicator--645f6a51-8ccf-4177-8ebe-5b7f036ea9b8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18e05e7-62b2-4060-8f23-ed2c875dd88e", "sighting_of_ref": "indicator--8c1efbc2-368b-47e2-89a2-bfcd9a2517ad", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db40d2a-93b7-4a1a-bb0d-8a78a259f0d0", "sighting_of_ref": "indicator--009b5bd1-3b9d-4be1-96e5-c5e0f0f39fda", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b30e6820-5d6c-425d-be38-407b2d53c332", "sighting_of_ref": "indicator--ce9b2de0-0c66-428c-a0f3-5231acb49f7a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a0b6cc9-054d-486a-845f-1605db998f9c", "sighting_of_ref": "indicator--a84ce1c6-7dbd-430b-b911-435ce15a6162", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b7864cd-c7a2-48ae-bfcf-83027abd776c", "sighting_of_ref": "indicator--8e21a31d-6f4c-4bca-9c2b-2c33d479c8aa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df38069-74ee-40f5-bf6a-c764d1b02e49", "sighting_of_ref": "indicator--9f7c2d14-086f-4181-88f7-dda043ea3ff9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4108bae-ec42-444b-9782-d2d80d8baf79", "sighting_of_ref": "indicator--e693cdba-1a55-4cbb-972d-8a79ef849ac2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc3cdfa-c304-4642-b230-e10e0f56ce11", "sighting_of_ref": "indicator--2ca83508-c23d-4484-990e-74ff7576fe67", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24fe7b2f-88dd-4986-8560-87ef08628b78", "sighting_of_ref": "indicator--39deb268-602b-4802-80bb-2b55a6fb3985", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e616f9f2-cdb2-480f-a1ac-b95481ce1366", "sighting_of_ref": "indicator--710e7bfa-fbf1-43b7-b3e5-0d9b74532d92", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6adabe84-49d7-4fdd-a21f-ea1afb054f0a", "sighting_of_ref": "indicator--8fd1d19d-6721-4680-a001-fbca75a7c2c3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edac0a96-e680-4dd0-ab3d-6c4859af31d1", "sighting_of_ref": "indicator--68a831a9-6294-4e51-b212-0decfdd6d016", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f33508cd-4d09-440c-9a05-582a4c074073", "sighting_of_ref": "indicator--f08c8348-2ae5-40de-aa41-02f155603162", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3500aa4-712d-418d-a041-2787c619926b", "sighting_of_ref": "indicator--3fb28598-98e2-4fcf-8758-23d738475827", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f63be3-59ee-4108-a9a8-1ac8359d6f2b", "sighting_of_ref": "indicator--565e35e0-282b-472a-ad51-233c9f36735f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ced629-247b-4ff5-8b3c-26b74e5c4af3", "sighting_of_ref": "indicator--c0583184-b018-42f2-8e7c-d9b64e558d17", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acece1ac-d655-4aeb-885a-debbe0e94b44", "sighting_of_ref": "indicator--2ba84159-11c3-46b8-ab33-f77f9f903597", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e4f532-3b7f-4176-8b5b-b22f93ee4365", "sighting_of_ref": "indicator--762089aa-7bd2-487a-8b09-fd004d60b179", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb7b8bd3-48b8-46a3-90e6-9897d70327fd", "sighting_of_ref": "indicator--634cca69-7cf9-42ad-8852-9fee564fff7d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba7de62-c97e-4bd8-9d11-d013ae4863f8", "sighting_of_ref": "indicator--56f852ff-56a1-445d-9cb1-319e1fa7b51e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfd4ac48-1f9b-4d29-a052-b99570c8e67b", "sighting_of_ref": "indicator--e31f8f70-3461-4db2-9d62-7f9235bbe0f0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8287b48-f9c0-410c-b568-3a6c93a8d0fa", "sighting_of_ref": "indicator--8e60e345-aa30-49c4-8b3d-b89f1b8e375a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede43801-9461-4f4e-9e7b-5d2b7af49bac", "sighting_of_ref": "indicator--98b029e9-ae51-410c-806e-64e74898548c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c783d4c7-7995-4a5f-b4b0-622c5fced5a1", "sighting_of_ref": "indicator--ff8c282b-a561-49fb-ba50-5232297c20a5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6688c700-9791-47d2-983e-3df3e916cd28", "sighting_of_ref": "indicator--e6b72a8b-33f3-4894-a312-b6f609d136d9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1997713f-e70f-4d9c-a1c4-b9d2818d3245", "sighting_of_ref": "indicator--baf35498-c387-45a6-b107-eadd0b708011", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed89998a-5daa-42cb-b5b4-bf46d1175bdb", "sighting_of_ref": "indicator--9f0e04cb-9ea1-4a54-ab63-8615d7501f07", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b13fbc7-2646-4a6f-8ff1-e71f4bc8ad23", "sighting_of_ref": "indicator--170720d8-b9c2-4592-915c-a92aaba01277", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bea83971-077b-4801-b2c2-2247842adfa8", "sighting_of_ref": "indicator--b0f6217a-a6ce-4313-8f4c-4a1a10bef115", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--121a0f6a-f98c-4a58-8265-0e4ae85ba4b5", "sighting_of_ref": "indicator--26467645-70d1-46f4-aaad-7c9f74eb291b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca6e4633-c6a5-405f-9447-12302f7d8d1e", "sighting_of_ref": "indicator--332e8cdc-cd3f-44ac-a09d-9fe511b80547", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3f5f9ff-4b89-4190-b342-dbab031dd9b6", "sighting_of_ref": "indicator--c696e9f6-acd8-4745-a486-619c347c0ce2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d4e8929-fdca-4ee3-83bc-be8408a896f5", "sighting_of_ref": "indicator--5419b7dd-f2ba-496d-81a9-e66aa73b0f82", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--643a2146-df20-41cb-b980-45a487d90127", "sighting_of_ref": "indicator--48ecb087-dc4e-4a35-a57a-4b644ba0d447", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a362bbb-2778-4515-b6cd-ff5ea1db5bc4", "sighting_of_ref": "indicator--8dd96fd1-88b9-46f8-90db-1f695b2b98a1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a18dd51e-318e-4d46-be09-5a95616b371a", "sighting_of_ref": "indicator--eee1eb10-4679-4ef5-97dd-9d457a5a9274", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05d4514e-96c9-45bf-b58a-62922304b4a3", "sighting_of_ref": "indicator--04cd1cc3-073e-4ca0-99bb-cd7022934bc8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c458b997-c02d-4c3c-9006-905656f469fd", "sighting_of_ref": "indicator--96429605-976d-4cc4-ba3e-f59247277f3f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc257989-a832-4731-9c33-f005c594a0cb", "sighting_of_ref": "indicator--a741dbfa-d885-409b-87f0-df3e33a02641", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c5d71c2-0a71-43e3-814e-98c58623fee3", "sighting_of_ref": "indicator--627331a1-a293-46a2-a6b9-35481627ebba", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b02fe82e-a9fa-46f5-aebb-794d8777c3d2", "sighting_of_ref": "indicator--22c4788e-1b0e-4171-b3aa-514b86c34c52", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f11fa1a-dad6-478f-913a-6066173b3b05", "sighting_of_ref": "indicator--fe62617a-0ab3-4715-a25b-bcbfd7c16881", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32c27e01-15b6-4010-b80a-a3f6744ce9dc", "sighting_of_ref": "indicator--7d5b0468-6313-4443-9223-fa2ec2930eee", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1c375dd-2fd3-4260-9937-cd3f28589039", "sighting_of_ref": "indicator--0770235d-04c6-466a-a10a-2649b6ba1d71", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36971a15-fd00-49cd-aa2a-13439e9c1c0d", "sighting_of_ref": "indicator--43cc10e4-6622-4f02-b7f2-3fc48c53408b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1372f341-9e82-46b0-ba74-bdd374e7baa2", "sighting_of_ref": "indicator--d7b92ae8-f17f-4f3a-85be-2119215fab8c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d33a8961-9925-4071-ae0e-229e53bba462", "sighting_of_ref": "indicator--8c728fb6-7246-4753-891c-7b5cfb81efd8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bebb4093-8d82-4ce3-9fe4-8cdad5e37e1f", "sighting_of_ref": "indicator--2b4b04cd-cd4c-4ed4-a4f9-2c053b189b5c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--677d4b3e-ba05-4aa9-a23e-73ca1072e6c3", "sighting_of_ref": "indicator--e88eb3e9-7b1b-4e29-9499-c0080ae8f58e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6614c2f1-bafe-4e5e-89b5-9ff1431ccf8c", "sighting_of_ref": "indicator--aa64cec8-87a7-4e0e-805e-e8445992ad55", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e560b60-043c-4ba4-b57c-13f93d7b0d29", "sighting_of_ref": "indicator--b01c2fdb-4354-435f-b3e3-13e9940a084f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9c18dc7-545d-4567-b411-d9d078d7ba94", "sighting_of_ref": "indicator--ae6b6b20-5709-414e-9d30-58429fb222c8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40be48c3-cdaf-44c4-afbc-b10e1a9fea9a", "sighting_of_ref": "indicator--f90ba487-7c6d-42e6-99a2-cae07ec14644", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fffc703-8f8f-43fe-85c7-4ac585ce3b2a", "sighting_of_ref": "indicator--42573c93-e3e1-47af-9b5b-90d097da9de0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf13e80-af5b-4fab-a11d-873cd9480583", "sighting_of_ref": "indicator--0af439b3-e71d-4141-976a-02fbe6a0821c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea71b75b-a96f-4ddf-a7ec-eeec4e76fc73", "sighting_of_ref": "indicator--8cc5db6f-5e27-4b80-9035-082be6796b64", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc47f20e-7c8e-4464-b432-42490064ba1f", "sighting_of_ref": "indicator--0d310114-86ff-4433-af53-8090554f0623", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a04f4f-8f80-4d96-aba8-cc9b9c74109d", "sighting_of_ref": "indicator--02c1382f-2501-4273-8f91-94e026f7d351", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab622059-65a3-4d13-9d37-728140114eeb", "sighting_of_ref": "indicator--5fad38d4-0aa1-4dd9-a426-efb4923ed358", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d5d008a-348a-4b0c-b612-b71804199309", "sighting_of_ref": "indicator--5acd3680-0d68-458c-8fe1-0a0a8eb70f00", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cc5f9d9-864d-4f1e-b0ee-246bb035a444", "sighting_of_ref": "indicator--42128c82-0820-434e-b756-2adda72029d0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff0bfda5-acc0-4852-8078-540ccf34f5be", "sighting_of_ref": "indicator--aeaf3c39-7f61-45c7-8083-a7149f50b12c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--033cca9f-c143-485d-ab24-9937a713b357", "sighting_of_ref": "indicator--e0cff683-b09d-4b91-89ad-16870fc0379a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--662cc893-3e23-49d7-970f-35436fa4c27d", "sighting_of_ref": "indicator--65b6076a-4226-464e-92f9-ade36f764c97", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44a1e404-547c-4464-9d93-9f9de05d092c", "sighting_of_ref": "indicator--bdfb9fb4-65da-4017-8fc8-d0f87649ce92", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73928698-8200-43ea-a578-a86669612a36", "sighting_of_ref": "indicator--fc80dcc3-179f-4520-94b0-db939c81a950", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--471b5396-6550-4d81-9efb-0baf1efb5d1e", "sighting_of_ref": "indicator--44505771-9586-43be-904f-64c87ee58464", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2846c91d-4467-40de-b8dd-83e76603ef6b", "sighting_of_ref": "indicator--57239328-e3a5-41bb-bda9-f233f8b1b6ff", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--563a389d-6c00-415f-a516-dd2804bb3aa7", "sighting_of_ref": "indicator--00737a14-5509-4cc7-bc3e-3907e462ed2e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2385e3c-c7fb-419e-aa85-25598c181bc0", "sighting_of_ref": "indicator--2f486b19-cd21-4688-9749-eb1473e0f3f9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9835897f-fefe-4eb3-a94d-691ada0cbe09", "sighting_of_ref": "indicator--0948268e-91fc-43ca-b691-a6a1b925ee38", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--802a3570-5695-4bd4-9d30-7636432f8a8d", "sighting_of_ref": "indicator--d845355d-fae2-458a-9f4a-b4cec25a49bc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5c2c9cf-06ac-4cc0-ac4c-3f3075eccd47", "sighting_of_ref": "indicator--c85936f7-448b-4c3b-a31f-676e2a821e36", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac406f2-fe77-412a-90e3-6b4da54e1d73", "sighting_of_ref": "indicator--a9a5ed47-1ddc-45f7-94c7-29274b2280f7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--232e9381-05ea-42c4-ab68-3d405f5e073b", "sighting_of_ref": "indicator--0045fd45-77cc-4367-a57c-8a3cf0b2b6af", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e2ac255-8141-4c98-af8a-c1e2093a96f2", "sighting_of_ref": "indicator--c4bae58f-6e25-45c0-8e16-85c2e040bfd2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d12bdd3c-831f-4608-ab21-39df5b0f4b32", "sighting_of_ref": "indicator--8a5ffdd4-7266-4c2b-9ee0-6da278c1dc58", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fd7e024-b9dc-40e8-b444-024f64650982", "sighting_of_ref": "indicator--916ddaff-6aff-4129-9980-c4e80950ee3a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22927e49-8771-458c-bd80-fd3cc3691f06", "sighting_of_ref": "indicator--8272710d-354f-4012-b7fd-8a5bba679518", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd66ee2-32dc-451e-9f88-948e77eb3ba4", "sighting_of_ref": "indicator--7b8edc77-84c3-48c0-869f-39b8f362b5dd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db317ef9-ec23-4e34-8dbd-06c72abebc5e", "sighting_of_ref": "indicator--7dee1a46-2607-4d61-b282-f0d07d6bd56c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04d63020-af7b-4ef3-b019-1c3c781322ba", "sighting_of_ref": "indicator--e76bd182-f7a4-4535-a7c0-eb3a31edb577", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e704fb0-8b39-4a62-960c-a7c814a405a7", "sighting_of_ref": "indicator--93ab9a5e-f397-4e7e-8110-6d4faaaf56b8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc84ab4a-630c-4ff1-aa81-19a426aa7903", "sighting_of_ref": "indicator--83c42888-ad80-4284-8380-977b02d50aad", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc67881e-1d7f-4336-b7ca-a5b4a3cee5b2", "sighting_of_ref": "indicator--65593d7d-86f1-4de8-8377-daf0fe02860a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f8bea19-46bd-4bf4-8b3d-7551e214ae74", "sighting_of_ref": "indicator--0d05438e-a065-4566-ac16-ef0f154bcd78", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a114df4b-470b-464b-a8ab-3ffc3dda05c8", "sighting_of_ref": "indicator--95b0ef75-ebc9-4a2f-9124-42ae7c08fed9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7200797f-2530-4fb9-98f0-e03d83f5468f", "sighting_of_ref": "indicator--ffbbe5a6-115b-4399-9342-9a0df9f72918", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0179640a-1af9-44d1-bd04-2730e4a459c0", "sighting_of_ref": "indicator--6009eca4-3f79-45d3-9285-ddf020cad34e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e747e1-7f80-424c-86a4-2fb1f3ed4327", "sighting_of_ref": "indicator--18e8bc93-00ce-4b05-8ed5-a12b88ac57ea", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f4fd6c-1a9e-410a-be1c-4dc534c6567b", "sighting_of_ref": "indicator--b8bc3a13-260b-46ff-b11a-a29b8afd64a8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a21984-fbd7-4ed9-bb1b-f5ffbb94d154", "sighting_of_ref": "indicator--2a08b6e4-c9ba-4627-a973-9149b9e3c434", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cbb3f73-3e39-4af9-9a31-76a6438dad77", "sighting_of_ref": "indicator--3b22866f-bf15-4cb1-becc-42076c7012d1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a53be49-7189-4810-a07f-51c7d6f56116", "sighting_of_ref": "indicator--7529810e-fbb0-4b61-af2f-4d883afbb2bb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9ad1300-c2c9-4b02-b9fd-1538cc50f2c8", "sighting_of_ref": "indicator--f1b949f3-98ce-439b-8763-019202f54447", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59d2d32e-663f-42c1-a274-1669ec6b9198", "sighting_of_ref": "indicator--0dd5ef4c-e85f-441d-b0cc-f4d1b6334b28", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a651013-b92f-4f7c-9aaa-3d76c5936b0b", "sighting_of_ref": "indicator--cb6e5118-aed6-4be5-aa64-924395a6c2e1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6297fc56-9ac1-4f5c-a030-adf07e3b52d6", "sighting_of_ref": "indicator--d95ba772-c149-40a7-97de-beac6c06f9ee", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--693da5ad-371a-4701-b821-6eb98fd68f67", "sighting_of_ref": "indicator--abf9225b-86a8-42ce-9161-4d57de16fb0c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a64cf0-d5da-44bf-9804-67ff6629b938", "sighting_of_ref": "indicator--d2c9ee29-e5a5-464a-85d7-a5970a3a35f9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbbf0a85-045e-47a5-a19e-53d8e492bd5b", "sighting_of_ref": "indicator--1837560a-42be-4815-af19-1b9d2eb4f4fd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bee0e1a-dafe-471a-9466-3cf3eafc7542", "sighting_of_ref": "indicator--c16dc2c2-df8a-48af-85c0-0c7ec350e0da", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1acb357-bfd8-4a9e-b1a4-6afeca238973", "sighting_of_ref": "indicator--32a645d0-40a0-4c2b-be2d-02bd53e74c0a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a70454-9fc4-43b0-8e5e-ce76b1793fd9", "sighting_of_ref": "indicator--eccfd2da-8c01-4256-a5b4-ebb2d8b99d49", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fe16e67-981d-44fa-919f-caecce273b25", "sighting_of_ref": "indicator--564f4646-74e2-483a-be05-3b1bdde8a2bf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b2af7d5-9f61-48b9-9ffd-58636795c0d1", "sighting_of_ref": "indicator--553bab3c-107b-4240-a406-de0cf39e9b46", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d10013cb-1182-4599-b377-bef977764d1e", "sighting_of_ref": "indicator--317b58ab-87ae-4726-a900-0a15e36cc695", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--972edeee-b21a-49ca-838f-da9932e708da", "sighting_of_ref": "indicator--47580d1e-d9c8-40c0-b7ec-7804a5dc066b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d173c59c-6ed5-4211-ab67-4d3d25b09f05", "sighting_of_ref": "indicator--f79d229b-5fb2-4a19-931a-4d7dd890e2a8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dc65daa-6336-488d-8657-feb9db9974be", "sighting_of_ref": "indicator--952988ba-6d54-4c53-bfd1-44170ae1eaf2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ac9f596-d506-45b6-9bde-e07169bc394c", "sighting_of_ref": "indicator--473b3b55-a8aa-49f9-84cd-0f84f16f3456", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e0baecf-6082-4620-a51a-66ec7861096b", "sighting_of_ref": "indicator--17e1880a-ee04-446a-84ad-2db3b5aab485", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f431f957-bd53-4eb4-abb2-89839e54234f", "sighting_of_ref": "indicator--60b0a56f-83a7-4db1-9dac-2ce2867f1ccb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d857b41a-a354-46e3-8c15-92ffe23c9178", "sighting_of_ref": "indicator--cfd1b0cd-385c-450c-8b7b-a088ece73f34", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a93171-2950-4427-ab9e-67d8e11cf642", "sighting_of_ref": "indicator--6ee5c274-7ecf-41af-a589-381ed65184f5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a8efdf4-6ad4-4cb0-a781-0386e7592158", "sighting_of_ref": "indicator--9075be46-5d82-4f55-9041-ca5278e28e7a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd2a1ef7-41ef-4706-b230-46ea25a0a0e7", "sighting_of_ref": "indicator--29f9d36e-284e-4b85-a0dd-568e777034ef", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3664c94f-3c93-434b-918a-a3879db8eadb", "sighting_of_ref": "indicator--1915f1c5-98fc-4202-8713-f783873500bc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--594df268-703a-4ba2-9d54-5c782562ad2c", "sighting_of_ref": "indicator--2c079a46-4f1c-4e7e-bf47-827dcfc9555e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--762b0b5a-4a2f-4ae6-8334-63ddd14be8d6", "sighting_of_ref": "indicator--ee4a6afa-d887-40fd-b658-2ceb0c42266d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be8cc5ff-0b15-4efd-8929-8ad2c99907a6", "sighting_of_ref": "indicator--d94f5073-5ded-471c-bfcf-f58bb966cf74", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68592c0b-ebad-4f13-8d3a-c4750a47cd8c", "sighting_of_ref": "indicator--77105295-e7db-4bac-8fae-f70e094cd214", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab33177-ec25-4425-90e6-18edbe810881", "sighting_of_ref": "indicator--e257a601-9430-4adf-abf4-718c3d3b9962", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--289726fe-ab21-431f-ae07-3242c23f027b", "sighting_of_ref": "indicator--40faeaac-8f79-4946-ac31-53f4fabedd83", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aee4769-7b08-40d4-8571-18ec00cf9d68", "sighting_of_ref": "indicator--6da070e7-9e3b-405c-a432-baf3627a3acf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88f3de4c-df3e-47f0-8d04-439be64d32d1", "sighting_of_ref": "indicator--8ccfdd22-b1f8-45fb-9ec7-69bf8ba1e3c3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6591c2c-94f6-418d-821b-113dab9620a1", "sighting_of_ref": "indicator--5b48e6da-2512-4b5e-bb56-7a01ee0bd27a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3d8e658-6177-4858-a229-6ce28890a88c", "sighting_of_ref": "indicator--99e3d473-a0d6-4d1e-9a89-7f662cc004d3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fcb2388-b20f-4802-ab88-56a281536b09", "sighting_of_ref": "indicator--ff95ee29-186f-4beb-a71f-f43e0af6d5af", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4f9ecf8-a750-4d41-b993-b36d81f98186", "sighting_of_ref": "indicator--b6447cb9-9063-4f50-820f-19089acd8e90", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--133c0df3-f426-4026-99ca-e64f47ed7314", "sighting_of_ref": "indicator--2641d5e0-8584-49bf-a573-8443b85ecd6d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f419bcae-f644-42cd-9767-9c159abe3787", "sighting_of_ref": "indicator--f6ddeb37-2111-4f0b-95b6-0e1e5ef492d8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c13a359-edf4-493e-a0c1-cee19f930aa8", "sighting_of_ref": "indicator--62194e72-9fe3-47ee-8b6c-d3c9b9d9f708", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--036e1049-b38c-4e09-88b8-9ecde7af436c", "sighting_of_ref": "indicator--dd3f6d35-5217-481a-9458-055671d8a563", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a086c3be-b915-41a2-824a-ed7e5ee6c1b6", "sighting_of_ref": "indicator--0bf51c80-35b2-4b05-857e-bdbbfcb51006", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b2ab15-b089-4556-ac06-728e6f5bfb0d", "sighting_of_ref": "indicator--444b51bc-059f-459b-ac55-a3897377d2d0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c97246a-2fa3-438a-9630-024bf0e0d925", "sighting_of_ref": "indicator--c5cc0ff8-6895-4d8f-80e9-afa4f87366f0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d884a35-e701-4b5b-8722-322b466346ff", "sighting_of_ref": "indicator--7e5a6127-2687-483e-af2f-e98161378e6c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f79028b-8e54-4c28-a425-fd5ac356886c", "sighting_of_ref": "indicator--d9066c8f-ad9e-475e-821d-b4abcd93ad28", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79622c80-d31c-4b82-a7d3-ee8b9490ccdd", "sighting_of_ref": "indicator--38c0cb62-196a-4c6a-9261-5c094d5e9fe3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac161680-2199-4eae-8f5c-a4be136b7028", "sighting_of_ref": "indicator--4f187f38-ea7c-442c-b8b6-08b026f1b8e5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54bef7fb-08cd-4e22-9581-96f8152a2709", "sighting_of_ref": "indicator--2c4f0f0c-2759-475a-b4b7-465bd5937017", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b261c60-4400-4844-b3ef-45ee1c3c5ae1", "sighting_of_ref": "indicator--8ec096a0-3f17-4972-8607-3b83db8e8d89", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df85799-5d4b-45f1-b27a-4d19105c56e2", "sighting_of_ref": "indicator--9634b13b-78ec-4c98-b84e-7a408c19696d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35c1087a-1483-49d7-8e78-82eedb366519", "sighting_of_ref": "indicator--2cae7ac6-0c5e-4568-9421-2ec6951bc39f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d02cb2d-2596-43ed-8828-094d4a39cfe9", "sighting_of_ref": "indicator--07e02317-a0c3-495b-93bc-ba6ee2250692", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0251bb3-a998-44aa-87a8-8c84a185e014", "sighting_of_ref": "indicator--cf726aba-d089-43ca-bdee-a78a6dd67689", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf59d3d2-0487-4163-ae82-bb16366ade8a", "sighting_of_ref": "indicator--6b4e5893-e262-49e9-9ede-aff21f2cb5d3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db524a62-fdac-4c8a-8b48-d6c3ce5ff862", "sighting_of_ref": "indicator--01037430-5937-4431-bcd8-d28af6002e59", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad7cc5b1-221f-4c53-b236-dc4a74b52ed9", "sighting_of_ref": "indicator--cef6ad05-4505-4efd-8300-f00aed5e3b6d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb567e2e-a717-428f-9059-9737b64a753f", "sighting_of_ref": "indicator--fe5a9f00-73b1-4c32-9eef-c363e63d7a58", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b03a9c17-29fa-48db-85b9-f4932bc6c697", "sighting_of_ref": "indicator--c57884c8-7957-4ff6-b6a4-0e84c873ec44", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--150e5633-6cde-4003-98ab-f43daefb4aa9", "sighting_of_ref": "indicator--72338538-bbb1-4973-af88-b72dc287ab56", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15751ed0-6490-46ef-9e5a-7c0ffc3b5876", "sighting_of_ref": "indicator--3a9e4012-8b39-44ab-8200-caefa81d038d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--493310f3-fb62-4b5b-8833-816dc431efb4", "sighting_of_ref": "indicator--0924a86f-31d3-46ee-a329-7d48fdb98c92", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ac585a-4d52-4463-9931-ad0575208d7d", "sighting_of_ref": "indicator--98117a3f-6e0f-4981-95c6-f6ed5027cb97", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dd315f5-63d3-4d38-a76b-9771370c7a8b", "sighting_of_ref": "indicator--25ac72ad-717d-49a3-9e91-c0474774f28d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c5ffd44-cc65-4a73-992e-77de2425006a", "sighting_of_ref": "indicator--10eb8279-2ae3-49d6-a0f9-9bbed6cf9dc6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76dbda10-2b9c-49b5-b082-4573e44af7f0", "sighting_of_ref": "indicator--20b8580b-44ef-442c-bc40-7be1e50894f8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e044c51-7846-4ea2-a9b4-0e7c474df388", "sighting_of_ref": "indicator--a14906b4-f358-45db-aab5-2847d18a617d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e57cc25f-94c1-49d1-9ca8-982c22b0e813", "sighting_of_ref": "indicator--57fa8ab2-2ffd-43c9-87c1-fbed5ba86cf0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b267807c-e39c-41ea-9ca4-e2e93959f670", "sighting_of_ref": "indicator--68d548ed-bc70-46a9-8906-5dcf646bb037", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dce423a9-91dc-4e1e-a8ed-1f6a5a6bd91f", "sighting_of_ref": "indicator--f064e983-64b2-4eb7-a555-4c5ccac7210e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00a33f4e-6074-4b7f-8a3d-6d2796e5fba1", "sighting_of_ref": "indicator--5cb22665-f3c3-49ae-8785-c933c4c1ceb7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a33650-e0f2-43ab-8b1e-a274aa7f261e", "sighting_of_ref": "indicator--fa18d48d-0e8c-4383-b422-0381871595f0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5170722-3232-4d02-a744-9ce518264f81", "sighting_of_ref": "indicator--4c96b9fa-3177-4582-aec2-af9d011712ff", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8333fb10-585d-4437-aa88-08f0bc65f8c9", "sighting_of_ref": "indicator--495b1281-fbc1-4050-8ec0-f293ecbd216c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7eda098-9d94-4fce-862c-427bb34ce294", "sighting_of_ref": "indicator--1078a1e3-fbb4-434f-846f-5aeee32bae93", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df360a4-4c1b-4963-8381-30533cbe6141", "sighting_of_ref": "indicator--85fa327d-99aa-486d-b7bd-da76e5745886", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d18ba5d6-717d-4ab0-9867-fe8daedcbcdd", "sighting_of_ref": "indicator--06bc4c32-5ba7-4337-b09c-03a2ac3f5f0b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef284cf1-3788-4e34-9269-67dea3c2e0b3", "sighting_of_ref": "indicator--4206a3ba-39d8-42be-83fd-f27f461c5da6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7171f1e5-2116-4282-b0df-2b5191efff70", "sighting_of_ref": "indicator--0f98efe5-5698-4bb5-b443-6669405623db", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1602995-04a1-4501-9bf1-4e3dbe930c3a", "sighting_of_ref": "indicator--4d02b3aa-0783-4b5d-8cbc-8b3a4c0cb4cc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8a937fb-6188-43b4-b2ec-fb157d7f617b", "sighting_of_ref": "indicator--c2882423-f6e2-472b-af1e-1abd3d13be4e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ee8eb8-8d25-4702-b21c-9404fdcca1c1", "sighting_of_ref": "indicator--0e17446e-7f0e-41eb-8a7c-d0cedb16330c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b8c4549-7f2d-471f-a196-f0ef1e9ac1fc", "sighting_of_ref": "indicator--7a0813b2-5a97-4bfb-8e92-ba390eeb7f0f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--751bd774-44f3-4c08-89ac-5eac0599908c", "sighting_of_ref": "indicator--9312f774-f506-4fdc-886f-1b0841e71619", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1f1e98d-921f-4c81-832b-fe6e1d8c634c", "sighting_of_ref": "indicator--86857dc8-f268-4ad7-9cd2-17ba31c04c49", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29432266-f948-4acb-9e50-a187db93e932", "sighting_of_ref": "indicator--1b880b0d-46e2-410a-830b-e1f1d2219269", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4acf5fbc-0780-4e93-a0e2-87ab72a045b3", "sighting_of_ref": "indicator--c2ff62f2-877f-431f-a9e7-967bf6bd9ef4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6af3490-2bca-4947-bbd5-a706ae51371d", "sighting_of_ref": "indicator--8c85b715-f18d-4ad9-b80d-4df8a8c23b25", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7692b856-d6af-4a64-8073-6a2de7399909", "sighting_of_ref": "indicator--5cd3e3ac-84e2-4288-a833-8539bfa534d2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21571373-ebda-498b-ac0e-819d64512367", "sighting_of_ref": "indicator--023e36ae-fc51-4725-b08a-fbc5c8c33951", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d436c8-54c4-472c-ab60-4de6c3c7bc51", "sighting_of_ref": "indicator--04679e48-4432-4ba3-b8a1-79b41cdaf2f6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c40c2526-6e5b-4e46-a4e5-f95d0a933dac", "sighting_of_ref": "indicator--37a38810-8b58-41c8-a524-4055dd1ac2c3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ed4fc8-1b88-4727-bfac-eb4a0df09b22", "sighting_of_ref": "indicator--b7808de4-6a38-41cb-ae13-8274c2c53f7c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e18fbec-852a-4fa4-87ae-ebee84b6da11", "sighting_of_ref": "indicator--b414c27a-04d6-458b-8995-9eb0e7858877", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c950347-bc7e-4661-a6b8-e8ef54085111", "sighting_of_ref": "indicator--4ca6de8c-9859-4d61-b166-d629b2fc27db", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57be1d93-0250-42fd-89ec-f495bbefb150", "sighting_of_ref": "indicator--951015de-3b14-4a90-a81f-237a28be46ac", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d7f8315-63c0-4760-9894-cbe64758466b", "sighting_of_ref": "indicator--00fe6852-9f6d-424c-ab6e-028fc4c2089c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8352ea6a-fb3d-41ee-b71a-e88572d758fd", "sighting_of_ref": "indicator--5dd9eb4e-7ec9-4266-96c6-f667af261d8c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01d4e3e7-5596-4397-9467-bd15299dc71e", "sighting_of_ref": "indicator--edc20c92-7a43-4520-83ad-291f49cd3f49", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0dbc2c2-f1e5-4570-973f-4acd036b1af0", "sighting_of_ref": "indicator--8e0f25a1-0f91-4ede-9c8a-4ce4658d8b56", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6753ddb-9915-44e1-a08a-b78b47445bb5", "sighting_of_ref": "indicator--3fbe21ac-10cb-496b-9225-81933c61a304", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff4cb285-7c97-4a31-aea2-ad33b098d506", "sighting_of_ref": "indicator--f29a77a9-18c8-4614-a1b4-ed374a47c44c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd2b69f-6e89-4ae2-a455-e35589906139", "sighting_of_ref": "indicator--b2ae6d62-53cb-4b62-9a63-ea400ef1a07e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8914f5f-0b1a-4b85-8201-ec1ae9ed3200", "sighting_of_ref": "indicator--b12ede91-1f0a-447f-9715-41e7c208b7ea", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b93c23c1-e60b-49ed-b01f-3bf51680f6fe", "sighting_of_ref": "indicator--fa1d127e-b033-4c5d-b09e-42f7b17f8c68", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93d2b996-329c-417b-adb2-ede4b8fb1ff6", "sighting_of_ref": "indicator--d4974a05-b586-4cf2-baf8-c8f6e84f5ecc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f7c48b7-1657-4e46-923e-0b7f6f53bbfe", "sighting_of_ref": "indicator--b02cf143-c7d6-4d39-8910-6cc7e2f63973", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b85a4a5f-672d-4bc2-93a4-22ed9a8d27bd", "sighting_of_ref": "indicator--8f9a5da0-0ac8-4dc3-a117-06c153c5ecaa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88362766-6ebb-438a-bd2d-905cf06af9a4", "sighting_of_ref": "indicator--819bc7a4-6bae-47a9-a623-03a0ebdfaee1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--376caeae-de25-4882-ba71-e453308e490c", "sighting_of_ref": "indicator--d643260f-1092-4cfc-9310-0fba11c7c8ed", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a572ef-f135-4194-84a4-a79adae91a92", "sighting_of_ref": "indicator--c3e58077-1bd1-4a3c-90e5-f01851bd319a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb70ac1-468c-4350-8b23-84520368b70e", "sighting_of_ref": "indicator--1b857070-515b-4858-8989-999b1d663787", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13995e30-41c9-41fc-81b0-af7f35065ba2", "sighting_of_ref": "indicator--4c3b0d03-dc97-43f7-8ca7-151657042a49", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ff186f-fa8d-4a58-a1d9-6da0242a18db", "sighting_of_ref": "indicator--1d840048-620f-4581-9b57-5b73ee82169e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--763ba99c-5ee2-48de-8850-49f8b45e4117", "sighting_of_ref": "indicator--9095c1bf-bedd-4e0c-a954-f7c09855e58c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81753807-70ac-4009-800c-233df830553b", "sighting_of_ref": "indicator--0b1a2bad-b1ce-4e02-8b8b-36ab9374b25e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--059c03ee-6cde-4d94-9b3f-889a360eebfb", "sighting_of_ref": "indicator--52cf747e-66b6-4add-9c64-404cd0a2e9f9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4347bd4-f885-4630-a1dc-6c3ee9ccda2c", "sighting_of_ref": "indicator--4f97705d-bb58-4840-8217-d6d8918e8782", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--792ed6cb-2cfc-4f7c-b18e-56854ad05885", "sighting_of_ref": "indicator--493af20b-0df1-4e7b-809c-45afa05d677b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda06b56-64d7-40ae-905d-9050680e3c57", "sighting_of_ref": "indicator--3ab416bb-037c-454d-b53d-f28180c41889", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fada13c-fc8b-4de5-bdd8-4798ca4ee6fb", "sighting_of_ref": "indicator--d21631c6-f84e-4bba-8a79-b42596187be3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aad49fc-dfa6-400b-bed1-0a1fb86e633b", "sighting_of_ref": "indicator--1eba41f6-b0e4-4331-98b5-2c66fef20688", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--986121bc-2427-467a-935b-0dcd15b37cfc", "sighting_of_ref": "indicator--19a71878-98fb-4e5f-9f75-6004d8d57ed5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92dc514c-5d93-4a8f-89e2-d3a848831e92", "sighting_of_ref": "indicator--c4d92018-fec6-4f88-90ff-4a0738bba1d6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54cc19d4-bf30-4a72-8236-5ed28b62b7d2", "sighting_of_ref": "indicator--9360d84e-4345-4339-9212-62de3e688d4d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b42f6bc-de97-4b69-ae6f-fefad8277760", "sighting_of_ref": "indicator--daed72ea-ff7f-450a-b882-26bb73abfaa1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a028e32e-d778-4b58-8f62-ad62bb766e3b", "sighting_of_ref": "indicator--eb2295a1-7cfd-45bd-81f6-92260015f9e1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0257774c-6f27-431e-b05f-192cbcd1e3be", "sighting_of_ref": "indicator--ddf2946b-69a1-4adf-8f96-cc22b50b633f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f79245b2-a13f-4672-b3f9-069c93ac67f6", "sighting_of_ref": "indicator--7c614ba0-e58e-492d-9749-95139af9e73e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d326c7c-8ca5-4561-8e37-e06792bbc0d6", "sighting_of_ref": "indicator--cd227ba6-b822-4ec0-be74-c04a9097a2e0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d58ab3-4fc9-47dd-b4f0-a2113dcb2faf", "sighting_of_ref": "indicator--e85ffdaf-b90b-491e-9ca1-65dc8e924521", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e8a991c-9118-448d-abc6-09d0b0128046", "sighting_of_ref": "indicator--c575b6b9-ac9b-4b57-bc4f-5d120c94dddf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--559bde51-9b1d-4c5e-93ae-45b29ee960a1", "sighting_of_ref": "indicator--42223346-bf8d-4e40-9b59-2b75a9b39d9b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa29845-0e68-4df1-86b5-fe20dc8eef54", "sighting_of_ref": "indicator--755f8c48-847c-4187-90bf-9e3b9f61e9b0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4362de82-1ba0-46ea-9819-43ac41b667fd", "sighting_of_ref": "indicator--1761edf6-406d-4500-88d0-01622e29a79b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c07d0483-d602-449a-b9f4-8397dbe160b7", "sighting_of_ref": "indicator--4a8a9968-9d89-485d-b352-874010c900d6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32149a80-a537-466e-a469-0df00d16bec6", "sighting_of_ref": "indicator--932f514f-5960-4c59-bb50-9a91c4164540", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--053e8f34-521b-4e64-a432-8f44e183f99e", "sighting_of_ref": "indicator--d95d62be-26d0-4466-8735-8517d1797358", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd2f9cca-8713-4d11-a039-2a010def7010", "sighting_of_ref": "indicator--082a133a-3f66-4485-a548-f27197a9a31d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df73585-df8f-448c-873d-eccdcdf0a23b", "sighting_of_ref": "indicator--fbf9d0f6-340e-4f34-95b9-5a0f02affa53", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13a47912-a995-4268-a703-b440152d304f", "sighting_of_ref": "indicator--7df24cbb-a6e2-4a25-9269-4a4ddb2e2f02", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2da70eb-2d73-4dd0-9494-696d4256aa55", "sighting_of_ref": "indicator--938ba721-3770-43c9-b7ff-4cc27ebfa3dd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1350aeb4-97f2-4dcd-8fbd-a4153cf33117", "sighting_of_ref": "indicator--6881626e-f151-4a9c-869c-cef82341bd33", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d662683c-4c47-4a9a-af6a-9808af22598b", "sighting_of_ref": "indicator--fd5cd8f6-f0e2-431c-b0dc-785c9d7f4c67", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45b30406-d09e-45d8-b08f-dc8cebfff56c", "sighting_of_ref": "indicator--5cdb717c-447e-4046-810d-a24f04cd5f30", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e49000f-1221-461b-8e6d-709dc9461722", "sighting_of_ref": "indicator--49abfdd9-0f33-407b-9035-ea98d5044d84", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5613c79-4d3e-4a0e-87af-9b040c40ce48", "sighting_of_ref": "indicator--3ff5804b-e711-456a-ba55-cf7418bb845e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9bddd9e-2824-4c39-972f-177a788870d9", "sighting_of_ref": "indicator--9fee8cf9-2e72-4117-9933-2a2f68fec0ff", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4787187d-924c-4b34-9617-5a4a86743711", "sighting_of_ref": "indicator--97fa30aa-c37e-4784-b014-442951c1cd73", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c69c369-3987-4746-9a00-21df2c4046ed", "sighting_of_ref": "indicator--2045958c-8f0c-43c8-b940-ef45adc709f8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af0bb08c-f5ab-4934-b1f8-ca2497e782a1", "sighting_of_ref": "indicator--4b1ceb9a-0fbf-45c1-9ece-4156822c3753", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b1252f-285c-466a-beda-b19b51089b61", "sighting_of_ref": "indicator--1deaf613-c11e-412b-b985-e575ab178867", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71dac84d-d2e3-4d48-9bbd-15fae762a0ac", "sighting_of_ref": "indicator--c6573c80-a6c5-4f9a-8055-6523bb9150fa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf0e4444-2b47-4477-8d30-87f8932f813f", "sighting_of_ref": "indicator--9f540025-cca2-4459-9223-0cd673bfc052", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27980c11-9941-421c-80fd-38dca97157a1", "sighting_of_ref": "indicator--d25c4038-ef23-4053-9746-e2e17e3b3146", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c31304af-ebaa-482b-9775-d378d746e1a6", "sighting_of_ref": "indicator--26beefc7-f34e-49cb-8241-5e39cff73cfc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa7284f5-5dbb-4e40-92cc-2e4a1be536c2", "sighting_of_ref": "indicator--bb9bac64-00d4-4643-9ebd-07a1f32ff9da", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f12d5e6-b551-4029-aa1f-103b26dad14b", "sighting_of_ref": "indicator--ff42955d-e278-49a3-8099-593a7496e774", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ed0247-b085-41b9-b649-618425d21ea4", "sighting_of_ref": "indicator--3e1d2f69-fe72-4d75-bcc1-19a604e95db9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2017940-c583-4aaa-a6d0-2d7bfbededd8", "sighting_of_ref": "indicator--362b2377-d761-4486-8c0a-80200f4366fd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8a1fbe2-eb37-444a-9011-4f9fba545b07", "sighting_of_ref": "indicator--868423e1-671d-4439-8ed4-04a9c4d44620", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d2b1de2-daf3-4d8d-853b-3975edbcd381", "sighting_of_ref": "indicator--2f114cb8-a640-4bf6-988e-d581ecb23a22", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe632c2c-7920-4dc6-aaa9-0430c4e7299f", "sighting_of_ref": "indicator--e8462986-21e2-4a27-9850-8ddea1a2bf3c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a54887-c5d1-452f-9215-c5b1620dc490", "sighting_of_ref": "indicator--8de597d0-46ba-4198-be04-5ab91d66c8ec", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6e68d0c-8c86-4b9d-971c-a62772c9a752", "sighting_of_ref": "indicator--e6a66f16-477b-46fc-8051-21b451501e64", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd4b774-8b32-4abd-8104-ec5aa966c693", "sighting_of_ref": "indicator--d1e5dc91-72af-42df-b946-8c80a43b6600", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1ee6e1-b882-4b0a-91e2-56db7a053d7f", "sighting_of_ref": "indicator--e7826b38-f536-48c1-becd-c203e7ef3b43", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b8c4df0-2fc5-4b39-b78f-ff24dde43335", "sighting_of_ref": "indicator--05cecbb7-0ead-4e25-8fed-3a22279c588b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--624b8df1-a078-4043-ad8d-461f3967640d", "sighting_of_ref": "indicator--4c92a554-6e1d-4df7-b3c8-1256ed69c921", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a982f4-6d2f-485b-a3ec-a179cabb191b", "sighting_of_ref": "indicator--7363ca2d-faeb-4b7c-835f-3761af13f001", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e6a1bb-6cbc-41c5-8036-50786d8b2777", "sighting_of_ref": "indicator--ab77acf2-00a3-415c-820c-9d5c7af9aef2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ce509cb-fe27-4ee2-96ba-93c0446a950d", "sighting_of_ref": "indicator--b3d56675-ba99-4eb5-a4f1-c735e85722ce", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5034dbea-0b18-4942-b0f9-c5131e9ddab8", "sighting_of_ref": "indicator--25e804dd-a588-4628-96a9-0d4c37b39460", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3bb6a7c-797c-4b0b-8116-4da9afd28e64", "sighting_of_ref": "indicator--651f4ea1-5526-45a6-bee0-39b179235f2b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ac56fe9-e0a2-4624-979a-3f33bd396baa", "sighting_of_ref": "indicator--761f8775-4553-4db3-b33a-4a402f10292e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f53cf1e2-8d88-47ec-b776-fa612213caf9", "sighting_of_ref": "indicator--ff85c08b-a2a8-4b3c-8fac-36aa60e1ed17", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ac483b2-2003-4801-b1fe-2c8e2e7afa2f", "sighting_of_ref": "indicator--08e72aa6-fa6e-43b4-923a-cc0ca92c408e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b580d0fc-975d-4e73-9880-3d3cefabc7c4", "sighting_of_ref": "indicator--d8c0b2f2-4096-49da-b03c-3a5a62750546", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e3210a-9cfa-414b-a8b4-39e81cd0d9d2", "sighting_of_ref": "indicator--5a9fec9e-1ab1-4ec5-8147-ac11acb47b84", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0195ef80-6fb8-4395-9d1c-37f8d2db6f1b", "sighting_of_ref": "indicator--4c31ed9e-ce5e-4545-8125-d16474ce8462", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca6614e6-3691-44e2-98bc-b25ec286e8b4", "sighting_of_ref": "indicator--8f8ac3b3-53ad-46d3-a427-673081680ecb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda2c14e-2ba5-4438-a29e-68ebf861afdb", "sighting_of_ref": "indicator--fbb6ab36-03c5-4aed-a9ed-bf82a84201be", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f4289fa-8171-48bd-b21f-ce306d17bb63", "sighting_of_ref": "indicator--236fafd0-289c-4c27-a89a-a25787b44ca6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42420db4-0685-4d17-be1e-6cf6a20a36fb", "sighting_of_ref": "indicator--22be0cba-2d4e-4e1b-b53a-bfd7a14ebcfd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18c2ee84-051f-417d-babd-6add1ee9ac66", "sighting_of_ref": "indicator--6f62ca8f-776c-4d73-9104-bf400004869f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac419844-b775-4d0a-9df9-0628b9566bfc", "sighting_of_ref": "indicator--e6a6db46-5442-448b-804c-4a165d4be94f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce65ef89-9e6a-438f-986e-8ac262565cb9", "sighting_of_ref": "indicator--4d5182f9-4679-45f5-b0b7-91cac19157bd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7b1a0a7-0320-4aa9-83a3-d175a62be868", "sighting_of_ref": "indicator--e6344330-47f7-41a6-8b5e-5173e246f86d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7075d1f-97d1-4407-b405-b3644afe03c5", "sighting_of_ref": "indicator--bcb6bcaf-d349-46a2-aa2e-b2b9d45091f8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cd54fac-e2d9-44c1-afe5-64bb52e51236", "sighting_of_ref": "indicator--6271e970-e0e9-4517-a5d6-ce6a496352b1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d23936b2-cfe3-4f7d-a568-3b4d66e1392a", "sighting_of_ref": "indicator--3a55e5af-07b0-43fb-ab39-14af8ac78bf3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ffd4708-65f9-4f2a-b1f3-c7d8852ef1b8", "sighting_of_ref": "indicator--6d80d0f0-099a-41a1-b218-206c0abbbc30", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51137512-e056-49ef-b194-196037319f1f", "sighting_of_ref": "indicator--0957db08-eb7e-411a-b487-126b2490bec0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c8e27d-6905-4bd9-bf62-0c0074ad1248", "sighting_of_ref": "indicator--3c056b9a-ef60-47ea-832a-036aad9ca434", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eff57be6-2e13-4b1a-914d-d799d857c533", "sighting_of_ref": "indicator--7b2b164e-6ab8-4dcd-ab07-3557c650709f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dcfb8b9-e8a3-447c-8610-95c0dfb842e3", "sighting_of_ref": "indicator--bf5a45c0-07d1-43ed-9fc5-4fbbbf5d639b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3347209c-ab8a-423b-8957-8a80e8ed5428", "sighting_of_ref": "indicator--28f94f15-facd-4af0-98be-e65fef04a490", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34174659-1f85-4ea2-b880-05375f76e240", "sighting_of_ref": "indicator--7b830c0e-04ac-4089-b7bb-fc6108b1c9db", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45bf21fb-b135-450f-a2e6-6a7ed670c4fa", "sighting_of_ref": "indicator--63494fc3-0087-467e-9b49-e2e845956248", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87da1890-96eb-4ba4-af4c-29e9c96445b6", "sighting_of_ref": "indicator--0a8f267f-291a-470c-9d1a-052646bc2e8a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94b2307c-1512-4214-81d2-5bcd4ed14fec", "sighting_of_ref": "indicator--28f2ed47-e333-4393-b891-3a677dabcf75", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc4961c0-ada5-4024-96ed-5d037672a375", "sighting_of_ref": "indicator--4d4a5b99-642c-45c2-8f57-1238a150b6d8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c15143ad-a56f-4656-866a-df1374527802", "sighting_of_ref": "indicator--47b81c8d-3eef-4c47-979a-60b1ac70596f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c4aa8e7-68c4-448a-9b99-01a542a3b76b", "sighting_of_ref": "indicator--49e14e99-44bd-4b85-a643-4dbd9e2a1df3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea93b0d6-79c2-45c9-8f97-49ed7da8a904", "sighting_of_ref": "indicator--9fc13690-6eee-4fbe-9747-e076d60f7b94", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b45a6f41-c019-4853-aa70-7bb12ea14687", "sighting_of_ref": "indicator--5a7b7812-c3a3-4bce-a9a1-404ea7e4e294", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce268144-25ea-4f1a-9d49-decdb9612b6a", "sighting_of_ref": "indicator--78cf86f6-7bc3-438d-9a4d-05996ac3e98e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4934da69-f686-4b02-9fd2-a1078dc06633", "sighting_of_ref": "indicator--933fb68a-e033-4453-b4e0-cc56d20aa226", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21c32887-e531-4447-ba23-a84471886a0e", "sighting_of_ref": "indicator--13b9e3e3-deae-4425-8a1f-0f5233dbea4d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f00d88-2ca9-4d75-b69e-fbf0b684399d", "sighting_of_ref": "indicator--1b7500c5-8b51-48a2-a40a-2df9118ba0e7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b3856bc-0812-4e8b-aefa-4e6e00c6f04d", "sighting_of_ref": "indicator--54bc26a5-207d-4d82-aac4-3b825efa4e54", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9713ddc8-8427-4244-94c0-14d2ed7eb713", "sighting_of_ref": "indicator--c76c7f32-927e-4e09-89c8-d4da147ab769", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ae31732-23ba-4087-b198-7f2b5ce86541", "sighting_of_ref": "indicator--27219168-c3bb-443f-b6d2-24cbca6a163b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--012e7ec4-7f00-47bf-83fc-1299efd248db", "sighting_of_ref": "indicator--33ca853f-3a31-410c-8893-c027449b8874", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df1af23a-ce8d-4789-80de-a034bb170678", "sighting_of_ref": "indicator--8a45f3ef-695e-4b84-b250-fa87ada83cf4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fec9f5b0-b775-4ce1-9e36-90c512b888ed", "sighting_of_ref": "indicator--1f477912-1adf-4f95-b097-36af3d4341d1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b321b5b-5136-4bfc-ae0e-0956b242ba08", "sighting_of_ref": "indicator--c5bb77bb-a545-47e0-b523-276648181977", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d85bf1-a892-4dfa-b364-47d9545b1c96", "sighting_of_ref": "indicator--fe26ea29-4785-4edb-b226-591710ef136b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c163b303-9665-4a9e-8626-1cf1d53d1559", "sighting_of_ref": "indicator--f69be524-a6a9-416d-bbbc-a3a4014624d7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c73c934-b6c8-4a5b-96fb-fbca23ae0d37", "sighting_of_ref": "indicator--8aec2fb8-2b08-46bc-a1ec-7430c638c966", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd18d007-212d-4a75-9cd2-b93ec744ebcc", "sighting_of_ref": "indicator--3fd51f53-4a64-4dbb-a21d-4df4ffd7abc0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc6603c1-884b-455e-9adb-b8fe47b9a3b3", "sighting_of_ref": "indicator--61f060e9-bac3-432b-ae43-516ffab7cc36", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9b7b2df-4622-4eb7-94a1-41f289dde448", "sighting_of_ref": "indicator--2e1f5328-052f-4a55-bf9d-5876b103192c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a14010c7-0990-4698-b3e6-593661c5a619", "sighting_of_ref": "indicator--794b49d3-e46a-4b88-a4c9-e7ef2a2d6650", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d92869b-6132-410f-a6a0-6338cf487e4a", "sighting_of_ref": "indicator--de70f627-41ea-4b52-abe9-86a7d3573086", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa16b35a-48ec-4452-9548-8231ff84948b", "sighting_of_ref": "indicator--c8353082-ca51-4abb-ade3-084535d4a502", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f713519-3ee4-4b39-bda3-b002141ec91a", "sighting_of_ref": "indicator--8b3d652c-0a69-4eaa-82d2-e30f64eb6496", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b36bdd-3551-4a10-b9ed-bdf84b5228cf", "sighting_of_ref": "indicator--5eeaa277-99f5-40ce-9065-f97230880ee6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a47e0705-0342-4069-8a68-dbcf556caa1e", "sighting_of_ref": "indicator--4ee03a02-fb04-4579-b6c9-cb67d08ae3b1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f2fe08-82d9-41e9-ac32-c9dac0249f2f", "sighting_of_ref": "indicator--5b69d4e2-4ec9-46cb-97ae-95f3b6d1a0c8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1dfbd9e-35f8-4cd0-8402-f179b2cec10a", "sighting_of_ref": "indicator--6661bb46-32d3-4440-93c9-3303071b19b3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b2a553e-f262-4524-8f00-599a7d0f7ef3", "sighting_of_ref": "indicator--9ae5c758-9799-46b5-8b94-99882d0c854c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9469a50-aff6-428b-a9de-42738125b4a0", "sighting_of_ref": "indicator--09d8cc3f-9f43-4fd0-9950-140a6aa6e488", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c2da54-3943-4bdf-b923-437e32944148", "sighting_of_ref": "indicator--d25a7342-6097-42b5-8c6f-579a7dd1973a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--713404e8-7021-4d90-b0a9-25a8ae91e754", "sighting_of_ref": "indicator--721da829-4039-43ba-97b8-a258e4a60180", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09bb9749-da1f-4eea-a172-dffbffe3573d", "sighting_of_ref": "indicator--6b432b54-3737-4282-8cf1-d1bbc62661c8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2133e7b-dbe2-4228-ac70-26964b30d8a3", "sighting_of_ref": "indicator--d5fb9db8-1c6d-4d2e-9b57-57ababbee14b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e51ea13e-e5ff-46ae-8ae6-16ed132e6e8c", "sighting_of_ref": "indicator--5cb069ad-60e0-4b8e-8594-83282ff192a9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11dea9d7-4cd3-4af9-b9e6-9c91cf586100", "sighting_of_ref": "indicator--9e1ab1d4-c20c-401d-84cb-3c064d99108d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d64d136-2cac-4a42-8762-909a30f82363", "sighting_of_ref": "indicator--a6268d2c-1c58-47fd-b43f-3c6008354dde", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e25260ce-04f4-4417-92ac-fb8b83a45cfd", "sighting_of_ref": "indicator--55cfcab9-1172-4d36-8c02-996638bd005b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a6c295-120d-48e9-b35b-f53cccacf7d5", "sighting_of_ref": "indicator--b2a73278-3f1a-4554-95e6-b6e4c0393acf", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f771208d-18b1-4316-95e4-aa8de9e31f87", "sighting_of_ref": "indicator--889d40df-340f-4ff4-8e18-2e7bcd96ce89", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--180ccb87-c4dd-4aa3-9125-c241d58f6c26", "sighting_of_ref": "indicator--d8794448-7b4b-47c1-8214-5fda34d53a53", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81fb485f-2472-4fe9-bb93-c7e8fbf2041e", "sighting_of_ref": "indicator--73768cff-373a-4507-a9bd-9405fc178089", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1808c63a-3b87-4449-8bb8-e83b484e124c", "sighting_of_ref": "indicator--2d110281-ab70-46e3-8be9-07b8d8f59da5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4635fd14-ab0f-49e3-b34a-a0449ca93e24", "sighting_of_ref": "indicator--e0acb585-2fc5-4f53-b1fa-9855ed95c0a3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3496ed3f-5a17-4fbb-a983-d20cacd2d8fd", "sighting_of_ref": "indicator--7bdd16f0-2f42-446a-af7c-efd6e5c2dd9e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac3bec1e-8c2c-417a-925d-c914280993ec", "sighting_of_ref": "indicator--0516893d-d940-4ee4-914c-d791327686e4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8cfa383-0b5f-4e2a-8a24-466b4ee7118a", "sighting_of_ref": "indicator--5a7bf662-dca6-4833-b03a-e35af843d197", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4098e21-784f-4985-ae6d-9def3aab437f", "sighting_of_ref": "indicator--905a9061-5111-4e15-8bb6-c99ff0ffd6eb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7efde75e-2628-4156-a2a8-6758c3b625b1", "sighting_of_ref": "indicator--86f3fabf-b75c-4c81-b2d3-8919c7714b05", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a95fd8a-0567-4d4f-b66c-22aab1538786", "sighting_of_ref": "indicator--2cb294a6-1630-40d4-a374-36059ce5b8eb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa12e4d4-c4ed-4a30-b836-7b9b19c7ced4", "sighting_of_ref": "indicator--a1e6f70b-cb82-45a8-adb1-7015d6c2f118", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af4f7728-9f15-46b6-a364-0f092690f82d", "sighting_of_ref": "indicator--83b97879-61e4-4c6b-b5a9-b42403a921db", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--382d6f3e-ce71-4e8e-a193-ab641299aa64", "sighting_of_ref": "indicator--aaa687cd-c66e-4ac8-a46d-21f2fa84590f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cffb3ba-e0e1-438e-93a9-5ec27d042d5f", "sighting_of_ref": "indicator--84da6455-d1f1-487e-a59e-3283b121d293", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0310ea5-99df-45c9-afea-25ed48d820a7", "sighting_of_ref": "indicator--70aa97ad-8020-46a4-bee2-0cbcf7d1cba8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5681c9c0-c06e-4bc9-a68d-03f4bc77d4dd", "sighting_of_ref": "indicator--a7e736b1-30ec-4401-bc5d-5a3576c68f19", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--957b49e8-1c4b-4d15-9611-460b07127108", "sighting_of_ref": "indicator--464aab08-1fd3-4c96-b366-6cb31e3e1d72", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f1ed671-3087-4396-be16-8bea753156d8", "sighting_of_ref": "indicator--82ff1931-e38e-40d4-9310-68e1c4cab0aa", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cdbb135-0fa5-4f17-8733-d91497cb9d3e", "sighting_of_ref": "indicator--8c642256-9585-4120-ba9d-6a78ccce284a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--572568f8-aa25-4d32-b6b5-fc813eba047c", "sighting_of_ref": "indicator--698b393f-88d7-404f-aba2-21f38ddd4f78", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e8ea6da-1553-4089-8653-dacaad3536e9", "sighting_of_ref": "indicator--f647cab8-1551-498a-9600-5f4691dc5194", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce8acc28-0279-469b-acfe-ded5e139fb3a", "sighting_of_ref": "indicator--9b8fc794-16c4-4f4e-82d8-3dc2926a3d20", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22c412f9-80d5-4c14-af04-00f67086b208", "sighting_of_ref": "indicator--a52193cd-ff9a-47c6-9633-a1dba8fe13d2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c256f50-ac62-43a4-a713-fcd8cccaf6e8", "sighting_of_ref": "indicator--5504ce91-c231-4b63-b8b5-06014f78eefc", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a0d1db9-de87-4e41-802f-591656f45837", "sighting_of_ref": "indicator--990b4f40-6237-47c1-8a9d-57f3fd9d3bb9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a62ff96d-782e-4ec5-9bd4-00addd088107", "sighting_of_ref": "indicator--429ee796-d3e4-4587-9a54-c3fc8c3d29c1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--024cb865-bae2-4338-9e9d-0dac0e86ecd0", "sighting_of_ref": "indicator--5ebd7ede-03c4-4e2c-acf1-a7a3b0098992", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b89e010-4be9-4bce-8b11-ec3eaada3c53", "sighting_of_ref": "indicator--c0ea503e-3c02-4180-aa47-9b9b5f7597c2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bee424c2-14e0-4c51-8c4f-f24ff319628b", "sighting_of_ref": "indicator--83312e2f-ae82-4dea-a375-ff89996b784f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--946cb63a-bad6-488f-a745-a32c9d2a1033", "sighting_of_ref": "indicator--3113b6a2-871c-4aae-946d-bab2ba5511ec", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d93d4c85-f296-4919-809e-8f4b35e6a38a", "sighting_of_ref": "indicator--cf5c9846-6648-4f53-8677-916be4db241a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac323d70-0302-4578-8f1a-c7d8ec13f670", "sighting_of_ref": "indicator--5fa1706e-d540-4fc3-8755-1f9e2d172d4d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b32dfa5-cb35-41f7-96ab-ebaa578042c4", "sighting_of_ref": "indicator--eebf3a2d-178a-4b67-b7c2-69fad64869b4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd441e7-92c3-4f50-8dbb-c0c5e2b7aae5", "sighting_of_ref": "indicator--b64e0bde-435f-49e3-a56e-41789dd65f3b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dde0e1f-fe9e-4ed2-b05d-cc29887fe724", "sighting_of_ref": "indicator--049b2747-89fa-4fec-aeac-ae6c20571936", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ba4de2-9e5f-4f27-88b5-ca9722a6a587", "sighting_of_ref": "indicator--8a1967e3-3b8e-4758-ba82-e9f8679c57b3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3a012da-1e09-4817-a85e-b5aa50ebb8aa", "sighting_of_ref": "indicator--db0450ae-7c07-4bfe-987f-c64e392ff810", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a8dd00f-22dd-43e0-b3bf-ca6b738c58b4", "sighting_of_ref": "indicator--51f9f30f-5eb8-4590-a246-e64fbf9f0007", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5639094d-b4d8-41fd-9458-2d7ec83cfbed", "sighting_of_ref": "indicator--a0c29270-afc5-46e8-beca-c6b89b57ff8f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce1b068-76ad-45df-8149-ab4a5cdbc50c", "sighting_of_ref": "indicator--582c0f2b-02d4-4756-ba9d-1d32e6a295a6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902f1cd3-1ff9-4c05-a8b6-7ffc756d542c", "sighting_of_ref": "indicator--299183fb-a262-48bf-a225-a06d3c8dcedb", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef7886a3-5531-4339-a5f4-cbc9bb7a31bc", "sighting_of_ref": "indicator--6c59ad21-33d1-4ec5-b536-0d74b5370d44", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb94c0d-ed1a-4131-a0ea-1ee0f5562892", "sighting_of_ref": "indicator--eab3bdd0-b87a-41d1-9511-3af9bf26f03c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0446a3a2-5a3f-4345-a482-baecfa3f4ccd", "sighting_of_ref": "indicator--3d36ebb3-9f69-4119-931c-0846e5c81f6f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5d974e6-04eb-4d6a-8532-ca819413b73e", "sighting_of_ref": "indicator--1875e69c-4e0f-43c7-9731-fbe9b2101001", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56b258a6-bd27-4fe6-bff5-a1e9b1798df3", "sighting_of_ref": "indicator--6ee222e9-c21f-47b8-a7aa-24675272ca1f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77fc0c5e-6fc2-4ba0-9e28-38d407af397a", "sighting_of_ref": "indicator--f33f0df7-41b1-43e4-9be7-e93a747cde4f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7be99d9-5371-4216-9364-f149d8deefdd", "sighting_of_ref": "indicator--6c792768-4e05-4602-bfec-e0f29e458b8b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f2c7277-6815-4806-8334-e75fdc365cfa", "sighting_of_ref": "indicator--8c52750a-9596-401c-b966-cf3d7ba633bd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04a014e4-4ec4-4113-898d-e7194f365722", "sighting_of_ref": "indicator--a7c52570-4d1a-4ac1-bff6-2050dde83e01", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10797877-aff2-45b3-a06e-758b8282c244", "sighting_of_ref": "indicator--5099a068-46e6-4a99-bb26-7f1b88b5e924", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff12312f-f243-48f4-837a-a5f5a2d0be5c", "sighting_of_ref": "indicator--4fbe2854-6d79-4022-a848-392f984785e6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8017d334-0083-4f62-ab0d-3fb294f28e2a", "sighting_of_ref": "indicator--b3fe3950-05ad-40b6-a6f1-a4f7db0cdff0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cae141b-62eb-4982-a6e9-ab647fc66aa4", "sighting_of_ref": "indicator--3f29acc6-48e9-4d1c-b4a0-6ccac66f4263", "where_sighted_refs": ["location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa3f1784-aaab-4da8-91a7-e36c14a9f15b", "sighting_of_ref": "indicator--57dac45d-4ade-4c2b-af45-cc9a908eca6f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b8e5c4b-8ca1-477f-82ff-97cc598e85ac", "sighting_of_ref": "indicator--fcfeaf6e-aca0-4c3b-b014-70241a008691", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c83909b6-685f-41ca-8c42-7e07e0e36002", "sighting_of_ref": "indicator--ab9cc694-ce10-4cd6-a439-29143e3e97b6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e398c61-d7ce-4235-a78b-72891df3fc2f", "sighting_of_ref": "indicator--d1a5f31f-f00d-4ed4-aaba-20510b107c03", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87e7f824-c1e4-4f7c-b7dc-4485621a53e9", "sighting_of_ref": "indicator--ec40835f-1dd8-48f1-b93d-b62ea4aae98f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e046e1c-ca1d-4b4e-8f25-fa1a2aecc950", "sighting_of_ref": "indicator--e6b73828-e7d4-48d1-832c-236c12372f65", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4711c38-6d0e-4d8f-bae6-2ac437f27cad", "sighting_of_ref": "indicator--7991da91-6443-463b-89e3-ba8724e4c1a0", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ea36a5f-4faf-49c3-bd0c-f456e5a425c9", "sighting_of_ref": "indicator--b4411946-1cb2-43b2-9fa6-2a2f9a0a954f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73463613-20a0-4534-8a3a-fb4a845bef6f", "sighting_of_ref": "indicator--65521046-74a3-4baf-8d86-e3b4c9a96558", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb86624-3687-4200-a16d-a8a40dedef5d", "sighting_of_ref": "indicator--d9eba2c5-ba8c-4975-b8af-6f06ec89adfe", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--586b5e7c-c8d0-470f-a0f5-5a91097248b6", "sighting_of_ref": "indicator--95467228-481e-45b1-a1ca-8c173cb58016", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9bd57f2-52da-4f8c-a85d-912806665029", "sighting_of_ref": "indicator--d0c43b69-1bcf-429f-8e5e-21f3be4752dd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--240e71f3-1769-46a7-bedd-f7686cf3fdca", "sighting_of_ref": "indicator--0dab7f70-4dd3-4901-9147-4b898721e0c6", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff76b5b7-e52d-424c-a969-1b9403ff8d50", "sighting_of_ref": "indicator--2221a1b4-037c-471f-b482-3338ff2c6611", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4be59e21-df78-4ffa-aad0-1cb3528caaea", "sighting_of_ref": "indicator--f1e41605-d422-4c5d-acc7-0b4b0eb9c6bd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd28beb-5a06-42ed-bf82-9f4d12f99f23", "sighting_of_ref": "indicator--7f2de285-e763-4f24-9388-8e65a16b2ed3", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e88cd8f-75d3-4375-8d46-6367584abb72", "sighting_of_ref": "indicator--ebde03e0-289e-438b-9f54-c77b8a5e5289", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4627b26d-64b1-411a-9167-66f56e7e2c06", "sighting_of_ref": "indicator--0b08b504-e88a-492d-87fe-6a3c358125c1", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--289d6792-b6f4-4b7e-9e75-10ce05798cdc", "sighting_of_ref": "indicator--9499ed35-29bd-4b61-8c9e-ff4a7b151073", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b90ac537-aed5-405e-8149-53e91881ddd7", "sighting_of_ref": "indicator--29f16bb6-aa35-49b7-b430-2d554a7e2d1c", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d3af5ee-b454-4774-9745-4866e0744b5a", "sighting_of_ref": "indicator--aed545f9-b6c2-46a1-939c-a8d5b1cf7870", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc0693f5-9f64-4d17-98ab-5f903e9b472a", "sighting_of_ref": "indicator--e978a324-9370-4327-b312-77ddee77765a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7293bec7-e187-4903-993a-467cff60eb79", "sighting_of_ref": "indicator--5374d3a9-cf66-4916-86b1-c5f11933409d", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cae54bd-38b2-47f9-883e-1fb00dc09b2e", "sighting_of_ref": "indicator--90532362-a488-4b84-9254-f62748a0ab70", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6455adf-d651-4e18-8481-d3ccb493c5c2", "sighting_of_ref": "indicator--47ee802c-e7f6-4f08-9d18-2afad35d03fd", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d754751-33d7-4fe7-9459-c0185159d118", "sighting_of_ref": "indicator--1fd923d0-cb72-4321-8592-af5de73fa544", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--befa5ab2-8784-4f50-933f-da372fa50603", "sighting_of_ref": "indicator--9d12bcff-2db1-4e06-bc24-0c470d80c22b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a3113f7-87b3-4521-9a44-0d2cd4a013fb", "sighting_of_ref": "indicator--1454f7cd-3c87-4d4a-bbb3-5efc110d5104", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c149456-0ea3-481c-be12-7557f1b5b403", "sighting_of_ref": "indicator--33858067-6424-40a0-a92a-ae61e2b0a15e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fa42a7f-1c4d-4406-8622-2282e9493c7c", "sighting_of_ref": "indicator--d7a42476-edcd-4d75-9a53-de2d22606231", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb98721-dab4-4b9c-b95c-7030828a3e85", "sighting_of_ref": "indicator--6f5c2567-e416-426d-bfc1-4096ede0f000", "where_sighted_refs": ["location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73dbcafe-a766-4f5e-9c1e-f8f02133a20b", "sighting_of_ref": "indicator--a07d0314-8cb9-4727-952f-057841602914", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73834634-9474-4bbf-bee2-b00274375d8a", "sighting_of_ref": "indicator--faf1cf11-127a-436d-b1bc-ee946f5f5ef8", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aa89218-dda1-4d6a-aa12-1f73fd3e2060", "sighting_of_ref": "indicator--3a7e9496-4484-4b6f-838d-67644504d1e5", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e38a6c7-5702-473c-b03a-cecabc86badc", "sighting_of_ref": "indicator--58650893-0356-4812-aa00-b9f921d43173", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5831e9fa-1d21-4f58-a21b-9eb77d7f7ca4", "sighting_of_ref": "indicator--48015389-7e29-40ab-9b47-1364c6824712", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d34683a-11e5-41c2-8b92-3b9954ef2659", "sighting_of_ref": "indicator--90c84ebb-337f-4acc-bf95-83b15430cf29", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d439a1e1-68b9-4ecb-9594-53d327fd7ee5", "sighting_of_ref": "indicator--8f106204-00ee-419a-a737-e7715dcc29d7", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0777a990-5c32-423a-87a3-60efc39463f9", "sighting_of_ref": "indicator--b023dfe4-1df4-4efb-aac7-b92ed3f2fc9b", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--789e0d24-171f-4a4a-ab73-efea3973c835", "sighting_of_ref": "indicator--99694ceb-3a7e-4990-93e0-db315ffcfb03", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d19d1b63-434f-4abc-a7a1-5b23e5badb6f", "sighting_of_ref": "indicator--ccf11c41-1256-4c0e-8c4e-da5f59377477", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbbd4396-5c81-4bea-ae09-8a890ed0f5fe", "sighting_of_ref": "indicator--c5a00d5f-e541-49e4-b09d-ab1e752fd3e2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3215041f-9677-4748-bc92-bc46e2e7187c", "sighting_of_ref": "indicator--c135a436-4d9f-4ffd-8eb6-e45098ba45a9", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--203d71a7-14e5-41da-9bcc-a071623d5b34", "sighting_of_ref": "indicator--de5e0f0a-9275-4389-a28a-a9e5639dee85", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d46066b8-1bea-42ef-8a82-9497f3c180f3", "sighting_of_ref": "indicator--c8232603-7f0b-4b52-acbb-7b7b3e128f2e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01cb6c29-f259-4731-a9ac-6bf4a69f26aa", "sighting_of_ref": "indicator--e9cb8fa2-b2c1-43a9-994f-5e75a3bf974a", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2086fcff-02a5-4785-8bc7-960960106770", "sighting_of_ref": "indicator--3e5ec817-3522-401b-a15f-2cc8516cfdd2", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa994442-0250-4472-87e5-eb6bcc311102", "sighting_of_ref": "indicator--efb7a9de-2f0b-4d82-975e-edb2001b5267", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d2035c-90e8-4f12-9a90-967bc3249ffa", "sighting_of_ref": "indicator--0aa82859-bfab-46a7-a2ca-5dc0cbc3e60e", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--029e302f-9aaf-43f7-adee-32da16d03914", "sighting_of_ref": "indicator--9191d7ab-b0bb-4742-b770-ea8cde85edc4", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bde533a-0233-4d89-bdc0-dadef6f484ab", "sighting_of_ref": "indicator--f3c056ea-802f-4bf1-8b86-cfcc8044f41f", "where_sighted_refs": ["location--73054ef4-7a76-4e2a-98ff-bf055c36433d"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc448f8d-fae5-4941-816e-bc207088d2f2", "sighting_of_ref": "indicator--0598a1b3-681c-44c8-875a-472c2933fffa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-11T00:00:00.000Z", "last_seen": "2026-09-11T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "report", "spec_version": "2.1", "id": "report--9b5e813e-a5df-4513-a7e0-5cedc6ce685a", "name": "Threat Report for 2026-09-11", "description": "Daily threat intelligence report — honeypot bruteforce, web exploit, and anonymous proxy detections.", "published": "2026-09-12T11:00:01.266Z", "report_types": ["threat-report"], "object_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "location--ca4c6cfd-48f8-4808-9b20-6fec6432c44c", "location--9c9c7438-1c8e-45b1-8f2b-0c076b2bec9a", "location--73054ef4-7a76-4e2a-98ff-bf055c36433d", "infrastructure--9022deed-e7dd-4b57-9625-bb57c0802011", "infrastructure--0e42b20b-02b8-47be-91f6-f93e380c2c6c", "infrastructure--975bf34c-5b4e-4afe-b674-7dc4e9523afa", "relationship--164bde03-86ec-4409-9037-0561289701bb", "infrastructure--f32805ec-bc91-4bcf-a874-7a59edc488fc", "relationship--af14cab9-4564-49be-a2ae-fed79dbaa7cf", "infrastructure--aaaf2afc-80c9-4cd0-bdf5-a34b6ca577fd", "relationship--7742ec06-8095-403c-8beb-905cd9ac1f9f", "vulnerability--f409d74a-c834-4732-8fe0-37db64648729", "vulnerability--e244d6a3-dc81-4710-a38b-6edfe4916bce", "vulnerability--d20fa7cd-c4cf-4426-9064-b6b9c8f4f7c8", "vulnerability--d703b0cb-2349-4a45-adfd-079d8cfe4296", "vulnerability--de361e24-96c0-4a5c-aa33-63a63cf40f2e", "vulnerability--7c846a00-ec07-4cc7-9160-34835270151d", "vulnerability--3b0d42a9-3156-4406-8848-77877543eb66", "vulnerability--5d2aa6fe-f699-482b-ad3b-a207f1fb2da5", "vulnerability--aa93b2dd-345a-42c9-b051-3862202e31ea", "vulnerability--7a369f54-0fdf-449c-bdf0-e287fc8fdc98", "vulnerability--8844fc8a-e028-4e7f-8caf-909ce7a03c63", "vulnerability--9cecf465-ce84-4269-b927-dca2ba0b43cb", "vulnerability--87578ce7-bd64-4d09-a580-4b3f1c5fac4a", "attack-pattern--30311f6c-f26f-47da-bff1-b2323ba8673e", "attack-pattern--bfe6a08a-e023-44ea-be23-fdfe6b3f5314", "attack-pattern--bdec63ce-006e-41ad-9ffa-e50b03aa63d1", "attack-pattern--f4ef225a-7ab0-40d1-851c-51f72d2a3af1", "indicator--6eef6d41-20a2-4276-a3f8-ddc63e308a25", "indicator--8092d7a6-b28f-49ca-a8ea-81114bab2c70", "indicator--d9c09190-0ec1-4b78-8aa6-3cabecbb1105", "indicator--70d1d012-2113-47a9-a67e-741fc0f9a6e8", "indicator--5504de6d-be99-4b4a-bb0a-559306df4616", "indicator--ecfb020e-0371-4134-8ef5-5f82dd34f98f", "indicator--f5581576-a866-47cf-9449-0a6b1ce472db", "indicator--c6840b9e-ec5d-4ed6-86f0-a2a8919c2604", "indicator--fd411dde-0eb5-40e6-babb-81b3fbc09da3", "indicator--7bf5688c-e85e-4eed-9484-b99234f97d1c", "indicator--6e867677-f700-446f-a7d7-f8fe17a562d7", "indicator--6e0d959f-726d-4d7d-940d-ea71a5c5953e", "indicator--3511f00b-a67f-410a-8d68-cf13d92ff259", "indicator--0bbfc5bc-64a1-4770-89e7-9b8a177ad485", "indicator--dc876c2e-a015-4af2-ab67-2a035c81e529", "indicator--b82f485e-6764-476b-bc86-f42006c86ddb", "indicator--aed6b5a1-77c1-4635-b8fc-1259cea87ea0", "indicator--b81a441e-0e88-40c6-9804-144e0911974d", "indicator--e50d4cbe-4691-4e9c-b859-70bc99116df4", "indicator--ccb19bf2-f3a8-4abc-9c2d-dae114bf8993", "indicator--7c555b72-cc7a-4a53-9dbe-efb52d21670d", "indicator--69ce972c-1ca6-46aa-8cdf-7d0ed975ff5b", "indicator--39360fe4-9fb8-4596-bb9f-48477762a347", "indicator--616ded2b-f09a-48b4-b717-3ec134492038", "indicator--8b704c04-69ae-4163-9c46-03f5c9b18bad", "indicator--e3a288b0-a1ae-4dad-89bc-3e34aa50be2e", "indicator--6e8b8e9b-0313-413a-8df5-1e477b8ee99a", "indicator--e2469084-3099-4b5e-a038-ee6a615b98d8", "indicator--95e41dd1-48f9-4830-9151-159506f29f88", "indicator--6f053bb9-6226-4e23-8a79-39df737ac3d4", "indicator--995f1080-d817-4aee-9308-41310abdb118", "indicator--2d8312bc-8bae-4372-be91-932039331ebc", "indicator--0d8e9509-0241-481d-a6c7-754dc45dfa06", "relationship--f5dd6a97-da01-45d2-bd2b-a9944e833396", "relationship--dfc54317-fa50-416b-9bdc-90cf0f603071", "relationship--1fe992de-e269-4360-8739-61885ed6fdb8", "relationship--3fd08b2c-aedd-4bb3-bd93-1860a4501734", "relationship--59cf4fd7-de43-4256-b13e-791badcece1f", "indicator--7b6bff99-6791-4d41-9274-28fef8a8537e", "indicator--fafd2ed0-96cb-41dd-8a42-3302b7cdb2b8", "indicator--65f6d085-f09e-4761-8bb6-122d98b90ce4", "indicator--81ca6273-6521-4aee-a97c-5b8589de9e1d", "indicator--e18318de-1d42-4864-a19c-24c9f780ceff", "indicator--2f85f418-43b0-4320-8ef6-5060f3eb80f6", "indicator--bb5c93f3-6d9a-40f4-b741-37e9670bca68", "indicator--a6d06ae7-70f5-418f-85ae-15ebeff3bc82", "indicator--49a28c84-cbe7-4426-bf32-a598b06dc28e", "indicator--ea9d151d-b324-4c10-b84a-17ab6e003c36", "indicator--6b973749-1fcf-430e-b73b-d72618b31520", "indicator--7ec57418-c14e-4830-a87a-8c6ab7098b45", "indicator--478ca5a0-b46f-4684-b6c3-1cbf4452c64a", "indicator--e1e2d871-cd1b-41ba-b6c3-9bcd6503a5f3", "indicator--c655b31e-9cd2-4cb0-987f-d89a1faa71d6", "indicator--e7ceceea-8f79-4da6-8774-abb6755532ea", "indicator--e0ca38a2-0c92-4213-8212-58767509116b", "indicator--cab3a438-76f3-4215-9d6a-675965ac52b2", "indicator--05e63672-bc00-4df8-b600-4479297e0db5", "indicator--a9c9c0ee-a33a-4370-b919-cafa3dd4fb17", "indicator--c7a5079d-9a1e-4959-a92f-271830ed6972", "indicator--d55a3b2c-dda4-451e-93da-b47faa4d0785", "indicator--f9f2e30c-c6f4-4e82-8b76-dd7ff4754394", "indicator--f61f62b8-8d83-4fd9-8975-aae028b958eb", "indicator--6997641c-f77b-4ad6-a0eb-068be11654dd", "indicator--ca72808e-355a-4ea4-9015-49689ee0ca5c", "indicator--1e0d2dfd-5504-4626-8e27-5b76c6693507", "indicator--6c117bee-6510-409e-9574-4697d4e9cb27", "indicator--64aac258-2e7d-47e4-ada0-9cc1a93ac817", "indicator--e6bdf9d6-f803-424b-95c5-b4a896845987", "indicator--16a2994f-4182-4080-bbeb-649141ff650f", "indicator--cca5c934-d6ac-4b37-b081-8acdfbce8995", "indicator--fc823505-bbca-46dc-8f1d-f161231cf8d5", "indicator--55d74f3a-65fd-4080-a44f-77753224351d", "indicator--4b58bf81-d203-430c-a43b-32c2b7ed2910", "indicator--c937c70c-4404-4d64-b277-ceb77f084ce9", "indicator--46658294-d68a-44a3-9717-5215aff9fda7", "indicator--d47f2df1-634e-4ce0-a75a-8279adc7b61f", "indicator--8705bd2d-8a85-4b2f-b3e4-7354883742c2", "indicator--7ba7ee42-e00f-4739-93fe-c5d9fb7e858e", "indicator--6e352749-c399-40ed-b878-1d05569d38c5", "indicator--fc644550-fde7-46dc-a4e4-277bfe54370e", "indicator--28ffa693-1447-4a5b-a6cf-54eb47f77daf", "indicator--d8e9d22d-50b7-44a4-a7d0-7b8b6a639ae2", "indicator--f87bd8c0-0f3e-4b53-ad43-20d157164f34", "indicator--ea4f30b9-66fd-4ddb-9c6a-26cd1e1dff86", "indicator--4624fbf3-8a61-4b27-a8a6-ad2fb93055aa", "indicator--aa880f7d-b268-4e69-8078-25fe20e8b946", "indicator--3a744c01-3744-4560-8de7-3b9cd8c6f42d", "indicator--0f753d4f-5759-4132-a5a9-9a2eca6324e4", "indicator--acf13be2-d9dd-415e-8aa4-018eb88c0274", "indicator--76449047-0f68-4704-b827-eca70ba38bfd", "indicator--ce269bef-f50c-4f8e-9aa1-a2001c1521a5", "indicator--610d838d-1ac5-4076-95be-fefed49e3cc0", "indicator--aada14a4-98e6-4dd8-98d7-63c44f94015f", "indicator--20646c51-27be-409d-97e9-7a55a44f972a", "indicator--12160aa9-f0ea-460f-894b-eda75af07432", "indicator--12fd0251-b877-4d7e-aff0-6da10645fdc5", "indicator--1ea8beb6-e07c-4709-bd7f-d3d1a0a69d52", "indicator--ae304bf6-5ec9-491b-8b22-aba323777746", "indicator--5aea4f0e-0d54-4d4e-acd8-99d9289fdeff", "indicator--a1218cc9-a875-42e0-b3d0-72b231a6aa49", "indicator--9fb878d9-2beb-4a87-9c5f-f0bc9dbc477c", "indicator--65844ad6-ee07-4de2-9e2b-766c6c083698", "indicator--b1eb35e4-fb9e-4208-b450-65687da5f4a2", "indicator--03c304c4-17cb-43c6-af60-609146068ff4", "indicator--875d7a98-774e-4bdc-b517-a0bfcb97ab56", "indicator--16784b17-8df1-42ae-94c7-1ea02e7c9b64", "indicator--99efc04f-75a2-4a17-9ab8-59de5dc24e2b", "indicator--dd44ea10-6e6e-4021-9d1d-a72e3da5eb43", "indicator--657bbc42-af81-4c1e-90dc-7539016ac21b", "indicator--ffb8dc0c-b64e-41c7-8023-f4a46bf5ecdd", "indicator--ba55566f-5265-4e30-a9d5-c09739e2a49a", "indicator--a4ff3db1-2766-4328-a56c-da34c7db8a61", "indicator--f65f4582-4651-49d8-b093-143e0a6283de", "indicator--457d8741-7ee0-4b58-8368-965c4259a261", "indicator--fe6f12c1-ef5c-4e40-88d5-9471ab4329e4", "indicator--b99635ee-79f3-4007-a6b7-0acc5da7c631", "indicator--e17952b4-d948-4ec4-81c9-825bb1f11b6e", "indicator--66f34932-bfaf-4430-98ca-991a0974b83b", "indicator--dd385100-a581-4a19-9a12-4585a7ce8ab7", "indicator--33afdcc4-b9e3-4413-9ee1-c86464a6ed1b", "indicator--7b1e872b-dd13-4570-b415-7a9f2740787d", "indicator--c42cae3e-bf2a-41df-b69d-c3e8caff96bd", "indicator--f2f55aca-0503-4a04-8351-e9dfed74e799", "indicator--fcdc4ed4-e793-44f9-bd5e-daa55dc507e4", "indicator--a889ab59-b9f6-4433-b5c4-b4b2d9551a2d", "indicator--cdddc4f3-a78c-4f30-b88a-955390b82bd0", "indicator--235f1fc4-0c7e-4048-bdb2-59866b9fa3a3", "indicator--8c9b7df9-a16c-4348-8bf6-81ae8faf4319", "indicator--339fb4a4-715c-411d-932b-4637274f7c98", "indicator--50b698e7-a767-414d-a28c-3494b23d2473", "indicator--c015e572-a88b-4d88-9c52-04498b74fd2a", "indicator--f6d2193f-b0a4-41e3-be98-13e1c2dbfdc8", "indicator--23a9175b-aaa2-4de9-8157-3768240347c4", "indicator--4cb87d7f-9a3c-4189-a0cb-053e40b6d313", "indicator--92b17ab0-5d85-4135-9c63-b955858bb0c6", "indicator--7c80b211-817e-4865-9872-904e83273b9e", "indicator--bfa8d3ff-3c36-4f42-b6c5-de4aa9146e8f", "indicator--6868e93a-f83c-44c8-856a-96fff60af717", "indicator--0f938db8-8cc2-4f2a-bc09-6d9183ad48f5", "indicator--905fbde6-1e74-4a09-a791-fe3597bef9fa", "indicator--6fcea77b-f759-49af-a3b9-00c283ae0896", "indicator--0ba9ff4f-fc14-4989-be52-197c2f449db5", "indicator--16d34ab4-eede-4f67-a728-44f755a83536", "indicator--6b2ac40a-77e1-4f11-ba23-558a49f23079", "indicator--de847d5f-f4b1-43fe-9bed-b759018fdfc8", "indicator--db44dd80-00dc-4319-9368-cf2278ffdcd7", "indicator--e811fcfa-b79f-4789-9825-87c6d9fc65a6", "indicator--2f4f830e-c046-4b8f-bfa0-922d494f7d91", "indicator--4bc6f5db-5f84-41a4-8713-abae793d8b3d", "indicator--2bcb765a-803a-4fcd-9ca3-011c784ec516", "indicator--b505f833-3677-471c-ab61-c4db78ed3689", "indicator--8dfe7523-94ee-40a3-a880-857b04cb1c6c", "indicator--0ea0aad8-e449-4fe3-ba87-efecbd112268", "indicator--ee64c58c-13b7-4b83-97a7-ce5dd7591ae8", "indicator--b4aca33f-2a35-4c34-b72a-fc14382849d3", "indicator--dc32a8af-7e9c-4db8-8485-4a60d10b5f44", "indicator--29450ae8-8ca1-4d00-acc9-bfd0845d837b", "indicator--56b0a005-5fad-455e-ac3f-38ad4e862081", "indicator--02aae3a1-6b65-4a15-b88b-a1c79c3cca3c", "indicator--d2745853-023a-476e-a096-4fa8247b9f08", "indicator--44090dad-2c16-4256-a7d1-da31fbfa0737", "indicator--4076486c-8dca-4b13-9410-d869913b7c76", "indicator--a00a8ce2-ddfb-400d-9fc3-170596c6d565", "indicator--93bdf114-f5b1-4bb4-88fb-5f533bbc2969", "indicator--077052a3-bfa7-4140-995a-7a3bae3e0fd7", "indicator--ce46ea6d-3cfb-495b-9dbf-cbf954de2517", "indicator--3b1f7aff-1d18-4f6f-8e05-8423998f61e5", "indicator--875e71cc-b04f-4a2d-a6c4-d40122f6c4af", "indicator--91b5ab28-b326-4c7a-b9f5-81a3c0027faa", "indicator--acd2e5cf-c03a-42fb-ad75-886bf82aa4b5", "indicator--1b068954-61ac-43c6-8688-5bb1d0532bb9", "indicator--a43ca19a-8aa7-4f7b-b9fb-b0cd537eeabb", "indicator--329169ff-70f9-41a1-a177-fc9eba81c743", "indicator--b0e9b82c-8edb-415a-a4ae-97552c69958c", "indicator--212a0906-fd00-4cfe-b7e7-53e57ef9aeb6", "indicator--07515dcf-1dd2-4db6-bd16-16d6a39d17b8", "indicator--480b8d90-20b1-422c-aca1-f01e33dd2a2c", "indicator--4fcd165d-158e-40dc-ba28-f1eb5332a2d3", "indicator--903b64f7-b759-4ff3-a5ba-a86cb364c14b", "indicator--8cba16d5-d873-4500-8418-98ec1c166f1c", "indicator--ee6b55e2-3dfa-42a8-bd76-6184c86c6f07", "indicator--d9e89f6d-8100-40e6-b260-c4d10846eff4", "indicator--779e20f4-f55a-4f64-927a-e75e63b953ba", "indicator--186f707d-170d-472f-8277-9d5d93e09415", "indicator--ca9883c6-33c5-4772-80b0-c7e31e35a0e3", "indicator--4f710794-cfca-4a90-977a-0a49464dbb29", "indicator--54da736b-c096-4023-9f9d-6c5797f2f071", "indicator--087423f1-6404-4ea2-87cd-9a1222ac0ad4", "indicator--713636a5-825f-4089-9bdf-aa7cf7b95ad8", "indicator--514d8811-1e0d-48e3-8008-dc2c80e13a7a", "indicator--bda2759f-2e3c-4475-9d7c-78a97cc308a7", "indicator--798f543c-6b4b-42c2-baea-0b6af3085469", "indicator--968dc472-c1e7-4369-97a8-a210dadc5e87", "indicator--14279731-0396-48e9-99b1-8f82ed07ec0d", "indicator--976b87e9-6275-4c05-a612-def4385579ad", "indicator--fd6b8f4b-a7eb-4fa8-8865-f56bd1f5d424", "indicator--5a913be2-2465-4d29-b502-c1cc53df964c", "indicator--20a0b6b5-073c-42c4-b247-9d56e2bc0b79", "indicator--ed8fa23c-bf2c-4064-bab0-2a04aff1dfbd", "indicator--ff7e32cc-5ea5-4b8e-a7b5-4fc70afebf6d", "indicator--873f3b12-8383-4d43-a52e-2b793edafbcf", "indicator--681e50ac-67b1-46ed-8690-f2632cda21e6", "indicator--02583b4b-360b-43b8-a010-b3665b91ca11", "indicator--4c40d43c-77a4-42e9-8b42-40d43241a43e", "indicator--1a6df1eb-be5a-40bb-9e4a-4f388d54d172", "indicator--caef1e93-37fd-4611-ac4a-35327194e0fa", "indicator--4d93ff49-4a11-431f-adc9-bb7ed23099bd", "indicator--1b590067-5e8e-4530-ad00-20777524984c", "indicator--5c1b516c-0a5e-4d21-b8c3-ea4dce5bac9a", "indicator--0c28eef2-1260-43dc-a7a7-44257d92d814", "indicator--baa01882-e3d2-497e-ba0a-1936b4bfecb6", "indicator--3f443395-ad55-4a27-8a62-d2040d9c6a76", "indicator--a95fa64c-f6fb-4e39-90f5-f3fcf372eea7", "indicator--7b216665-5100-4eff-be84-e32c70f9e4f9", "indicator--513cb3bd-1832-49a9-a152-a391b72ffe33", "indicator--eaf78a3a-7eb0-4f1b-af27-dc290472b772", "indicator--41be2cc2-5f8a-4252-985d-3dbd07d524d4", "indicator--5ae8d10e-fe2f-4069-8437-bfa38ebcf095", "indicator--d62ef5e8-1021-4945-b140-622f264e3c21", "indicator--600db4b9-ec02-4420-8594-27c647a3246f", "indicator--01e0ef30-8469-4c1e-8030-03e6b0f3088f", "indicator--345070a8-8cd2-479d-8914-f517256ce6b0", "indicator--d34619b7-dca1-41ea-9b02-3f9f32761d1f", "indicator--4d14b1af-dbab-4e35-a130-fbde9b9c1d25", "indicator--0629e3cf-e190-4e24-9f0e-6a2c3000019e", "indicator--0c1b1fca-c9e3-48e3-8729-57a8140085dc", "indicator--3a4927c6-c82b-40c4-977f-810a001237c5", "indicator--a07c9a4a-32f2-4a50-8316-f9d615d29bc1", "indicator--7543ec38-0aef-42c2-a738-98f26b323123", "indicator--197bd452-65f6-40b8-a1fb-be201e4317b1", "indicator--85f5831c-6c2c-4961-8b18-e60d2dfa7e14", "indicator--d8ac1ff5-d59c-43a7-9d4e-e65752ce7691", "indicator--c57bcbfc-77fb-4d17-8438-3874a5a0d055", "indicator--b6e97263-62d0-4eb9-9120-c9081821b504", "indicator--c497b610-7a5d-4d86-a1fe-96f67b5cd62a", "indicator--f93476b7-a5ca-4cee-9966-427707179cba", "indicator--259552e8-89b9-491d-bd40-463af98be790", "indicator--28b9c37c-cb41-40b0-85b4-142a1cdf386c", "indicator--0f9d405c-6eb8-4100-9209-085b84d0df81", "indicator--e81213fe-fa8e-460b-aaef-301cee9977f3", "indicator--906e8c48-633b-4fee-a1ff-4d535b2a2bf3", "indicator--1467c9a6-292b-4bb8-b745-9166c03c2d44", "indicator--5c71dfa2-baea-475e-9393-cf66449649eb", "indicator--1733aa0e-ea16-41f6-b84c-af8e622face9", "indicator--2465bdfa-8efd-45a1-85b7-28b56bf22c0a", "indicator--1b21acff-3cde-4131-93b1-fbfc58ca680f", "indicator--09043e37-0a7b-4c38-a084-b48b6f127d8f", "indicator--09993431-fea6-4560-a3d3-ce82cf3ee66e", "indicator--15dcb879-507c-4076-a8d7-74e3748bf4cb", "indicator--fc376bf1-3a79-43f1-af9e-e158d142bc4b", "indicator--9b9a5546-b467-4d96-b3cb-bbd74669167f", "indicator--b771cedf-343f-4f93-8418-037eb75d6745", "indicator--38c16c37-4f91-4ee0-b1f0-97ee427e2e41", "indicator--ec8a066b-216f-4c47-8438-7bf537beab35", "indicator--dcef07ce-8255-40cf-821a-3f417b439f31", "indicator--cdcfba84-9ebd-47f6-9ac0-add602b65fd3", "indicator--2e6af91d-68ae-4be3-98ee-581f2bef424d", "indicator--d236b822-54ef-4ea5-a063-35aaf054b022", "indicator--be65341c-a13c-40b2-9372-2e32ac03dbdb", "indicator--6c775d6f-fc7c-436b-b18d-e468250f6b0b", "indicator--fee6f0cb-0bab-435e-9b9b-c7d33a107036", "indicator--6a98f3f7-8db5-4d24-ba6b-2024591cfb85", "indicator--a6c42803-f0ad-4c86-9a1e-7efe561aeacb", "indicator--3818ad92-3d9a-4ed9-8646-26ae328a94c1", "indicator--0ece027b-ab97-4f56-8a1c-000099b1f7db", "indicator--6d43f538-ab27-4f3d-911e-6ea93397dd8d", "indicator--a687dd3a-efef-46ad-b204-394817d40b4d", "indicator--05ddf3e8-bc2c-4b73-b16d-4fa720b9794f", "indicator--5d3d1555-5ac2-4f41-8651-c9e20867ad16", "indicator--2512a87e-49eb-486c-b2c6-e0aecadfcff6", "indicator--59c6b099-12b5-4a13-9905-222a3451d01f", "indicator--7776d769-76bf-4030-9ee3-f1cabdd59d4a", "indicator--97d3d18c-7eb0-4d3e-a784-0db4aa43b292", "indicator--73d28a3f-6c68-4822-af6c-03072bf27819", "indicator--98b48be3-df0a-4f5b-a42d-3fe9420496af", "indicator--2fd815f7-d244-40c0-afe2-de147d5d7e33", "indicator--dfb8a6cd-344b-487f-8e1d-3a3527a9e2c3", "indicator--e6f492d1-3818-42bb-bcda-44d6c3232420", "indicator--08fb29fe-5088-4a5c-9bfe-34da9b14030b", "indicator--ac262e56-bfab-452c-8b5e-0c779bd085e3", "indicator--daa7962b-56bf-43a5-868c-36422269e428", "indicator--f4251453-6db2-4597-9305-bc786ccc2d85", "indicator--f594d5f9-6c15-4e00-8d9f-d1b26e5aa33a", "indicator--dd44be37-4f95-4605-8073-8c38b110da6e", "indicator--827b9bf8-27ab-4e0b-b4ab-00d144dad09e", "indicator--0a79f4d8-8372-458b-b081-30ccca704a0b", "indicator--44ffa019-ec88-4d26-8758-4ae56dce643c", "indicator--06eff056-65e7-4d3c-af3b-2c8b0a9b349a", "indicator--becff67c-9162-4ce3-90ef-bf3a05aa5d4a", "indicator--35b8546f-a034-48ff-8405-22141db7fab1", "indicator--d43c4eae-a499-4cd8-9f80-e71a95b695e9", "indicator--cdfab5c2-6127-4241-bc06-c27d8b11a5a1", "indicator--908a55a0-ba45-4ea6-9495-039fb1c82c02", "indicator--7ba1d16c-7151-4454-a2f0-72f0b0531096", "indicator--686a84c9-bfe9-4cb7-98f1-d549a27fe3b0", "indicator--78f6adca-bd2c-4ca9-bf82-7e8760b0ab72", "indicator--b7dea135-aea1-454e-beea-489a76777edb", "indicator--18a8f759-b491-4ac8-abf9-f6e1362b1362", "indicator--681c3da3-9c85-4663-b8da-acc80124c056", "indicator--a03747b4-5540-4e5b-b492-f8ec2c845e95", "indicator--6e8457d5-5796-48c4-8d95-e02805e90385", "indicator--0ff5c2d3-d722-44bd-ba64-2812d0f3b7bb", "indicator--4e6b17f3-fdb7-4e80-8f00-e5e355db7fb1", "indicator--b35631af-3ff9-4a0f-be20-8ade35517497", "indicator--8f2915f6-18ff-4c7b-bcff-bcb0381c4d11", "indicator--005eb1e3-43bd-4df0-93d3-2a6762d64d81", "indicator--4a9dd623-c2b4-4162-8267-44770bd895a5", "indicator--a681473d-8f5e-450b-a095-7a3c816259b7", "indicator--21a766c9-d547-462e-9677-a90a2dffc3cc", "indicator--f713dd5c-0704-4228-81ab-e298e73f1ed6", "indicator--3c16f668-bbb0-42f9-96e8-4c145d5a95d5", "indicator--bb2a174d-55cc-4c30-8d98-96a783d4652d", "indicator--33a78820-e2a5-4974-95d0-7e20601b78d4", "indicator--9b5eac87-2fd1-43f8-93aa-4130c52f83c4", "indicator--93258e3a-7cd7-46bf-bb83-2133eb8528da", "indicator--dd69066c-0e82-4dc9-bd8c-4bc8f87ea6e1", "indicator--310f6350-3d32-485e-9c6c-554ea4ee43d6", "indicator--383ef90d-2209-4b3b-8433-74d85fa8fa05", "indicator--dd421fe1-06ba-4fb5-8267-dfa1dc01cf24", "indicator--e0f5acc0-0da5-4a1d-8ce4-3b531fcd627b", "indicator--e78d3904-c6ec-4ab4-8be0-1faca0b75c6c", "indicator--9539567f-abb4-4129-9428-40c6d23fe4db", "indicator--cae8f6b1-cb23-459b-bf42-b4d0b5f5ac5f", "indicator--11db34e4-b94d-42ed-bf4d-188519c1a849", "indicator--f92f00af-e4e2-4a98-958d-6715d621a3f7", "indicator--7e5cb0cc-f0a1-4275-aa78-fe1f0b49da4e", "indicator--1b68cf95-86ef-4160-a0d1-c5389687b121", "indicator--e93abd60-97eb-4a37-ac1f-1bb72fd7e4d0", "indicator--bebdd41a-e30b-4486-ab29-0e1d035bd3ae", "indicator--d1f58d88-de17-4cd5-91cc-df065842dc6d", "indicator--c1263158-0db2-4d91-b544-aa4654c19b40", "indicator--a7373324-bec6-4d03-bf69-c3f65da6999a", "indicator--6a386d5f-c00d-41a1-b3a9-64604e9de5b1", "indicator--29175bbe-08c1-42d4-aeea-534cf285080f", "indicator--169c962f-0468-4994-b876-63bd9ccf9d84", "indicator--2f1ce1e0-7fbd-4d4d-b4e0-df8d2337e76f", "indicator--4aa02c3b-7f5e-47ec-b5ff-74e351d2d8b1", "indicator--2cc4d9ed-c61a-4238-9f36-483f55fb7978", "indicator--5703fa1c-d59c-424e-bf04-0e675e1b1540", "indicator--4592e383-a02e-4980-8390-7c83c4d153b5", "indicator--b7edf416-1a19-40f7-b90c-6cef99c00e68", "indicator--a445f57d-9a5b-4fda-85c6-5e22e6c686ca", "indicator--00a4798a-1459-49a9-88d8-cf76eee971fe", "indicator--0b434fa6-6386-4294-a7f5-4738f2395338", "indicator--e6c8d486-01af-4104-b18a-d31b077becab", "indicator--cab6d0dd-1636-4989-b3d3-a9db91ec183b", "indicator--1011349a-e123-4773-949c-87c767cedf80", "indicator--7fc4ae8b-d41c-4bbc-8ada-a579d916f88e", "indicator--34392c7b-4f38-43c0-9399-58f5f86224be", "indicator--1f5bee56-c3bd-4802-9422-a62fa5b429fb", "indicator--bc9cae19-ad08-4930-88e2-001163afbb55", "indicator--1efffe58-6a5c-4858-b50a-942edb91f47b", "indicator--443f1c9f-0e39-4ba0-8b46-e716361d305f", "indicator--2d49867e-df0e-4dfc-b9b0-abd3dd52d8e1", "indicator--d5203053-e531-4cab-a51d-f067a736cfd7", "indicator--2481495e-beec-4797-980e-1ed1a4fc192e", "indicator--f1942d66-2c2a-4170-aed3-9c798f4725bd", "indicator--62962995-a0fa-4f89-bfb4-41c58caf0ba1", "indicator--3df7baa2-6b68-41b8-ad6f-146626b06b03", "indicator--99b8b3e8-8188-49c9-bfc3-3eec2b98d00b", "indicator--f0b1bde8-f931-442f-adee-34dff8e21a55", "indicator--fb56ba64-ee3f-4f4e-b502-d920b13eca31", "indicator--e93df2b5-4436-4ef4-9532-e42838f3434e", "indicator--391f95d1-a7d7-47aa-8f7d-462d8172118c", "indicator--fb2bdd81-a423-41d7-8439-c2b9760119c9", "indicator--54c3f1eb-f278-40ba-b145-69e37775b6aa", "indicator--64f0c83e-0886-41c3-b3fe-21dbacb91a36", "indicator--b2ac6e88-8a72-4b9f-906c-b9700808d388", "indicator--a5ad1bf7-587c-4b78-a927-b3acce0e65f9", "indicator--52a16a56-5d8a-4c71-97e9-c4b4ceb415fb", "indicator--1c660247-8aa6-4488-b7af-b8a1cd53849c", "indicator--5e5c4b1a-3aab-4736-9fe5-d57e6cff31af", "indicator--1cd583a3-6686-430f-a9b5-2f94729022cb", "indicator--91483124-264f-47ee-8f92-e356ab7bca48", "indicator--9cfceeea-5da9-4b9c-8271-46a6cef98c90", "indicator--3a02230c-d36f-40f6-b34e-2618379a55ae", "indicator--6bd5787d-1dce-4e0e-a29d-4eb52fb97bff", "indicator--b80c7e31-0f1f-4cb4-ad1f-005d445eec2f", "indicator--5b25f40d-4c7c-4a28-a49b-9b67165d1d3c", "indicator--71905bf1-4128-4cc0-9824-ee86d4f6af1e", "indicator--0915d21f-7d06-4409-909c-095fe8426d81", "indicator--fc4b2f1a-a9a2-4d08-9d2d-f0f9dd66ef98", "indicator--04631831-d1c7-4ecd-9040-6a9c2cec51d9", "indicator--872e8686-0a9c-46e1-b422-6b5e451b514f", "indicator--dd7c8828-13c3-4d38-b9c9-0b1655e884e9", "indicator--077d30ae-216d-4bdb-823f-3d03c1d61caa", "indicator--49573b15-771c-4db0-b881-3d0a00fa0658", "indicator--0593650a-d87b-4d3e-879d-c56f4e1b7916", "indicator--35018fda-c447-4f96-afbb-561d8e1042b9", "indicator--b5cd1381-49a9-4ba3-9980-ca2207ebcf10", "indicator--3d22d1aa-e746-45f4-b77d-9969ed145f1d", "indicator--8321525a-33d9-456e-95aa-a4518babac9d", "indicator--daa6902a-abdd-4190-948c-886af6919ae4", "indicator--ba7cb4fd-3fd7-4c46-a34f-920a3a6e9852", "indicator--ff5a75af-171e-4988-8688-6ff01c747a5b", "indicator--51f8f7ba-c7b0-4e59-a199-89c378d1fe9c", "indicator--01a4e0cc-6d7b-4899-a7ae-68dbd1897f65", "indicator--9d70128b-cf40-4d13-b32f-e48dd6eb449e", "indicator--6c05660b-7278-49c0-82fc-da8fb0ebfa2d", "indicator--69e6f9f3-022b-4aaa-b693-ee3cc7d0b907", "indicator--59e11cc9-ce35-4f8e-8896-fe00984484ca", "indicator--5c826e7b-feee-43a3-8415-865707deca00", "indicator--7ac04323-10d5-4348-8b6c-ead5ca9c6970", "indicator--2676c004-c329-49e2-83a2-bd077611291c", "indicator--06cf931a-0287-40f7-b776-609ea45ec625", "indicator--b5c483d4-12fe-4398-8225-839302dc7617", "indicator--01e07918-7ff0-43e2-a87a-9d9a8737ee96", "indicator--4d5bca1c-46b5-4e48-9280-d484c2807c24", "indicator--9d322158-8d16-4ad2-929c-d28f21e5418f", "indicator--c04a3693-98ec-4145-b1e3-013095aa6ca9", "indicator--c624e659-59f4-442d-9a96-fd100d53ac75", "indicator--2188c746-20a2-49ff-aab2-1fe81ea54a49", "indicator--47d9c68f-8830-4edc-8854-565018629e88", "indicator--8b96e089-0c94-4c84-8daf-8de4ba4d9970", "indicator--63068101-6167-44e7-ba4c-12a56ff2453e", "indicator--2bbd0a40-7f5b-4f6e-822d-add0d9b0b8e7", "indicator--877cafce-6d81-456d-a78e-e74b10e4397a", "indicator--881fe1b4-5ffb-44af-9fc1-d83443d84891", "indicator--c4672775-8c2f-410b-b947-79cc9f3c4feb", "indicator--f5eb7f29-1fb9-412a-aa4e-32d83d15a354", "indicator--372b927f-6e9f-40fc-a66c-4c830b8e56c0", "indicator--7732e97f-7e8a-4182-99ad-9330576acf44", "indicator--66dc3a7d-b2cc-4af3-aff0-ea50f3aecb28", "indicator--6dfaafc7-7eb0-45a3-8986-51ac4842629c", "indicator--bcd668a8-1bcb-40f0-86de-f186b79975bf", "indicator--04fc2281-5d1a-45d7-83ad-7b0a82ba48a9", "indicator--6c3d762c-f15a-47c6-8ac9-4396690b020c", "indicator--494db794-d39b-4d9a-96e6-32474ddbb216", "indicator--52d81cf8-2834-49cf-aa4c-02bacf03c156", "indicator--b5508097-1d26-4bb7-8823-c082f413295f", "indicator--b6316d3c-440e-41a6-9a3f-85564758f0ed", "indicator--1d6ac922-26d0-4f73-b9d4-4811a0989387", "indicator--4a2e5bc5-706e-4140-90fb-0cbafd5c57fb", "indicator--b282be84-cd6c-4f9c-80e3-5a84e611fd21", "indicator--93ec2cd4-fea5-4d32-9673-ba1e76da7bab", "indicator--a5ad6698-44b1-4f7b-96b5-4838d90dbb5f", "indicator--b954534a-6dbd-4829-857b-e471bce13c43", "indicator--cbae5ae2-3ae3-4864-b260-e621a7bba97d", "indicator--434820ae-e878-4101-9f98-3f3fb307b600", "indicator--ed19119f-3638-43d2-888b-1d5a5f87da00", "indicator--12cb7da9-64b7-4f29-8745-10c8e9158a31", "indicator--6f042779-f864-422a-aab9-cf2c55f1d079", "indicator--5bd91ed1-fd0b-4f63-aadc-f49fd25cb8eb", "indicator--8b47839e-8691-4377-ae6d-b1a8422a949e", "indicator--d1d5b2d1-c01b-4ae1-83a8-a493e7472e87", "indicator--242046cb-06e5-4766-ae86-8985b59c71d9", "indicator--342aadd2-65b1-4888-b7dd-ebfe42947e65", "indicator--a3db1dc4-33f9-48a0-a00b-f07726d3c1e9", "indicator--ef2e7c7f-4a02-4648-84af-b6047501bcbb", "indicator--2a550dff-6a2a-40f4-90e7-e60d0973d7ad", "indicator--a4ceaf6c-5b18-4bca-9ec8-0c259321934b", "indicator--bab27977-71f1-4b4a-a5ce-df4376c5625e", "indicator--13cd0112-ebcd-46ed-a70d-3b552224d683", "indicator--b05701ab-5a57-4b83-81e0-a04fc3b24c3e", "indicator--26e43d40-42b6-4f4a-8a5a-c1e5f4893627", "indicator--60e0c4af-8c4e-4c59-94bc-04be1e06d180", "indicator--257c7c06-4b53-414b-a3ff-c9a0e747a989", "indicator--b7f35093-5035-4d2e-bfba-f2754a88aca4", "indicator--d6ed7003-9a87-4ab6-a710-4ef5def14bd9", "indicator--ce0090bf-6727-40bb-a215-d60dbe36569e", "indicator--d1db820e-f48f-491f-9df1-d2ec14eb27d1", "indicator--9bfa3cf4-576f-439d-872b-2d8a4499781a", "indicator--53d4f2e4-7018-4e1a-b725-4e2ab6325d6d", "indicator--886322fe-7618-4cf8-872c-b0fd5218b57a", "indicator--16467f0e-f66c-4a67-a5c1-2b9257c28e0a", "indicator--0d4ccee3-3602-4f98-9405-f4737f0b2a87", "indicator--84b70f2d-51da-4966-bf58-1ce097d7da0a", "indicator--be70e138-1c6b-466c-bc04-3e99b0693ad9", "indicator--c2083d19-924f-43eb-ba22-01b5d0dd876b", "indicator--5abe4847-6eab-44c6-9c49-2dda1ff51bd6", "indicator--85802017-c882-4ca3-b3bc-098dda261c1a", "indicator--7fd5cb8b-c15e-4bbb-b76c-d56759b7dbea", "indicator--4b68aca8-c7be-4b50-a1c0-e9673ee2bd15", "indicator--0ec0c42a-f38a-4299-a5f6-a12fbd5f94f5", "indicator--a963ad9b-31c1-4be9-9492-bc6fd44081f2", "indicator--a7615e35-1932-4fb2-b9d7-78142e9417a8", "indicator--f6874901-9a6e-4963-a5b9-bf8edcb0c47f", "indicator--75aa3d4b-4211-4073-a5c5-5e0f14819b4d", "indicator--dae0349d-ffac-420c-8f13-bf7bf258daea", "indicator--44191ba1-b36c-40f5-9f53-df4212880519", "indicator--f8772ae8-0134-43b3-9f50-0e69822b1163", "indicator--169c417f-4603-4460-8129-4e80e8ccc535", "indicator--9cf2009a-32f7-480b-b2eb-14f240bc906f", "indicator--42574496-53b5-47c7-9ba2-1bf7dcf4c7c8", "indicator--a2a2dfed-e257-4dac-a7dc-0da4df7a2be0", "indicator--55f36044-9e5b-414e-a166-82b4527699d2", "indicator--00ca85b4-4524-4e10-84fe-a5c3c0738093", "indicator--ade24c2d-c790-4138-ba9d-e083052fc57d", "indicator--98953183-3ab5-400f-b430-b419bf930c86", "indicator--afea9865-4e45-44ab-a58b-9dd462c3ec96", "indicator--14f990a7-bb8c-4922-b2e1-3f8f7e221822", "indicator--86e3b442-21f7-4973-94cc-10b13a1f190a", "indicator--faee2661-4543-4812-8680-9baeba65b0e9", "indicator--a2fa93dc-521e-4d7a-9a87-7a92dc5d1149", "indicator--b887e669-554b-4e0f-8fba-c6e9e65f8232", "indicator--3a8887f1-56d0-4841-91e6-51ca61e375c8", "indicator--c61e9fdb-924c-4a87-bdf4-37d76340d165", "indicator--31e5959e-28cf-44d3-9c65-f2de9b2d749d", "indicator--16d6b72f-2c0e-45cc-a692-0ec20863eb51", "indicator--b366a1cb-0505-493c-91a7-7d51b390f672", "indicator--3e8c1605-9b09-43e5-8234-a564181bccf6", "indicator--98626e3f-6709-44b8-a43f-6a98684e79a5", "indicator--ccd44ed3-3678-42ff-abe8-4329ae954213", "indicator--a7cae3c2-cc1e-4dfa-86b4-de3e40234db1", "indicator--8a6f3661-2281-4263-8665-4445a148c1c9", "indicator--b1849823-2bbd-43b6-bcc3-c14e7a31d64d", "indicator--08a9ed75-5076-48e0-b3bd-df092f167e0e", "indicator--a59b7477-2e34-47d9-bbd8-b66d277ca79e", "indicator--0feaf113-f084-4924-994d-c0bf3b1d7b82", "indicator--88d4e979-2777-4825-8eab-bce01bd0b145", "indicator--a6b69817-f2ba-47f8-8ef4-b0ebbc1ab806", "indicator--b4ffe87c-ff52-4965-a028-a41923e5834b", "indicator--8e4c32d1-d951-43d2-8c96-60a0e716d901", "indicator--8651af99-d006-4635-a1d9-223ee9445a19", "indicator--ad82b464-fa5d-4fdd-9397-44da8b7b5afc", "indicator--b8c7642e-9891-4f02-b1a9-0f29d9b0a856", "indicator--c465a00c-3fde-4426-8232-7ace27c5dcbe", "indicator--92b52b27-562e-4b60-8d05-b03314fe65d5", "indicator--ff03a129-52ab-4032-bf28-c654ca512dff", "indicator--c7259851-52da-44fd-b357-67477033c17e", "indicator--3f489e15-7edf-4117-b2f4-1aa4d4571df1", "indicator--48306fbe-127a-43a0-bdd5-65889183a8bb", "indicator--ec443248-928b-4182-856e-b1fee49622ff", "indicator--71b101bd-c8eb-47dd-9155-f032dfdbc515", "indicator--0823dee1-04eb-408a-b069-267a4da88285", "indicator--d21f9b08-f3ae-4ae0-84bf-1e7d2342b708", "indicator--1827e620-84d1-49ff-ab9f-69a865483028", "indicator--cf1cbd8e-d434-43ee-ae65-dcd4478bfd89", "indicator--ada2d671-5fa5-4600-a384-a0e4a72cd199", "indicator--58358a1f-90a1-490d-8a10-ccaca99b5084", "indicator--00632478-c238-4e6a-b597-734490772a1e", "indicator--f612c8e6-fb15-46f2-9b10-cdf1b73c24ef", "indicator--ab3b2802-dfc5-4035-a907-e649b3751889", "indicator--68e8ba9d-8d3b-484f-8ba0-ea7b52c81eb4", "indicator--31a9df97-dbbd-4b3e-9adb-ccb952cf6a47", "indicator--f3847d2a-2dd3-4109-8e21-4b80a9d01294", "indicator--6d4860a0-07ce-4bd3-b6d8-21c1f69d863d", "indicator--f738b739-b356-447e-9f43-c36238cc0794", "indicator--494ce483-fde9-42a2-8d3d-c51056cf73e4", "indicator--ad498a35-6604-4075-9543-6a7fda9e5125", "indicator--8d7c700c-ae5d-486d-9a8d-8bf742668bb3", "indicator--482b18e9-6dcf-4898-87fb-d2e897363536", "indicator--bf679ad9-d5eb-49f8-b97b-464289f680b8", "indicator--9301ad9b-5a33-4d0c-b8e1-6838cca19cb5", "indicator--12512784-594d-4114-a2f7-2bc79bb04181", "indicator--bd36c044-44de-4a71-b1f6-91b0a663d8d2", "indicator--3d14cd95-fe75-4106-9bbd-c9d7ba9e66ed", "indicator--f58f85e1-9ed8-4de1-b515-1ff010a2a49b", "indicator--90b699a6-8b88-4fc7-9ff2-ac534c3de250", "indicator--a89cb483-ab1a-49c4-ba91-99e0f39633ef", "indicator--08982548-f1dd-4add-8a79-b21138c81b1f", "indicator--ee4bb5f8-917b-45ed-81b6-aaa82821dc74", "indicator--257ad3d5-a582-4236-8f8a-328f349dc05f", "indicator--c92c120a-a38b-47fc-bb23-f67430cd8353", "indicator--755a89fd-366f-4504-b145-46a10232d2da", "indicator--660ad0fe-143f-4127-bc5b-774381e8d9ef", "indicator--34023d99-d077-430d-ab8c-72d44dedd12f", "indicator--d86c4616-1b92-40c3-baa9-93556bc83ca9", "indicator--f2e985b1-bcf0-45ff-a130-65c227264e7a", "indicator--1c5df6d7-a1bf-435d-a838-c1f9ba8ade39", "indicator--6a19c126-1e9e-4c5c-a350-2b0f97c3551e", "indicator--01b65e4e-fb69-4044-8c72-332351ce84f5", "indicator--d4c58f85-4168-46d5-abfe-fc79dd5d4d29", "indicator--f1b40aa8-dc71-4864-8c78-b8c5eba86e06", "indicator--0134f9a4-a3a7-4609-8f6f-5e0ecdd11a7d", "indicator--814668af-2f81-4e7e-8e7e-fcc4540ff6be", "indicator--af25d2a9-6d2f-486b-a743-66569d8df9a0", "indicator--86df4577-9297-4861-be74-efe9bca1fea8", "indicator--ee29c83a-cb67-42ab-9a72-6f153e7e800b", "indicator--5d4ef23c-8d8e-4db6-a40f-60882131f2cc", "indicator--6b818162-d05e-4fb6-87b9-4850bd4250c0", "indicator--40399e99-c173-4106-83f4-5a7ac1ef0005", "indicator--08968d08-4c1c-401c-a0c9-90622d055aa2", "indicator--6cea7c8c-b6be-4298-8e1c-b4e62c8a5b58", "indicator--59846884-096d-4c6f-a0e8-e99467a259ee", "indicator--293f6cc5-7a1e-44d7-a9ab-640ef80ffb80", "indicator--b07f9c0e-af3a-43f5-bb27-be3dbb3c4825", "indicator--f13b5bb6-963f-40af-a15e-dc8d557b6e13", "indicator--4142a56f-1727-4625-ad67-10c5f4567770", "indicator--932a7ed9-8c10-4616-a8b8-d503c2bd397b", "indicator--f9f72f81-426e-4631-a161-51d1413a88d6", "indicator--00466874-8009-4806-9a00-9c5dad6c83ca", "indicator--1b8f1860-6a97-4e78-9d47-01d73e945887", "indicator--f0a39aa5-5cbf-4e2c-8144-fb29fb1dcdf7", "indicator--313c1ade-8c36-4a75-aa88-062e3574238a", "indicator--4154406e-0091-4a78-917f-0b945b9c7e7a", "indicator--ec75b281-b6a1-4aaf-8c0a-3b7c23ac8dd0", "indicator--a27b7700-719f-450e-9311-c640ce723750", "indicator--8e812537-f067-4eb2-922a-43d971d78361", "indicator--fd6a6735-ba80-4447-932a-7e8384ec257d", "indicator--faa70570-6948-4e0c-9352-c99ae07058b7", "indicator--544b0668-11ce-4047-83c6-7077997e36fd", "indicator--f406fbc3-805a-464f-8ce0-06adb401a009", "indicator--025d6b15-188f-44a7-8ec7-68edfd463b6c", "indicator--edeb352a-c103-4bcd-8302-1187bbf0b926", "indicator--f1f50096-6b31-44d6-9009-cac1d60d871e", "indicator--80b54f66-b72e-4645-a688-0449c3808a61", "indicator--5cb169f1-c317-4505-b9f4-1ec3837d4484", "indicator--09a6e006-eae3-4fb3-b209-ac0d17de06eb", "indicator--a4d55080-7664-45cf-b93c-a2d69895191d", "indicator--e1691369-0812-4bda-8b38-1ceafaf1af95", "indicator--76bb6ac6-7a60-4bc7-90e6-5346215b405b", "indicator--2946ffaf-5ac7-4569-b4dc-28fd890cbbfe", "indicator--608e839d-67e2-4e92-83d2-bdf13c18fa13", "indicator--ab6ec9c0-85cf-4225-8051-6a8513690e46", "indicator--838c55f3-fa3b-4d5a-b56c-68e7d8fe5de1", "indicator--ed0547d1-b28e-408a-b623-1abdd159e2ab", "indicator--d224b9ce-b44f-42a0-8f40-9dc763f491fc", "indicator--4f1d2ca0-e998-4beb-87ba-12590dd8d5be", "indicator--da9fd395-4bdc-45d6-9ce0-f3c6a4559f20", "indicator--6743265d-ebca-4f43-a89a-0759407cbe61", "indicator--faeadc5d-8035-4554-a5ef-324ab12556bb", "indicator--534b4996-9b72-48ab-b662-1535a4504436", "indicator--1651b461-382d-4246-bbf8-0b9b2298cc61", "indicator--f9ee0049-e06e-4a93-9328-5a3ef708bcd5", "indicator--17429bb1-184d-45e8-aeac-eaad393f1280", "indicator--15b8c347-2600-42ca-ab5d-67d8397d76e1", "indicator--1e98b8f8-16bf-48d9-a7fb-80f5af315e6d", "indicator--5c50bc85-2fd4-4ee3-a86c-afc48ee9fde8", "indicator--cc97cfec-4fc3-4313-9aac-da7f3fdec0cf", "indicator--4d0f6629-37fb-4b2b-80a7-9028c568df0a", "indicator--7efc0052-bcef-44e0-a751-32002f9050b3", "indicator--6e886a9b-3eb2-4287-872f-0180280d1755", "indicator--ebab2ff9-2fe5-4039-9513-bd2b6f41bbf9", "indicator--5c0a375b-c3c1-4b50-b66b-d8b75cd33aa7", "indicator--6a4bc838-8305-41d5-9b0e-f3a5b7aa88e2", "indicator--6f3e4285-38cc-4fbd-8c5d-d3fdb71b721f", "indicator--15a55171-1b6a-4927-8b0b-8754d31a2256", "indicator--0de8ab27-156c-4993-bb03-49d7a70115a0", "indicator--e3df01b4-a02b-44ef-9f5d-2daa99121982", "indicator--9cb8b295-4141-4bc8-8df9-22483ef3f90a", "indicator--98943182-f778-417c-a0cc-163a157c191e", "indicator--c3ea6fb8-6487-43b9-9e85-f4eeff5bbbae", "indicator--2af059fd-07fb-4bda-a480-6a7742532d72", "indicator--e0e188bc-ed3d-48e4-8697-aedfdf6e68c6", "indicator--d729eec0-a7d9-4594-8233-07286b589794", "indicator--f3fa3f20-18cf-4351-90b9-291fd9846288", "indicator--4993e04f-3227-4e58-8cb2-9b9494ae9da9", "indicator--f1ea1316-ebda-404f-8c9d-eaec04dcf75f", "indicator--ffe075cb-08a6-4ebc-99c1-89740ac39877", "indicator--cd10b44d-f15a-440e-940f-0a0db096ed96", "indicator--10124adb-8cbf-4f80-b63c-9c49026346ea", "indicator--b371315c-c540-4719-9b87-70c7edaeab3a", "indicator--d45d9797-970c-4643-9ddd-a14a38ea0872", "indicator--b1f61fa3-9d4a-4856-ad49-c1be2607236b", "indicator--4f7aee0c-1b1e-4ae7-ae30-c4b825e56696", "indicator--46f44ea7-1df4-434a-b17c-4d452d40ff43", "indicator--0ee54d2e-5c0b-4186-8ae3-e1ce275aa3c5", "indicator--f40132af-1107-4897-b41f-7db60bb958d4", "indicator--fb37442d-6881-4ec5-b4ba-ac7cf132f92f", "indicator--7e0c3e71-75c1-4819-ba1d-280d0f44fa7a", "indicator--c2337bbc-2090-4317-b992-8d0107f2268a", "indicator--d05577db-cf13-410f-a4f8-1bb4b5eefb4c", "indicator--caa9307e-3a36-4469-98bd-60d5a970e4ad", "indicator--e731fb68-947a-4148-913d-861c4b280ce2", "indicator--66441e41-6291-4339-bd2e-1e2c42f88cb3", "indicator--938bdaca-812d-4d6b-b6da-993c302def70", "indicator--feb29b77-5499-4bf3-bf75-5b9ee6436416", "indicator--027e585a-6ad1-484b-98f1-b3eb928327fc", "indicator--87e9488b-f16c-4fcc-9e51-ee39e4f8ff96", "indicator--034f48d8-1c37-4048-a5e0-3ac0c62b46f0", "indicator--58cac4f3-44b7-47d6-b49a-a116de1e9486", "indicator--583d4789-eccf-46f0-8f86-a4fa5be3ced0", "indicator--be4cf9ad-f185-4a32-ae6a-dd1cb35cc2ab", "indicator--f5733f18-4447-427e-8afb-ff901c86113e", "indicator--760ed74d-918c-43d6-95b3-a6ccfc1ab5fc", "indicator--b4a518e3-4b08-464f-a7a8-b1b538abd4b9", "indicator--74b6afc6-a668-43ed-b0a4-e08c65413495", "indicator--b30a4ec9-c4ce-48dc-a3bd-cd9f2323087e", "indicator--11390afd-f56a-41fa-ba8b-7267b6ad7643", "indicator--2a59b269-a0a8-448c-be67-4f16cf55533e", "indicator--1ffb70fa-ef3c-4bb8-af0c-7890215b5a56", "indicator--493c7b3f-3da2-498a-a1cb-db192f9c9b4c", "indicator--9afd0578-d5d1-4e2d-9aeb-6b10ec9dbd75", "indicator--6aa645e4-c273-40bc-b469-3899202d821c", "indicator--9dd74a76-d765-490d-811b-966e10a9094b", "indicator--a80240b6-5c4a-457c-a5e2-a957ec55bc8c", "indicator--2c551571-d3f0-4fb4-80ff-c8b5325ee91a", "indicator--d269fab0-5ce6-471d-97a1-7c1f649ae3f5", "indicator--68f2b503-7194-4c63-a11d-422040e65469", "indicator--51e8a8f2-3fe7-4ea3-9324-e0a827a0a162", "indicator--5341e3b3-b0d5-4375-adcb-61d237753f94", "indicator--d8728e52-a8d5-433f-9086-02ffe73d312c", "indicator--b3bdb549-0dee-4d7e-928a-ec6ffed59170", "indicator--e095342c-5284-4469-9cbb-5d870326ec34", "indicator--54abefdc-592e-4383-bcaa-85408eeaf6fc", "indicator--ba985cad-302e-404c-ba99-dc3746d65a56", "indicator--683709ef-ff42-4ba0-9bb6-cccc7018f424", "indicator--829cdc73-5b14-45db-8c32-d8056bab922a", "indicator--ac1a073f-cf77-45f7-914d-a4ce16f98456", "indicator--eefffa26-0659-44e6-a0e2-2b149bcc7c30", "indicator--fc6fc49e-8e47-4ba1-8ab1-52fb13c0faf2", "indicator--cd8942c7-40b0-4bae-8dc5-2cc4a8eb93a5", "indicator--e39b7c4c-770b-41f8-9251-b9d64111d9a0", "indicator--b972ae0c-fe54-4d69-83b2-a77890fe33e2", "indicator--145d66b3-1291-44aa-822b-b9c57d8d3690", "indicator--dc30bda0-7616-4db7-9521-76dd9f5efac1", "indicator--4d45691c-5c7c-4181-aab8-d67399311c13", "indicator--0df69dfe-b3b4-4f80-85e1-7b8438614cd9", "indicator--2e6345d7-cdc0-481b-81d7-128e8a412efb", "indicator--abc4a7a4-0450-4f27-a5ad-327f5ad3e549", "indicator--7a074e3f-4bc6-43e0-8494-a0b947043e3b", "indicator--ca1df837-91c0-4aed-a29c-18051f8b6afc", "indicator--074b1d06-92ee-46ef-847b-bc7e15713e37", "indicator--a5f6bdcb-be5f-46f6-9602-73ca77ac4423", "indicator--94e6a741-a03d-4a3a-b14a-25323f6d85af", "indicator--4cc75234-990d-4f7e-8c8d-52fabc390d59", "indicator--47a9801c-5ac4-4219-8310-5e90b694797b", "indicator--c1937651-e78b-4f53-abd1-33bc143fda2c", "indicator--197009cd-9961-4d43-b28f-c99a189e5f7c", "indicator--f691b4eb-6be2-47c3-bb25-1f8487edd0d4", "indicator--4036a8aa-4be7-4df5-9e53-c93118ce0c8f", "indicator--c3d24868-82fd-4c0f-9e37-84197f3b10cd", "indicator--b5e02947-3ed3-4b64-8f80-4229a9b97707", "indicator--b26c3b4e-52c9-48bb-b66a-858c43a31f01", "indicator--db37a6ed-f054-47c9-b4b5-0ada93b323dd", "indicator--e010b60a-b87e-4c68-b5af-a408c17121db", "indicator--17cf9801-4c76-4928-8fa4-d117b53b3300", "indicator--ef1e7127-a83e-4aa6-80d7-669ebe1cdbb2", "indicator--6fe84722-dbc2-4907-9d5c-39508ff092ba", "indicator--43fdf665-223e-4476-9d56-79aa348d0473", "indicator--31744d8b-65f3-4d3d-a7a5-b7ab35da2299", "indicator--436059b6-fc97-4683-a077-22fd008e9837", "indicator--25c8bc07-3697-4c82-90a8-9858d6ce384e", "indicator--50bfb698-04a6-4361-b19d-9e859730e4dc", "indicator--8395591c-ac4e-4f98-87da-7a0f0b3e3b4b", "indicator--a91ff472-f9f4-40dd-9911-38857d12a25e", "indicator--5a973f9a-10a9-4937-bd89-4cd18a6b283c", "indicator--8e829f88-cc8b-4fd1-b0e8-d7158e691275", "indicator--505287c7-86d8-45e8-81b6-da94c69e70e4", "indicator--ec4da427-1116-44d6-9945-2fea7c87483a", "indicator--df55be90-e40a-4bdd-bbb2-ea121dd13daa", "indicator--3b641bb4-5cab-4d79-872e-781ead8dbd08", "indicator--6e5b94d1-54d5-46fa-b894-c271dcc7bced", "indicator--7628c87f-cf2a-472a-bccf-ac5b58537836", "indicator--25c1eb2b-b97e-49f8-9084-8e6b42a4acf8", "indicator--2bdc5534-db86-4195-96a9-4ab95c7254ce", "indicator--63444f25-a299-425c-b0ec-b9506161a185", "indicator--db35745e-4dd0-46f3-b5c5-88f0aaad57ee", "indicator--aae0dbd2-5f77-4998-80a0-d49b2f95a421", "indicator--405920a8-1bc9-4559-8408-bcaa86335283", "indicator--9f22b4a8-1859-4344-8a6f-c3f2c84cc2d3", "indicator--d5ebf76e-73a0-42d8-9798-22f6d2d8fc86", "indicator--9f62dd91-2228-4873-8506-a2bf18950318", "indicator--5bb9f175-7142-44ae-b7f6-dbf7b624a587", "indicator--41191022-e32e-495a-9962-59cb12f42364", "indicator--b025e265-c6e9-464b-8836-9050566fb6f9", "indicator--c78c3f8f-195a-4f6e-a0e0-a97759ea6066", "indicator--a749e5aa-d6ec-47f5-8c15-38b02fed8095", "indicator--19bec6fc-9304-443a-8752-fc51565762f0", "indicator--02449185-6c59-4e2d-a561-0e31012205ed", "indicator--bc63f748-5315-4944-9c6c-cdc5a156ce5f", "indicator--3b8d5a71-c9f3-437e-9eb8-a5bfb74ce428", "indicator--8b092b2f-8fd9-4e84-8d97-4201985d74b9", "indicator--086ff34d-861a-4c5d-bd0c-5f69e47becd3", "indicator--d7aad6e2-f48c-486a-9876-d257bf701ccf", "indicator--dc96be01-8d28-41a3-b252-9d8732128641", "indicator--bed559c8-721f-4682-8506-a13b44331c0b", "indicator--baab6b04-d4ae-4468-b403-4733635fb854", "indicator--247938c0-b6cd-4ac4-b87e-3344e395c5ff", "indicator--426f2462-729f-41f7-b916-6f8294f17cbb", "indicator--35248083-6548-4ba7-91dd-86b53c0ea110", "indicator--d6ff7f0a-bf9f-4c55-bda1-8ee3a360e316", "indicator--7dab5fdf-3d50-45c1-b25f-9342d9fb93f1", "indicator--36c39538-54ea-403c-b556-eb7c5ddca3ba", "indicator--0bd32040-83df-4c3c-91d9-fe286a9cbaf0", "indicator--efa10684-ebe6-4378-9337-af540ea47144", "indicator--a94fc617-c240-4107-939f-24467163502f", "indicator--9df72d71-5fa8-4fa3-b33a-df711d8aebfc", "indicator--34ee9c73-2e4f-4bb8-adfa-33eedd6d1459", "indicator--5e371b84-375f-4f41-8bec-a60f2a233de0", "indicator--9770265a-bba1-4120-a22d-7696673cb5e5", "indicator--41344a97-79f2-45df-b0c6-9d42362e09a9", "indicator--607f5d36-25ea-47f4-98ca-ae4abe24f26a", "indicator--fe0dc90d-2741-4e74-baae-dbc79e4811ec", "indicator--0ab23a73-b20d-480d-befc-3ffcab74bdae", "indicator--9079d213-f3e4-4acb-b4d2-5767a74e2a61", "indicator--237c5d56-a7e1-4e99-9fb2-11cba4c8cc05", "indicator--632324c5-1efd-4bf8-b56d-aa593cf8ec10", "indicator--bc1e9301-7a16-4700-9845-f6f97d3732e7", "indicator--16561f71-709f-4553-a095-c28291e5a091", "indicator--679f7851-5635-4913-b9fd-8e00362800a5", "indicator--f45043c1-6cc5-4b9c-863f-ab65993c9d5b", "indicator--4c0510ad-3e74-4249-9cf8-97bfb798053b", "indicator--2484f3f9-7b63-4872-a0b7-69f4a7b3f0ca", "indicator--235a59e4-4d58-47b5-ba32-668060afb9c3", "indicator--534be39a-a337-425c-bdbd-8b70a99b005f", "indicator--6e84080f-3276-40a0-9068-1af105b3c89b", "indicator--fada9c0f-aeea-4d5b-ae25-f9cfd1d4bb37", "indicator--f2df6177-5060-4607-9511-7603faddbe2e", "indicator--4a93c14d-d348-4dac-9877-b4331b4f6cc0", "indicator--8f8c802a-e9b9-4e4b-9e8f-f310890efcc4", "indicator--f50b9673-8d88-4b8b-a57e-5fa5a7d3e10a", "indicator--1e568883-387c-402b-bc05-2f934b01a851", "indicator--90ad3844-9f18-4b49-b136-21cf8e42ef50", "indicator--04444d27-7f3b-458e-89eb-2b1e4ae41da1", "indicator--2670cd25-907e-418d-ada6-075bab58a7cc", "indicator--d5a48ce5-734c-4820-b140-de2a72846a10", "indicator--2d363e8a-276f-449f-a761-b3ed47f94f3e", "indicator--2024a956-a6b4-4a75-8267-b3aae80546e0", "indicator--66e467d7-5693-4620-9403-db53b4873fc2", "indicator--224a79e3-79cb-474a-8fd6-bbf39aa3a69c", "indicator--3167f289-eb87-4988-a657-2442d3b8fcb2", "indicator--451813b1-e66a-47b4-a0c6-47a455db1d3d", "indicator--386538e5-f3fd-4540-9d56-88e4225026dc", "indicator--ab151271-3358-4e48-b069-9acf089d8ab4", "indicator--1acb6921-92ab-470c-9e33-391a5b9c0074", "indicator--908f9184-f6a9-4609-8233-cfc76748cc6b", "indicator--0871980e-7b84-474d-96f2-97bae1c36859", "indicator--77fb0d16-82bd-4b9e-97ce-94d0516e2dc6", "indicator--09b2263e-d93d-46d9-a44a-c03df0b5d7e9", "indicator--c1e4f7a2-b889-4eed-b239-ec8e47939dde", "indicator--e5035a91-b7f9-4b67-8163-d179cf3c64ff", "indicator--5529cf75-3d4a-4b52-bf1c-e1ff8fef08f6", "indicator--93405192-4249-4d35-8bae-57af22563e1c", "indicator--52313813-5a68-4169-b065-3687ff5b38a7", "indicator--f4679653-2773-41ea-ae8b-046ae03024bc", "indicator--13227fa8-b8d4-4a2f-899c-840447d7ff16", "indicator--4f37e68c-4680-4805-9f59-96fff128db1a", "indicator--2a487285-ccc4-417e-8b24-f0c95bb89c7a", "indicator--58b26429-c9e8-4097-8afc-dbb2f67999e7", "indicator--b042ec41-20ab-4780-b106-123725c38d02", "indicator--1629af91-df9f-49af-bb5d-58d76f44bc7d", "indicator--ef865fc2-b988-485a-a5bd-8f2a461f6aa3", "indicator--c7230f33-60e7-4f38-bc46-a1dc5ab483aa", "indicator--62c16091-e92e-45ac-8a23-d6b9f3490d6c", "indicator--ef708d2f-8585-4666-af24-2124672de365", "indicator--8314f3e1-6a69-48aa-bf02-a904cf6541d2", "indicator--7535ec39-392b-4d29-b13a-de799c9dc650", "indicator--a40d54ed-e202-4e4a-8f32-12daba8bc0a7", "indicator--42f4510b-91d3-4700-8a27-e996b98748e4", "indicator--fe61751d-7327-4941-8d94-c7e3ef829ecb", "indicator--3d7c97c6-1da6-4cd2-aea2-91b130cad31f", "indicator--771c46b6-a09a-4895-be1a-e27072668dbc", "indicator--1b86c68e-23af-4e13-a262-215550c99786", "indicator--35eb2623-4aa3-46d5-b1e6-c05be9d337cc", "indicator--ee9ec9ea-9191-4d1c-b273-bf9c4dbe4826", "indicator--aef8098a-c0cd-43d3-8eef-5c3999cf67a7", "indicator--1c56b556-b557-44ec-801e-49574c3d3a64", "indicator--21f27f74-ad49-4a7a-94dd-61d7b12e31fe", "indicator--ba5f130d-3a23-4082-a4a3-9b882a59bbdc", "indicator--21449b9c-7010-4116-869a-3e25f8b6521d", "indicator--a0018ace-444f-4ea6-9408-1b2514915b53", "indicator--f4799ca5-ad35-4aee-b3e7-bdb6a69685c2", "indicator--4e74c627-ca89-45c2-8c76-4e437a4d8852", "indicator--857f6576-e567-4c20-bc2f-445765094950", "indicator--2d772b9b-fe92-40df-88f0-52bdac8dbfd1", "indicator--92ba9866-03fb-4184-9162-1425f950dcfc", "indicator--d2f7865d-64cf-4965-81b7-b9633de179e4", "indicator--ac16701f-3ca2-4711-af1a-f1fc8dee53a7", "indicator--a9720743-f7d8-4bbe-968c-969c50a1f1a4", "indicator--5f184364-233b-4849-9e6e-7ca5286b452e", "indicator--327f84d9-b768-4e70-96f5-5ef1e957ffa0", "indicator--d9bf3d67-e1b6-49fb-ba26-6208d9b63e89", "indicator--5019e439-e9b3-4976-9fd4-87363b803c22", "indicator--880bd52c-1f67-4cd7-b762-7fe9977d61f9", "indicator--8aa04a47-1c08-4a79-aaac-516cd4f7d4ff", "indicator--7c205f28-39c3-4d51-9078-2c52064214a2", "indicator--a9a7a948-ab4e-4552-9f37-dcfdbe8ee180", "indicator--48e1bc3f-b9d1-403a-8123-f2a3be37359d", "indicator--6e59bc7b-3904-4742-9db5-6d0d8ace15b5", "indicator--647aee2e-abf9-4da9-a837-32eec23454c8", "indicator--5c675b8f-67ce-487f-bb85-7ec2ce596606", "indicator--a33b3b79-8133-4fef-b120-b4a49c1abf28", "indicator--017b0e23-7361-4533-9f2e-cb8b34fd6ae4", "indicator--31e2dda5-5bb6-4d5f-9faf-7bc35e084771", "indicator--ab056762-9101-46c3-abdf-30936aca305d", "indicator--bd921b48-8699-43dd-ba67-17f86e750f99", "indicator--92df2682-89b0-4ae8-8948-cabb1386d08e", "indicator--8252ee7c-2415-4ba1-ab0f-d6b9383ac7e5", "indicator--af6be829-a75c-44f9-8dd7-857b2013eb52", "indicator--e6ff44f4-ea15-4ef1-bf73-6cd11a21a4af", "indicator--8585e484-e2d2-4b85-ade5-87411ac8246a", "indicator--af985631-1dcb-4a15-acde-fcb69f09090c", "indicator--a73270c4-30a5-49eb-a0be-740ce37eb795", "indicator--61173af8-02ce-4740-81cb-a17b45ff04c4", "indicator--abcbd0d7-5e7f-4d9e-97c6-84cc721ba7fa", "indicator--898a8146-7ec1-4652-b712-5226ac0037bd", "indicator--2b7c2542-c55c-4cf0-aed4-53ca33f9db11", "indicator--4be2fb45-3892-4e46-ae8f-5a2ad82f02fb", "indicator--936637d2-758e-469d-be47-46fc9f8427b7", "relationship--2b2a297e-7dbd-4b26-91b9-82724979634d", "relationship--9b9310d6-b1da-4c29-b399-dc4a84500b53", "indicator--05fe2675-8c61-45e7-8537-46825fa07263", "indicator--73d540b8-7397-4a60-96f0-282de3dcd2cf", "indicator--9e4e4529-8f92-49bd-bbee-1018020ece24", "indicator--47908583-7adc-4fdb-bc0a-13569b434c62", "indicator--aa5bca75-94bf-4a04-8ee1-9c6f923d4220", "indicator--7ad04ec2-622a-414e-ad7b-8eecd00367ee", "indicator--1c2982b0-c9df-4bc3-ae54-665c6421774c", "indicator--c62bbcca-0617-4b46-a50a-8aeef34e14af", "indicator--ff8cca49-85f7-4362-a519-ae2b516858bd", "indicator--c3441e40-8548-498a-a1eb-f89876b7879a", "indicator--39667072-88ee-4463-b6f5-9bbabd372827", "indicator--6e63fb46-f6b0-4366-85b3-a6fb9e41d504", "indicator--ae88b823-7fab-493f-a8a5-d5ed66ffe3e0", "indicator--9e438d8a-b19b-42b3-b195-24ddb870ca91", "indicator--ae13caf4-1e75-40b2-b273-f8ffdad379b8", "indicator--4dd3e417-299e-48f3-848d-7107a7419b8c", "indicator--490fc395-ac98-414f-ad78-a5c4dd39347d", "indicator--173a4fa7-a918-4b5c-862a-4399af4615d3", "indicator--254f0538-9b5e-4748-bfcd-b7bfedf30efc", "indicator--8d635b0d-d1f1-4791-9a61-3ad465d7ad71", "indicator--9cee3cb6-4c8e-4242-afe3-6abde48df8fc", "indicator--bfa1bdb4-a88a-4343-a7ac-4a975b023535", "indicator--331a2f82-b550-4726-ada5-fbe5659db639", "indicator--f3e91ee6-e86f-4da2-b518-2a8fda5b9560", "indicator--87dab56f-ec3d-4464-a9a3-724de5eefc26", "indicator--50f57a11-1700-445a-9804-4ccdb107016d", "indicator--82a28819-c864-4966-aeb0-11bb600a872b", "indicator--66c481a8-eaf6-424c-9ddc-a85817c898ad", "indicator--e8af656f-db93-4033-9ed0-4faca0a5fc2c", "indicator--84dce344-a29a-4b2b-9435-4337f785b18f", "indicator--072c52e8-4379-4bc0-82e8-d891acb98612", "indicator--a89ac528-4ea4-423d-9c8a-861fc93786be", "indicator--7c6fc715-2243-413e-9301-0c50a4325807", "indicator--0de84ebd-3b59-4479-9939-2c11169b12ba", "indicator--79a2be69-018a-4bb3-a4a2-bb157bfd62d6", "indicator--9d1f44a3-98a1-40a4-a607-1c4934739f7f", "indicator--310997cb-82c8-4cd1-9cce-e613c0a26bf3", "indicator--66590727-5cf0-4cfa-aa05-df6bad3f605f", "indicator--41c8d6f5-c731-4b9a-92b9-a453383c5d78", "indicator--62836e9a-3714-427f-93a9-fb6b43d5d703", "indicator--026c4c9b-75ea-4416-9920-e0dddcb794e6", "indicator--b34928b8-6a17-45be-aa35-ae0678520ca0", "indicator--81ec9419-17d8-4dcf-8175-04bbcf6680cd", "indicator--1fbae0ef-89e7-45bd-8a72-bc213dd9400f", "indicator--660daf8d-921b-450b-bf41-f7a90fa915ba", "indicator--3b0e51f0-59e2-452e-8b40-f74e4d3d0c0d", "indicator--af52a3ad-c24f-4357-bdac-f930c5a27d1d", "indicator--aa3a6524-6785-4fcc-9538-c7cf99d85e95", "indicator--f755d29f-fe17-466d-8420-aa4bf4650c42", "indicator--ca8193d1-8193-401b-b257-34ad447bde65", "indicator--0ffa9ab7-efd8-4401-b2d4-b01230b34820", "indicator--0ff70df3-877e-4300-b2ac-a546476877bc", "indicator--8a3271c7-316d-446c-bff8-30eb0a88d12b", "indicator--c3444477-3a65-4c92-a916-cefd9efb47bf", "indicator--6bf48256-3337-4937-9e0d-5e876b90967d", "indicator--4354509d-2c0d-42df-acd0-97c882fe952f", "indicator--e64d2767-473f-4cad-8e1a-15fee28764f4", "indicator--d7b2e5bb-7424-49fa-9dcc-c1ba6886715f", "indicator--b7871c88-d14f-489a-9053-661974cc43dc", "indicator--f6571cb1-3af3-4dd5-8057-fd284ff89cee", "indicator--1f283ea1-910e-4036-aa56-b27cf4ffa9d7", "indicator--ac2398c0-f053-4ea4-9e4f-714ca203ebe7", "indicator--55d30cd5-6371-43c0-b0e2-84f3e80fdb07", "indicator--d4e670de-8239-49e2-abce-6f00f15c0034", "indicator--613e34f8-230e-42fb-8ee2-731a5ecc0d4c", "indicator--f9d8550b-c01f-4bc6-9694-887737a6a3a9", "indicator--1e1d3e72-658b-4a00-8217-654b0121124c", "indicator--973e94d2-e985-4611-abf2-f8ce3c089090", "indicator--ec982e21-9084-4d31-add0-6030534ba7fc", "indicator--33562023-5b45-4e75-af04-d1480275ba8b", "indicator--2cbd4e51-dbe9-4910-bd95-daa5f8ac4d96", "indicator--76c5738e-a896-45ae-8df3-7ed9caad5ab4", "indicator--572fd4cc-aef1-4927-ada7-fe61e0123a87", "indicator--727a055a-02f3-46bc-94b0-ab2ae4c42ce9", "indicator--b3c5c14d-f64d-4166-aab0-cd474d3bf42f", "indicator--c395b492-bfef-447a-b9bd-a3bd5ac73afb", "indicator--30a742f7-9806-44c3-a581-8edd54f05080", "indicator--d7537ad5-4a88-4482-8c2a-028c941f21e2", "indicator--0a584c2c-5588-484e-abb5-a506ec93c0cd", "indicator--2d08d0fb-37da-439b-bcee-4aacd3bfc607", "indicator--e6a8247f-bc2c-4d32-bd2a-e2908b6328d6", "indicator--dbd74dc2-7501-4fd8-b1ca-325f5d317465", "indicator--eaf64f5c-c6c5-4bbb-9908-9c9b9d1452c6", "indicator--2e6c4817-5218-4ef8-82a8-2ee632aad199", "indicator--5b97e8f0-9513-4f9d-8388-1f6e418e2f31", "indicator--3ac59b67-ff9e-422e-9848-5568280efdad", "indicator--2f5bb888-79a4-4f80-9b22-dfb807a9e89f", "indicator--febe14a6-99d9-47f2-a5f2-6f64ad449096", "indicator--487ce77e-2c53-44e8-abfa-cd73cea3f4ab", "indicator--4b2a2e6f-c0a4-46b6-9bb4-2c1ba4ef4505", "indicator--8730d65b-1e5c-4020-b7b5-6b6d5a528af2", "indicator--eff1f392-d71d-42d7-8920-6b55c6a2025d", "indicator--550d2e9c-5e27-4069-9b88-f8d8c7280a93", "indicator--abd935bd-e9f0-4343-871e-09ee5c1b8df5", "indicator--f85872b4-8f5d-4e40-83f8-1a7b385b8b34", "indicator--9e3c8f0b-cea4-44c0-897f-14e71ea483d7", "indicator--12471d0d-c282-4edc-9573-51d85cd91fc1", "indicator--d535e59b-9569-466c-81cb-74a0e39c20e4", "indicator--9f93e38b-3a74-4cb2-b0cf-808b2b9ca978", "indicator--40f8c9a6-29c7-4d8e-8e5a-176538227c59", "indicator--0c5bc6f2-b77a-4da2-8ec4-2a26989de579", "indicator--6fb66f73-6bc0-46de-847e-65e8bc87f9cf", "indicator--5fef14a2-0665-4ea1-818d-417339045e39", "indicator--bf349e0c-d537-4b57-b02a-b499def8ac74", "indicator--f3d023d4-a12f-4d28-8318-e1f25369a16f", "indicator--bd0eac18-18b8-49c2-92a3-d424732ddd68", "indicator--9aae2be2-d114-4726-9792-f8674bb7ee4e", "indicator--48187780-497a-4eef-b7a6-81921317a48b", "indicator--3667e2d1-3861-42e9-bfcd-5a9d044ae81a", "indicator--86c9edcf-541f-4c6e-991c-795b14ff37e3", "indicator--5b5fd322-c78a-4029-a1a0-5a0073ce5ee6", "indicator--f1ac4c85-fb73-48fa-ab74-1c377a1f0a6e", "indicator--24bd14c7-61f8-4b85-ba2c-7fabc42e5677", "indicator--d839cb5e-f5fb-4f7f-bca8-7db81600afce", "indicator--f94a04b3-c9a4-459b-a0db-d8ea7a91d829", "indicator--097e4497-3f86-47a9-bbea-625fa891ca4a", "indicator--29505ed6-59c4-4ac5-a5db-a426d1b9b177", "indicator--f46af101-644f-4ce9-aaa1-e036de8cb73a", "indicator--64334f66-75b4-4600-9a38-5d856e6f24fb", "indicator--e34cba69-30cb-4b50-be83-e5ddc1ab4c79", "indicator--17fa6c09-d8a3-4636-9a9c-0c169c6d14df", "indicator--8728c64e-b152-4087-a5c6-21d9d4b1ad2f", "indicator--75ebf915-36f3-4530-ab8f-6d963e718f5e", "indicator--6c2d80e5-5929-4896-bb8c-104993e1287d", "indicator--0b5ad636-f3e8-41bd-bcbf-0aca32d6fc2d", "indicator--c5cb55bb-b96a-410b-bed2-70b67856f914", "indicator--b331da2b-8cc8-43de-afdf-4fc73cfa7a28", "indicator--3a03dc41-5ae2-4661-96dd-11ca1823d0f9", "indicator--51b08248-a65a-47eb-9f01-124dad6d66bc", "indicator--f9ea32be-53a0-43bf-966d-ad0e121f059c", "indicator--8b7227c8-7b97-4f2c-97bc-37b40ee9cb56", "indicator--11d2ca56-4b14-450a-bf37-9c61b56a6b2d", "indicator--e4e35be7-8c9e-4f12-a703-b45189b56e90", "indicator--b29dfc7c-71ea-42b2-a088-24486589a495", "indicator--50f163b2-57b6-47d4-9dd1-33d4ff78c9e6", "indicator--344301ee-eddc-449e-b89f-587c37f67f70", "indicator--e9b31a5f-7437-44ef-b013-4b0bf0f26e65", "indicator--78473f24-d6a4-4a67-8133-38114431cbc7", "indicator--7b42889b-9533-47d9-9d81-787179f7909b", "indicator--016974b0-b231-467c-a959-536fdd75cf6d", "indicator--547e10b3-075c-405d-b2d3-d3375b224d7d", "indicator--cacf67df-6f76-4ebe-8e8d-4ce8e9caa336", "indicator--9ea11213-be75-462f-84f6-e1fabbfff23b", "indicator--17774c2b-7041-4903-8a1b-6288ed0cebf5", "indicator--bac451e9-7c8f-4cc4-8ca5-f1e0afacc992", "indicator--6bfc47c2-eb0e-4f2c-b843-eb379fea2374", "indicator--a44c2de9-bcae-44a9-b51d-ff4e2e040d67", "indicator--d1ef79fa-f27b-4ceb-a077-b7c0d906ef22", "indicator--66986404-5595-4da6-be7f-91b1087d3626", "indicator--34a2d552-a591-4d68-a7cb-e57873cecb0a", "indicator--1a7a6436-b3f9-4dd6-9333-67e7ad935a10", "indicator--4e90f182-17df-42d6-b369-9508ebae51c3", "indicator--2371fdf3-1199-422b-bc7a-ac00d56e537f", "indicator--8940811f-4bfd-4f1d-bbdd-8a75cff49914", "indicator--5a8d3c91-8175-40d4-88f3-bf24b0935961", "indicator--576ebacd-62a8-4ddf-abd9-1f6f746b8282", "indicator--a2a0329b-153a-424f-860b-183ced39915c", "indicator--bbd9a893-76fd-42c7-b400-d19b2f6c9e61", "indicator--7322b488-ed45-4251-a8bc-cecebbd68395", "indicator--de4f4da1-afaa-42b8-ab12-b2b690c63ca0", "indicator--10f7d568-5958-4eef-acca-61e714b27fbc", "indicator--aa487677-ad34-4a32-ab7e-2a7450ffe6da", "indicator--96000a33-5645-4fce-9328-cd857b6b22a7", "indicator--abc45aab-0a4a-4477-9a92-ca79fa78d531", "indicator--ebe5d22f-4f15-4344-af37-4e08f8c7665a", "indicator--36d0e9b2-4010-42c6-a220-beaa87b99172", "indicator--52e22064-e3e3-48de-a656-7ef12c0a1c22", "indicator--587db433-7a9f-4b30-b598-f27349641f42", "indicator--59383acf-6677-4cc2-b497-a7ddc5f4f375", "indicator--68afeed8-9ca6-4891-a8ed-faad3251aa19", "indicator--869152e3-877c-4f88-ba75-e3432c7a0a3b", "indicator--530aa87a-23ae-4e04-bb48-1f058fc77d6f", "indicator--9a9dc95b-2c0d-4025-814e-80508f1f4398", "indicator--2c490d3e-d17d-4da7-9efc-e7cd7b7e5f21", "indicator--39b9c4e1-bb91-439a-acfe-22555733e0ea", "indicator--6044134f-2545-4d2d-8e9e-2652549d0ee4", "indicator--6fb00c81-123e-43c7-954f-4c58749dded4", "indicator--f4900f33-219e-4ee7-9b3d-7a431e9a5cb5", "indicator--d3b9fd11-2077-49f3-90e1-238cbc6e96c5", "indicator--f58ba573-5459-47aa-8b88-7706aabed600", "indicator--0802c76b-2d09-4d51-a13d-7ac7fe7780ca", "indicator--48c86987-f4c1-4545-ba1a-eb846529d7ee", "indicator--1797a5c5-a71c-4e95-9502-ba1e366863e6", "indicator--1e3713bb-b99f-4e36-89cc-81fe3d7c1b42", "indicator--8a8ed2d6-e330-47a2-91af-95b52d1e9c50", "indicator--eea3d8d3-cbb1-4bc1-8b1c-e68a038fc287", "indicator--e6d55a36-0390-41b9-b075-7e10f72794ee", "indicator--0bb225bd-d929-4b0f-8222-e6c4296eae3d", "indicator--f13fc6fb-f11a-4b8a-ba97-37cf42e2def9", "indicator--96d081bb-7e91-4d5f-854c-93f0980c149c", "indicator--f1b604bc-0ae1-4a2a-b08c-b00fc762f4a5", "indicator--e9a96ce7-c1c8-4163-a3a0-1a53436637ca", "indicator--83aa1706-6a89-4dca-8990-b430a6c03282", "indicator--bd99d7c0-0e9f-4230-b145-12313b6b3b3e", "indicator--70533e88-32a9-42c9-8496-9e1a1e555627", "indicator--bbd36eb8-e7ea-47a5-a65d-813fa27929bc", "indicator--9d705744-4ed4-4b0a-8047-10a6fdc539c8", "indicator--426aaf96-5b9a-4cc0-991f-1773bd688ec7", "indicator--2d3c2bb0-5e56-46ec-8e37-1b6cff95f28e", "indicator--48ff17f3-92c5-42a8-90f4-32fe588b156c", "indicator--3f3fc8cd-c112-4395-8249-b450621c6287", "indicator--5ef255c5-ffed-4e34-a50c-f194dcd25f9c", "indicator--42a810b5-71f5-4944-9676-cddbfddede66", "indicator--9200618e-8c5b-486b-be70-493b78c38e18", "indicator--726f4059-9138-43c4-996b-ba135eb8d606", "indicator--37908995-7d7e-42f2-9921-e690ff3f7663", "indicator--74b78d9c-e424-49e2-9b7c-55717f5d38bd", "indicator--5ea72e2d-9f87-45e8-bbb3-d2895b9c7bc8", "indicator--03b4c099-ab48-47ae-bd9f-cc8bd163fd78", "indicator--84e400a8-43e8-4c4e-b538-b5d62ecd0594", "indicator--0165fb80-d301-4fa4-88db-81e779acbf9c", "indicator--e407527c-3175-4e44-b859-b01dd150475d", "indicator--5f55a97f-a431-44d9-9604-e8e9b8f85dab", "indicator--c73c93e3-7a39-4550-806c-afd0ee8595d2", "indicator--c26a23d1-a68c-45c2-b022-260e526eb760", "indicator--5f7e6282-9c60-4a7e-b341-53ea7eeb3799", "indicator--12e1fbc1-5a5e-47fb-b43a-82bd3ba82fab", "indicator--a8824b39-3236-4b3c-afdc-3730a247e9f7", "indicator--9368ca51-339c-46ee-a782-f3aaf4a387c4", "indicator--95019b08-7e36-4183-a582-346aa826cd43", "indicator--1163fdce-1b7d-4ae1-842b-abaa9e9142fd", "indicator--8b6d5782-1797-43b0-a6cd-16841aa09629", "indicator--fdb19de6-e5ef-4f52-85f1-34af3092e7ec", "indicator--fbe28ef3-b3da-44c9-9a6c-696d2499c159", "indicator--727e3eec-ef01-479c-aba4-c7b0e560474d", "indicator--e301aa5e-0683-4b22-a26f-4df094e8cb0b", "indicator--0c88d82c-8369-40fa-b0d0-36f62b3f3979", "indicator--7dfa0e63-deb3-41d1-9eb2-b95f7ed2761b", "indicator--6fee471b-e6f6-46c5-9e19-9b9e4a21377b", "indicator--33da3423-3825-4acc-8180-687c154f7b6d", "indicator--14e036f7-6711-45cf-b2d9-70008a100e44", "indicator--798ca5c0-a122-4d77-9fcc-361beec04c0d", "indicator--656df673-7cea-41eb-b3cf-cdfd2e4e42e9", "indicator--8a6226d3-4222-42b1-ad1a-1ee9fdd400fd", "indicator--2c6a7747-acc7-4cc0-98b0-a1cab5c9a46d", "indicator--997f449c-2849-4eda-b38c-3d2857ba6716", "indicator--946cdadb-6cdb-41e4-b661-04e621a774c2", "indicator--de69fada-2216-44dc-814f-0396e3c69a53", "indicator--755924a7-c2cc-48cd-9060-b7d99a2b93cf", "indicator--606e5687-747d-43e8-9a1d-4b847e4b11ce", "indicator--0238cebc-eb79-47d3-b43a-2c681ef2e574", "indicator--b51c65ba-d319-48a2-9faa-eb11b834f281", "indicator--585877a9-31c9-41dd-8f5e-26e1365a88d8", "indicator--6e28c205-9a44-4634-ad82-9e4c7ccfea83", "indicator--b5506ebf-8975-43b3-aa7c-f810ee1ab3f9", "indicator--d19d3e73-be6a-4c5f-a4a4-e3888a0b84b1", "indicator--45b97565-6091-41e8-8845-9064a03a1fea", "indicator--7c76472b-9413-4f97-a05a-30e9b8db6e22", "indicator--428518e1-3412-4420-88d4-52e0fc4f860a", "indicator--9e3d8b97-3d5e-4161-b5e5-9bae54f95a54", "indicator--0a8cc1b9-aef4-4d61-89b3-d33f34a4464e", "indicator--87ce90f2-b5da-4331-939e-f25e4d916f61", "indicator--91f77d83-1542-4e3e-920a-904db53abff4", "indicator--abc9f965-492c-419c-b9c9-89e0728a27a1", "indicator--ad2dbc0a-b02d-4abf-90c4-462756732c8c", "indicator--e436fc2f-ce3d-4bf4-a3cc-8b8eb1f56116", "indicator--d30f1f7b-964c-4add-b64f-3270ab79c4d4", "indicator--09d5ad04-e40f-4f26-bb13-5b074a36e3c5", "indicator--617b2aac-4c59-49f2-986b-6237287f2996", "indicator--99b6357f-c1da-4106-9f63-2b833388a5c6", "indicator--b838077a-c879-4bde-8139-eccff3b43de5", "indicator--278f557b-a3eb-4dd8-bda3-1bca22bf701a", "indicator--efc55ea8-e3f5-4536-aa57-3e238f1b433f", "indicator--4d0cec30-4866-41fc-b165-fe27c617415e", "indicator--77e0a20b-3380-4164-8f7c-792bd35aaca9", "indicator--31cb2ac0-17c4-4f58-8439-6cf9dfb297d9", "indicator--d77b1217-acc5-47c8-9afc-122eb200bdaf", "indicator--f27caaa5-1b13-4d4b-ac28-21fc6f5e61ae", "indicator--656865f4-a6ca-42d5-ab6b-58a05d261b69", "indicator--24ceaed9-febc-4889-833e-d83252dc680c", "indicator--2466efe5-64cb-4592-aec4-8da94b6ab45c", "indicator--e47918db-b57d-4f79-a467-87125e6b81cb", "indicator--86c98c5e-ac4b-4a26-8f0c-84dc8895d2cf", "indicator--75646658-5700-4ffe-9c88-da35ebe196e4", "indicator--662ef08a-7d1b-4a19-91cf-46033f9f3308", "indicator--217b23f7-bf47-4da6-b808-25de12a904cd", "indicator--28c61815-34a4-4565-b054-23517e21a379", "indicator--4807796c-cad0-48dc-8fbf-6642c90efe78", "indicator--a4247517-72c0-4a8f-a198-4c115da19a31", "indicator--77f05a84-9144-4203-a07f-13bad58f32df", "indicator--8ab4229d-701a-480a-83f7-eed30c8d6fe9", "indicator--096cddb3-b412-454a-96e5-a404cfa679f3", "indicator--fd52b7fa-6d99-4d50-bec3-64971302a5b3", "indicator--bd758e31-facf-4e32-a0c4-a168faf3ff91", "indicator--32b68cd2-5592-47ff-b65f-39988bfd1180", "indicator--6210b8fa-5e83-4e74-94ea-2e131e8ac29c", "indicator--2acc1420-54d3-44aa-b797-da3deb9afc41", "indicator--6d5bff1c-5c7b-4601-abd9-35054c11f209", "indicator--e000ca83-283a-4323-b860-c9fac6e3a057", "indicator--71f8b468-26fe-45f7-b388-bd875cc61209", "indicator--58b03246-af87-4428-9834-13a93de30a42", "indicator--66b2a895-490d-4125-a5b2-84beb55044f2", "indicator--46c4136c-e806-47b1-99a6-0490b8ec9190", "indicator--c21a18e8-e229-4b47-ae51-97a2c6e1b17a", "indicator--a221741f-3d47-4a91-a096-abaf7e736927", "indicator--e9dca897-b3fc-44e0-a1c1-37d595f68221", "indicator--8c4b5999-6a28-4c7b-a909-301f55f056e6", "indicator--8794164e-cf73-44e4-836f-c0ee0473c605", "indicator--5ee91081-0f9c-47e3-9f3e-f92f4dfa60ed", "indicator--c3afbe55-4832-458f-8c09-90e35fb6df9e", "relationship--70843de9-698f-4751-85a7-52c0d3c6c04a", "relationship--fb9a454f-207f-4048-ad6b-ced263fb38a1", "relationship--e5ccb1d5-f8f1-4943-85be-46a4b086db23", "relationship--df82f833-a14e-4c55-84aa-2b965a1a2ff3", "relationship--bea8ba86-04d1-46fc-898f-382f2c6e3c0c", "indicator--b9e3b1c1-f593-4754-b1af-f8850e1bbc6d", "indicator--67aacffe-7d38-475d-84e8-344ac485a249", "indicator--5a74d627-bcda-466b-a153-3254b15a8fb7", "indicator--0e13460d-0d01-439c-a3a8-045b637191a4", "indicator--c99486b4-e374-4080-8fb0-25925f5f9c2b", "indicator--a4577f65-8961-48e7-924a-4446f14ae8cb", "indicator--c84bac80-64a2-46f0-abd5-84adba7a3a02", "indicator--6cfa4c4a-61c7-4a98-a923-17da20e9b4de", "indicator--1e1fd3aa-9c53-454d-9786-1b6fd3a8e7a3", "indicator--26dd1dae-87cd-4dad-b267-e7db3e0cddd1", "indicator--94f3f930-b166-45b3-9b8a-1bc5a9836a91", "indicator--a1d90120-40b8-4643-b976-a74899518d30", "indicator--541c1468-ff47-4e57-8e90-669fdc501479", "indicator--82862acd-0351-4104-8b98-0842e1fb3b30", "indicator--053f41d8-4450-410c-abbb-d2d14e5720eb", "indicator--1649ca99-4c05-4efe-b43c-0664be6351e2", "indicator--2ce10b7a-052e-4179-815e-4391b1ff712b", "indicator--df6e199b-9da2-4fca-856b-22ea0a9fc28b", "indicator--c770e29d-c5c0-43a2-816b-5b1840a12e85", "indicator--9c05009e-ad89-4b74-8f2c-7cfb41262733", "indicator--863f13cc-4568-4873-bc22-f2312938206b", "indicator--aff82527-e2b3-4e23-b71c-916ecfefaed9", "indicator--fd566370-b1d1-4f8f-9c19-c2b93c55d676", "indicator--cd63df3e-3a65-46ef-8d06-ded852fe7335", "indicator--44d90095-ce0d-4506-b1a4-a5cb538d9b1f", "indicator--440e5bd2-2143-4cfa-9628-4ab887c73468", "indicator--8686ec05-a7f5-4d71-b536-f61b7ecb67b5", "indicator--be0a46a0-7e01-45c1-bbf2-30d7e6078beb", "indicator--28d0eb11-30c0-4b7a-ba7b-01727aab8ffc", "indicator--605febf0-e5d8-4bdb-bf17-8aba0afe5c00", "indicator--0ebeb33e-1f44-4745-b626-06a8f05bb54b", "indicator--7f93f4b8-a814-40fd-82d5-6afbce24d74a", "indicator--c7af4aa0-73e1-4fc3-8f99-75c270c1f2ae", "indicator--be91f1ac-831e-4a8f-aeaa-e3e294e4e76e", "indicator--1ad5e61d-cd44-44e1-97b7-dfbf45e6ab2c", "indicator--298dfe0c-2246-4e5a-9e86-f01a11184ce6", "indicator--54316cb8-860b-4200-8bc0-e5cfbd2cce82", "indicator--89246fa9-268a-41ae-bf19-2576665d89e1", "indicator--1822437e-e0b8-4de8-8118-ce6bd4cb06b6", "indicator--81eccb71-7363-41f1-8794-2a0034861008", "indicator--c5374bba-5496-4c21-8697-0a12debac15d", "indicator--105cfd37-2975-47c0-b629-082729120bd5", "indicator--fdf609ec-bf55-4694-85f0-22643a9ebde0", "indicator--ead45d67-341a-4d79-962e-373afc0b596c", "indicator--1587aae2-ec04-4cdc-917e-4a046c790c6d", "indicator--d95792c3-b4c0-4c36-b343-b545f27ffb67", "indicator--0184e8c9-6586-44bd-8a2a-031f68b5d1cf", "relationship--bfdfd344-f2e6-4cc5-b6d7-698e2f8c9e19", "relationship--d8b8caa4-c2a7-4a0b-b9db-b79e0a8b48d0", "relationship--4f7691e3-eb78-412b-80a7-ab477ad8c76a", "indicator--06a57d94-c84b-45a7-8bc5-75d4424943a9", "indicator--2079c354-ca6e-4716-96d0-ac22a7933e66", "indicator--bf6490ac-3cd0-4335-bf7a-8ff20fa469f3", "indicator--d003e9ec-fbfe-492c-981b-9bc1d222cd34", "indicator--cf87ce59-b129-4841-b592-47747f1ec8b0", "indicator--2757b28f-d4dc-49ac-aa7e-bc40d692f632", "indicator--5d4a8456-cd62-4b66-9916-df61c5d609f3", "indicator--3a99a426-70b4-42de-b4b4-05a0b88084f8", "indicator--10a14ba0-c6f8-492b-8890-83d0ecc52042", "indicator--7b568345-3e63-4372-9385-15d17f1a9afb", "indicator--aeb94c4b-1e1e-4a19-9e83-0cd9d82523bd", "indicator--779ab482-8700-4320-942b-bd2d05418f4f", "indicator--f5546954-6197-42b7-8f68-a1eec73cf08d", "indicator--05ea47b7-6bf1-417d-b417-73aaaeed641a", "indicator--56eec11c-3f9f-4062-a6bb-43a179a1c793", "indicator--5defa222-93de-4177-a786-378a56a1ca7a", "indicator--ee6e170e-fe59-4d1a-9164-afabd6673400", "indicator--ed114102-6340-4dbd-8d62-fc629a16b776", "indicator--075149af-c2b7-4f37-8d57-5538893c89b5", "indicator--89552c61-786a-4cf9-929b-30d5003e7de5", "indicator--f8ef6eea-df3e-4d65-aff6-0c349b4d55dc", "indicator--1f49594c-4e09-4a11-9785-d80f99d73b57", "indicator--3be21656-9880-46bb-861e-9d94d31d6be8", "indicator--4686c28e-7e08-4b63-a801-d0bdbae70c36", "indicator--7a669769-be9d-4442-964a-9f6119dd1fa8", "indicator--c0651ca6-932c-4eff-a60b-72acf213469d", "indicator--1799d4c8-2358-41c6-817a-43bb17805e9d", "indicator--7d2935e6-9a4d-4ac4-bd55-fd78706d29b0", "indicator--7235f340-57d3-494f-9fea-adbcf0a4b706", "indicator--83f5c6a9-ebe6-425f-a6cb-f4f7fb9d08d9", "indicator--0c776299-6733-40f4-b655-628757f4d9c3", "indicator--92bf86e1-4ec7-4c0e-8713-642a72a38a83", "indicator--b247e1a2-2494-45eb-9d17-5de64b1c5e57", "indicator--b5c46295-f33b-458c-b77b-80d44897e6ad", "indicator--ee605b00-0661-48df-b642-20bd8284f27f", "indicator--31e5aa56-5c61-432c-998d-903fb6f7bfbd", "indicator--ca9a1e5e-c73a-4055-8ad0-10b0b2c7ae08", "indicator--c774cb5e-e6a6-4231-a4ef-4a0f9dd484e6", "indicator--6f499ef2-092e-46da-90d2-5cd0407efc8c", "indicator--187cad9f-cf06-4016-822b-cc3320f94d1d", "indicator--c8c974ff-eab7-416b-a96e-f6a7270e5cb6", "indicator--81b3a104-2eb2-4e04-9893-32fe12c5655e", "indicator--8f71c5db-5d54-4bf4-ae94-ecce45f26fe1", "indicator--d8c3831b-17a2-4d91-9cd8-df6c682fc481", "indicator--8af0f4af-3e79-40c2-99da-dddab0e5bd3c", "indicator--ade36be5-d27e-4e55-bf62-0624b754c111", "indicator--8366b24d-08aa-402a-a05d-475abd2980dc", "indicator--4afb95a6-21ce-4000-ba47-4e1ebf2d40a1", "indicator--455e9ffb-9f7e-4a1a-bd22-51777458677f", "indicator--57c2d612-68b8-4112-af55-af74e1c880f8", "indicator--2196bba4-9e8d-4dcf-b9c1-c25e3ff7bfc1", "indicator--698557b1-0c88-4f0d-a3c9-7c9b8db6f799", "indicator--efbebd4b-ca32-461c-a64a-c82b6257613e", "indicator--d37852b0-248e-4839-a74c-0b67ae32fe35", "indicator--f12e2f02-8ec2-465f-a384-94d526e6f90b", "indicator--29eb0bbb-961c-4300-99a8-8217afa42813", "indicator--2406e483-0ee2-44ff-a404-eedf3cbe0154", "indicator--bc3dd2db-35b6-4a37-9db0-0c3ee84283b4", "indicator--041cfc7e-a42f-41a0-9785-f198a862c819", "indicator--82ddca5c-4a2c-46d2-86c9-c338d074ef8a", "indicator--7acc15f9-b968-4fe5-b268-13b21c6ada28", "indicator--acb8f71e-12a1-4b7e-a635-f9da46913f4a", "indicator--adf80816-9b08-4690-b6ef-bb26c332e1ac", "indicator--fb5f0d23-6b6a-4c0b-821e-2e7d33aa8137", "indicator--1cb3f6e5-32c9-441d-86d0-659d734c9425", "indicator--ec171254-4d97-4850-9040-12f8c44e826a", "indicator--430c7edf-f8d1-4c56-b965-c75d91db9a35", "indicator--64ead0dc-c473-4ca4-b85a-f9931e4478bd", "indicator--a28937e9-ee13-41a7-8ee7-895d5ba20dce", "indicator--6a8e9242-75c1-4d29-8208-f553abbcf8ec", "indicator--632eff0b-aa57-444f-8f91-4fe57220df0a", "indicator--b84ab673-05ad-4d62-9891-d332fb62dc2b", "indicator--f158240b-abda-47a5-b092-24f21b394485", "indicator--ab0b2a3c-22c3-4f72-b61a-271a86faff9d", "indicator--9a3fa8d4-7425-4491-8e39-4d741cbed9e3", "indicator--d430280c-5d55-400f-b32e-7e8dcf2b062d", "indicator--e66688b3-8326-4897-b7bb-9147b35e244c", "indicator--75d208e9-6bb9-420f-8d42-aac4087c2d01", "indicator--808e378b-3a09-402c-82d3-acb9cd324fb8", "indicator--4a3ee2b2-241a-4a86-ac24-4a0921ce52bc", "indicator--58611627-b917-40d6-aeea-467f1d239b94", "indicator--e1827f7f-44ee-4211-965f-fb615a34ece5", "indicator--50951077-4889-40c0-ad04-8d628cabb5b4", "indicator--bd222543-95c8-4f6b-a486-48815294fc86", "indicator--99b56663-fb6c-43f2-a312-c60df78386d6", "indicator--c4ba20dc-8875-4149-992e-25da67734a68", "indicator--d4368b04-dc4a-4b94-826d-77ac5086ddc2", "indicator--74a5d48c-14a3-4a8b-82d0-6ea3b6ef8350", "indicator--e50678e8-d22a-43c8-869f-4d9cf259e7c0", "indicator--ea1d41f8-ff41-4b30-bc3c-826f21c880d1", "indicator--2c822b7e-5791-4a5d-be6b-5a901c4f2595", "indicator--7226c379-25a3-449f-8789-ede95d539abf", "indicator--7af1a9f1-6665-4f1d-90c7-19fdb184dafb", "indicator--b21de238-f767-4bd7-9d78-c836f00c5a8e", "indicator--f39ad907-d5fe-4f6f-a40f-d51b7b4fb167", "indicator--38fa551c-7f19-49e1-adc6-ee1bb48d734e", "indicator--5b1641e6-5c7f-4f6e-8a2c-6db869b96484", "indicator--12cc076a-0cd9-4a6c-8ff1-50a5f442a3c2", "indicator--5f5b16a4-cc06-4b78-b0ec-5b950c459bb8", "indicator--df39b742-f5ff-4147-8c78-0ed2b67e32b3", "indicator--e7bde877-b42f-4953-96a9-32d12a25bb99", "indicator--8d9cdfb2-e0f8-47fe-8900-c17c306481f7", "indicator--0150b63b-2136-46b3-9ecd-19b3a63d6d32", "indicator--c35c14c6-b765-4dcd-a561-425fc59c808e", "indicator--3b9986da-fa55-41d0-bd9e-b674e09ae492", "indicator--caa3535a-1e0d-4f42-b45e-2ce7b411e011", "indicator--5cdb3eae-9d7f-4a0f-8f73-010c85aa8e9d", "indicator--ea9cb2e8-64e1-40b6-87af-bafb90a9254a", "indicator--7c7d3c36-1d81-4c5e-b796-5ccb6a21b280", "indicator--022ef6da-e574-4f7c-baf8-d22dc8ca3ed8", "indicator--e6f5e283-2291-4b38-b392-e14e8c17a18f", "indicator--399ddbca-ac4e-4a35-8cc5-82f607231421", "indicator--223249d1-a68a-4406-9b30-e34016223023", "indicator--18d77b24-6940-47f7-9e17-9dc0c3850a82", "indicator--be0fae16-a0f0-4fe5-9c49-7e22a408871b", "indicator--be670093-5be5-43d5-8a4a-614102baa60b", "indicator--e9eb4653-02d6-47e3-a0d2-5ca18ed04cea", "indicator--83a9579a-5eed-4a8d-995a-9b3b538495e5", "indicator--39540af2-e48d-4e50-8bba-e647ae9f5d7e", "indicator--db0efb2d-0981-4e5a-860b-61d03ba64a2c", "indicator--2b78aeae-e736-4448-8802-472b6b96473b", "indicator--654804ce-3c29-4039-9602-08d6043cedff", "indicator--9a6bea1d-c6f7-43a9-858e-3ad713f0b71f", "indicator--77a613fe-8cba-48a5-bfc2-d7660cbf8a6c", "indicator--f3ce51e3-e1e8-4706-b30f-dc0d7d52bd0f", "indicator--03c2bc53-2e67-4552-9231-30cb6e70b17f", "indicator--c4cbce3c-f918-49ff-bd68-017ca97b6138", "indicator--e2c3ac43-82fd-4ffa-ba9c-66dfedf07d56", "indicator--db561854-841a-4ef2-a28a-dd8d3fdaf90a", "indicator--ceb6de02-1683-4121-abcf-a27d166852c9", "indicator--7c405980-dd76-4629-bfaf-de7c9592e9c4", "indicator--da223533-13c8-445e-813c-bd1e22113e93", "indicator--4643e75e-d6aa-4192-81e1-5287b025e876", "indicator--88b89d07-981e-4ee9-8552-3e4ee19ced0d", "indicator--480aef1d-507d-4797-95c2-76e026c0f3f3", "indicator--7ca16f0b-7ffe-43a5-b0ce-d1261492f311", "indicator--4b3c1dcf-13da-4242-a2d9-7fdd34bd70ad", "indicator--658b2cb7-0706-411a-8d0a-b0fd3f5aea62", "indicator--8bc1e125-1a95-4224-89a2-69c086908968", "indicator--22f229dc-198b-41b7-8698-165e6cbb17a8", "indicator--e94dc9ba-428d-4762-bbed-234cac58a546", "indicator--397c375e-d358-48e1-9d10-11967ff4c05b", "indicator--ba198498-b706-4132-80f3-4220a5726ce3", "indicator--341f00ba-8c00-4363-a2de-aa106a396f11", "indicator--47cc71ce-f955-4854-8268-b32a0814bc0a", "indicator--cd68a763-a883-4b90-b71e-8ea42b3e5a30", "indicator--e62ed265-6d5e-418d-ad99-8f6653652251", "indicator--18e2c19a-3c37-4cde-8b89-b0f208686f5d", "indicator--a21fecd1-a243-469b-b63f-95967faf3db0", "indicator--627cabe1-371c-4107-a896-f194c6f86d22", "indicator--381c8a7f-7166-4592-b55e-343d36668326", "indicator--20b3263c-3aa2-4180-b9e9-01709488db5f", "indicator--14af0fd4-edbb-458f-8462-000baace6e8c", "indicator--44664314-4eae-44d5-b38e-ebb96a8ef265", "indicator--153777d7-4868-43be-b3dc-be4d8a6d41be", "indicator--57c61f68-e980-4181-890d-dfebcc7f5750", "indicator--129541ac-7af8-4e6c-b18d-a8377c22ba39", "indicator--4421fac8-aae4-42c9-ad32-4d4c6b2a4590", "indicator--7a88773a-336f-4637-957e-cc9cc516789c", "indicator--81a47af6-a872-475d-a6bb-92c8a73876dd", "indicator--0ef9ad55-d5cf-4b02-afbd-4002d5dcee2a", "indicator--25262c0f-86be-4e92-836f-832ff60d4f3d", "indicator--561122c7-c794-4cc0-9730-9f3cfb38a3f2", "indicator--4b11baef-e203-4e3a-8d26-0abc5b9ea33e", "indicator--dce886f6-18a9-42d0-b0eb-2742885e33c6", "indicator--ee985466-574a-4593-893e-11ffd3d40112", "indicator--22c4426c-1126-4d92-8e7b-cc266109c6fa", "indicator--ddb18844-f45d-40a9-a328-536cf5ec0d49", "indicator--d41923fb-7dca-4300-8d98-ee99f184ec8b", "indicator--973ec6af-14ca-4047-b033-fd0e3e0ab677", "indicator--304fca9d-31ec-4e5b-8610-8b5952989268", "indicator--985c85cf-1b10-4bef-8441-a267eb4af983", "indicator--cd67493f-71d2-4309-bdf7-06859ce36ac3", "indicator--3dbcea9a-62ba-4bae-b5fb-60bac94d43ed", "indicator--2be940e9-0863-48ae-a67b-be2f59c67544", "indicator--7e68ea57-37c3-49a0-89ab-3d2c1131432b", "indicator--a1b678ab-3eca-45f0-9e5e-3cab248ecdc3", "indicator--62f790f2-4809-46aa-b622-60f455e647cb", "indicator--243c8f0a-3835-461d-82b1-bab5fca75a69", "indicator--ec9628e7-eb6d-464c-807e-4f8480fdeadd", "indicator--4a23c8f2-3b61-4f5c-9064-b6f831fa3cc2", "indicator--27798b61-cb7b-44fb-977f-e8653b162f9f", "indicator--6053f48a-6ad6-437e-b747-dc89ff8958ff", "indicator--18c48e25-fece-439a-a965-3913a44d5717", "indicator--3ba82b69-5ab1-4cf6-952f-29b36d301683", "indicator--c955a8d6-3197-41ac-ab48-668b695aa218", "indicator--4206a641-731f-4ec6-984e-7db9a9715432", "indicator--ca1fcbcf-0d6f-4c7c-ba9d-deb0d295aaf4", "indicator--c8fe1a57-43ca-429e-a8e0-b1233a58d096", "indicator--4562eaf9-0448-4400-8d46-4e4f5d4e249a", "indicator--5ce6c6b6-a5c4-4b8f-a727-39d52aeae4e3", "indicator--c1daac61-b2a0-479c-ba18-0196897be1e9", "indicator--baa35368-051a-41b3-ad9f-96cb7bd0887a", "indicator--63aade31-63e6-425d-b19f-5117f0abeeee", "indicator--1a361152-d5d1-429c-94f1-8c243b7b2623", "indicator--61096449-e45c-4287-8bd5-b9c336dd6e00", "indicator--6a7d42a7-b920-45ae-b38a-f72ef3344bcb", "indicator--5433c6d6-1552-43cd-b1a5-4e7a747889cf", "indicator--740e4d39-6372-4e31-a017-f002661b2bba", "indicator--39a88d0c-17bc-4382-a04d-382c4e6f7f99", "indicator--0d276003-d79e-4f56-9ba3-b83be13082ee", "indicator--30897caf-6ec4-424d-94ae-f7db769df10c", "indicator--56837ceb-e5ef-483d-a08b-21d185069d49", "indicator--71be2918-36db-4118-b58a-8b41f7eead2a", "indicator--837b0cb6-1f11-4fb8-8d92-dc9442eba699", "indicator--8be21160-79ad-47ff-a31a-ced61788d292", "indicator--dd88c324-5a3d-4885-8690-0994a4e1cb35", "indicator--89cbd6d7-68c6-428d-9f5b-043f17bd81c7", "indicator--83b4e3c1-ca05-4fe8-9dbb-c4409ae5c6d3", "indicator--9611150a-8830-44db-93c2-08cbd28bdeff", "indicator--efb3711a-530a-4551-8e01-d387e3e03445", "indicator--1750715f-789b-4681-828e-f7f26277bfb4", "indicator--d52b58cb-090f-4348-bed2-3f0c3874a49f", "indicator--f2cdc542-e1dd-456b-8947-ac7458f683ae", "indicator--d2806330-6ebe-4f4e-a1ec-564ab3d42d74", "indicator--774a0211-35f2-4798-8871-23df57ab72f1", "indicator--45f808f9-7f84-4f81-abd2-4c6aacbc3bfb", "indicator--07928667-9fef-404d-a5f3-84fd5db2c208", "indicator--f23f4cbd-068c-46a1-b92f-fdaa2caac64d", "indicator--d76e10bf-a295-4cf4-9d04-c2be90282fd6", "indicator--e7006ec1-777a-496b-893c-f4319dfca7c7", "indicator--76eb9714-3fe6-4c47-9cab-95799b6dbc7b", "indicator--ef5e5183-48c0-4072-8ecf-cd92bc6c89e0", "indicator--b872d1e9-130b-43f6-8e2d-9e4f10826b9b", "indicator--29f9f2c7-d8c0-423d-a394-2f76782d3c3e", "indicator--d7fa9cd1-e41c-4dd5-aa2a-d5c6d5579e16", "indicator--472b0d1c-23dc-4324-856d-48df9a68326c", "indicator--c4807c37-c31a-4748-a66f-db272ece45fa", "indicator--3c4a0932-5097-463a-82ca-b051b1960abf", "indicator--c89df441-e10c-42b5-aff8-fa7d9dbe221a", "indicator--55efafe7-e5f4-45bd-92ab-5f7944cde9c8", "indicator--01155db3-e379-4eac-aaa7-4366fd566a25", "indicator--27c08501-37d2-4277-9e8e-e69d18fe3f45", "indicator--223dfada-5dbe-4dd6-a77d-bd63046fb2a2", "indicator--5580489b-8223-4b23-8b3c-aa6ed46d6c27", "indicator--74b96f41-f608-4c5b-aa7f-a171a2fa9c03", "indicator--a8a1d8b9-069d-4bd4-af75-eeb9043a6554", "indicator--22a21ed4-009d-4312-beb5-4044bbf6b2d3", "indicator--d7a03b63-8725-4e13-8305-c613a063ab1f", "indicator--9f2587bf-006a-4646-a4b4-84be864e67dc", "indicator--1bae1f0e-0ab1-4ca8-b94b-3b4e87824024", "indicator--d8c58ca0-ca82-49bb-b380-bdadb2759a91", "indicator--365f1e07-b1fc-46d4-b122-03f72afa0430", "indicator--ac4c4444-94f3-4fd5-a4a0-dda443b0a343", "indicator--59f1d169-75c1-4464-9db0-2ac9d1cdaec1", "indicator--35d98b97-2d39-40a4-8e23-769d82ce82b4", "indicator--96a7d55b-f364-42f3-8226-09e427d18b8b", "indicator--0a556afa-bfb6-4631-833f-ea96a51c8ace", "indicator--2c368b71-1a63-4bba-acd7-9982a7e614ac", "indicator--ab2870e1-5002-48e2-902a-9c678ee9a064", "indicator--9c13b487-65fb-4fc3-8028-bb22efef0ca0", "indicator--73407a2b-b456-48cf-aa1f-973eafb4089d", "indicator--f0fbfbd4-c117-427b-8bcc-02ebdbb31584", "indicator--3b36d80d-b0b5-45b4-bb8d-654bf1b910f8", "indicator--346c7a12-1589-46e9-8d4a-98f87b4988ed", "indicator--53f58be8-a7c5-44fd-8626-02ed6e8142c4", "indicator--cac73088-72a2-4dc0-9b63-aa4b11f0a1ee", "indicator--955f1983-257d-410c-970c-cf42cfa26054", "indicator--5183b16f-4587-440a-82af-bad9878a44b8", "indicator--512e44ba-75e5-4bd9-a0b5-192fd45e2f32", "indicator--a1dd3a19-e217-4d29-a46d-8fb2cf78a9bd", "indicator--4e146df4-4393-45d9-943e-96c581162a47", "indicator--4afde212-749f-4ea0-b404-e459fcb7db44", "indicator--305ec202-0e3a-49f4-8a94-3f4f0e6f95e1", "indicator--cd1b9a5d-a0c5-4888-8626-af1f4cfd6678", "indicator--636f5c2e-d1e4-4140-a7fe-db70df11dd63", "indicator--528b3554-3412-4cbc-8e42-54ac685c9e65", "indicator--c705717c-36cf-4344-a512-7d0c10a2f4a8", "indicator--5a670c38-a79c-436c-a606-d4d1587813da", "indicator--201e5b9d-bcfd-4051-aa99-29e2071598b6", "indicator--4c97077b-cd42-4a2f-8f90-c78bb3251ed0", "indicator--2e9a1328-1318-46f9-997a-88bb75e6b87b", "indicator--6fb3aa81-0da2-44b8-9d6e-21e5a43cd40e", "indicator--796c6979-9200-48bb-aadf-f361d556ec9b", "indicator--45e27b08-43c2-474d-95bc-aa1d2df990b7", "indicator--f22b4d12-366d-41d1-9a99-d1a43e518dfd", "indicator--6a2d0161-14c5-4e72-82dd-7e0b17748b4d", "indicator--cff30fbf-e1a4-4fea-9152-7682fc5a8055", "indicator--321682be-01b0-448b-9a95-b1e4492ef6a9", "indicator--843b0ff2-a07d-46a9-894f-ad1406ca3bf9", "indicator--2497a1f7-5304-435f-a985-4e8e97da19de", "indicator--52298485-0dc3-488c-9d7f-54407af2c7f0", "indicator--35b707fa-9adb-4830-9e39-266477e498d6", "indicator--3b7a7b49-320e-465f-a12e-7448dcf118b4", "indicator--32c9f1ba-93fe-4cd6-9bf0-221feaa2a918", "indicator--74fee0c8-309f-4cbb-bfe4-363d49ac5692", "indicator--8e16a4c4-68f1-4738-8f39-afdeb76abb8b", "indicator--cb1a8295-5138-447c-a561-26ee3cd5df37", "indicator--e0246359-9d4e-4ec5-a1bf-01f89d0a1f21", "indicator--b3a244ac-e72c-4ae9-825b-397dad55c2c9", "indicator--6c37e037-91b9-464c-9e28-b9aae775a7bd", "indicator--3c0e3a54-ad5d-4d33-a61a-c091bedf8ce4", "indicator--74283c43-1880-4a11-ae15-f41ff346a6ce", "indicator--a1fa3bca-7ca8-4abf-bc8c-bd7de1b0bb36", "indicator--46afe75b-ad4d-4281-8a27-5219bde1147e", "indicator--265ce197-f134-45eb-84f9-9fd565da5896", "indicator--d2b01af4-446d-4c33-8fef-ed922502a2e9", "indicator--202edec8-d3b7-4091-a98e-6b76993508ef", "indicator--af790324-6dc3-4142-be92-cf32d93be2ba", "indicator--548fa63f-ef60-4691-b0af-61349528d09d", "indicator--bff89579-a8bf-4f98-9f84-249fb6f3a17b", "indicator--39ac3c38-8472-4d63-8426-454320102d4f", "indicator--a68cbd24-c715-4c7e-b19f-b185eac5cef4", "indicator--17fcde9e-1772-4212-be08-7b3c1fc0fd3f", "indicator--2b920e27-301c-4ff5-9f6b-f1dddd03987c", "indicator--b1aae48b-82a5-4a8e-903a-7cfe7ea8b81a", "indicator--98931cb2-eefe-4f09-8afa-b191b064c53a", "indicator--2b82863d-5b90-4650-9c5b-9d2dfdf18305", "indicator--584b9abf-9390-41e6-9c2d-22a09d364d8c", "indicator--712e1cbb-ba3d-479b-8817-898bfc82f36e", "indicator--610eed9f-d5ba-4234-9597-158d45dab17d", "indicator--8db5e300-27c9-4c26-a7a6-974a01129852", "indicator--13f56374-1530-4634-96dc-0ab42bbd28ce", "indicator--248307ab-b708-416d-a6d2-68bde7c26303", "indicator--a38940eb-aa15-4864-ad71-f5e2a9618af8", "indicator--9686686a-f3af-4630-a3d7-eff6e76865fc", "indicator--84bb5cdf-d8bc-4103-879b-61eb8e721210", "indicator--381bb9a4-6372-49c7-b161-40131cc023ba", "indicator--a781af61-a739-49e5-b05c-e904333404df", "indicator--f23a0213-5da6-47b2-9860-f7ba9d160b4c", "indicator--02fb693b-10ac-4431-98c9-d44fbf4d91d6", "indicator--880c1c82-ab56-4c7f-9076-65a6e80fd7cd", "indicator--70986f43-796b-4bb8-9f4a-b0fdff9126c5", "indicator--ee0d2968-be4f-4008-8fdb-cc4b4ea3cb1c", "indicator--27db1709-6852-48b6-b0b0-448e0579cc40", "indicator--5c8f8c03-7e6a-40a7-be5a-e1864a655760", "indicator--a62df242-4c50-475d-9893-e51be2f3e5be", "indicator--b99a42b4-f521-4aaa-9a0a-5b3772619e4b", "indicator--84734532-999a-4ad5-938a-d60ec7121871", "indicator--b4e4bc22-d33d-4567-9e29-08bf73463c40", "indicator--ee30e54f-187e-4dc6-bdb0-96d3f3061ccf", "indicator--1a0676ec-9990-42aa-86b5-c84958b0e1c0", "indicator--2df729b2-a7f6-498a-84c7-cec802904e75", "indicator--84acc5de-9a87-4926-9da3-87d42c4e3a65", "indicator--7b309607-e40a-4b3b-b58e-9f12a4818fb1", "indicator--f22ad9e2-9eae-40ed-a077-05faf1ad7530", "indicator--abd49a5e-def9-4f8d-8cc4-bdfc773ae3de", "indicator--ff2a932d-a306-4532-848a-8eaa4f666daa", "indicator--886d431f-403c-4449-a084-b505a6d50c97", "indicator--96d42889-77f7-4eba-8ffc-b3651d28783c", "indicator--f86acdcc-c44a-4263-b650-6b21a4c1d408", "indicator--9b4e16a6-eadd-4ab3-9ae7-c2bd36918b75", "indicator--de6fe152-b88f-46dd-ac66-b4ccd245ae7e", "indicator--e42b1395-03aa-4cbb-ae5b-b390835ca56a", "indicator--b0a69e5b-e5b6-4add-8573-cc73fb1b0e09", "indicator--6c450e98-f692-4b41-ad82-6b07ba87ff76", "indicator--b39ea79a-6248-4ddc-9a3c-353cc857fe50", "indicator--9eb96b3f-7a58-490f-b0dc-4d748b52f5c2", "indicator--33347f3a-7220-4ce2-8062-78c0730a4f20", "indicator--156f83a6-8741-4de7-9733-c81cc65b5227", "indicator--a4eed19e-5f0f-4176-ba0f-d94a9c2f1bef", "indicator--b9c731be-9ca4-4739-bb39-9f896c619555", "indicator--a827a1f5-4499-40d4-994e-1d9855182d43", "indicator--bbab6f48-a2aa-48bd-ba8e-5c6334d1d628", "indicator--7b30e0ed-7208-4d16-9067-0fed65646030", "indicator--9639d866-109a-4dbb-a0da-586b0152c170", "indicator--9504cbab-8454-4f1a-8705-0a0ec8b5edef", "indicator--a9d94cee-99e9-4042-b894-0384c84917a6", "indicator--c74a4a6e-c662-4178-a7cd-e572e77e9b45", "indicator--60f31a56-acd2-4bfa-a39f-15f620a37e81", "indicator--bf860356-5827-4567-9fc1-28874b07e29f", "indicator--951d59cf-687c-4a30-90f8-246b058074ef", "indicator--4d70d451-e019-48ba-a1e0-f721441b9012", "indicator--2d2ae611-ab0f-4cf6-9b94-e050f143f908", "indicator--7c93ed2e-c1c5-447f-a460-d08274c4bb35", "indicator--7235eabe-64f5-491a-90a5-32426346e13f", "indicator--64e231e7-ba59-4ff6-b2f1-40bf15945ad3", "indicator--46229aef-54a1-4a1a-8161-b4611cfc5de6", "indicator--b4320aa9-52bd-42c4-b9dc-7ff0e0a05c0a", "indicator--686a607b-c861-4cf1-b7dc-0d300c49712b", "indicator--718cd35e-f52a-44a0-8501-d8715fc3b949", "indicator--ff6e925a-acf1-4144-85a2-ba45ebe5e973", "indicator--b5e51a37-821d-40b0-aefe-ecbcc24a3ea8", "indicator--0fba9e13-5d4d-424e-a4eb-dca46c284484", "indicator--b5b46dc3-4081-44b0-8b48-fc9bc734e059", "indicator--e42b75d8-a272-4d71-a280-13fd4c550b0d", "indicator--0c98200e-966e-4f5c-9c3d-cab966917f99", "indicator--58dfce0c-312b-41f8-a8a3-360eb9efce83", "indicator--6c1eed19-351a-4d0e-bbe1-a6e5a25818f3", "indicator--b458e906-d618-4fba-9e85-7bd0cd0a9153", "indicator--0d5e15b9-284d-4fc4-aff2-8633eb44fcd2", "indicator--06d1aed0-d06d-4d84-8d35-ce778e1fb544", "indicator--67984cb0-b287-483f-93b0-57e57a2408db", "indicator--96c26d77-9f42-458b-8973-490460490299", "indicator--b10e7ed1-9149-481f-8e82-63bd7cfb87de", "indicator--a243b773-2688-4d47-9bc6-72452c85e564", "indicator--c1dde141-74e4-4a9f-951b-e6c160340071", "indicator--51485912-e1be-4b36-b75b-d2da4f5176db", "indicator--eb5ad428-9598-4d65-a139-44416ce978a4", "indicator--d3e3ecfe-ab01-449b-9af6-cc33ed8e483a", "indicator--1291a590-fbbc-44ca-99d6-0eda8da1fbd4", "indicator--90f756fa-85df-4819-bb23-bf4a71e32776", "indicator--29015928-e91e-485f-adcd-dd15d4c19c96", "indicator--ae47bc9d-012c-4801-aa83-94bed1e80333", "indicator--c9eb4e05-5fd4-4a16-8cb0-aa00f68091b9", "indicator--c6a57a59-f949-4897-be7e-7edc657e6377", "indicator--5a637e91-6bc8-4dc1-afc8-e3f534038e67", "indicator--26bd8201-4f0a-4770-8d08-4ce01a35099e", "indicator--97633d4c-5898-415e-bc6e-64515bf96d6d", "indicator--fd51120d-0058-4c65-8fc4-3db02418d519", "indicator--d1567c07-6166-4e94-a494-12b09656b2aa", "indicator--3fcc0490-d9fe-4fb1-bc61-e557099b841b", "indicator--f08d139e-0bb4-4535-bee3-4757517fb76b", "indicator--f4c89344-ef4c-4cf1-8b5b-8f881ead9a67", "indicator--2a572502-2b8e-4d62-b5bf-8de2ee6563a9", "indicator--261c7c09-5187-4cc5-94a2-6da971ede7f5", "indicator--d8ad9777-f2e3-4ece-bcfe-10f1dc51e2bf", "indicator--5569b4ad-42ab-484a-b202-9ae16bbcb56e", "indicator--95b3af6f-1168-4d97-864d-52d2790aaae7", "indicator--2a982c25-5a03-43f1-98c9-935a3ac278c9", "indicator--75a6c8a0-4e24-4b30-b008-d6d60ed26d2a", "indicator--bf29e0bf-31ae-4e5c-923a-8ea7a91a0a6d", "indicator--bee802f6-e9d6-4587-91cf-057cb6602b2b", "indicator--a558272d-e433-490e-ae19-ec28852df0d6", "indicator--8c5bc6d3-f35d-462a-ad62-be480b9fe49d", "indicator--c6cea7cc-f970-4c2b-b098-82e9307a42e2", "indicator--b09fb13d-9e89-48ac-a57c-707807e0e72d", "indicator--c2ca99ac-f80d-4259-8e7b-5c419d5dcdf4", "indicator--17948844-ec15-4d2a-ac43-2fd8940a57c1", "indicator--a7c6ced4-a968-46de-998f-5aee520db8ae", "indicator--0d81d7c8-2b58-4848-b964-da60cb486991", "indicator--cbb1d4c1-21ee-4704-84d9-7d29ef2bf58c", "indicator--1f5fdd66-2ffa-4473-a8a8-9908b5abe3ef", "indicator--e8fcc004-48f3-4559-a49d-050e185a4f07", "indicator--dc3daf25-3b33-480e-b4bc-867190fcb128", "indicator--02f9b192-ceca-4445-aab9-832c6b56d543", "indicator--7251d117-2b26-44b4-9f4b-5fcaf0f6d98e", "indicator--332bc612-d630-44c7-acf6-5a471c77117c", "indicator--cd3ba30b-b00a-4ee0-9b7f-f0947ba29059", "indicator--355b9c3d-3e92-4244-8d71-603ec64e6ae6", "indicator--67b1c1cb-a26e-405c-ba24-12d1c69c6bb8", "indicator--abdcfe21-f0e6-45c6-bf99-de3bbcca9e97", "indicator--caa41c15-8e9e-402f-a273-d7ed68d8ea8b", "indicator--44f85da2-71d7-495f-8eed-4f8ea5582881", "indicator--c44e478a-2e50-430f-ad4b-41595961e254", "indicator--29dcd513-b8f4-492c-9af2-547cf8f95276", "indicator--44c81643-c262-4b31-86a8-365f845497c2", "indicator--8bfb01b4-0664-477d-a037-a3184f316cd2", "indicator--ccb7a2fb-79bd-448a-b8ef-775c95b87605", "indicator--ccaeace6-923f-430a-9dc0-72f58d046cd8", "indicator--00b6d914-d452-4047-a74c-76614c6f1cf0", "indicator--9be1c245-b9f3-46fa-b80d-3034a90d442c", "indicator--7adbfcf9-ecdc-4239-8db2-71d076c87e63", "indicator--8c19f86b-2143-4660-a4cf-67798cf2d3ec", "indicator--347aa832-ebf6-4199-a5fd-be1e3b7fa682", "indicator--c419bdd6-22c1-41a9-a02c-3bf34b503e7c", "indicator--5eb12493-2fa2-4072-ab0e-d67c2132b8c7", "indicator--9c508739-6219-4290-ac8d-455b82bedc31", "indicator--bb4fad86-2997-4958-99cd-d97db5480a66", "indicator--b6a0bc8b-29da-4188-95d3-bd76873e9075", "indicator--1fcb44ce-bce6-4b88-9c1a-41d4ee96d0d4", "indicator--a7c67686-8a59-4cc7-b6bc-59c7a29d9d59", "indicator--9825b47e-332d-4bf8-abe8-15368e754c31", "indicator--e73563c9-7f71-4eea-895c-eb86c0a800b5", "indicator--141f8ba0-5823-4323-91f1-0f43e11a268e", "indicator--854264b8-0218-49a2-a5ff-692d6ca2a6f8", "indicator--0df3b2b8-d504-4c09-901e-a3b08ad23596", "indicator--41e25f7d-8f13-45eb-898e-705c0afebe4a", "indicator--29505c2e-40be-455a-88f9-967ad316e15a", "indicator--81272504-c1d7-420e-ae3d-9c7272289392", "indicator--886fcd43-a049-43e9-ab77-e83c330dd71c", "indicator--bdf954e6-a564-49a8-b5d1-65f7f647aeeb", "indicator--520c5440-d973-42d2-928c-66849d677140", "indicator--0efe7e71-7e81-4fd6-a981-0b66b84d4d2a", "indicator--11964b2e-cc15-4d96-bce7-744c2df772c2", "indicator--093aa6c2-089c-42ee-9b4f-e929760dac91", "indicator--1dc45a62-1675-43dd-9bee-76708ac461a2", "indicator--58ec3fa4-96f2-4cb6-a8ce-1d188de73e48", "indicator--cac29483-1e71-402b-834d-816dbc7260e9", "indicator--0bf1fb40-bbc2-4dbd-83c7-162df5739516", "indicator--c4047645-e3eb-4ffe-8e62-b7793906d44f", "indicator--019ccd7d-f002-462f-899a-a4c93e4cce95", "indicator--a57d715d-2982-470a-aeb0-d7170c302872", "indicator--244105ae-6956-4498-bbbd-853349735869", "indicator--3db9ef3f-6058-405a-b6a4-1ab0647e7809", "indicator--78d14554-5d57-4fff-9dc0-e71b26a814f6", "indicator--77f5182f-23aa-4338-8e09-27f9f6d54428", "indicator--306815e7-f629-4859-bd44-c68c3df356bb", "indicator--55e54d10-13c8-4028-a72f-c6dd9e062d6a", "indicator--f323a520-d550-401e-b3d7-5ed330199d85", "indicator--17dae2d8-c841-4c53-91c0-f3ac744c29dc", "indicator--0dd93593-ba7d-4ff7-8772-f29ddd711118", "indicator--6470fc0a-184d-4f99-8664-587a7367c977", "indicator--27742809-6090-4fc0-aad6-764643319723", "indicator--2bfe9102-3c5d-4f83-9e04-b5f02ab5c5e1", "indicator--b7ca1fb6-0f18-4962-bda4-44bded0ee221", "indicator--0f206532-3cb8-471c-be47-a0ebdfe254f7", "indicator--ce6fc657-be5e-4c80-9c3c-fc69cfce0e02", "indicator--7724b059-435a-44cb-8bf1-7918dbaea3e5", "indicator--a382704d-82f0-4402-9a23-d51cb3c8abc7", "indicator--76bffa3a-64d9-4f62-ba73-bf0c752c5246", "indicator--248615a6-c616-4e51-8370-be7a6fd2af0b", "indicator--79c610b8-372a-4e59-92c0-165a3288ed33", "indicator--e6f5d238-9cb0-4b28-92d2-809529963db7", "indicator--2f18af18-f31b-4873-9c35-e9d2b4fbb4f0", "indicator--e6c96193-91f9-4b82-b12d-62388280cad5", "indicator--9e99a620-def0-45a2-aeeb-3f2540b993fb", "indicator--0ebb4d73-3aba-4931-b96c-18c68b1cf236", "indicator--283d1523-f458-4d57-aaee-363bebb61f4d", "indicator--0fc92962-11ce-4324-b8d5-c3cda8559117", "indicator--43bf8a58-a414-43da-b9d4-86bca623eeee", "indicator--9234b777-3b94-42f8-936c-2370a469e947", "indicator--3a50447c-1a71-4f98-a339-c524a2a2b3fc", "indicator--0f035037-c843-459b-8bec-b21cb23b5297", "indicator--a6b8fd87-c344-4e7b-b3d8-fedb88b068f2", "indicator--c59b30f3-79ce-4e15-bf8a-c9f7016e098b", "indicator--568a2b18-cd25-4902-95a4-13b952bd7ea0", "indicator--6ae56f65-102e-4112-bf6d-785621f5c842", "indicator--b06e8944-8437-4d1f-9424-6d60cc3b007f", "indicator--61334f29-30ee-4339-a25b-a91a74eaea3f", "indicator--6ba5eec7-4caf-4986-adf0-d1a82b851c47", "indicator--3916d047-9d07-41a3-9c9f-a6c1b89ef082", "indicator--65297a1a-0b25-41f3-a47e-1ebfa0b7d163", "indicator--947373c0-ee99-46bf-948b-d5a78e165b91", "indicator--1cf28ec9-4b19-4a69-9eab-3dfe7b77a698", "indicator--0c080efc-98fc-4146-94d6-cea058369a34", "indicator--e1c2e110-e19f-4f6e-8703-e109908f36bf", "indicator--493d9aea-012f-4731-a77f-ef954de65a53", "indicator--babad82b-9187-4928-8632-14982e6229a4", "indicator--9b37c2e4-c08e-4c18-a454-bce2ad8c1b6f", "indicator--58177460-efdf-425e-b412-a1488eaf9af1", "indicator--ff6d044d-61d6-40d9-bfaa-aa02bf9ceb91", "indicator--1a64176c-f6c2-42db-a013-79a3dc973f6b", "indicator--6e9c769a-0fa6-42ec-b213-6fbd2e15442c", "indicator--fbb75ecb-31fb-4274-a7f2-3e5879ff040e", "indicator--98a09e37-8aad-4e80-84f6-4f964957dcff", "indicator--1afdea4a-e0b7-4c89-91e1-9ba7fcc92d14", "indicator--7720e5ce-b665-40ea-90cd-751f912b8f01", "indicator--bccc9a92-b5b3-4970-89eb-405e4b72c50c", "indicator--200b6bc7-6bac-4b64-bd10-42a87e859246", "indicator--f2154c17-3db8-4dd8-85c0-eefdfbedb94a", "indicator--b19b6f98-ca50-4bdd-9dec-0cabb473b69f", "indicator--13724070-411b-493c-bfb0-7a79e4f0588a", "indicator--d94dfaf9-f14a-4267-943b-fc7efc6e6094", "indicator--0ab65fc7-d249-49e7-93d7-f328174773d6", "indicator--f32bc3b1-e97f-4094-b8aa-f654012c929b", "indicator--5ab577d9-5178-4456-85a5-250ff7178d30", "relationship--28cdf2fe-061a-4f9f-ba97-b27001828b41", "relationship--655f5d87-3f26-4884-9f3a-e364ce58af4c", "indicator--faa48ad0-dd94-469f-b0ea-006b0181cfaa", "indicator--7bd61c33-e626-44cc-9945-732ed3aa9f90", "indicator--9c22e5a8-f841-47ca-8f88-2b1da8737229", "indicator--54c387e1-361c-46d6-a92b-685438731089", "indicator--39e3db0f-a81a-4336-867d-db552e25f8ad", "indicator--f693019c-7422-485c-9c2d-3085f1b3428b", "indicator--3ef0fdb4-9552-471a-8f32-ba3213308f5e", "indicator--b8437d4b-a12d-4afd-8e2b-a21505b18f1c", "indicator--41c3f54a-75c9-4666-8bab-c2270630050f", "indicator--99ee1bfe-36fb-40c8-a179-2f48ef561495", "indicator--da20069e-12e6-4290-8375-f2a164504185", "indicator--1169d7fb-4add-4af9-99cc-bf39de626d19", "indicator--ea15953d-8a39-4e52-95a7-a26af620d658", "indicator--4ba8752a-0b74-4844-bed6-35848ce13d60", "indicator--3b0f2d90-7d1b-4ac1-81b0-f6cbd6e3a52b", "indicator--52b13ce1-59fb-4704-a6b1-985dc189f510", "indicator--e315f08a-5528-4a94-b073-621a08bbdd62", "indicator--3553cc56-5d79-44b3-bac4-a0f2a84b6832", "indicator--3c324459-f1a2-4cb4-a627-07beef9d643e", "indicator--f7e2612a-ba36-4ffc-80c2-3cb4e17668f1", "indicator--cc02fac0-0dab-464f-8e89-1710ac9568b5", "indicator--a18c3397-1b91-475c-b99b-c08acd546eb3", "indicator--1dadebee-5b40-4e4e-a8c3-582e2a17c459", "indicator--65a4bd5f-fe25-4c36-a913-72a9d53de144", "indicator--d08d4113-f9bf-4b5a-bac0-d139267977cc", "indicator--9fc8db40-4596-4cdc-90f3-174674657564", "indicator--b5c11d38-8147-496e-adea-04c4ea7d5a10", "indicator--706162eb-1ab3-4831-95dc-d78e7c85fb9c", "indicator--a702158c-59b6-4e45-af06-78a23bbbac61", "indicator--70ab5599-cef1-4c5f-8798-b83fdad7e43f", "indicator--da4ac3e5-9b7e-405b-be96-25566a285830", "indicator--bf4e6702-8889-44c1-836a-00d0950c2331", "indicator--4deedde9-4a71-46a8-abe0-40498a909201", "indicator--7235cdd7-2589-4e76-ab73-909a73a48db1", "indicator--be75e290-e8e3-411e-935a-122ed2918d6e", "indicator--cd3ce855-9971-4284-b2c5-dfd015c92070", "indicator--0869e7f2-0d14-44f7-ba2d-0b4980a687e2", "indicator--29932967-e358-46dc-b9c6-d15f84c92069", "indicator--93d5ebdc-a0f5-428c-a490-7674f714b289", "indicator--5fce3413-d3db-4b55-9a85-e4d9d0506804", "indicator--3f8de789-3320-41d1-a999-610f07d43f07", "indicator--27d9ad94-c174-4599-8417-da7402e61540", "indicator--3846fe2a-0b8b-470d-8e3e-3bed09d3c5bc", "indicator--00cfa334-35ad-4006-9b68-f3bb2d8f9ffb", "indicator--c815b84e-c020-4a20-bc91-988f8910fa28", "indicator--692d7902-1b90-47e9-98ec-ae051c1d3c2e", "indicator--8a285553-bff4-4ac4-a2c0-e8ae085220f7", "indicator--a54672bd-8a9c-43b7-ac27-070e5665afbf", "indicator--26f187ee-eaf9-4776-b17c-cf84b0209a6e", "indicator--628dc595-5d47-4856-83a2-272988734fc8", "indicator--25ccf1e3-2994-49db-8493-f700a3aa43c6", "indicator--5a5bb897-0bdc-4cb3-9b6d-2942b78e1942", "indicator--c1916f89-c6a1-4815-809b-ad57db0f5f22", "indicator--1ff0ffee-d13c-4a94-947f-b8e46c44a380", "indicator--2f66d99d-9108-4157-a654-026a47325863", "indicator--d858ee84-7eb6-448d-a8d2-e39d029fd43f", "indicator--80fa88dc-d409-4f48-aa9d-7c78102a43c2", "indicator--c6492203-8a6b-4f90-9d81-8768a6e238bf", "indicator--155a9644-272b-4c90-94a2-de0f435fb2f0", "indicator--5f39ab5b-4f89-4dfd-871d-ea2ae0af38af", "indicator--4712cf12-fca6-4be7-b302-41afa863fd41", "indicator--aa903f4a-0851-47d8-80c0-b0db2390a62d", "indicator--4cf1108c-445a-4654-988d-2d786a60d18d", "indicator--59461b18-1bae-4c3c-8542-b2fef987a8f5", "indicator--1b351c58-78da-42ac-a933-e420094698ad", "indicator--52263a29-06ed-4f18-8995-e7a7a35e8056", "indicator--c04d412f-1bd6-4588-b89e-eaacafc9c4ab", "indicator--5e62f1a2-8721-4c3a-96f1-5dbf632f4eb2", "indicator--f7d1388d-356f-483f-b14c-20cc03060a9b", "indicator--065d92d9-93bf-4acb-a7b7-838ef9fb2eb2", "indicator--3320c82a-20fd-40a3-b5fb-67e498f48a5a", "indicator--f7266ac0-fa0b-486b-89a2-6b07bb47671d", "indicator--48c0a0bf-84d1-4a5b-bf75-fe655892ae39", "indicator--f621c93a-261d-4c6d-ac16-12675fabee08", "indicator--4372db67-cf2c-441c-94e3-cd818ab4d6db", "indicator--0c625cf0-6d44-4730-8c1d-ff438b2b1ce5", "indicator--a4e30c18-7c9d-4d9b-9a9b-ea3ad962bd3e", "indicator--421edd4e-1d8a-4eea-83d3-65b489bc0426", "indicator--79d66219-dd40-4c17-b99b-bed2463c31cc", "relationship--fd5f2032-5626-44fe-b370-683ea3bbfa24", "relationship--e69fc0cd-ca09-4085-b597-66eca23a4aee", "relationship--27b14ac5-ede7-4cbe-9ae1-48eff094b490", "indicator--fd7bf9dd-e813-4d13-99ef-eecd422346e9", "indicator--dd4deb9c-7754-45d2-9dee-fdb95db6fa28", "indicator--29636f67-ca1c-43de-8570-7f63b58282f2", "indicator--37e5c6e9-3209-472e-8d96-d298d4faec66", "indicator--687dfd7b-23e6-4e29-a3ea-0e79031ffe22", "indicator--a66b6473-c666-46d9-8190-8dc47b7488f9", "indicator--7a9c3549-901c-4ed6-bcd0-e21fdbed8c71", "indicator--f65de444-c666-4ffc-9f21-88c8c7aa28c0", "indicator--6b487210-66c3-4c9c-abcf-7852b5df1c90", "indicator--4f46396a-3ecc-498d-b091-917c4c5f0aba", "indicator--8f922483-33a5-4b6d-b277-28cec9a3c4d3", "indicator--3314da53-3238-447f-b6a9-8e7106021a04", "indicator--470e1ebc-e147-4f4a-a8a4-eb580201ffc8", "indicator--60949cba-67ee-4ca7-9df6-48f3224f24f5", "indicator--c6bf8d25-799b-4f87-bab2-2331439e1422", "indicator--c28c8fc2-0c58-4f14-b40a-a5b4a4a94361", "indicator--2b2cdca6-74d3-48fc-9d9c-cd8179e87716", "indicator--229aae0e-b73a-4ee5-a48d-f709375fbdf7", "indicator--d4348214-0e3a-475f-a92c-99a223813d2e", "indicator--bcbeaf58-6ef9-431e-9be1-74c4b0f4eff0", "indicator--4dc0e7f5-70e9-42aa-a7e8-dda24a28ff42", "indicator--ac6d5228-6676-495b-9ac5-eacc8ba58de0", "indicator--294edd94-a121-430b-a06f-f12f7d15df3c", "indicator--44e94745-91d5-459c-a383-738c3c6a1c56", "indicator--5569b662-74c8-4d6f-996a-f69c464a1ddf", "indicator--103d8953-42e7-4b51-a3db-00e15ba7ca08", "indicator--401b37a4-934e-4176-a2cb-413de0b80cc5", "indicator--773a872d-0128-4be7-8662-71eec5cfff20", "indicator--740cd608-6d8f-4968-82fe-1ea9e5fb5772", "indicator--2abcffd4-5d3e-4cf6-96d7-3e15086604dc", "indicator--7cec0658-787f-48ee-b0bb-abaa8d8e2b48", "indicator--ab5d3e00-5736-4ada-8673-7c75db70c4bc", "indicator--79a33cfd-00de-4be8-8047-a1c65ff4e336", "indicator--ff6996dc-c9d6-49d5-826b-54f8c8a42990", "indicator--30eeb29e-848a-42c4-b889-2647d62ca8a4", "indicator--b6417544-8d15-4611-acd0-94fb3f53db51", "indicator--f976d419-a866-4419-8bae-15f71f7fb3b1", "indicator--7b62d906-6062-4671-8dd1-5c7d1484e64e", "indicator--1fc61606-9b17-47d6-986e-b6c9f5596ca7", "indicator--7fceb51b-21d8-4574-9f70-1f9e309db40d", "indicator--da995b51-1871-4588-b560-25e1582c9b75", "indicator--aa59a3d9-a00c-4ed0-bbf9-d72f78c29d7d", "indicator--eea6bd35-b7a4-4453-bb13-bd358edb1b7b", "indicator--6634e8d1-7e45-47c5-beea-2b8e85434e65", "indicator--dff049f9-84bd-4d4d-81c6-8999a8e11255", "indicator--53b2b0f1-9505-4fb5-9f20-7f581619ad3a", "indicator--f3d326bf-0778-405e-a293-c40fe068f34d", "indicator--c177f586-f115-4637-8b3e-c1bf00cd958a", "indicator--fbba49e0-2e80-4d98-b6a7-00987d9caf7a", "indicator--8aca9f53-0efe-4285-8cc8-a444135038a8", "indicator--e2c0b5d7-dde7-4bbb-85cd-ffeb94336af1", "indicator--5589c174-7f8f-45a3-bf32-5bade4c420c1", "indicator--d29b0de0-300d-48a1-9381-89c9e41155f8", "indicator--7667461d-8187-48b1-ba8e-72615e1bbfdf", "indicator--4395795a-2686-4fdc-9cb3-714599649ff9", "indicator--01ca93bd-dde7-4f0a-87c8-15c422533705", "indicator--28cb4ffe-aa38-4418-8a54-8825f6e450a2", "indicator--91741543-e917-4514-96a5-524c7bf4c607", "indicator--c663e19d-5e0d-4e80-b13a-c05b581ad244", "indicator--8afc5bc1-bcf9-426d-9a1e-71f2b255da72", "indicator--88f14dd5-5991-437b-9b19-bd657e891d07", "indicator--b927d8cd-1660-40ab-84e8-71defe627053", "indicator--2b240559-60de-4730-a96c-615f3d7ee860", "indicator--598c4f49-9db0-4bfb-97d9-61b4bb3eb38b", "indicator--143d2060-6cd2-47e8-a34d-3ec957faf3e4", "indicator--d855ae45-dd6c-4201-b005-bce8679c4274", "indicator--52f6a8f2-d7b2-4ff5-94cb-a75f8905b019", "indicator--5eead67d-3977-41b1-a0f9-b949fcd64dd6", "indicator--98414749-375a-4477-a0f0-74904aa4a235", "indicator--49924465-c3b4-4b2a-bb39-11b8164e84c1", "indicator--412f012a-eeff-40d6-8aad-67ed97eeeb2d", "indicator--ed4dcf41-171f-4d43-9959-7a2bd68c0f32", "indicator--34b0af83-e595-4500-8bad-209f2ffb44bc", "indicator--e655e81f-9f0a-404d-be44-4f519d859514", "indicator--dc4ba0eb-c3e1-44a0-b32a-f16ea02516ac", "indicator--5dc1153d-b0c7-4895-910b-d9e9d957eed8", "indicator--d6590099-1ba1-4a90-a397-c2b2b01e8271", "indicator--1647296c-b482-411b-a80a-3698a5fcc6c6", "indicator--3561cda2-0717-49f0-83d2-e328463ba013", "indicator--9bb1c244-2a07-406c-9208-c8ef8d0bfa8e", "indicator--c8989a97-18c9-4f77-bcb8-2be6adf9b9d3", "indicator--3488a600-7821-48be-9e1f-258ad35c7683", "indicator--7da549f2-a66f-437e-833a-0d08ff127a72", "indicator--ecb3dde4-bdac-4bcc-abff-af230e2d9f68", "indicator--0793357e-936f-457e-9a48-5ff8b57f4044", "indicator--d0ddb1b1-7072-48ff-bae1-fa3eb47a397e", "indicator--b34adb8d-a986-4c85-b181-1138a14cd7b1", "indicator--f5c9763f-88b2-4a94-997c-a60f19be78b6", "indicator--7b848fa6-b124-4396-b8b4-89d257e8a8a4", "indicator--057f9645-fdb5-4b0b-aed8-a327b81c190f", "indicator--22db6fb7-c064-47aa-8b5d-e2664be98b87", "indicator--26ac59f3-b398-48fd-bc45-8f995f5d539f", "indicator--581cf680-ed08-486f-9fb7-1f1f9237ce0e", "indicator--74a2e1eb-8736-49b5-a910-f8c146b91eca", "indicator--3f5b887c-0044-4a18-b904-9325f0387e72", "indicator--a62143a4-6fb7-4255-acc5-9e89591a6fce", "indicator--e5ae8017-bb78-4bd8-84d0-19635db64498", "indicator--1b127508-f90e-4744-91a4-02142ceac1db", "indicator--c6ebec3b-e529-4def-8ba9-edf13304cc66", "indicator--6faafb30-0aa6-4b1d-8e99-476ff016ee99", "indicator--be19be78-e975-482d-93f1-3379d03168d8", "indicator--e810612a-464d-4982-82c7-a6f423338fed", "indicator--167e535d-bc04-4bfd-92cc-92445f735720", "indicator--b08072cb-da97-4d69-a39b-e82f3604dd08", "indicator--5eef78e0-9301-4030-aa1d-887e19c06869", "indicator--0c2ea432-bd3b-413f-a361-da1a3fa8dc4e", "indicator--39d7a66a-6071-4f1c-8b03-e9b567fdc2ce", "indicator--f1a98037-3913-4810-a276-2bcd958267ff", "indicator--926e9e44-e293-4532-825e-0102f1d964e2", "indicator--6a63c54f-50c8-4361-92ae-7877d3f161ae", "indicator--9c27fa57-3e03-4a40-99f0-0fc4591f2fef", "indicator--81bea857-9bae-45e0-bfe2-a065ec93667a", "indicator--b039d884-58e2-4284-8cdd-ce1cf24ef52b", "indicator--fb54f8f5-8f6a-4964-a466-7d23a9c96d56", "indicator--c2c8eed3-44f9-43ad-8cbb-89f1037cb7de", "indicator--84df701c-17f0-43e5-b672-d9ece0fa313f", "indicator--cf025e1d-0c23-4ff3-9f48-c7770a4cee30", "indicator--d87ff080-ab22-4cb2-9b69-61b461dca75f", "indicator--ae00d89b-3bbb-477f-8c0d-aa960c810d77", "indicator--d709ab6f-a7f4-4e58-a696-61b36cded9b2", "indicator--2f001859-3e8d-4438-810b-0d9dbf8aae9e", "indicator--d0c29d56-dbbf-4cd7-a972-e840973de88a", "indicator--3a81cc55-8b8e-4a4b-94de-7d619cbdd456", "indicator--b0522b9b-730a-4aab-9437-6951a6d51d38", "indicator--a9cf27a1-46cc-42f7-bbf7-a5f97ac7bb25", "indicator--773c37e9-9e0a-472b-951d-1e6bd873b8d1", "indicator--ccbf3661-32ef-42c8-93ad-0cfc5f405248", "indicator--137b9626-b89c-4e1a-b742-5c8af0ae9bc4", "indicator--2abfafdb-7e8d-4e22-801f-8374659c84a7", "indicator--56b3abb1-5b43-475c-9b5b-f2f2fbebddb2", "indicator--6329d3f0-c961-4a7b-805d-738b86032dd6", "indicator--940b04b5-5688-401c-a087-f5707f7a55e5", "indicator--06067082-248f-43d5-bd1d-74ff56498a3e", "indicator--c0822103-6d46-4b99-80a6-0bbd552fe38e", "indicator--4d8742a4-fa8a-4eb8-aa60-40993c0d0d87", "indicator--4e5318ce-4fcf-4ef1-a187-c2d548eb9754", "indicator--df095c63-ccff-438a-a9e1-eaae16dbb149", "indicator--35fc4762-17f8-47ed-b2ca-e22b374f2389", "indicator--851fb682-efc0-459e-bc37-afc09bf55ea9", "indicator--d993074b-fe8d-4571-866d-b23be0254f25", "indicator--4974e9d2-b7d2-4eaf-9096-c4adecbb9e4e", "indicator--2325bbb5-3517-4987-9c6f-23bf850282b9", "indicator--e00d8914-33b9-428a-bb88-154b73f52e88", "indicator--2c277c50-70dd-41ee-9b0b-1db01ccc3165", "indicator--205a1e39-c46a-4753-a8f5-442117db19ac", "indicator--4a3dee41-8207-440e-9aa6-94d214960053", "indicator--229e5291-0fa6-4578-8b09-f0360650ff4f", "indicator--993758e6-49a2-4b44-a973-0774a8d5ed83", "indicator--82c470b9-2103-4aff-8e4f-931782859f04", "indicator--b19d0633-5208-47b6-bbad-0744c487ec10", "indicator--57068a1c-d98f-4679-a12f-53ecc330d861", "indicator--ff673524-522e-4559-a95f-ad52593b7a91", "indicator--2f88994f-73d3-48e7-a63f-8093ee3c729a", "indicator--8ed5efbb-814c-4098-8884-aaa9f214e626", "indicator--a54dda7b-ee2a-48c1-bde3-f369196a08ba", "indicator--97e0236a-626b-435b-a18e-72b01f4e1503", "indicator--853d6dc3-be2d-4d04-bacc-fa7795869c28", "indicator--4b15500b-77d2-41dd-a7c5-2b47cc2a42ed", "indicator--e42bd401-ceb1-4dab-bb83-761698628cf1", "indicator--47fe326c-094c-4c8d-9457-1932b126fd81", "indicator--22ae063e-d16a-492c-955f-37cc2908679d", "indicator--3c559b3c-4ff1-49e2-9241-cdb7098fb02d", "indicator--e4476744-0676-4eab-bda5-0b54096e1a97", "indicator--0d99ba5e-7a0a-4890-805b-5264e584e8d7", "indicator--2ca27858-d676-49ea-8ef9-820c98e2cefa", "indicator--25952a87-518e-40e1-99ca-a0eb8d856e64", "indicator--bb411ba0-ae5c-4322-bbb0-eb4052a54118", "indicator--1d02e2d2-1f66-497e-91bc-ae996a4b76eb", "indicator--aa5970be-6463-457d-960d-d78202286b64", "indicator--94e18af4-6d89-4cba-9b91-06789f0c098d", "indicator--32883656-b583-4faa-b639-44a041d1079e", "indicator--56ed53da-3aca-43b8-819b-e93b783e63f8", "indicator--735fa838-6bf7-43de-aeab-d85385962ff8", "indicator--75ccd22e-f25a-48b7-a391-68521f092858", "indicator--660e505e-8d65-49e9-80f2-b6d1dc9aca6e", "indicator--e0fdca85-3088-4644-a967-1538b0cc94c7", "indicator--aea36f9a-22c6-442e-b58d-42a096054d62", "indicator--54ab4b35-52d8-4bf2-ba48-62e77c51d3ae", "indicator--775b3dc8-7891-4f21-9f40-6313aef18ada", "indicator--62f9ea5a-acc9-413c-a20c-f3c94dc10eba", "indicator--f68dcf39-ab7a-4227-b7db-ade8676391a3", "indicator--d7f86081-e12b-4d1b-90bb-92bcdf1591a1", "indicator--04c1c110-7fa0-4366-8c47-bd3809aa5810", "indicator--552d46f2-dcaf-43cd-821d-d6526f2c1cc2", "indicator--9368eecf-638a-4b4b-b751-f49b44bfc92b", "indicator--fe86e197-9033-44c4-8c6c-21f4298833b8", "indicator--21105e09-6770-4aef-8650-35dce8ffef79", "indicator--d9c9830e-c24e-4c46-85e1-9fcaa4c62081", "indicator--3a5101aa-9b25-4428-84da-f77297a81526", "indicator--1b6618f2-8509-4a4d-aa50-895c66aebfbd", "indicator--bc3ac924-f118-4e3f-a5d8-f29de658a888", "indicator--872999e3-f77a-4607-be71-13eaf79ac01e", "indicator--41aee4a5-4b60-43ca-8b27-b23c965bfca8", "indicator--d31a05b7-9523-432a-ba1c-d56473208ce8", "indicator--a5ff2bdb-b3d4-4dc7-9c5a-32e67a4c7c67", "indicator--7d9c37ed-e038-4313-bdbd-6c3d0079e613", "indicator--b76712e0-c7be-4233-ac01-2ceaf6a54453", "indicator--ce54a963-4d04-4f67-8a56-61286f1153a5", "indicator--dda97ea2-f335-4e26-a705-25ebd9fe8005", "indicator--d8bb6d39-0e30-4511-abe8-c9272d66f362", "indicator--898a033a-5e9a-4761-b326-ee5c106b7069", "indicator--88a14b07-4792-4aa7-8ed0-7ebd12be20be", "indicator--61fb59cc-d45c-4558-9b58-03d533a67d0e", "indicator--0ca4466f-1f65-4999-94ef-8f857f288407", "indicator--a20e3546-ab8e-47d5-a8f1-40669e0c0d09", "indicator--bcbe6d68-9089-4197-a89f-faa2c6f8442d", "indicator--5d9ea96a-0d46-429b-985e-eeff1e02300f", "indicator--c834699f-5a67-4279-885e-82f33ed2a455", "indicator--95253e48-3247-4624-98ee-552e2c6131d4", "indicator--f3d889b9-c464-461c-90f3-3257c14f6e99", "indicator--a2a26358-bdae-45c9-84c8-9b3077d5c519", "indicator--b99ade68-1c42-468d-9562-507bc8026759", "indicator--a541ecb2-2d9e-440e-8e87-3c1dc0744505", "indicator--f9ba875f-56df-42ee-ba51-2b9f1525b6a3", "indicator--3a4129bd-c491-4d97-94ef-4c6b920f3989", "indicator--50bcc1bb-df3f-428e-b659-e53837a9fc46", "indicator--a079c63d-6788-4794-96f9-9f6d26cc3aae", "indicator--bce1a94b-2fca-4291-8a69-20d5cca58475", "indicator--dffb5a98-463c-454e-9578-00b071f15701", "indicator--2a13f1ed-041b-474e-8671-415903be01f3", "indicator--a19c75dd-c1da-4cdb-a1d2-1306cf96b7cb", "indicator--33a24c5c-e738-4d4e-ae35-6a8ba0daaacb", "indicator--f1ff8a51-3e72-4652-a7e9-21ee3474d8bf", "indicator--7350fa96-e94c-4ae0-9b9f-0b89e09cb433", "indicator--923bb06b-a44d-43a2-b9a9-52205ed0b02f", "indicator--8cd57707-75cc-4c8d-9f9e-37ce8073e468", "indicator--8231e11f-b8fb-4482-8967-95af11fdd293", "indicator--ab14f5a4-0d41-43ca-95cf-710f5ccc032d", "indicator--f1761bf0-d201-40ef-b2d6-3754373ddcb9", "indicator--d159d0d7-26d4-40a7-9b72-0502ff8b288d", "indicator--d27202fe-5b93-4023-afe8-2ad7fedda9a9", "indicator--e8b16b24-9fcc-48b2-b5ab-e1e873919e8d", "indicator--929a2c4a-38b2-44b5-b84b-bfbe92d95b37", "indicator--83f5b9f7-b9b2-4731-a4b7-017110a1f497", "indicator--a65baaea-3fbd-4f32-aef5-d4325ab28265", "indicator--772f7bc0-6c51-4f25-b46d-7e23b783c192", "indicator--b84d000d-9fea-439d-8aec-5b157bcc9fcd", "indicator--2dab3941-4658-4f6c-9718-b861472089bd", "indicator--06a4f214-1608-43b2-affd-23ada67f8801", "indicator--015d5cab-060f-43c6-aadb-f4ca877f464e", "indicator--3eac38cd-69b7-43d0-b566-4730f53ff414", "relationship--f25d1082-deb9-450c-9dba-32e2619c3869", "relationship--f3a5d4a9-760b-4909-9094-0060e4ba66e4", "indicator--da5b36e1-7892-45a6-b979-6990feb045d6", "indicator--246a6cc3-8194-4f07-8144-72ae5ea2769f", "indicator--2c47bf11-13f8-4aff-b0de-cd458100cf66", "indicator--11664ebb-0510-43bc-b7a3-01eb10d49893", "indicator--d8cf62e9-21c1-49cb-91ed-176e8ebe5763", "indicator--7bc05248-9c59-43a3-8fc8-458e302bbb18", "indicator--199337cc-221c-4613-b3a9-1208411ff822", "indicator--3c9d3d51-5ad9-4297-b4d1-8aec09bbff8d", "indicator--80cc7beb-3cda-4a61-9b01-7d59173ff0f9", "indicator--458635a1-dcf7-4d66-8fd8-0004aa86c4a9", "indicator--befcf3b5-2343-4aa7-af0d-0a1ddb746d3d", "indicator--9b320896-7310-489e-a5f9-d248dadb99a8", "indicator--79aaf005-bc0c-4e97-8289-4f3224f412fa", "indicator--ea2fccf9-01c8-4a47-922c-6665fdf42963", "indicator--2e02fc8c-390d-4f4c-ba5c-a5cca6f50569", "indicator--f89e8277-e867-424e-b69f-6fbc75e9b742", "indicator--f5bf5215-7994-4926-8bc2-45d5d5f2bfff", "indicator--a3b32206-9c63-4a5e-bfe6-bd4d46772c69", "indicator--8a31f503-41ff-48c5-98c0-61fb826ef6e7", "indicator--06674637-3a0f-40cc-b459-cb5113d192c3", "indicator--2c073b15-ed0b-481c-8211-98bb8021c0a6", "indicator--977bef74-54b4-421e-8cf9-4ffe08eb7d5a", "indicator--20a486c1-c1f5-4f12-ae15-b5abf0c76638", "indicator--9d0075ad-d6b0-4882-8b71-e1554fc2251d", "indicator--ed7cba57-9d4a-4295-a48b-5a5644f226c5", "indicator--5d3ae3de-255d-4e69-8f63-c93941f5b268", "indicator--006a4f42-3cce-4aa1-8b6f-1f41e7cf9466", "indicator--a629b0b3-324a-442d-ac9e-b1d435393243", "indicator--07aa2d1c-b9a3-404c-8cfd-e9e61b905edc", "indicator--7febe577-f8b1-4f84-8cdc-46d32dfef95f", "indicator--d1a121ea-8633-4c51-a167-0a94bbd651f3", "indicator--d55eced6-f2d0-4c86-9a65-baffeb1782a0", "indicator--e818b2dc-41c8-42f7-bdab-385be243448c", "indicator--3038c036-b33b-49cd-b409-49ef06ea9163", "indicator--1814af77-43e7-4bc5-bd39-99d9b243e948", "indicator--de14affe-7512-4743-92e2-95ff68c77b5f", "indicator--91175b4b-ca2d-479e-bf45-c46ec5c6efac", "indicator--eafb1b4d-76a3-4b51-848c-ca5b1d913f0c", "indicator--9d91c24e-7f90-460b-b3d0-9700c8e79913", "indicator--975d2b23-2477-4b3d-94bb-900e867bec88", "indicator--672cb3be-b036-4b69-8031-601159a9aee1", "indicator--57e8aace-29f4-40f6-899e-4ecbe9064337", "indicator--f9e9ea92-4a70-4717-a859-53844678b96d", "indicator--32d1bb34-1b96-4e05-8a0a-fdd323f63bc4", "indicator--764f540b-5cd2-4672-b27a-0f1730b77e33", "indicator--f833adb8-c567-42b9-9733-c5a319b6e9ff", "indicator--85855577-1f31-44d5-a227-314235a4077e", "indicator--4a77bb14-3dac-4b50-8b5c-6e435aaac34d", "indicator--09c6a797-d2b8-4511-9acd-7ad9af1572e9", "indicator--0e381746-0d09-45fa-b62e-7fcd92393dc9", "indicator--e5e12d22-416c-4688-aa07-6eb32d526c7b", "indicator--b6fff373-b9af-4c37-9473-652a1f086103", "indicator--4a4b0089-9931-4284-96ea-ad8c694fb8c9", "indicator--a1916d85-09ed-48a8-a142-86b8df9aff08", "indicator--73108af4-ac56-4b9e-9018-33839b1faed1", "indicator--28e10dfc-0835-4bab-9248-ed35114a604a", "indicator--e682246b-809a-4a19-b655-6730da87eedc", "indicator--f221ef2e-6399-4495-a87b-af4c5129b492", "indicator--894565be-79e2-4d32-af4c-62e4f405b7b2", "indicator--9a19c99b-1b34-4f53-b01d-c24784f4c22e", "indicator--02224f23-54f3-4b27-8462-e046e16023ba", "indicator--1b9bff1d-c636-4014-89c2-514b2b33c735", "indicator--b24ab529-0922-4679-a645-3bf9285d59a7", "indicator--5f0d1b6e-0c35-426f-b954-07ef276b5a28", "indicator--50c2d1ae-4f5f-45f2-a70c-32196edf4bba", "indicator--b85fa006-c921-4723-9218-af8d8ed5cc3c", "indicator--d308f835-6df9-4f3c-96f1-109ef9d07ac8", "indicator--fa1317e4-b543-41bc-9dfc-cb4159a5e68c", "indicator--44aa642e-5737-44ad-b9dd-f982d3851cf3", "indicator--2f9a94fa-a533-4d81-bd84-23533d48e7cb", "indicator--cff6b752-1c19-4b54-a72b-5697ab2c62fe", "indicator--d047a498-60b8-47c2-b98b-ea5283d7312f", "relationship--57e7a4f7-b1d9-434f-9f79-b1032545ba6d", "relationship--12f24ea2-b083-4d51-aecc-c23321f1a2a3", "relationship--5f654f6a-0697-45b0-8d0f-4ed2a00fc9ab", "indicator--07501707-159a-466b-830b-5dd21898151c", "indicator--bd46509d-927e-44ab-92d3-eb204f0e1cb5", "indicator--10813637-5ae2-4d2f-b94d-79f43bea70d6", "indicator--eec0ea13-0a02-4e6b-97d6-99158cdaa6e1", "indicator--82555cfe-6efb-482c-a4e2-7e9ed8b717cc", "indicator--5ed86bb4-eb3b-44a1-9dca-cfc79f0231fe", "indicator--661a83a4-c862-4341-909d-0f18eb6f20ba", "indicator--de2561e1-9913-4f0c-b6f0-7f1734423388", "indicator--f6d2c41b-7889-40ab-86af-584d3832feb0", "indicator--d927e2f6-1552-4c9b-b2e5-ff4c90e70033", "indicator--f048c94c-ddec-4d11-b09d-d5b458ca2729", "indicator--60fc9190-afcc-42e7-a70e-518ffa00671c", "indicator--686cbc53-f323-4400-8e6f-12db4ea82513", "indicator--b28515fd-7c6b-4e5e-baab-dc4b4a9b83da", "indicator--b6721f4a-ebf7-40c6-962a-b62ea1dc8e57", "indicator--d1c7ea9c-170d-416d-a840-52544b88bad2", "indicator--a2ef5f81-8c95-4ad2-a1ed-c9d89f24c890", "indicator--b3f69332-3dbd-4a24-94eb-9a4c8b8a6eb9", "indicator--90a809c4-a926-4ab2-95d7-5bb2a8bf7a5e", "indicator--e40a9f69-38a0-457f-b0dc-4d904071df87", "indicator--7f5e6687-8861-4134-8984-18d33b1ab6f0", "indicator--fb3f8971-c3e7-422c-8b38-8c057e3d4b49", "indicator--b8014673-df72-4019-b1f2-0fa58f646196", "indicator--f1c9cf29-a585-4628-8af0-f5bd10ebbe1d", "indicator--89678228-6d78-4cde-bec6-fd13dc23a4ce", "indicator--e5be72c6-3aa1-4b51-9cb6-f6eaffe71642", "indicator--d2f4c31d-03f2-41be-8ba7-4da29d6ddb9e", "indicator--53ef85c6-45cf-4c97-82d5-347811337026", "indicator--8475517e-be81-4931-826a-53d4e16f098f", "indicator--b6e09f6e-b4b2-4451-8fc6-10eac7b24dcc", "indicator--48b27a81-b9b9-483c-9a20-f063932675c9", "indicator--b1bef858-caac-4b6d-b302-f9e0b103abf6", "indicator--c37b2995-6821-46f4-8b3f-20f6213b287e", "indicator--4a34de8b-ca35-4636-a26e-d84c91d8be88", "indicator--4ef2ce6b-6fde-4d90-b69c-f1a2a09da1a5", "indicator--771f4050-99c9-4cd8-804a-0c22c2839310", "indicator--38c44e61-770e-43db-aae5-ad48932b04be", "indicator--e75f5087-d76b-4ae6-bf6e-e391f842f12c", "indicator--efb068e2-26fc-4cb8-b293-7175266bbf19", "indicator--fc92731c-5112-4af3-984a-deafc3ad6d2f", "indicator--7a4944f2-1f6c-4446-9906-1e3563ed4b4a", "indicator--54d4ce1a-7c87-4011-86a4-6ef8e3cdf000", "indicator--ebc1402c-8360-493b-b02e-45e1c7ec5325", "indicator--17e69219-3542-4520-bd2f-f59e9460c393", "indicator--ff9384f9-9a51-4231-9945-9d0d3703a7d4", "indicator--9003306c-b9ea-4188-b950-a7bf9439559c", "indicator--430f608f-54aa-4e35-902e-0faa6ec2993b", "indicator--8141ef87-4d79-4828-89fa-6cc27190ccef", "indicator--48204b32-03c2-4604-8f31-8db7ca3457cf", "indicator--0f19dd30-c0ba-4bb5-bdc8-d46af6321019", "indicator--a6dd449c-f2c7-4815-b4a5-27cb1fa413ce", "indicator--11bdfd62-e8d1-4a1f-bd6a-ccf398679e86", "indicator--b815261b-e9c7-4702-93f3-e6ff5d886b3c", "indicator--0157fe9f-645b-47f2-9310-8e18adade220", "indicator--2041e7c2-733a-49cb-896c-fd6c09eb153f", "indicator--6d1481fa-0a50-4c5f-bc2c-6dfb1d5804bd", "indicator--e5874173-702d-4d0a-b2cb-5f1cc92490f6", "indicator--940a77f8-861f-4b48-9806-c3056c29c604", "indicator--ce80b406-e577-4d44-b514-810c25b5e318", "indicator--354a24f4-5a08-4b62-984f-e56d9634f3da", "indicator--8f019f2a-0980-47d0-b094-bd362146fefb", "indicator--252da317-ef11-4457-8178-3016d648fea6", "indicator--b53d1dd4-540c-4a89-b487-5015562b229c", "indicator--7e943405-7cae-4181-a001-a948f910d0f0", "indicator--84a076ed-e6bb-4dea-897b-4737ffc145e8", "indicator--149a354b-565e-49dc-b117-7a3f6b94809c", "indicator--89311373-7888-49b7-a652-a6a07cb4587f", "indicator--32df36e4-55fe-4a3a-a3d9-0fa55a38c69c", "indicator--d6c8f37c-df20-453e-bcc4-a3561c0f4b4d", "indicator--1593555c-aa84-4ad1-8bd9-559c47f9d30f", "indicator--5c2d9021-994b-4515-875f-48237ea5cf0a", "indicator--0bc919a0-5d3f-4020-9c57-8eb20fafa8cd", "indicator--d0fc9531-3592-44f6-bbea-52dba8a74955", "indicator--6c6b27dd-3c42-4430-86ef-ad0f7879a938", "indicator--2a417fc6-7c31-4a17-b05b-dd35a77353c0", "indicator--392fd3a4-4d36-4d2b-a639-9a6cb62b44bf", "indicator--97d747d0-0410-424f-9bde-0e2ecd466d5e", "indicator--93de6aa3-8310-4b16-9049-87880dd1bcb1", "indicator--03d6b112-f1fa-4957-9e51-f24be46b751f", "indicator--0c45550d-58ab-442e-aae9-f3e8de8db501", "indicator--e5490839-1c58-4d4e-a742-56e5d3fde7f7", "indicator--329142c5-2950-4fd5-9d45-2631f70b7a94", "indicator--cfa0609b-db46-4429-a869-88aaa12ac44a", "indicator--13b93e0a-6967-47cc-963d-1767ec31f678", "indicator--f5c072ec-5e9f-439f-832e-ba7dc9e4984a", "indicator--874dfaba-ee7f-4224-8e3a-b09389972a67", "indicator--4c268c58-cf14-4eac-aa26-5e9b4f0c3b82", "indicator--2dbb38cd-d9a5-4271-bf76-ce65022fd1c1", "indicator--60ce6b13-4bd8-445f-8dd2-af241af198e9", "indicator--f5e5ba00-3a21-49be-b144-190db7903cad", "indicator--697d7637-1cf0-4e47-859e-f65afa6fac70", "indicator--38c13048-48c2-493f-a3c6-cf91403ebe30", "indicator--402d2786-a93c-434b-ab7a-c65bbce083c8", "indicator--f534fa9d-b696-4b8b-991a-f04eac290a16", "indicator--bf41333e-0fb4-4ae6-83e9-0e0058a0f259", "indicator--28ee003a-2927-4071-a9b8-dd11202edb3d", "indicator--f5001701-434b-43bb-9c75-b2525783fb5d", "indicator--a5410259-5550-4636-993d-07d37e95e4f5", "indicator--0338e22e-3302-4602-ae7c-fa7862ce34a7", "indicator--64c38624-ad04-43d3-a4b7-f17489efada3", "indicator--542f0dce-9e33-4960-ab12-2bbb5169a2c7", "indicator--750ed2e7-be10-4333-a897-f4bfe5b3e4f3", "indicator--27216e64-3f15-484c-950b-78464aa9909c", "indicator--d14967c0-5ea1-4371-979e-7881a0c81401", "indicator--4278c00a-35fc-4f0b-a9d7-df125e9bc4bc", "indicator--6795f4d7-9c29-4e16-a0b9-dfa2333e945b", "indicator--e608b338-63e3-49b8-b9b2-6017294cadc4", "indicator--30c4db0a-b7ce-403f-b6b2-8b1c0f00187c", "indicator--bcb00966-a1fc-41a0-8df3-b04c0e571cf2", "indicator--dd49808e-ea9d-4e96-a92b-dc678202765e", "indicator--0e34ce7f-dbb2-47da-9900-19ba66e44296", "indicator--a2218066-d8b0-47e1-8e89-3de117933625", "indicator--96f07644-130b-4f7b-9f2f-87ad46de90b7", "indicator--9b4e5bda-5c39-4002-ae3d-f6a3b4912a65", "indicator--995b1f97-4adc-41fc-a31a-1bac64dddccd", "indicator--71550c6d-720c-418d-a63a-1b4d5c9670ad", "indicator--58af030d-82af-4210-8bb6-849b018a0cdc", "indicator--b87b518a-1110-45f9-a130-62b83104b68c", "indicator--56f8659b-5677-480c-9989-8ac5fc53544e", "indicator--a0d842aa-a5bb-4022-930f-52bdd2e4e15e", "indicator--425b8574-4d43-4497-8604-d67ef30f9eed", "indicator--83a9a47a-242b-4d24-9a05-53a4a8daef12", "indicator--6f72e780-0adc-4d07-9d63-d875168af0dc", "indicator--65e49fa7-67dd-4ad1-a1ff-1be410963389", "indicator--22a004cb-e758-490d-8066-9402831d64b0", "indicator--5122666b-4251-404e-b641-f96ba2d2c469", "indicator--4c18aa26-56e8-4a11-821a-d73b651b9a92", "indicator--acec0476-0120-40cd-9d6b-ba0f57dcde46", "indicator--c983ee4a-567b-402f-a806-2db23f4ed090", "indicator--bbb32d0f-1087-4d95-ae61-d72362564748", "indicator--9e4f6a0f-0808-4767-b933-d3c548ceb469", "indicator--845392c8-0153-4434-a26b-a6d056daba93", "indicator--a6236624-57df-40eb-bd0d-44cba9f3e3fa", "indicator--7ef2a1bd-850e-49db-970d-6daa3d40961e", "indicator--56aac5df-f710-4fd0-ab6c-96e74c79d09d", "indicator--344834ca-0def-44fb-a0b7-0467d2aa61b0", "indicator--8c3a06d7-55bc-4650-a514-a3f9c9bfb28a", "indicator--4b60c343-c205-49b3-b3f3-fbecf39d35ed", "indicator--207c3d18-713e-426e-875b-8d6d5a553b9b", "indicator--6ac39fae-d741-4512-8e0a-6c6d2a72afd4", "indicator--e9173a5a-70ec-4ca2-8ad1-d9e64b607f53", "indicator--4c2940a1-22ed-4163-81a1-0acc17085d21", "indicator--0c382b34-ff19-4cab-8ceb-e8ca940b1a9a", "indicator--d65e7849-b4fe-47eb-b9f8-44540b780a4d", "indicator--bbf56836-fb3c-4916-b22e-1e837c9d496a", "indicator--ce8184ed-c77b-4273-8df8-12bd21df88dc", "indicator--09b0decc-b0f8-4f31-b114-a68f43ae12b5", "indicator--fd99e77e-bcea-4291-b111-ef8596f9d7ca", "indicator--94ded28b-490e-4137-a8db-4641bf36fa95", "indicator--99adf93f-e052-454e-b855-3f0591355966", "indicator--f4443ba1-b397-4783-a23c-7aa63a15937a", "indicator--193f3cbc-f408-49f0-8d2c-c9ba18aef000", "indicator--07018270-954b-4c57-8f48-0a59d3048d9e", "indicator--439b520e-0aa0-40da-a024-2d687920f42a", "indicator--8960058e-fe71-482b-b252-1b1a4561230f", "indicator--8664412c-7e1a-4190-94cc-5a082c2c6f8b", "indicator--cbfe2d91-8569-4849-b208-830961534c46", "indicator--23c45bf0-500a-4d87-9b15-dd379bbb1a45", "indicator--fa9343f3-ac50-4768-a4ef-c72dce212633", "indicator--be0d320b-58c0-44a5-a400-adb0fa9d3470", "indicator--ea817790-b587-4941-a663-8ed9da9556ab", "indicator--0dfff324-8af3-4ebe-8aa6-4bc2ada1d412", "indicator--9eaa7819-0815-4314-b288-9629a76bd8e8", "indicator--63a5fc1e-c8a0-42b8-9518-2af924485ef1", "indicator--5c5bf195-89f2-4a54-9737-794ed68f51b2", "indicator--acf1cf46-c5e0-44bd-a59c-348a709f4cfc", "indicator--98a15a36-10ab-4d6e-8e58-1db2240e40fb", "indicator--3a3c5cb2-f1ac-4068-813f-bb98c5b1b255", "indicator--2ca30afc-e3e3-470b-96fc-f06e57c2c308", "indicator--cc1bac83-630c-45d9-ab6c-3d377da13550", "indicator--0401d80b-d07f-4712-a381-6086b0c2b51c", "indicator--6964455d-2f86-4697-8af2-882d2701753f", "indicator--ca8f24ea-a9b9-4435-a9dc-b54d1aeafee6", "indicator--cb2e0166-e470-4894-977f-78e0a8e25061", "indicator--89b30a61-6e57-4ebf-9112-5b35a01b24ff", "indicator--ebd9e195-9a22-4f74-ad7d-48e0167b7846", "indicator--820df589-eb9f-42ca-8d20-971b0cffa42a", "indicator--04b5acf7-b4f6-402c-8311-97ca06f14769", "indicator--53a7cae1-fadf-4002-89d7-4b9841b4ec72", "indicator--6f9897ad-81e3-437e-8d95-579a4d9fbcf4", "indicator--a7c97351-e052-4c48-88ae-bc98a1222c6a", "indicator--e4c2b5a9-47e3-4ec7-9dce-9070bdc176e9", "indicator--a69647d6-5707-417a-afe8-8173508fbb65", "indicator--99470506-20f8-4180-a29c-e510b75e1efd", "indicator--2f5370a7-93cd-44d1-904c-84f23ea74a31", "indicator--1b08f12d-25e5-41be-9447-0fc80571ff33", "indicator--b0ddd6c6-9104-4599-bc36-c537a0c9b9df", "indicator--4460ea51-ca9b-4268-99e9-f84b87c67d83", "indicator--614c8e10-869f-46b7-9641-26e7afb9111f", "indicator--219f1078-a8b0-473e-a21a-4aecce123b1c", "indicator--bd1eaf2c-cabb-4b34-bf52-342f56195610", "indicator--94c63dc3-04cc-4873-a41d-b90f34db01f1", "indicator--21824417-9b6a-4788-b4c6-97f30237f743", "indicator--780bfb84-4425-4841-897b-2c6fb499b1f4", "indicator--792324a8-f469-4660-ac0c-cce8f28301c8", "indicator--7ed24073-7dea-49bf-94b1-b32f89cf48f7", "indicator--f43d4d79-a403-4ffb-842d-9317045ee729", "indicator--839de833-a754-4fae-a448-19397558ba37", "indicator--7b4d3825-1d29-427b-9e92-c11cd64e63f1", "indicator--aed5c3a2-449d-43df-980e-8c014ff56ced", "indicator--831d5b3b-3e3e-4577-864a-a6244c8b2ed5", "indicator--d66a9399-af4d-4fe9-8218-1b87ec60bf87", "indicator--a64dfd43-d50c-4c1c-8895-615f6e09dae6", "indicator--d13a52e1-f4fc-4918-95ee-401bb2bbdcd3", "indicator--2e73b65a-f290-4934-8f83-301a9f087d6a", "indicator--b25ec0fe-1417-426e-b903-ef0ab6ced1b7", "indicator--2f60211b-a6e7-406b-81c6-7bd6ba6a112b", "indicator--d6751456-bc45-4be1-91e8-bd2d9e58a1c9", "indicator--509549ea-3eb0-46c8-8b01-c26caed1f1ee", "indicator--e0d6a096-efcb-4655-b4b6-c49e507cfdaa", "indicator--efbed071-cf09-4a01-8f5d-2fff8236cc26", "indicator--ccd5f124-5f1e-4aba-bb61-052c38be1899", "indicator--87b1fa9e-1e55-4df7-9908-9d1e06d588cc", "indicator--68cf7283-9eee-40ce-9fc6-b99d939765e0", "indicator--f0133e9c-6dc4-468e-8717-893568ed3e70", "indicator--da789ecb-ab04-4658-b5cd-12d17154922f", "indicator--15f86c44-91b2-4fa3-adbb-2ea844e0d6f7", "indicator--7012ab10-59b8-4440-b27f-a59935e83be7", "indicator--77bed559-fe8d-443c-9575-148147ab1fd0", "indicator--b25c6e9c-5b47-47b0-8a0c-a915c5865d08", "indicator--2c39d2d7-f33c-41ce-88dd-f34ce35c43d0", "indicator--865c46a1-aa7a-49e7-a83e-5a2a7bf0fbe0", "indicator--1b5679da-2649-407a-8cf4-277044c03220", "indicator--f8d0dcaa-5e35-436d-8f23-08f7f3cfd698", "indicator--f4078f59-76b4-41ac-a489-6b19802ea613", "indicator--43ef4372-1038-4451-b59a-f9b8a4fe88b4", "indicator--4d8d2d0f-c6d1-438f-b31c-60a0aab88f57", "indicator--154cfcc9-3c11-45e4-a3a5-87ad7971b6da", "indicator--5e5086ee-71c8-4555-a212-caba3db99454", "indicator--4eb8e9b8-f1a8-448e-86ec-a0a7b28f2b15", "indicator--d805d760-157b-400d-92d6-9f13673459be", "indicator--4b7cf65d-21c1-45d8-9623-3b0ca586cd29", "indicator--ba89ae9c-8365-478b-b843-6d4f50765d04", "indicator--5690b915-5b6c-4066-8b76-a827929ad146", "indicator--113c4431-62e1-4bf6-bf45-0179e9898219", "indicator--804ae68e-fbb1-4f8c-940c-63d0d137b1a6", "indicator--907b9b73-e145-4794-a27c-b0e8f9ea25af", "indicator--e6f8d879-bf6b-4537-a62a-195a487ecf40", "indicator--d8032329-1854-4120-b5ce-23eea00ac278", "indicator--fd38f81e-0db2-48ef-88a4-fadf68f7f8a6", "indicator--99bd3d81-82ad-405a-a32c-9421b9634e3e", "indicator--4ce7ec28-0537-470d-9191-a54071947795", "indicator--5f7be040-ac6f-4bae-b482-0ea936a0d75e", "indicator--4e1ee822-4bac-47ee-b32d-81e90ba275c6", "indicator--86acdec0-7c16-41bb-baae-3f96e63eb885", "indicator--f28459f2-ac12-4060-aea4-23b7a0125b9b", "indicator--a3024c03-1ab9-4ffe-99c1-8cf334bc2036", "indicator--b8d1eaec-9e6d-4bc4-bd19-695c924e0816", "indicator--19f07aaa-6f88-4161-a211-a58aabfe030e", "indicator--f1b8acd1-0682-4827-8287-11cd302ec288", "indicator--21b889bb-9a33-4564-8c20-2cda79c56a4c", "indicator--6bb2de39-70d8-466b-a98f-95533cf0aeb3", "indicator--6dbe9439-d8dc-4757-a5f4-c88cdebaf490", "indicator--49e73f5a-c694-49c7-93bc-5d3b7cb04b49", "indicator--ba194e8d-e69d-40d8-8b39-52e9bd01303c", "indicator--72f086cb-ec2e-410b-a369-760510f9d02d", "indicator--81691ea8-38de-423a-9645-1175aebe391b", "indicator--b5563972-f178-4371-8261-030a3fc35738", "indicator--750641d7-754f-497b-a0de-0e94b3f66a8c", "indicator--98174938-dc09-49bf-a93c-037781e5a080", "indicator--db3b70ae-9fd7-4e92-bbc5-db215583dd6d", "indicator--18d500ed-bcae-46bd-bc90-b661987ed03f", "indicator--b9aed4d4-8c71-4377-b2a2-dda0ab1200c3", "indicator--9822172a-22f2-47de-b1d6-c8a289019fa4", "indicator--8612ba22-99e8-4587-ae70-9113dfb827d8", "indicator--e50752ff-0d6f-49b1-98df-81ef25369bbc", "indicator--115d5428-4e92-4c1b-9a14-6195cc1dc893", "indicator--b184292f-9a9e-4fec-a432-1804ad066687", "indicator--3034baa9-5276-4b5a-9011-4a52bbc524d7", "indicator--97fc74ed-9246-4601-b71d-8582c87145db", "indicator--e6f88358-1336-4bf9-8753-f0a6fbf69c19", "indicator--8abdd5a9-027f-4b8c-a839-37693de4afd8", "indicator--9974f372-4304-43af-86e9-528d4fc0f71b", "indicator--0dac25ba-f966-4ba3-b4ff-914031374c96", "indicator--045e4ca3-8ae2-4cda-8ec7-59bafc9f6b35", "indicator--df885a0d-a237-48c2-8937-318796ce27a7", "indicator--629f9c26-2c15-4dc3-a1f7-25fcd88193cf", "indicator--a0555031-354e-468c-b8c8-5bc2e48702aa", "indicator--754edb45-7f04-4e0f-b885-26da59f6b63e", "indicator--fab7f11d-52d7-412f-8461-086fb9cb6d8e", "indicator--d27bbbd2-75b5-4565-ad3e-a358d1a43f64", "indicator--15e1a7e7-1f61-4112-a3ae-f5440d4ecfea", "indicator--ab8b0fcb-83e7-43cc-a41b-d5acb989a559", "indicator--9893310a-081a-4589-9a88-89068c7a2769", "indicator--5ff5da1d-a695-4f79-8a5f-890372bdce3a", "indicator--1df8b774-54b2-4d32-921e-1e6f9b583726", "indicator--e8a99c5a-b3e8-4085-9b71-c8f519ccb516", "indicator--ee22c637-8773-437a-9eb2-a5a294020a10", "indicator--a2bc8012-fcb0-48b4-9c03-43dde8b646ae", "indicator--4a0fa442-f5f9-411f-bb6c-1e4a13099c99", "indicator--20357055-04e3-4153-95cd-0408dfe03ece", "indicator--065dba15-64ba-406c-a1ff-a0813a74c869", "indicator--7b68a15f-e049-4c26-95ef-b07539185794", "indicator--55fe0a16-4a26-490a-bb0a-5da561ceb1a0", "indicator--9504a37f-0662-4f6e-9afb-b80a0f6dbd4f", "indicator--4e9b356c-edd0-4748-b7a8-0af036db35ba", "indicator--12402d45-e50e-4145-8add-7994280ab4b9", "indicator--960dbddf-5e16-4da5-8d18-9f028ba05295", "indicator--35cba2fc-e7d2-48fd-9da7-ae13a65afc23", "indicator--073141f1-2177-4ecc-b953-f50e7eebcefc", "indicator--733c9404-6f89-4ba5-935d-5f156fd03ab9", "indicator--1c6ed013-df44-4ab4-8ef8-c645812de58e", "indicator--3d03eae3-fef2-457b-bfbe-5308c69f2cf3", "indicator--90973e3d-e0cb-4a1d-93e3-3c2b288c5656", "indicator--0dff31be-990f-49cc-b9b1-dad0bbbce55c", "indicator--8ed41333-ca95-40b6-aba1-542d2bd8dcdb", "indicator--52dc025f-963a-46e8-8ba8-2d5cdfc32673", "indicator--beefbb4e-d9eb-4525-929b-87feed781260", "indicator--3b68642b-f69d-4bab-b7e5-a47d78730d65", "indicator--33c9045a-bc94-42a0-8c53-a48350c8a8be", "indicator--b9a650a6-ee95-4636-a6b8-90c2804b164c", "indicator--8612e7aa-bfa1-4681-a3a2-895eebb78d75", "indicator--96128b30-def3-484a-b254-bbb4dda90c27", "indicator--3e482e96-9f10-492e-aee4-7a9eb63f1e9b", "indicator--26c64486-58df-4d26-8571-e86900801a68", "indicator--cb9eb89e-6b4e-47d2-8786-90201e7f7607", "indicator--7a56261d-2f9f-4563-8add-ae293d8bb70e", "indicator--24460072-a472-4890-ab48-9a56ea3ef80a", "indicator--317f1218-b23e-4ac1-93a8-0244d368819d", "indicator--9f8cbee3-98d5-4a95-931a-98b17fb89233", "indicator--bd7f16e1-b206-4f9e-958b-e54c7de8d6ad", "indicator--d0edb35e-ca6a-49f6-8ea3-d59902ec4538", "indicator--ff7e32c7-5474-4ade-937e-fbc8d0bcc19c", "indicator--c6bd1d18-85e9-4fef-bfa0-9a76e5f43d9e", "indicator--2d01c1af-edae-4fcf-ad17-f4ce73edb68b", "indicator--3ac41aaf-17b2-4ab9-a812-89849a10bbc3", "indicator--abc8d1c8-7f20-4fcb-940e-91f2783e833a", "indicator--dacc8762-d2e7-41c9-93eb-1ecdc4691e3f", "indicator--925ee95e-8a89-49ef-a95b-a74f0630d3d3", "indicator--b16ec2f9-27fb-45b8-85ed-55498dfd2848", "indicator--1669a5f8-aed7-40c8-bd7c-e5ffb840d943", "indicator--b891f35d-23dc-4508-951b-fa32cab90101", "indicator--10bf873c-576d-41ea-8616-9f3927b53673", "indicator--e51025c6-4d4a-4bb8-b2eb-ae24d1ccc249", "indicator--96b73e7a-bd43-42f2-82ff-88c53a17ff6a", "indicator--4f057d5e-0351-4d3d-a182-7f1dab59031b", "indicator--6f429623-7254-4612-a95d-3b107238de59", "indicator--24543b0d-2e42-4175-adf3-178d1f62549d", "indicator--fb1c6660-bfe2-4958-bb51-652b37f44b56", "indicator--c7b39bb7-ea77-4c28-b476-40f7687ccd70", "indicator--2dabe9c5-9558-4f1b-a4fb-8c2aa0c9265e", "indicator--082de571-1453-4b45-9586-0d217b9a7eef", "indicator--50cb5136-f1a2-481e-aeb3-251edbb36355", "indicator--4273466c-7881-4137-8521-6480f8ffc243", "indicator--f03c7c9f-e080-4b03-b2eb-fbd1c653c66f", "indicator--a4f5907b-1729-4133-8c96-ea2d7257b5ac", "indicator--db37aabd-6bc9-41d9-b4d7-b2172463f583", "indicator--7fc54fec-1a08-439b-b946-03acf1f641de", "indicator--c6d6c19d-770c-4102-b3f1-c7ef0abc4fdc", "indicator--35ede99b-59cb-4475-bb73-81b9e43ffdac", "indicator--e157a2a1-da90-4d2b-bf99-4e1b9ce13675", "indicator--15606299-f552-4912-a550-9b7bcbf50808", "indicator--58387dda-2b99-4151-98f6-e0b11a96500b", "indicator--4bb4a778-b4ac-417d-8aa1-7ea478e75115", "indicator--41af2378-005f-4d3b-b89c-ca097a9f1c3f", "indicator--7d72dfa7-531d-4202-a810-8f2a3ac87e5f", "indicator--98d30dfb-24e2-4ac2-b555-00f6c685321c", "indicator--b6692c69-37bb-426b-8817-bba905b75413", "indicator--389c208c-f267-460b-9026-1fe42513b72d", "indicator--a968856c-598c-4e5f-ba15-4b0200fe25c5", "indicator--fe39f2ff-a369-4eff-a891-868cd486bd75", "indicator--9a82dfe7-e786-4044-90f8-736615d26f39", "indicator--792acc50-f72f-4490-9f1c-f7647d428107", "indicator--7e64d637-d977-4d90-b6c5-dc9738e88b02", "indicator--768d898a-6c14-4df9-8a2a-865a290656e4", "indicator--4784c8c9-b679-440d-ace6-1526309618e9", "indicator--483da845-3e4d-4ad9-8ce3-8eebf01c3676", "indicator--0139fcc7-ff81-43a1-a9ab-7014fc7b1a14", "indicator--deb3d389-869f-4bfd-abaf-5ac90dddaa08", "indicator--455133e8-599c-4f1e-9c09-b12f67e31b9d", "indicator--49849ccc-1a8a-4e9e-9f44-18bf129f8ba6", "indicator--1beba56a-56f3-49c0-8c42-14b25e6863b9", "indicator--c0d9dc89-2c79-415d-9190-a44c3f9ffda2", "indicator--cfd97e03-94af-40b6-9686-2da17b666d51", "indicator--3730da7c-2ded-49f3-a6e2-b774296f6b45", "indicator--01eedb50-0aeb-4208-bf6f-00fcec4a6e57", "indicator--3d544d22-0d77-48c0-9f94-cd58dd407037", "indicator--e7a1eb36-6e2d-40f4-9d45-2bc1d06f224e", "indicator--153505c3-c476-4847-8ad1-0b1b3f0694fd", "indicator--81442127-0f23-4cee-acea-20ba67baaf49", "indicator--df4c09b0-ae29-47af-8a3b-f26f7819d379", "indicator--925d143f-6e58-4285-aa56-1984e512fc16", "indicator--37ee08d2-ea3a-47db-a8fc-bbcd76ba5a54", "indicator--43008c32-b1f1-42f9-b632-f1e6b1829af8", "indicator--41604dc9-1efc-452b-9a11-eb238015a19c", "indicator--8272059b-80ff-4095-b376-c2f58524fed3", "indicator--60d60283-1f43-4adc-a213-662ca8278d78", "indicator--61c43dbc-7344-42fb-a5f2-efd0315b2ffc", "indicator--55541ec8-f318-4062-96e3-a4e76b68094c", "indicator--701d02c3-c3f6-43be-b37c-8895885b04a5", "indicator--d6fcfe12-4bfb-4990-ae17-d3bbc421ee5e", "indicator--7bb60ee3-6785-43e7-925b-b6c6ab5ee3e4", "indicator--a8670c47-e266-4477-8652-451f36b4e078", "indicator--f05a38ad-526a-4365-a403-192f9e43c769", "indicator--59936a25-fa47-488d-9363-2053df262b8a", "indicator--74d45aec-762b-4174-88d5-751d67bd06b3", "indicator--d230aa15-4e18-4e03-b6c9-b6ac1cf43f41", "indicator--fec91f43-d252-4444-93d2-95639198368d", "indicator--6cdfa8e7-23b7-48ab-963f-cbcaa3f169c4", "indicator--23a609ec-160b-4dca-8ce8-96e3cc4c8355", "indicator--f6dbe36d-a071-4b0d-a0cd-f0c14ed5ab41", "indicator--d1e6b1b1-0fc5-47b9-89bc-d4669c063f72", "indicator--42bcfd6a-60c9-4fed-a19f-5c0d4ce7ce70", "indicator--8b46088b-d57e-476f-9a45-5e2958083fc1", "indicator--1954f9ba-803e-447e-bd98-0e70d15adf15", "indicator--f0521975-4d0d-427b-a070-c5c546dd917f", "indicator--bed6105f-9a2d-4c78-b10b-eb61f1cbe497", "indicator--1dc09bf2-119e-4f13-87da-40ec0cf2b203", "indicator--4a1ae105-2100-4457-a4d5-49f4f263e9e1", "indicator--6596528f-35fd-460b-824f-32bff7814fc7", "indicator--28c112ba-4597-465e-8746-139b7202fbf0", "indicator--8fd060d1-ca34-42f7-8059-523303bfe656", "indicator--2be1e9dc-1bf7-4aea-8930-2902ea4ac788", "indicator--69b1e2ae-a19b-42f7-a684-0fb10c55cb1d", "indicator--e351d3d1-a10f-4a2c-b454-58f22a0264e8", "indicator--78480ba5-0c59-41b3-a5dc-a505b76595b2", "indicator--33317384-1986-4be1-8b8d-91dde4a0008d", "indicator--caecbaeb-6ce2-470d-9458-e4f15aa89b02", "indicator--0cb91203-0cef-4128-b0c6-0520b6901666", "indicator--f4440f80-50e5-458e-a382-07683b707d22", "indicator--994689f9-ea4a-4651-ad05-64ad8ba41403", "indicator--219f3ce3-d478-443c-884d-d7088e628aee", "indicator--a00205b6-82d3-4d38-9577-7d079362317b", "indicator--f08ab4ca-4bfe-482b-88c9-d202a6cadc50", "indicator--ad138ac6-3da2-420f-8bda-6b0e09dea6f8", "indicator--841d76c7-6245-4537-a26b-51a7027d9cce", "indicator--7b45d350-d357-406a-9713-f79d6e1dd6a5", "indicator--9cc796f6-6585-4460-b2e5-713e8bdab1de", "indicator--00f2533c-dfc8-464d-bd68-551818f51f63", "indicator--6dfce59f-7dfe-45ac-b801-c93a2b889058", "indicator--1236c8ac-b7f4-444b-b0e5-bdd74ae0e289", "indicator--bc583c6a-920d-47be-83d4-45f2261cd6a7", "indicator--769f3e2a-801a-474c-9f15-385b152fc6a3", "indicator--9eee0c70-69f9-4524-bcd2-e1d75a343205", "indicator--35db78b7-6b29-4bb8-98b3-94ef4568c765", "indicator--dad194ab-daa0-442e-8a1f-c5024612b8c2", "indicator--3e6d4291-0344-4fdc-91c7-29fd4d31cc29", "indicator--b7bfa16e-cbd7-41e4-8e13-64bf0bd313bb", "indicator--bcdd18ef-020f-43e1-b147-7980efdfdc32", "indicator--0b565048-9405-47b8-93b8-53c67ea1c395", "indicator--d824a719-1b90-4708-8f49-bc1df9b5625a", "indicator--34175b75-2d4a-41c9-b90a-dd84b2fa42cb", "indicator--92d7ff04-b9c3-4f95-a0a8-4e10ff00d4f7", "indicator--aacead5a-cf80-4616-b6d5-2f482543fa4d", "indicator--3509a943-f543-40cd-b514-acf4c5e89e8d", "indicator--6d876fe7-01d5-4f02-9e8e-cd8f04ad6fba", "indicator--a1acbfc1-de86-4734-a9c0-19dbcc84cc86", "indicator--55e5df21-99d5-4e51-b4f0-c11de84d1228", "indicator--d8ff21e7-c0d3-4396-8904-4c81806dd3d4", "indicator--190e40d0-1bfd-4a50-b001-2baf289cee3b", "indicator--b2ff14c0-0b0a-40a4-94b1-e697ce7c0a6f", "indicator--300aee96-eca5-4aa3-9b45-e9198a76be76", "indicator--a6f64c78-08ba-4ae8-bdbc-3bc01f0f93a6", "indicator--e2284222-d17c-4bdc-bd30-e2d2c8311289", "indicator--c4d1fd21-8538-4171-8623-2715db00406f", "indicator--f716909f-fe13-4d2c-beed-952c81b97ad4", "indicator--9193c799-cbe1-4326-af72-558d6a093537", "indicator--ddeada20-cc9f-4cd5-86ff-affa520cfa47", "indicator--592ec58b-b24d-423c-8fc9-82fa6a8c5bfe", "indicator--9312d6c2-49f5-4e3a-9082-07e710c3db65", "indicator--b1dc84ce-3eab-4b6a-954d-b3bf99ca7b29", "indicator--4c9ccae5-d211-43ce-be07-0a5cd3305ce1", "indicator--9b34c8d2-b9d4-4048-b661-7728a078723b", "indicator--0ef1a41f-df20-4123-a958-de80c6afdf4a", "indicator--2f6f39a2-0ff0-439b-b960-d47258a4d285", "indicator--361fbf93-9f45-4049-887b-d3a3f94d144a", "indicator--f3a21d09-ac8e-42f2-804d-2f86f72c7c0f", "indicator--7836ce17-2abf-468f-a74f-af78fe6c0cc9", "indicator--507e1856-339e-4e9d-8bb5-30ddfcc0421b", "indicator--7d4a8ea6-901f-4dd0-b39b-a88b20ad54cf", "indicator--1420838f-7de7-48e3-899f-3fc9b411f83d", "indicator--be13840c-b74d-46fa-8144-8207e90d1cf1", "indicator--1a00b665-eb27-402c-9372-5a4c38c46691", "indicator--8bb56e81-0d90-4ead-abd2-05a3024fe0de", "indicator--ccee4387-ca66-47d1-ae86-7cbaacecbe96", "indicator--fab9e89c-b987-460d-bf01-200de3b68bb1", "indicator--a091e047-b250-4a41-8144-3eb69770fb06", "indicator--0607bb9c-8a66-462f-8ab4-a55da1e24a33", "indicator--87e0be9a-72de-4fad-9f20-6f062bc90b90", "indicator--ef58795e-3d19-4b26-b618-b93e51b7676b", "indicator--f84630d3-0617-4c85-8e52-cb1f7af2180f", "indicator--f1b23ef9-bd64-44d2-b620-a3d150ec1ac2", "indicator--74bd9a18-ba42-4077-8aa7-fcbd0776e440", "indicator--09958db7-9479-4f34-86f2-be592fa41ffe", "indicator--aece6671-8457-4b4c-9e84-3f87a00573ba", "indicator--8f358e43-6a22-47c6-a4a3-c1aeff4d5743", "indicator--616a4bf4-7b61-47e7-baab-e0b8dc08d7bd", "indicator--c263b768-a27c-42fa-8cf2-79548a34f726", "indicator--976a4cac-bc15-4751-8305-d8f8d67d62b8", "indicator--4c32e9e0-4981-4e1a-bdf8-93775f9732c1", "indicator--478ef0b5-ce3e-4d9f-ae8d-5519d2782183", "indicator--d7b36ee7-3eff-4142-a73f-c0fe43ab82ad", "indicator--d84af54f-53fb-47c7-b56b-557e5c366dea", "indicator--0e0236ea-1d6e-4a9e-b591-6349bbed4997", "indicator--d61cb03b-3806-4fea-ab97-3ffcac07c1b6", "indicator--de688594-64be-46d2-a158-c4a2554f207b", "indicator--847d108d-4ca0-446a-b17a-6cc3f72e4e48", "indicator--ac34866c-d854-45e6-9c32-8bc302fbde43", "indicator--fd09c157-60d6-42d9-98d6-7a0e9966564f", "indicator--198cbef3-c42d-46eb-bb1c-ac89751c3d5c", "indicator--f2483e5a-1dad-4240-885a-0a6ba986dcc5", "indicator--b941a289-400a-44bc-ad3c-2f7e88f9f6ea", "indicator--eb6e033d-bc68-4d47-8a6e-30081cd05661", "indicator--b8bc75f6-a851-4807-ada6-28cbf38f56cf", "indicator--a5658b90-b7ac-414d-b143-a147a2562bf8", "indicator--98091f14-c0ad-45af-9a76-99d0f9de4998", "indicator--e2a6b656-2f07-47ae-b658-45d8aaaff0c5", "indicator--9437afd2-4975-40fb-adff-894d33dc8664", "indicator--626c4916-660f-46ee-b09a-c140a1661eca", "indicator--20c76693-68da-4e14-9bba-754d43f18987", "indicator--2ead27ad-9307-423d-8091-2e843069f50b", "indicator--5f03a985-c43b-4114-88e6-8bf42de76373", "indicator--6dea6228-e834-43c5-bada-97ee3218931b", "indicator--3ad3beb0-415c-44a2-ba78-94fb756b06d1", "indicator--641f9012-efb5-42c5-9e1f-ec5bb107e10d", "indicator--122702ac-5a7c-4e44-9289-76dcbad2c557", "indicator--d3938984-1d30-481a-8064-eca67bf619f5", "indicator--e3385773-1851-4c38-9195-d8136cf994b7", "indicator--2877773e-c6ba-428c-be98-b42149544e90", "indicator--f5dbd4f0-5081-4276-8c40-30fffc70bc43", "indicator--28db9f69-976e-4c44-b6f0-3a515bb3dfbf", "indicator--074a147b-1702-4761-8698-305dcbfd8ce2", "indicator--a5bb1a34-2be9-456b-b82a-51ca9e35b63c", "indicator--4b2954ce-e6d8-4498-a536-c37f8281de5e", "indicator--22d56fce-0fbb-46d9-a588-2b4294c5348b", "indicator--1552e6bc-1728-4a70-906b-f56a8bf1c82b", "indicator--41d88101-ff07-49ce-83ec-4125c38f3453", "indicator--cb080594-1229-40db-8481-9f7a3f0afc99", "indicator--79fe66df-2a75-4efe-91b5-200091ec4310", "indicator--a1dfc7be-3704-4fd6-b6b4-8439396d2707", "indicator--d07c45e6-1090-49c8-aab1-4826f41f1925", "indicator--03dfa82e-ad16-4152-bc3d-efce919a3cec", "indicator--b72a4afd-8cdc-4d15-b8ba-3653262c16bc", "indicator--5c70d1b0-0bf4-4386-94fa-d08433c461c1", "indicator--23aee70c-0fd0-4377-be6d-6ee1b2aec12f", "indicator--c245149a-aeba-4d8f-8554-76a6394c37cc", "indicator--8cd26291-6b6d-4ec8-bab4-81189c43901a", "indicator--4dd00e66-062e-485b-9eea-32591464ba36", "indicator--d52a344b-1e89-42a5-847c-19644b11e504", "indicator--21e5af8a-1701-4832-b7fd-ddb92d44464e", "indicator--dffdb1a1-0502-4f41-b6b6-e6846a612fac", "indicator--e2510be9-b8d6-4923-ae7d-50d8f96aa417", "indicator--5f63499f-284c-436f-93ec-25ee358a5b80", "indicator--fb97cc96-11f6-49ae-8588-8b83fb178a07", "indicator--40cf192c-7932-410d-9033-dc300767d9ce", "indicator--c66e32d1-6278-4817-ad14-478c04af5470", "indicator--f2d4dc8c-f689-4a05-bfa5-0972b675eefc", "indicator--a50e4527-0b76-4511-9e34-69ac5ca28b19", "indicator--555407ab-cf5d-4c75-bbc7-eb3cffff3328", "indicator--b07be4c4-3da5-45c9-98ab-89c974b4358c", "indicator--47b3e547-28fb-4eae-b957-234d245d9602", "indicator--7400d609-a5fd-4a2e-9045-654b74ff65dd", "indicator--c4660284-4ec5-4cd9-bf1f-a44e4e4e4b8d", "indicator--5a525135-bcdc-487d-810a-b67a16d9d448", "indicator--57112d8f-d857-4356-ae0b-9fc5ff957ea9", "indicator--93363991-3cb8-4b3d-85cd-6b413ab727a4", "indicator--012b7b65-64ac-4f56-a3e7-9543f1c74894", "indicator--e235149d-8c2d-4686-9501-404893892704", "indicator--898a4347-ea27-4980-98aa-b803bd03cd3a", "indicator--93550fc6-2e4a-4077-853c-c5c98f08815e", "indicator--11828cec-c23d-4954-a762-2016d5505380", "indicator--2b8f8636-98f4-4c3b-8ef2-2aa153a85216", "indicator--9de3eb5c-ddc1-448f-9c5c-adcdd02e746f", "indicator--6143dcc4-c369-4d9f-a5f8-76c230e6ec68", "indicator--72a13f27-4ec6-47ad-8a9b-1bdf1af87ba3", "indicator--a50b6ba7-e49a-4e11-8328-b327de3e17aa", "indicator--45fdd4bf-8a27-4cdd-84e2-cd6ddf5846b0", "indicator--b66c667c-b654-4aab-ad7b-fb1702efc993", "indicator--6b966079-a1e3-4af9-9042-ba982c42a045", "indicator--53a1ca29-1d71-427f-81ae-fc4ef3130117", "indicator--8ee74937-a85c-492b-a090-f2b75d05bbc2", "indicator--70fef7a6-65c7-48cf-943c-b94bf2f7de23", "indicator--bc968414-46e4-4309-806f-e01b10bffb83", "indicator--cd69121b-7ba3-4630-8428-4fc4d0de6b23", "indicator--960ec84f-b072-42f7-bdf4-1e162fb39599", "indicator--b265a707-f94b-4254-a2ff-c0ae46abaf5d", "indicator--94dba5b4-b773-4565-bea4-4251e6f2f645", "indicator--062bdaaf-96e6-450a-a8cc-33b3fa57c3b9", "indicator--e8350278-bbcd-42d7-b83b-95bdbe4a44e2", "indicator--19f956f9-d730-4777-adda-6b707a5769c6", "indicator--0fa4a11a-f755-4333-a1cf-0da4e2ad625e", "indicator--36770b89-b002-4682-a7f6-9ac54e28f121", "indicator--cb58bb75-96ef-428a-bd1b-10cbb0e1b222", "indicator--efc2ef36-acdd-4a62-bdd8-85938b2543b0", "indicator--7708cff8-05d0-47e1-8a33-98ac280bae43", "indicator--ffcac891-7aa1-45e6-97fc-649f20999f63", "indicator--a7a7533c-75d1-405d-bcc7-10ebf31bf0c9", "indicator--0cbc4a5e-beac-476f-aba0-6e2ee0a247a9", "indicator--f07e4968-a807-47bf-bffe-ede5b9f5baa6", "indicator--c5ba5613-9600-41f3-96d0-80afcc2d2250", "indicator--e3d2fc95-58d7-4377-95ac-519388e95634", "indicator--73322695-c010-452c-957f-b61f80032def", "indicator--62a5c382-3fa7-4119-b6a5-3129f11e844d", "indicator--3ac295d9-cb2e-495c-b057-c78ca13c2e17", "indicator--3267c3c4-e482-4b2d-a944-c8dbe24fe99c", "indicator--c505a3c6-b078-4709-b322-463a45c72f85", "indicator--43d13392-79c8-4b39-9de5-52bed479a853", "indicator--610cf1e5-50c3-43e6-92b3-a0c73b93d6ff", "indicator--7aff3011-cd31-4a9a-bafd-02be465eada2", "indicator--de805147-1010-493b-8348-f6e5b57ffa94", "indicator--1e4b3629-b915-4630-a814-729dd2965533", "indicator--090b5676-220f-4e19-9097-95d9f85949d4", "indicator--cae00fd6-e765-4e16-82b9-c8047a79d8ed", "indicator--e77569cf-51d5-41a3-b1b4-5bc4b903a899", "indicator--e5eed0d0-bae0-4d9c-8dc5-e9dda7d39f14", "indicator--956aa005-21e8-46b5-8252-e84036208f32", "indicator--3990413b-581d-417b-9aaa-1fcd724a430c", "indicator--8fc95bf2-789f-4536-b927-60669fac958f", "indicator--0cb0c303-1a86-44e3-b3dc-9c03b72a18a4", "indicator--a5fca88b-3bce-4e01-9e50-0b68a8c629d5", "indicator--73b83b3f-aef4-429d-a364-58b243fad79a", "indicator--9758828b-fe76-4523-abdd-dc9a0b7f5b67", "indicator--91f5c970-fc5a-4219-8377-1d4fe83dcc5e", "indicator--fbf0505d-6cc7-47b4-b364-cec2cb8245ee", "indicator--7b36440b-98ef-4ef2-ab07-af8b672d81ef", "indicator--3be01d84-6686-4b38-9630-11f4b2d3beec", "indicator--23b06a19-a671-48d3-beaf-1514e8d97cf0", "indicator--7f12b217-6e29-4442-bd9c-779b937a73d6", "indicator--87e8a9e4-b316-42b0-8e77-f953a20e8aa2", "indicator--2fda30c4-c559-4877-995f-1d1f35da8e5a", "indicator--f492f843-88e1-4a49-b1e9-edb383ee2b7d", "indicator--7ed7c5f6-b0a8-46c4-bdc7-74b1cfb99123", "indicator--b0a3c18b-63d3-46c4-bbdb-9739fe0cd3c1", "indicator--e79ec1e5-d240-4765-8bfd-306dfd73f50f", "indicator--93ac74d8-6659-4e20-b5b2-1f93f1e580a7", "indicator--770ab6e6-5d6d-4ad8-85c2-d18039c99f16", "indicator--e4dc1d16-2c19-45ea-ae13-b12c4842e580", "indicator--5d991303-3dce-4597-bd8d-ae966646ecfe", "indicator--a2112103-2b2c-4da6-bb66-7c1711d8ccdb", "indicator--b52ce75d-1286-430d-a489-a88438ce715a", "indicator--203699cc-1ff1-4155-84bf-19d28db71a8b", "indicator--62eb4767-de1b-48ac-ab8d-f9456a3d7a58", "indicator--7c675792-1b1a-4519-8f2a-032dad17c05a", "indicator--812bbfa1-5ee9-4cc9-a050-816971d175de", "indicator--3d96e379-bcd7-44d3-bb5c-0c8deceef527", "indicator--b11d1c97-1d69-49eb-b25f-f2fe7ae82228", "indicator--10c5dc34-4eab-4bcc-9dd0-c8bfe4c8782b", "indicator--7de1cbaf-330a-429a-a272-28c57bf4a2a2", "indicator--ce4df5e2-8926-43a0-a9b8-0cd9ba6e8c96", "indicator--099d758e-50ae-44dd-987f-427688072722", "indicator--697001d0-b633-4db8-867f-0983509c5188", "indicator--3a44cac1-312e-4a07-bb33-56182f9dd95d", "indicator--916d6011-96aa-4256-b8ac-f7ec1f80c013", "indicator--c577466b-7d5d-4f84-9d94-370df5edb951", "indicator--6fa68332-e01b-42d1-89c2-a97e21a40ccd", "indicator--f0a53605-b760-47b0-9d18-b994d0f730e0", "indicator--9ce69fa6-3179-49ea-abb7-852d00f8e19b", "indicator--34883b86-8e1e-48eb-87c7-89fa6297297b", "indicator--24279d17-4583-480b-8129-146fc6709401", "indicator--e1c08848-fb7f-45b8-9755-94e00663ea0a", "indicator--2f865f32-e46b-4303-ac45-e78926ae7390", "indicator--a599fb35-0df5-4f24-b604-d3724861de66", "indicator--48811a66-a700-4550-8331-4a83828a4d94", "indicator--37f785fd-200f-4874-b9a6-d89a59cc6e12", "indicator--5f129919-7053-4746-ae65-1602335af1a6", "indicator--78e9e906-cfa0-4ca5-bab3-d0b737e1ef0c", "indicator--fa3558d2-7172-428b-bd06-0ea658201be1", "indicator--d44eac8e-a68d-4966-a5e2-b14d64fe2285", "indicator--2ca0ce6a-0d70-4618-a0eb-1fe2cb7377c3", "indicator--219e4233-099e-4cb5-83e9-9bbec94341b0", "indicator--5f8aec77-8e17-4446-912a-b5a5883fe965", "indicator--8c83e7e7-1249-49c3-9f32-cc3a7141aac3", "indicator--41df6344-78c7-4679-ba7d-23eb87bc4682", "indicator--f2df482a-dba3-44d7-9736-664d00b78768", "indicator--3b00bc72-fbd8-43dd-a634-85b689849e4c", "indicator--5cbe6999-01e0-40ad-abd1-3678cee1e251", "indicator--cf11074c-3da6-4780-9772-71665da8fc73", "indicator--a1edd019-5080-4336-be50-7240a1fe5924", "indicator--ea65e9ce-02f4-42d1-a757-8200e6bc50b8", "indicator--53dbd75b-3d78-4832-9e18-70b833635648", "indicator--357ccae5-dfcd-4f36-83f6-66fc87da3dee", "indicator--9f2a09bb-4254-4df8-9298-fed0a228f168", "indicator--d6a3a9f5-548b-43a2-be80-444d933e72ba", "indicator--fe917ee3-e851-4122-a9b2-0624e26e9fe1", "indicator--046c2511-1599-4d5a-bcb0-e5bef77a0d0f", "indicator--22f9cce3-d936-4b18-9028-783098632954", "indicator--ec7ee24a-1e81-428c-9a18-74c0213ffd2d", "indicator--f610ba27-a91e-4790-85e5-bf0816ceaa8d", "indicator--07d26540-3179-442e-abc4-8edfc1ee9a72", "indicator--877c61ec-923f-4fde-9b72-8de55bb14f38", "indicator--22a7dfeb-26df-47cb-96e8-793b78ffc6f9", "indicator--d79aeced-1d8e-4cee-9454-9ddb8fc92274", "indicator--86d833c9-23a2-4aaa-9e0a-dc082336a88b", "indicator--83689411-5924-4f39-bea0-0cf2ccf5974a", "indicator--7660783f-01f6-4e04-8ed5-a3030c78781b", "indicator--e2efbf8d-37a2-4690-b9ba-2920df9ec5e3", "indicator--51c7c772-f9c3-4056-938d-0e4d2680d51e", "indicator--5d8a150e-9c88-444c-a32b-36731f2b1e13", "indicator--c37ef7cb-1254-4e2a-a790-a3de26b5a9e2", "indicator--b389bf6f-bd9f-4ff7-b9c8-522285b14b9a", "indicator--6787d1be-8b20-4cea-8836-b2d396dcd148", "indicator--cab17ae9-8ac2-48f2-93ce-4b52ad9f07f9", "indicator--ad82bf66-cdbb-4037-b698-d92cc578b258", "indicator--cb939865-1d13-47b8-a134-8ebd823f6ca0", "indicator--339e85d6-690b-40ab-8e68-5c41ae117931", "indicator--90300594-f360-4b88-8e80-3ab126ccdf0d", "indicator--57a09917-b35c-4ee3-837d-d0f7fd5fc402", "indicator--c02a7655-fdc8-4023-81ba-481d009b18c8", "indicator--66045270-8eaf-4fd9-8adb-c74d6dc97499", "indicator--17159dcf-3793-4f08-833c-64e2788722f8", "indicator--d43af1b4-d544-4723-ba03-593e65c6b913", "indicator--8d95248a-2ceb-4910-9dd6-0606704e56c3", "indicator--ff734c59-26e1-4a26-b3e8-5fd3f12252ee", "indicator--85a226da-609f-4b6c-b7cc-6ce148b4e45e", "indicator--212bd041-1a47-4f2b-990d-47436e2913f7", "indicator--93fa33b9-5149-41af-a52e-0cedffcf1243", "indicator--d764b1a2-62d6-4406-a887-ef76f22d502e", "indicator--fd86162d-8631-4bda-9912-7afff2fdf2c2", "indicator--4351f044-1a93-466e-9f54-58ba5ad550ab", "indicator--e9099fe9-590a-48e1-bff2-270ff5540028", "indicator--dc3ba3c8-0c0c-4260-a02e-63cc248f9276", "indicator--cae97e50-3a83-4e7d-8ecf-77a6de5a155f", "indicator--0e516447-9188-4d13-9455-8f1a4b5a3424", "indicator--d4d9d7e6-6168-41be-a563-315c4710b41e", "indicator--74b721a2-256c-4eb3-965e-cb7374156e5c", "indicator--0bf63da0-706d-43d9-83c0-20ac7657006c", "indicator--8b5e23df-ceb7-4aad-88dc-c0490a0bbb9c", "indicator--40051c39-53bd-483e-a321-47331b36c5a2", "indicator--3fe49732-5d90-4e85-b8bf-6abfd255a41c", "indicator--2f32aefa-f0f0-48ff-961e-269934a038a5", "indicator--239f6cd8-f2fc-4194-9999-9ef18ecc3b39", "indicator--ae0315b4-d916-4f4e-877f-477a6b28f953", "indicator--2a8ce948-6584-46d4-91e6-a44ae553f1a3", "indicator--cf4b30bf-29fd-45b5-8f30-f521eefa12ed", "indicator--79c438ef-aaaa-446c-b82c-f0e9e711f80a", "indicator--887067b2-9ec3-4d96-b5f1-aa6b0c6332eb", "indicator--1b8b5b7b-d33c-4737-b22c-f5e8e673c2b1", "indicator--4d2c4b71-ac31-43af-81ad-213f9796184f", "indicator--add5988f-fb9a-4eba-a3b1-d29234144e1a", "indicator--a3e1a73c-3b62-4e0a-b2bc-ebf3087ff8bd", "indicator--620b9b4b-89af-456c-8daa-fb69a17a4d3a", "indicator--c1c528af-3ea1-4529-b514-f035806601f3", "indicator--c286bc01-7aab-4a3b-901d-629a5c3c7dd7", "indicator--36f5c768-ae3f-4663-9670-90b9659edfe9", "indicator--1b98d703-a3fb-4b9c-87e9-86d4b9b95c45", "indicator--84acde7d-ad16-418f-80e1-b00888c4e375", "indicator--edc2b110-d446-478d-b4f9-eb11fc69d048", "indicator--b414a13e-7ea7-49cb-9fb2-eb91688f61b5", "indicator--81d66ae7-22f9-4871-a338-8948243a6539", "indicator--6467fdc2-5d17-4206-a9f4-7a05d0a27e88", "indicator--f7155620-f8b7-4f62-97f6-b695a1431891", "indicator--0509b4e5-50e0-48de-8e4d-da2c6fcc206b", "indicator--c1c8fef8-be7d-4fe4-bb9c-fb79d511bca8", "indicator--4604bd07-998d-44ca-a9b1-776fb50c05db", "indicator--49b39a82-0b95-44df-b4b7-9e4bcc9832f5", "indicator--a74322cb-5d29-4f27-b282-c8617d81d2fb", "indicator--8c5d6f23-2509-4fd4-bfee-9be263e2fd95", "indicator--ec07b389-a948-40a1-a5a9-ef4230cea01b", "indicator--255b9f8a-f802-42c1-87c6-c9911d109b79", "indicator--866fb869-8950-437c-bbec-755884e3020b", "indicator--21c9cd64-93f8-473e-ac29-8a429f179f68", "indicator--ad5f94a8-708d-401e-a5d2-1d0d2217aa79", "indicator--338c90cc-ddab-4685-9e31-f1e1e80c1fdc", "indicator--a1471749-310b-4b98-9a24-57ca98689b0e", "indicator--ca6612f4-7dcd-484c-9b0f-3d398a5c80ec", "indicator--26530e7c-4174-4913-acb5-4498056a4926", "indicator--b57390e7-2a63-4639-a884-dd6561a0f0ee", "indicator--a4bc8115-4342-453e-9065-11b3e348a44e", "indicator--6e38beea-f469-4572-b80f-900a20802f48", "indicator--aabcc583-8a61-43b4-8bd2-827c02e106c2", "indicator--2761a9db-81dc-4ab4-a5a0-2ca5f96959f6", "indicator--f015be50-4b32-433d-9c0b-230d6e99d9f2", "indicator--3224c675-29e6-40b9-8772-d9e95a0b2133", "indicator--d981798a-db7e-4f30-bbb7-7d5fec9d8740", "indicator--3e83afc7-b30a-4e2f-ba8f-b95533d5ab57", "indicator--908828a9-6deb-47e6-a016-68d600139b9b", "indicator--8b51265f-8215-40ba-864e-3c90060c97af", "indicator--7d8ed744-0c13-4fea-8eee-ac983aa455c9", "indicator--51c9b4e9-0c26-41fa-90f1-79fc029885db", "indicator--780991ca-298a-49f5-a9fd-3671d1eb264a", "indicator--809a655b-8576-4de9-82fb-538f1549177d", "indicator--e849e087-9f31-45b9-a641-fc7ee53de996", "indicator--7ce6b760-58f5-426d-8f22-cfd002734508", "indicator--2181893a-c7fc-45cf-b833-a97c0143e4c9", "indicator--d4f72229-3106-4384-bad4-fe5763e01f35", "indicator--e0554c0e-8c48-413e-9101-79572161f594", "indicator--25b9690b-bcf5-47dc-bbf8-9b0ac678f1b4", "indicator--8404c274-350e-4b08-9422-3d35c51c86e9", "indicator--acc0d653-bc89-4090-8874-6bb101a5c868", "indicator--bafc5a86-90d9-4648-ac33-efc76dc9173a", "indicator--8c84fdd9-4456-4c07-aee8-acd7a8aa89d1", "indicator--dddb1eb2-ccc6-4c6c-8477-2f11cd7816a0", "indicator--b1aaaffa-539c-4e8c-8425-bd46eed987f7", "indicator--cba30e7b-ee30-4d3c-b570-e303706362d0", "indicator--a555e487-40db-4b5f-a6e2-fdde46661c4c", "indicator--d74b1579-7e50-4734-94e2-9c5c630a40b9", "indicator--2e5426c8-99a3-4d3d-a5e4-18972a9a2290", "indicator--a6164e34-ee4d-4099-8bfb-8f95b15805b2", "indicator--b71fd003-8e37-42c0-9433-969c8361776b", "indicator--a89d81d4-7944-4841-babc-4521a17ec637", "indicator--7094ffa4-0061-48ba-b09e-ed673f004dba", "indicator--ac38a4e5-5dbc-4962-96be-a71208d1ad36", "indicator--5cb964a1-da02-4cfa-b473-e38a3c28d8c0", "indicator--682f04fb-6257-41a6-8583-b959c8719ed4", "indicator--d93592ee-b167-4646-a869-c2cc08157e63", "indicator--9adebe31-55b7-4d93-919d-0d5f119698f5", "indicator--f1cac365-9540-4ccb-84e2-431518ba472c", "indicator--ae390d6d-cb6d-4672-a426-9241ca8c6704", "indicator--ee10615e-fd57-49dc-82a1-cd00fb5d1ee6", "indicator--84f50693-3e39-41b9-9c3d-07cea7401117", "indicator--7ed39eda-68cf-4ae9-8704-bc5b33d77bd8", "indicator--a72db2da-0412-4e7c-b933-10cf4e751201", "indicator--505f01fc-1645-46b3-91cf-84027383b2f0", "indicator--69dc1299-df77-426e-a6ff-5171d5a4213e", "indicator--15be110e-6f78-4918-925a-fa199047186c", "indicator--98dbf205-91b9-4b22-b1bd-b3bb8fe83a89", "indicator--e82f3a9c-9c05-475c-b097-1a2ea61d8df2", "indicator--4735393f-c155-40ce-b2c3-ac694c5fd567", "indicator--11e5f6ce-60a9-4d71-b3ca-b5d0615ff6b8", "indicator--9ee357bb-efeb-4cc7-b55f-65c5860a4d31", "indicator--f3b96217-29dc-4462-9075-11b3131da337", "indicator--790fb370-bdd4-4922-ba4d-8f604246b4e5", "indicator--33af6399-9cef-4f3f-b2c2-9bd5c0ebf5ba", "indicator--373be59a-11fa-4a09-995f-5f82a54426b2", "indicator--62503ad1-b09d-44f9-b363-f94633826d64", "indicator--3480e4c5-144c-43eb-96c4-a1f64ecfcdd5", "indicator--8b6c90f7-b747-43c3-8422-cfe97248eed8", "indicator--133a274c-a230-4a24-922a-e4d92508be81", "indicator--953d73a8-dc42-4370-bdc8-6eaefc2091eb", "indicator--07e4a989-a90f-4d85-b2b6-c2b9edfb5478", "indicator--f11cfa90-4d96-4f7a-ad90-4ed4634356a5", "indicator--860619f3-a6ea-494c-8b5f-776305294336", "indicator--04b94fc1-7c58-4ebb-a78c-9b11ac232b64", "indicator--53775225-852b-4ec4-9a95-f526af3ffee8", "indicator--b5b70dc9-2e59-4076-8a65-e39422a31576", "indicator--8b4be39a-fe35-49e9-bc34-4c46fa3371d9", "indicator--aad3675d-1da7-4102-bf54-395ed523b4ab", "indicator--c8948603-fec4-4313-adb9-ae99f9cf2c9e", "indicator--8d40347e-2f02-42b6-8238-849d55775963", "indicator--fb90a017-7e74-4547-ae7c-9b25ff5b793d", "indicator--b1cc81e5-e93f-4523-b7fe-2e1d5379aa49", "indicator--43e8e263-bb92-4329-8088-338ef5a745f6", "indicator--9394f766-1b08-4a91-98a3-0ec4b8247333", "indicator--44cfb11e-4ce1-47f9-a1c9-9fe438796c5f", "indicator--7ce43ee3-aa6c-4cca-b0e9-bfdc4dcf7e2f", "indicator--78406f08-cfc6-4652-b79c-2d951262cf11", "indicator--a82baf9b-971d-4943-9893-b272405be025", "indicator--69fd091a-5510-406c-b670-1b072e28da6b", "indicator--29ff4a67-34d3-4b83-a858-136c51a090c4", "indicator--c9fd60eb-b452-4b43-92fc-bc1d6e71bec3", "indicator--d5ff3b65-383e-4207-8882-ff894d6ad337", "indicator--38586c90-6f2c-4374-924d-f01f87a93273", "indicator--8509191c-da3c-4910-a84c-f0d0045b1c55", "indicator--9f7aaf7c-19cb-4dd4-b6bb-1946f8368f9d", "indicator--4c5da825-b724-4c11-b72a-14f04c9ba77d", "indicator--9669f934-5c00-4062-b62e-c4cc470311fa", "indicator--5aa900dd-cf31-488d-8a8f-1d53c8631ae4", "indicator--e085a9c0-ce1e-4862-934f-836f726854ac", "indicator--47ecdaff-f6ca-4d34-bbe7-9d37e20ee0a0", "indicator--2002c48f-8c7a-4ce3-90cf-bbdce7fe23c0", "indicator--5f9fd1b7-a534-4f5f-9be1-14c1370a64bc", "indicator--5adaba22-9bc5-4289-b304-a6887595e82b", "indicator--bedf1e94-87c2-4725-8e87-58a40a5b3068", "indicator--4e946e70-1960-41d8-8118-e02e5c24f316", "indicator--f4cdfc15-441c-4e8e-982f-712e11871f06", "indicator--0827783e-4cc5-4c19-a1c4-c8ffdd31a578", "indicator--00ccef70-5486-4fa4-9824-dbf165e3e4c4", "indicator--7c91aff2-2b92-4f6b-b588-a99b9ee4bb93", "indicator--58e9039e-9b5f-45c5-865e-f1dbf870027f", "indicator--e7b99d6a-2a59-449d-81c0-0f554165d4cc", "indicator--b494769d-cfef-4113-b7e9-f7bbd59b9909", "indicator--a60df3a4-7e75-4572-9d67-801584bfac10", "indicator--64c9e1b0-ac3e-4923-9bef-7c612691b32c", "indicator--978f9fd1-3f76-4a24-93f3-61192e06ac28", "indicator--32845782-1f05-4b08-b17c-49b43242996a", "indicator--6a859df3-8e92-4491-b6d2-4666ce93f5c5", "indicator--e396ca44-1c79-47e9-b355-722e98c450dc", "indicator--7cf7add0-8275-4059-a301-0283d1811229", "indicator--f7ba4611-41d7-4737-8406-1121752ccef5", "indicator--a99b11dc-637c-4237-bcc3-0af91ba19010", "indicator--1b3b70ec-0f1d-4ee1-961b-42449562c315", "indicator--b9a48b82-2dad-4d22-ae60-4ee022d57288", "indicator--0c7e9e2f-ab3b-4281-affe-2a2a86ddb322", "indicator--0f8b5c5f-13b9-4cbf-8051-f6231bdda96a", "indicator--5d1334d8-a465-44e4-9a90-c6d5efbed1f4", "indicator--479518b3-04a2-47b0-aa67-745ec5471ccb", "indicator--267ca85e-9840-4c57-b6df-121a12dc55fa", "indicator--d572bf73-fca9-4a61-ae3e-a1e9d3e7e613", "indicator--6725983f-2c3d-4f42-a1ad-9ae33b41ea36", "indicator--ab805d51-f582-4978-8788-7c37f01732d8", "indicator--286caed3-06fa-484c-86bc-b21cfe860ede", "indicator--2cd5b5fb-a5a5-48f2-a287-31cbe7a8d9d6", "indicator--bae6c7aa-9431-494f-a890-2d487f46dbb1", "indicator--d4d03e5c-f9bc-409c-9858-a71f9ec8fc4b", "indicator--b395af29-423a-4b05-9291-3ab664ad3c8d", "indicator--5588ab3a-c372-4296-bb78-43fb0c537924", "indicator--deeade3c-c78e-43ae-980b-ab135cb2065e", "indicator--7a39d68e-56b7-4721-bb33-113a1bce3f34", "indicator--7944cbb9-98d5-494f-937c-026d8b338d4d", "indicator--5d7a62f9-5e29-4c78-bcab-64c06bab490c", "indicator--899c6ddc-65de-46ce-8a45-44c9cd042f52", "indicator--eefd10bb-29e4-49d1-90d4-52e50ac23fd1", "indicator--4f89441f-a6ff-4d01-bbbb-dbbeee86ed64", "indicator--850dbae5-fe7e-4f11-8c90-1cda11b368dc", "indicator--1fc91859-35b1-42b2-9ce7-e92cf187aa1c", "indicator--75d384f3-83b1-45c8-b10d-21392d401c3a", "indicator--38c9a502-6e6a-435f-a34c-19ef088c08a0", "indicator--8297eedd-0dec-4386-97c3-0ca1b66ff2af", "indicator--569ac02e-93ee-483a-accc-5a776cbbf8d8", "indicator--ec6c7157-99ba-461a-806a-9dc97975e6bd", "indicator--c8cdc1ce-ab3c-432f-bbde-640b59e0bf28", "indicator--5485641f-fb6c-410e-a059-303f2af91186", "indicator--dfdc41f4-c47e-4598-8ae1-8b52bd7ed150", "indicator--951d3b78-2e61-45ff-963c-41b8fa16a8d7", "indicator--90e18c7b-bd51-4fab-bfb7-fb4cec875846", "indicator--50c4ec86-6958-4bc9-ab3c-2cd6257ffa86", "indicator--e3beb73a-fab0-4be1-b843-d74c3ff0d4b5", "indicator--4f3c4eac-1690-47a2-ac6e-8686a9d6f4f7", "indicator--a923e38e-210f-4932-a928-cda10b20716d", "indicator--0030702b-44e3-4730-b1e5-eb34441e9b68", "indicator--22f59941-9958-47c8-b178-1cae1367492d", "indicator--f4b4a78e-f041-46d2-af03-a67743617c91", "indicator--25111066-b3e9-4446-bb7e-db5c81ff0749", "indicator--fe1a94cb-3a9a-4d59-9543-8a3823cad51b", "indicator--fa7c53cb-2924-4a73-86ed-7fe7d7fcdc16", "indicator--26e8da21-31c4-4d7c-8b26-6f4b5ca923e8", "indicator--45fedfad-4fd6-4386-b355-7d6461f3b2e0", "indicator--895fcb7e-70fc-46b2-984a-bc17dd1828fd", "indicator--12eb1661-fb9f-4c62-94f8-f3b7eca27922", "indicator--e840b4d0-18ea-44ee-8b98-4c14da906a4c", "indicator--9adf3212-38c9-4f6b-8380-b5be71f9600d", "indicator--4d48b720-5755-4bb0-96ab-c34c3520e5b2", "indicator--d6b6b96f-5cd8-4090-8258-fe87ec857586", "indicator--3fd7b71f-15b9-4daa-a4aa-5cd205af641d", "indicator--a951f4c2-b3c3-4abe-ba47-c24a2c19b2ae", "indicator--48ec7e94-9d54-4510-99f6-44f30e066146", "indicator--e10a5eb1-1f02-4524-a5b8-f8e9ea63716d", "indicator--abbcff73-1750-4d4f-b0b8-d62bdce41338", "indicator--9bc00ea7-2e7e-468b-9938-085d38fa8ac0", "indicator--37f4d1f5-9f9f-4b7e-936f-1f487fda5517", "indicator--05f6221f-adfc-4b5c-bcda-46000155b5b0", "indicator--5cbe3fa8-d57d-4df6-89f2-1d5b18f1c446", "indicator--ed0e18aa-2e1f-4789-946a-d8f47e1fe274", "indicator--6d8abb25-533c-4dea-8a28-f90aab9f4890", "indicator--0c1676a1-1b0b-476d-befe-9c158286e588", "indicator--d4d6d143-f93c-494a-9b9d-47804895f107", "indicator--8bdad292-247c-4d29-9c03-b1fbcee29499", "indicator--60faf2a9-6a28-4beb-93b2-c7dde52bec5f", "indicator--106dfc55-acff-4de0-bf64-46436edbbbc6", "indicator--4a6f1484-7208-4f59-a55c-5dbba8d80611", "indicator--efab2b15-3e37-4ac9-ae00-91e27f06f5f5", "indicator--cbde9052-7c09-4cf4-9bd3-46b1d3859add", "indicator--13e4f92c-9f48-417f-98f9-bc39a7f87db0", "indicator--65904aa6-c323-43af-b6b5-030329f73571", "indicator--8b93f985-c1f7-4ac0-b967-21ef7d5a87de", "indicator--1a8871a0-bc82-4cd7-a9c7-8d4e5a4fc3b3", "indicator--375bbfa3-1bdb-4ff3-bf5f-976c022384ba", "indicator--ec05d98d-a742-4cf8-b91d-ee40cf5423e2", "indicator--05885d38-b86f-4675-ae5c-4939a6f658c8", "indicator--fc366de5-0815-46ff-9496-957716405fd7", "indicator--be6a8417-02b1-4811-a55f-585de141d166", "indicator--14427250-d8da-47ce-ae95-b5f27e8b1079", "indicator--dd5c00b1-177d-4ac0-ac4f-4fbb005bd268", "indicator--33182a3f-a864-4dbe-8110-7e307afd7967", "indicator--d109266d-606c-472b-bd6a-f9a41d226128", "indicator--6857e232-9e23-4e4b-9d5f-ca47a6c617ca", "indicator--4529ed41-8051-4a19-98ec-255b5095be58", "indicator--ecc061cf-c5cf-47cd-94bb-de5eb13ea06e", "indicator--60c71cfb-1680-4b7d-91d0-d0499c765fd8", "indicator--0dfc09a1-9236-4a92-8725-3302690bb836", "indicator--3ec1a698-98c4-4774-9677-646fbba64507", "indicator--50f5e844-df4c-46bb-9f04-a57c326d4dc8", "indicator--feb69ec1-a312-4bc7-ae36-8a58e5dc72d9", "indicator--7948a94b-52c9-4d77-b1b1-365256af3513", "indicator--36ddd715-7c6f-42b2-ad38-f827fb7d1ccf", "indicator--742eba39-7497-4304-a243-bd28d662633a", "indicator--f4d240e7-7ae8-4e3a-90d5-866df60fddca", "indicator--e0a0dbfc-4104-440a-972d-5e2aa3ff2b79", "indicator--66f029d0-042a-4e5b-9459-0f1fcc6badd2", "indicator--8a5f87d0-f3f1-4a88-8c1a-06a5a9c43705", "indicator--12bb94c6-c187-4a90-8872-a9371e64e961", "indicator--b1cc9df1-e12f-4b2d-b69c-af560d1fa55d", "indicator--39690311-a907-4ec5-9804-402c8c4851c3", "indicator--e281449a-41ee-4751-9c6f-5db50da81db3", "indicator--7cc448f0-df16-4cfa-aeec-31ab0fc68deb", "indicator--2ee5880e-70e8-45a9-ad92-c0ff28525abe", "indicator--e18ba06c-d3c1-4ac4-aded-814d1d3cb759", "indicator--bb9ea043-a50c-426d-a2ac-416a62939561", "indicator--be7de187-1674-40ab-83f1-b9f88279edb2", "indicator--5920482a-3c8f-4b75-a585-e37c053536f7", "indicator--6a7bc1a1-cab1-4595-a79a-a79b83884ec8", "indicator--93be5bcb-002b-434a-9d3b-e9de2d14c80d", "indicator--b8e05dc4-c488-43a4-8cfa-2a5e1e9b049b", "indicator--b4c3004f-62a0-45bc-9f98-533d69cd201d", "indicator--b56f0515-de45-4d07-be0c-47d9aca97b7c", "indicator--d94fd0e8-f03d-46e1-848a-55496e27433c", "indicator--c3c5ca39-2ac3-4672-ad76-a0a699ce57f4", "indicator--bcf7ffe1-abf4-4bc7-afe9-eb777ce8f6b0", "indicator--770fd026-91e8-4af6-af5a-b89ff038444a", "indicator--04d91550-f4f3-4075-ada2-5221f926d4f1", "indicator--222f51a8-278c-468a-8cef-077d7a5037e0", "indicator--89cc188d-3190-4117-a1f6-4319b7313383", "indicator--938ac525-34ce-4782-bbe5-9d0619590d39", "indicator--83d5931f-7865-4c25-9b67-48f0592b5b79", "indicator--19d6b486-14f6-411d-af18-da41d8f13402", "indicator--faa259a9-3a33-47e5-aa4b-1baecd32a88f", "indicator--f03e3f88-4ec7-4091-ac4a-636884d56566", "indicator--8034ec59-642f-4358-92d1-f03344a2db48", "indicator--c2801c20-0a38-480d-a812-e0ff1529f397", "indicator--f08c44bf-31b0-4f50-9ff4-3f76b6b7c171", "indicator--4b86043d-0724-4025-afd1-6802b1b97619", "indicator--ad79a2d2-cd3b-4b32-854a-da2649696a3c", "indicator--4b30da2b-7fda-4193-a513-de3bdd92f856", "indicator--807d1526-a998-4f21-94fd-954678a1078c", "indicator--786ee3ce-7a21-497e-a544-53a5db3da657", "indicator--0dff765b-fb7d-4022-bf37-8aaeae32c037", "indicator--e703e8f0-5482-46d6-ab58-e98e7af4b785", "indicator--85e5739e-7b1b-466a-8cbd-1d234366ebda", "indicator--683aaa53-70c1-4378-a3b6-b79030c6e18b", "indicator--2ef5be5f-1a73-4420-b222-5864b41969c7", "indicator--a9a2846e-8a90-47b2-86b8-af8e395a6e70", "indicator--4e1e4b08-ad73-435d-b0c0-c822120700bf", "indicator--44b9463a-aae2-4183-8822-cb7ff7f8780a", "indicator--91d796b1-b7b1-44d6-93d7-4a183ad41254", "indicator--a113f066-c2f5-4379-82e5-7d6ab5d261bb", "indicator--0685df4a-f595-4ae1-ba0d-48b25f96944f", "indicator--5bbf0051-c9f9-46c4-81c0-50b0b8bd9b5c", "indicator--73f797f3-1376-4bd7-a543-b93a67d38454", "indicator--9f1eb23b-e886-4974-bc9d-0a29762fff70", "indicator--e73eccad-646d-45e8-84a7-0f259ea910f5", "indicator--47a3c49e-8d0b-4ae5-9367-8b111659bceb", "indicator--2647db7e-383f-46b5-88ce-b2f884953fdf", "indicator--9fb94098-709c-4906-9d1c-9bd280fc661d", "indicator--385171ec-41e4-4d35-bbc0-f8600f5158f5", "indicator--8cf8ca86-289e-4975-82b7-fd41dc400ed8", "indicator--1fb01cab-1fd3-4b88-b8a0-3b7841538f7d", "indicator--e7e47acf-6031-4814-a086-429e7804f147", "indicator--0c97d96f-cd33-4b6c-b7e4-43279bd957b2", "indicator--f837b4be-7303-429a-9239-9a3214b7b0db", "indicator--aa822ac2-fdde-4b47-9413-a41f5bd3f3b0", "indicator--5938a9ba-c1c0-41fa-8f5a-a944b8315a27", "indicator--aaa5e0b6-2924-4c8f-9a41-10b23441b75e", "indicator--d9f86f18-33fc-49c9-bf79-5777c1900503", "indicator--1f827fc3-d597-4661-9e5a-ca729a610b3d", "indicator--96ab1537-0782-428a-b243-20b354a2a79f", "indicator--8c7f8d89-8311-4d91-ab26-e8e6bdf59d14", "indicator--89fbe8ef-54c6-4f5d-9748-74f2fbe8fb97", "indicator--2e7903a7-ead4-4e2b-9dcc-4b786ca51dcb", "indicator--4ad0d9df-0462-4e68-b567-93bf0dde324d", "indicator--f3d6544c-72ae-4d12-8505-bb267f6b3651", "indicator--bf223bbf-6e11-4586-bdb9-211e7e786198", "indicator--e212d78b-b769-49b1-9702-dd7c1776421e", "indicator--0d11a562-2d2c-46bb-8cf1-cf9d21ceb116", "indicator--04c98a0d-64cc-4441-a76e-24bca6569823", "indicator--bc336923-35eb-451d-a3e4-cc372d5a9c36", "indicator--fc4055cc-557a-4df4-838e-c384cd7c253b", "indicator--f4762119-271e-4758-b1a2-a9c7a18c78cf", "indicator--8743ce17-52de-416d-88e9-b6f01a441ade", "indicator--952731bb-c941-46c2-a869-62f2d0c3f794", "indicator--b6d13711-6424-4182-a48f-c55854bb0ad4", "indicator--49716454-b1d2-447d-a322-b55ba94df87a", "indicator--a707dfbb-4277-48da-b5f5-21466c998a4e", "indicator--3689ecb7-dd9a-4507-b463-e6b5341c0496", "indicator--e5530c01-2991-4f8b-9691-657e2eed2f1a", "indicator--16dc23fa-9e8c-4922-bd84-a4755ac57771", "indicator--a57e67ba-1ec9-472e-a872-b632b27b30c7", "indicator--f10b91e4-b1ac-452c-a642-13714332d253", "indicator--9aae3c13-9c2f-44ac-a0cd-eb82eac446da", "indicator--ac3ed08e-571a-425b-b5b6-0deed41266d8", "indicator--4d45974c-6edd-46ef-b404-acd058227e5b", "indicator--db9a9093-d50b-4653-98ef-9c0f2469f4f1", "indicator--2f10edc6-b855-45fd-8d0a-3bf33a2d70c2", "indicator--9c6369ec-7448-4b0a-bf26-64e565c11802", "indicator--daf6c733-2704-493e-912d-6bf3314e006b", "indicator--180b99e1-bc42-4a48-8b4e-84981e32836d", "indicator--858287bb-b611-4b0b-b03b-8b761d160b96", "indicator--302c8a67-68e8-4884-abd9-6f3d227c6368", "indicator--67cffcd5-4445-4df8-b3f9-3ebb2b6b5794", "indicator--82b9133a-55ed-4fdf-9dc6-8ae6d79ffef0", "indicator--08e18682-ca6c-44f6-85b6-e297ebbaf45b", "indicator--bfc499b7-b83f-4446-b62c-d136df1a46f0", "indicator--1db124ed-a2c9-4abd-b9b5-1cf9381b8e38", "indicator--e71da58a-299d-41be-88fc-9068137f4c6a", "indicator--1cb6cde1-4dc0-41c1-bb4b-bcf5a7569fe5", "indicator--28e9a5fc-7d5f-4ade-b14f-8b7994f7f4e1", "indicator--4d65675b-5070-4670-ad5f-c2d5acb35e5d", "indicator--3fcef0ff-6093-4435-823f-0cc950f1085c", "indicator--00cfc65e-dbfc-4a67-834d-6834ecc5c31b", "indicator--c7037d52-35d6-45dc-a19a-a6b1e08c1f3e", "indicator--5e5cdc41-b54d-4322-9252-1edc945ff7c8", "indicator--2bcbbe92-35b3-445a-ba1a-f0c634ee5e5a", "indicator--b6d4295c-26d0-4e3a-a1e4-af13e83133a6", "indicator--1adc2504-dc64-4713-b36f-37159c0f404e", "indicator--a3eebd66-1773-449e-a2f5-9e61c671c458", "indicator--50a2a0b4-9b5e-4417-a57d-9f4f8c5133ce", "indicator--2224391b-f884-4127-a827-e7bc936a4dea", "indicator--8a5f80eb-ae4b-4784-8ca8-62859c4b7477", "indicator--0bf59737-1917-4df5-970c-a5652839fc7f", "indicator--c58765ce-5734-4378-8585-9d2bda673a41", "indicator--a402075a-47a7-466f-89ae-02abfb3d17de", "indicator--3773812e-f88d-4458-9370-1c209a4b6f0f", "indicator--5dd27646-e412-4cd9-9ec6-cc0f72a3dd73", "indicator--f34ce8d8-e375-4f51-8854-1870d5cb477e", "indicator--a3f14af0-83ef-4ee7-86f0-811498e2fb02", "indicator--14526277-3107-4791-9b2d-c227bd493319", "indicator--89253891-f326-45b6-a030-1ea9566da7d4", "indicator--baf3a9d4-ad0c-4a4b-9db3-c8f66253b372", "indicator--55f34f90-798c-4cbc-ad08-13d9f90af9da", "indicator--8e57b320-21b0-487c-86e5-fcb2f91a4b0f", "indicator--a69578bf-5e4a-400c-bcf3-d80ec987d703", "indicator--fe9ced13-446f-4f12-a8c1-58fe3fd6b600", "indicator--e8965715-885d-4932-a07c-1e91ed3d1ce9", "indicator--b1ae1328-76b5-4758-af4a-aff220a3facf", "indicator--74bc4c3c-1bac-484b-80ba-e25618d1a741", "indicator--19925a9d-eaac-4ed1-b6ab-2a87720da32d", "indicator--c2fbe086-cdf3-408a-9f8c-8e5cc9b1bcb1", "indicator--8b83b3a3-2e76-4905-aa29-b2ae7cd50ddb", "indicator--2c48b8fb-3ad7-4b0f-9300-201303354918", "indicator--c9342b2c-1930-4115-933e-c63ccb3b6865", "indicator--87909c0a-5e83-43eb-a8e3-39a2fb39dfe1", "indicator--6a2b087f-5a29-4979-9b3c-4d8da2eca8e3", "indicator--53904fe1-0813-476a-a0b9-b06ca55820d3", "indicator--96a52326-2a21-4b78-ac38-e6fb85b26131", "indicator--349e6b7b-83dc-4b47-915c-9a02504e0321", "indicator--fd4445bc-cb75-4e9d-b50f-9d33bf1545dc", "indicator--3afa3f05-1679-433f-a9b4-ee5fb9f2145d", "indicator--36bac67e-131b-4865-8df6-8d1dbf07de28", "indicator--fed34257-b1c4-43fd-ae4e-32c429e5c72f", "indicator--de8a3aef-9c97-4d8a-a258-0928c120f151", "indicator--f8db5121-b27a-423f-841a-dc31550d6b32", "indicator--98027c1d-3fed-47a2-bc04-3671727196e9", "indicator--ca47a5df-cb7d-4c8a-896d-70be4a880718", "indicator--f19eca41-9303-4428-8ad7-db0c647165a8", "indicator--c4ae7130-57e3-42cb-8b0e-0f9c2099946e", "indicator--833a0cf9-3b22-4f9e-aafe-77602e40b55f", "indicator--cd5098e1-d218-45fa-b911-db5ce764777b", "indicator--875fc936-5bb4-4e1a-bb73-05ada4093e7e", "indicator--1c1d12c7-ec79-4d1a-8d18-bcc7119e9c8d", "indicator--75a70ee7-a383-4cda-8895-30f802e02232", "indicator--8bfd4b63-8e58-451f-8a9d-97607b017923", "indicator--5395d407-664b-4870-8b7b-c500636ea1ee", "indicator--0acf01cb-c093-4dfb-9324-a986e06ebaa9", "indicator--0ef0e02d-755e-496c-951b-78f18cb131b5", "indicator--48a1bc9a-f764-4e4b-9304-8b9cb40a44ae", "indicator--f9df582b-bc88-4579-a98f-d9fe76beeef3", "indicator--75d06fc6-1074-4941-b11f-31aa05da3039", "indicator--7f77244a-37da-4872-9872-5481ee6ca713", "indicator--77f05b7e-130d-41f1-ad73-adef6a788eb7", "indicator--eb1af239-862a-4173-a83b-08692c69bd14", "indicator--f29f6098-690b-41a5-9648-55b8b0b69809", "indicator--75bfcf4a-b863-4ea5-9f9b-3ccd975c5a02", "indicator--67174d80-7408-4231-956b-f3dcb26ae281", "indicator--f157f9a0-916d-4ab5-b8b1-3098c6aeaf7b", "indicator--b658990a-2782-4f9a-90f6-002cd1cababf", "indicator--2b488a82-9c59-452f-8d23-76c20b8d2423", "indicator--ca92d05f-e16b-4dc4-89a4-654daff943e8", "indicator--a567a0bf-0995-46c0-afca-6758f0c28344", "indicator--ace1013a-f6dd-492b-95a2-39ca1ca7095d", "indicator--98511010-3128-4ce4-9fcf-af30899539f3", "indicator--3cc1b7be-ed64-4031-87ab-f0dc3258d516", "indicator--0b66c7a7-e40f-4ee1-9b8f-f6ac5ff22636", "indicator--50b6bf12-e355-4367-b157-47e484ae68ad", "indicator--6e1475c1-9ccb-436e-a5de-c16aa93ef477", "indicator--06ad5137-2e02-469a-9acd-1cba3de81a8d", "indicator--cc5145c3-a0db-4d92-bf43-cf464671ca2a", "indicator--1cff37e3-66a4-4dda-b1f4-9860b0c413a4", "indicator--8643b6ed-8bbf-45b2-9cc7-0469e560e3f9", "indicator--bf83cf69-85f5-4a95-97f2-0a70a6790733", "indicator--d1177535-240b-42ac-885f-f2cc62895a6c", "indicator--e486f06e-e816-4a09-9700-4e7f8f9e1a33", "indicator--a91f86a4-6360-4a30-bf1d-50f47307011e", "indicator--33872dd0-b9a1-411f-ad28-680618df1467", "indicator--06dcc5ed-fabe-48a4-bacb-42a3b01033f7", "indicator--f33a8041-5f52-4b2c-aabd-97bb3c46edfa", "indicator--219c5259-8db6-454f-a77f-942309bf21fd", "indicator--3423ebe8-303f-4ab3-98ff-f6e77c473b9e", "indicator--e81ff6de-6124-4495-8caf-93ff374584e4", "indicator--657a0815-6555-479c-93f7-7ce589323850", "indicator--9335c712-0d32-4fa9-a71f-623dea23824c", "indicator--9d9b33fb-bdb1-45cc-b83d-3fe18f13f1df", "indicator--c451cd3a-4edc-4309-88d5-980bc27a5679", "indicator--40789757-873b-4fc1-beef-ea245e285b5e", "indicator--6f7759cd-c38a-4502-96d4-4a133eda8c1d", "indicator--d8a1f5c2-7dd8-4d4c-868f-62a9bc7de5dd", "indicator--049093e5-564e-4579-b4bb-cde641a97819", "indicator--2301c076-e4fb-4227-ae25-ea710f346fb9", "indicator--232e5aaf-afae-474b-bf49-939998b7b335", "indicator--1b1e0a2e-3418-4925-91be-5598021d66fd", "indicator--e869ba01-234e-4e84-9ef7-80d4a938b932", "indicator--4b24816a-4550-483b-b352-37c9b55925f1", "indicator--d77fe2ca-073c-419b-8612-3856e77c2b12", "indicator--7321718f-5a1d-4677-a72b-0cb7f8ccb045", "indicator--d06a1955-493a-43cc-8d0e-2ad269f5d40e", "indicator--1af3e2b3-e417-4a21-8d7b-d2289c842aee", "indicator--5c786240-56e4-46fe-9637-331304871dc9", "indicator--f02a2cf9-617d-4b97-a836-f55c4d79619a", "indicator--de5acb8e-9e67-48c4-bc43-f15e305b151c", "indicator--01c5d900-6740-449b-bed8-81d5287fed0b", "indicator--5bcb449b-263b-41d4-973c-cb137fd74f90", "indicator--238d7e2c-e280-4fd8-95f0-c52105cf67b7", "indicator--7bfaca57-dc17-44c0-a5f9-28ef44e9f366", "indicator--26eb25a5-9e1d-4631-8c4a-8a9b693add08", "indicator--dc49a85e-9fb4-4d5d-a795-f88a2cf1d3e2", "indicator--618ae325-5d53-40a6-83f2-5599a8a16423", "indicator--7cfad612-2f64-4e8a-be43-eef6a1287e4c", "indicator--23734cdb-1a51-435e-9f6e-382078ac831d", "indicator--60e6de3a-b404-4ae6-91c2-2fdfa29d082b", "indicator--66cd3214-6ebd-4280-abac-bb0fae5509bc", "indicator--3c766f52-623e-4859-b580-83e6c20bc49e", "indicator--d79dc0d3-ebbd-472b-b680-b796f7a91de5", "indicator--e35c96a1-52b1-404a-b472-86b47c3d7d44", "indicator--75cba1d6-bf79-403f-8869-770d7925cce6", "indicator--66186d9e-966c-4de4-b42a-17250b7d525d", "indicator--6cd8db29-1675-4f6f-9a05-c0c0b3d5a2df", "indicator--602b7e1e-7354-4446-a06e-9fb7aaf48c38", "indicator--c823910f-6a41-4b65-b5f3-7602cfcc18f7", "indicator--21680ec8-8501-487a-9010-b6e6753101a7", "indicator--d771fca7-f73e-4a41-abc9-11830821ace5", "indicator--17de9e9c-6739-4e61-a38d-c092f2b72ca8", "indicator--e996eeaa-6558-461d-a005-b56e322a1cc9", "indicator--b0cbd334-337c-408b-9774-577c2e26a251", "indicator--08c91e1f-6a4e-43a8-b29c-39277b37200b", "indicator--1148ba61-9470-4133-81d7-d631909de109", "indicator--9f14fb77-3c6a-46e2-80d1-9bbf01c593a1", "indicator--d6707c6f-7ab7-469e-884d-6964c321ca5e", "indicator--02355c59-b2f3-4e75-8cd7-113693f2685b", "indicator--0d24120b-45ec-4170-814f-970127c10aa0", "indicator--9cc78735-8767-4c81-8337-74485a183a9a", "indicator--30634d1f-1caa-4ed7-a012-6b2a1cb631f6", "indicator--44fe3510-a96d-4100-a7e9-f76a2d1982fc", "indicator--da680b98-5ebb-441b-a354-f7c7e81b1a98", "indicator--dd6933de-b038-49c4-a066-b9ea284a3007", "indicator--4bbe710f-534d-4a5c-b143-2a1916b0c5cd", "indicator--a19b0eb9-bb10-42fe-9b67-e6160c8c3d08", "indicator--2ada97ef-6e9d-4f8a-ba91-4e7d86597341", "indicator--7466f276-66e0-4bb5-aeb6-5a406e5ebae5", "indicator--50ab8a5c-5de4-4727-8749-c17022387e66", "indicator--7b17adb9-adfb-4518-aa6a-9b891c02fa2f", "indicator--c9676530-03f3-4b9e-9135-c701115f582b", "indicator--53588566-8d01-4fa1-bc4a-75dcf9f00d62", "indicator--b58da060-79be-48e2-8de9-4ad33c1d0b95", "indicator--ed65abc5-0c0e-4bfb-a89b-e9649a3cdc6c", "indicator--d0d4cae5-4c41-45a2-9f76-b5cea039f106", "indicator--ff4ae58e-3f3d-4aa6-a770-24d488b4c439", "indicator--c24f6412-81bd-4b23-8175-fd1098bf906c", "indicator--5e0eb99f-312f-41bf-81f2-b2ac0536f526", "indicator--50190d7f-c280-4658-9483-f992b033daaf", "indicator--eb3b6082-8a91-4406-9e62-ed7e7c33b1e3", "indicator--4febd2db-9536-4fdb-be0d-8147da2757ea", "indicator--16ed8dfd-3ec7-46cf-9b1d-846fe5e07d5f", "indicator--fa114ab4-4530-48ea-a3a7-64bb66621562", "indicator--67073ab1-8ee5-47a2-aea6-267df8645967", "indicator--77bf4fd6-4a1d-44f9-a902-9809b46484a8", "indicator--e46a6780-1082-47ba-9a6a-f98fa2fec191", "indicator--b99bc24f-2a2a-4de3-bf52-05c40b499f0c", "indicator--a969c881-a5ff-4dbb-9534-82597b187cf5", "indicator--edb814a6-934f-45b6-895e-0247c73a4065", "indicator--83148a82-612b-4797-b6e8-6c3141efd1cf", "indicator--b923df12-2f95-4faa-92d9-37985c7d7422", "indicator--00168e68-c074-4be9-9ccf-e8b43b004f7e", "indicator--e8a28aba-1608-4a8a-a264-eb61bf991f52", "indicator--9f27c4f2-2e77-4394-b195-25204e543d8d", "indicator--b990166e-fcbd-4db7-9f4b-1cb9fc138336", "indicator--bc0a00dc-8895-437e-b8fd-27f546a6e9e7", "indicator--c73a376d-0b8d-4973-a503-cc9ca6ce7ced", "indicator--30e5f18f-e3f1-4fc2-9e3f-81620d5c9310", "indicator--b1842252-917e-43d9-8429-fc94ac90f835", "indicator--69227575-d664-4c01-af77-37135cfc1dac", "indicator--0a1c9a7e-8bfd-4e46-829c-db38db370e06", "indicator--727fa862-0ff9-45a5-aad0-8f5bfd168417", "indicator--73946654-ee28-44a5-9b15-23212cb87e9a", "indicator--ab42575a-aff9-4832-80e3-4a25353a9a61", "indicator--4d4354d7-7cc9-4db3-afbe-6c6273d5375e", "indicator--3424afc4-7050-4d5f-9f52-f05662952862", "indicator--7a7395bd-4e79-44f0-a55f-08eb05e5f755", "indicator--065e3dcb-203e-4ea4-b918-d54fa9271e4a", "indicator--ec48614a-e0ec-45a2-842d-ae1742d683d3", "indicator--6048e439-98b2-42f3-bf81-f5bcdcfd0688", "indicator--2806d2fb-91da-4310-be40-0594f9f1e840", "indicator--87d45093-52fa-4340-875c-9802f4d3c529", "indicator--3adfdbf5-d872-4ff9-9837-439a0cb93720", "indicator--7b7eb5bd-1ee6-452d-964a-c66028bda4fb", "indicator--c2e4d732-c724-4a21-bf57-e4b57955e857", "indicator--e6a3ace2-56f7-4f06-b8ca-198b9fad4492", "indicator--ad9d17ca-99ff-42ab-994a-67f501aad7fc", "indicator--7b9cbe0c-2d23-4d96-8d15-74b8a26afb7a", "indicator--cf435805-ae1e-4431-986e-fdcec271995f", "indicator--231c7af6-f850-4b2d-a964-0dcd40e0e3f9", "indicator--1843c5a1-5912-4c1c-a7db-11f4a4514249", "indicator--8803daf7-1a4b-4ce1-8ea3-5de2015d04b6", "indicator--493ff95b-feac-43d9-b68e-a59b57d6356b", "indicator--88ec8365-afd1-4d9b-af84-b6322634494b", "indicator--b5bc1429-5e91-4737-b7b3-0a668f2e5114", "indicator--3d1a9b23-b55d-4100-a0c8-300258fe7c39", "indicator--d4e6ddf4-d355-4509-b340-c73e8964dcd5", "indicator--1b438baa-309e-4efd-9886-3f6840695f06", "indicator--3d3d5099-e3d9-4087-a563-5eb6e64f61aa", "indicator--ea102b84-75d3-4763-a151-3d1b8342df52", "indicator--4e2b5999-baa6-4999-9ba3-85883f63c0db", "indicator--b7babc61-d367-47c4-847f-f44efea2c858", "indicator--f2e4de3c-037d-424b-8273-f48314d21ded", "indicator--6bd099ad-5878-4d8f-aa59-0819f852529e", "indicator--ab2a22a3-dce8-47c9-9440-0548781beb97", "indicator--b929938b-2157-4e96-9f7e-5eded5ca3825", "indicator--4794b7fe-61f5-4b4b-ae6d-34c090677153", "indicator--e12a0bee-3c44-42ed-9f6b-b63c925825bd", "indicator--3180e22a-b13e-4153-8829-1debe86b7b82", "indicator--b21400a7-675e-43e2-b56a-95a7a81fceb0", "indicator--a5ef170d-0917-441e-a250-5d9e4168f011", "indicator--882d160c-7411-40ee-8957-b2c1c8a4e5c7", "indicator--0342d6ec-a5af-4824-803e-a0a93d52a6d2", "indicator--4ab29ce0-4678-40bc-acb9-63aec89ecb7e", "indicator--5c361720-6076-4ede-bf91-ab9eb7c21d84", "indicator--58972b55-e7cf-4a3b-8d24-dc488c71ae8c", "indicator--322ad84a-d960-45f4-a137-369ff6ffdc9e", "indicator--e304d30e-85c9-4e2e-a161-663f74e715d7", "indicator--47cace5c-1211-4820-b188-f64f74bdc456", "indicator--fa1307f2-fa03-44cd-ab59-0407adc054d6", "indicator--4eefc48e-6005-4efc-a1c4-42d6291caeef", "indicator--81afd630-dc57-44d2-8988-85fc659fbe18", "indicator--8e6f19f0-b2db-4d1d-821a-cc99f3cfe16e", "indicator--1ef40609-a666-4b99-82e2-d1b106b6d99d", "indicator--9f85edae-af4d-4357-aca4-4f3e135861bc", "indicator--7c071ae1-ed8d-41db-9903-d407024794d6", "indicator--b7e23175-14c2-44d0-99e9-c6e1fb861ece", "indicator--d487075d-dc23-4b3c-8785-978798ab2d0f", "indicator--03b0301c-b6df-4fcb-be6a-aae954ada485", "indicator--109dc76b-dfd8-47ec-996b-379879889315", "indicator--1524098a-f88e-429d-aae3-5eb5fd9c38c3", "indicator--6348c951-0a6f-4f70-a469-658b11212c0a", "indicator--14803cfd-bae6-40f0-a476-a2d78c712a29", "indicator--e39cd601-411f-4044-a1ce-673ee8470fb7", "indicator--996b4569-a6f5-4980-a828-3a848251def3", "indicator--d8867501-e285-4fa4-986b-53f70ead3f59", "indicator--60e39fde-6e43-4fe6-9fea-b8e4bb40eea8", "indicator--69b273c3-6260-4288-b569-b62b53f6bd67", "indicator--678bbcbc-3030-48d6-a202-f9cb5934cf7a", "indicator--c0090707-8776-44e1-9f71-9c2bbd92867c", "indicator--b1aa87d3-5753-48b7-aa41-727f7a30b49b", "indicator--0bb789e1-521c-4d9d-aa7b-d23165a92753", "indicator--b979de65-daca-464d-af62-5d330d5ab131", "indicator--e2b6ae63-c6e1-4ed2-a80a-2890ff11f534", "indicator--a8c54558-0d56-4f38-8687-57c0ec4f0fe8", "indicator--c0ec9c4d-5058-4c39-b2f2-6625001d394b", "indicator--f701cdbb-31ac-4385-8bfe-e73875cb4062", "indicator--de7a6df4-3093-4b30-a40d-d96f46c37028", "indicator--cab45e3c-10ac-4d24-8a01-aed65855e0dc", "indicator--e287f9ca-e654-4b69-99f6-93ad9009ac78", "indicator--03709287-cae3-4067-886f-5863dcaf9ab1", "indicator--658b0760-c835-4736-941a-707f4a561fff", "indicator--00eeb298-9f5b-47e4-84c8-927e64922adf", "indicator--745ea425-3e4e-4fd6-bdb9-46ca4cb5482b", "indicator--5aca2826-cc7a-4cba-befa-3db69c6067fc", "indicator--3c46982c-4e87-48d3-80f0-6f4513ee8e5c", "indicator--41abab6a-a52d-4e79-b246-72cbe9211c9b", "indicator--1050603c-571f-47fb-aaef-b59a36c5db4d", "indicator--40d41e0b-6c04-420e-8575-79ee6afa3074", "indicator--3cf8220b-699a-4ca1-8f47-07085cae31fd", "indicator--1e41f64a-bcfd-4b03-80ab-fdff3cc4d45b", "indicator--7ef0b1dd-a896-4ed0-a612-83c184c0763c", "indicator--3c915fdd-43b1-410e-80e9-53618ff0f450", "indicator--0d5955fc-aa09-45b8-b443-b0312908f396", "indicator--bf9cc08f-3e42-4305-a8e7-568773e08b3f", "indicator--b32c2cf5-7c66-48bc-b4b4-f635c0fd3845", "indicator--79e3233d-7503-460a-85d7-9edc4bc5e163", "indicator--57fe72a5-c520-4767-a445-b2a8260c1314", "indicator--2abb1556-b89a-4a1a-b8b2-1a374aaa9616", "indicator--289b4b0a-8153-48ed-ab50-c30c0151fa82", "indicator--e6d300a6-bbc2-4bd9-a428-d2fc66ef0af6", "indicator--7e763e49-195e-475c-93d5-618286e1ef9e", "indicator--491309a5-513a-4560-a14c-09bfad2bb0fc", "indicator--1b3f9ccd-9b1a-4a2a-8cf2-4e1f8bb3b9f7", "indicator--f85505ab-b68a-40eb-a4ae-022d79f9b8c4", "indicator--e3c508e6-b0f7-45af-9829-ef11cf34e6e2", "indicator--f1e3aad7-4080-482b-ac4b-9e486d694e39", "indicator--15920abe-93eb-4fad-a367-c712509c5462", "indicator--77e71fc3-139d-4c72-8fbe-006687745366", "indicator--ec89a46f-17ef-403a-bb00-60443c23084b", "indicator--279be7ba-b1b9-48eb-82ae-32d5337dcfe5", "indicator--c345d6d3-6767-4602-a147-b0830b4b5f1d", "indicator--190358ed-a6f5-46bb-a231-c24e2f80ca56", "indicator--320809b9-a3fe-4335-adbd-c7f789d93054", "indicator--0be14da3-fcbf-409e-bf36-587d4ae2df0b", "indicator--4deaba5f-60d2-4085-83a8-3ee015db522c", "indicator--f6d6c3ac-0bb0-48f7-b469-bd81417499fc", "indicator--96cf55ac-80b3-4bf0-be42-2e07904c467b", "indicator--61468131-9841-465e-baec-e423127b3ec9", "indicator--7f1cee21-484f-4626-b7d7-7ea7caab11db", "indicator--a358568d-aea3-4283-bc05-eb8b1ef8b414", "indicator--a9f55124-94e2-4420-ba27-16bec9d0862d", "indicator--013d2f91-df94-4731-89b3-6a7157df2fbd", "indicator--95fcbbbd-12c5-4379-9904-98581e28bf4d", "indicator--1e6c14c8-6ac0-41f9-94ec-97c8975e60c1", "indicator--7e53f15f-25dd-471c-b9e4-935dbccd885a", "indicator--78c6ac86-15f3-4b22-b206-fa2a96a39c47", "indicator--081cd0b8-f02f-4a81-a202-356d4892c91e", "indicator--151856af-47fb-4c89-b35b-7eedcd909440", "indicator--ca7c671d-1e26-43a1-a101-5257154ac2ae", "indicator--b829bd21-afcc-4cc2-806a-6759f9b4b7c3", "indicator--23651547-9027-4990-91d8-00b74cd347b8", "indicator--2917d22a-34fc-48ac-b7e6-702e65eabcc5", "indicator--ade6d26b-9adc-49ad-90ae-91c3b37aef6d", "indicator--44cb2e22-b67d-4b94-8f65-a09487885e8d", "indicator--ad134b78-c983-44a0-bd0f-eff809967ac6", "indicator--8d4b356a-95e7-43ca-a439-3c259c7f5b09", "indicator--61ad79e8-16aa-459e-8a18-8e2a3614cb83", "indicator--68d69f08-5cf4-465c-beb0-af30113b4612", "indicator--4b1ef2c4-6afa-4b18-bf43-5f5137f80c6f", "indicator--b1c5ac23-51c9-4ab5-9e1c-efa90dc53006", "indicator--888ee9b2-1890-4413-911a-eba3a458bf65", "indicator--1fa1efd5-1a84-462b-b6f0-edd6a51afd29", "indicator--336f1401-5913-4f44-8891-f9c9f8ea0667", "indicator--35e9a4fa-b8a5-4e27-beb8-02cd2cc5aad0", "indicator--a2704abb-1a4e-43df-9618-2071631f9717", "indicator--f35eb663-8e6c-496c-a290-053be9ded3bf", "indicator--a3c2a416-698b-4baa-b1ad-9fe695421552", "indicator--ebde2c86-f6da-47b7-8f51-867333a91b77", "indicator--9a012382-fe87-4d10-a4a4-cb58093a6463", "indicator--32ea9cbd-64a1-45cb-84ae-6af3f9f87342", "indicator--db2b4876-a5b5-47dc-91d1-72728b4c32b6", "indicator--c6652840-8380-416b-a9b2-ce16f09a6e95", "indicator--2cda9d19-ec37-41d8-ae01-b0841f0bf95c", "indicator--bd2abe37-d947-4a34-a8d2-47ea9be3969d", "indicator--2dcc1f57-2f32-4008-a0ef-4fb9bbbcc3bb", "indicator--7cba1d81-0271-4e01-836f-f269a6f2be58", "indicator--108beddb-a6fe-4755-923a-adf0ed289438", "indicator--36242bda-0e0b-44a7-a298-4ae6bc79c94a", "indicator--91df7626-4a6a-4f68-99c9-1e02151748b9", "indicator--be9dcc04-987b-41c6-95ea-aff61c22c727", "indicator--897d5c6c-6b8b-4744-8e98-7119a9f5a433", "indicator--eb48ee2a-70c9-45d0-b429-5b690d3d93bb", "indicator--a259653a-7efc-423e-9a6c-e08ffe6651a6", "indicator--dd4e1532-11ff-4ef0-acaf-b17671f95ca3", "indicator--e0c4d51b-07df-4959-b083-b3094a1714fb", "indicator--1822c646-cac9-4b3a-a617-b164f9cce5ae", "indicator--640d26c5-6c52-4880-9d96-dddd5aa12ec4", "indicator--6b48b3b7-a0fb-446b-adf5-0369cae3e7c4", "indicator--4be1bd6f-2d5d-496f-925e-af6e3717e452", "indicator--0b53dca8-3d91-49b1-a906-20eb24166c32", "indicator--28e65191-2448-44d1-b9bc-a0b8fd82d258", "indicator--f775b9a0-9330-4d70-b228-3127de588e51", "indicator--4088eb39-3e70-42c2-a23a-3258f315792d", "indicator--095278b4-7cb5-4441-8315-30f8b75bbd7d", "indicator--9ce0523f-9d80-4438-8ce5-6a54f6a887d5", "indicator--263803e9-70ef-4fba-a44a-e925850c9374", "indicator--a45e251b-c84d-42f6-a491-f380ecbd9b71", "indicator--efa5ded0-e460-4d4c-9287-70532676abf2", "indicator--12ff4609-8dc8-40a8-b2d3-12e9cd550c88", "indicator--537a59ba-ebe8-4d5d-9803-1b8c03089afd", "indicator--66b47e74-1ddd-4a6c-9d97-b9d1b8cdbf6f", "indicator--2bf1e209-850e-47fe-862c-6df4b46e234b", "indicator--dfa4367a-0080-4285-af16-1c3ff7de41cf", "indicator--a45466e9-c622-4ecd-bc73-eb7289786981", "indicator--70386952-4e18-496f-b320-958f4a018f2c", "indicator--d20f724b-d4a6-4884-9226-b5989c6de968", "indicator--5b9b792c-e32c-4df4-84e8-3c8a9d133197", "indicator--2771b1da-e4df-4af9-bdba-b0b4b077e12d", "indicator--ad0671f6-618d-4e67-ad3f-865b0dcb7e12", "indicator--e0f646c0-051b-4ffc-8836-e293368eecd6", "indicator--685ed66b-c928-4419-bfea-ca07b1625fe2", "indicator--2fdf4bfa-7b04-49f3-9ed6-ff7a9045bbdf", "indicator--170eae93-5598-420b-9074-dcdf454bbf0b", "indicator--72442efb-db3a-45d1-baff-4ba908c9187e", "indicator--a4a70611-c516-40f5-8ff4-8f8789a0401a", "indicator--969b012d-0635-4501-b901-b0a56754c34e", "indicator--007d151d-bf08-4411-a3a7-9e3920cdb822", "indicator--e020adb0-7515-4b1e-b5ff-c5e063a47002", "indicator--ee4f9e5c-f1d3-47ca-a56e-ba211e2adb45", "indicator--6a441cb0-04ed-4322-a835-964a0acbf7ec", "indicator--6a015f28-2895-4d4f-9578-70673bc865b5", "indicator--4a4a3864-4016-4132-a908-110b49965ef5", "indicator--442c4c1a-ee46-4a34-bf0d-331c406a0547", "indicator--77443d6d-5910-4fb1-ba98-23e6ab49d18b", "indicator--b1f6abda-febe-49c0-a643-b21d913c0fdc", "indicator--3a4ae032-8c7a-442c-91cf-f90e55328bd6", "indicator--407c3116-0ce8-4863-a55b-90c4350fab07", "indicator--660daeb9-b97b-4acb-82ed-6877fb7ded0a", "indicator--24103ead-2c8a-46ab-9b7e-ade09ada6b28", "indicator--33c6c91e-cb44-4fce-9c6d-c8ad092ff1d3", "indicator--52f13bad-af39-4384-9291-baffc59b55c9", "indicator--33cc5a1a-1670-4628-b866-6c13dbca8188", "indicator--4a92d758-1178-4067-a6c0-61194a6ff64b", "indicator--79c63deb-e941-4497-9f6d-64812dd6a86d", "indicator--c56adad8-eefe-4984-905e-70de608caa69", "indicator--7a73e39f-63a0-4f00-b39d-f9afb7ac2771", "indicator--d7e40107-c68b-4020-bfa4-b0b65eca79bc", "indicator--34280a51-f3a8-4325-a706-6869323dbd7d", "indicator--48b07b44-ac90-4616-b2a6-65bfc1d1b266", "indicator--21a5d7c3-f78a-4b46-87b9-53a27ebf0b53", "indicator--43df22cb-0503-4438-ab12-8a8938b6dc01", "indicator--c4f2ba34-3957-47c2-bfb3-eb09726ad5d0", "indicator--a38101df-361d-4edf-9683-3448eee51d9f", "indicator--e703c587-8a9a-4f71-a325-0710afcd9d6d", "indicator--b6e9926f-3bfe-4d51-8506-eb264120768b", "indicator--8c95e528-1062-47a1-bf42-0255f384060a", "indicator--d0473741-73cf-4244-a711-700261c4f49f", "indicator--ffc40d41-ed7b-4e71-bc46-2dd63ec120b6", "indicator--bc09f36e-f955-44b1-b7ed-d28be777ca00", "indicator--2b7505a6-d993-4de1-b1e2-75f13e12271f", "indicator--cb7d2bb2-33db-4193-b218-cc9d40a1c5f0", "indicator--4dfec439-5354-4bbb-ba5b-81c47cb96ee1", "indicator--d1b4c458-d6e5-4d74-9bac-43434f96f08a", "indicator--fd23617e-5a0f-4ab6-a899-7decbeef27bf", "indicator--064c8e6c-3f09-4a54-9e98-f424bae4d667", "indicator--d8cf1b91-fbd7-4533-8ff3-627c86997240", "indicator--584305c3-e2e0-45ec-939d-2ae52107d80a", "indicator--23151d85-91d6-4c05-be9d-811e868badff", "indicator--63fb3bbb-61f2-40c0-a38e-d2eb8ed79ae5", "indicator--a202deaa-a1a9-4317-9cd0-169fe1f25dd2", "indicator--cb3ff7c8-0da1-41c8-9f81-d1aaf4ed8e8a", "indicator--7c9cb156-d6ab-49b1-b146-244f823762e4", "indicator--42de523e-56f4-4873-ad96-7dc09dbbdc67", "indicator--57119476-6a41-475b-994e-0b01a983777b", "indicator--ff6fed53-6eaa-496d-8df4-f5b634fee848", "indicator--c1a5e0f0-9b57-4f8b-9840-45d34fcaee3f", "indicator--fc34cad3-ade1-4221-9180-08b39e3f504f", "indicator--b5e71200-9800-4973-8199-495b4cf82537", "indicator--ac93c469-ae23-4c5d-9246-fe65d17509f9", "indicator--7eadfa5e-a833-49fb-b389-3a0c4e1bb71e", "indicator--b090bd3f-a6c6-4feb-89c9-79e48668fe3a", "indicator--e32eea76-8773-4861-b094-3e6af913358a", "indicator--c2f731b3-5863-47df-a07d-15afefd3704f", "indicator--88b1e4ac-e9e2-4324-b17e-3b46858bf59c", "indicator--e0edae72-4137-429f-abc0-e52a540581d6", "indicator--7814be4f-a4bd-407b-a537-b41dc7bc8f94", "indicator--df5e7a97-7d34-4eb7-a4dc-92fee9e6202f", "indicator--0594c86a-1097-4bde-83ff-44eaba3fd4fb", "indicator--0928015f-497e-4e91-b290-2c0444f56a05", "indicator--3d321e43-e432-4e19-a611-9405a328199e", "indicator--055828e0-29c6-4d31-8485-97d7390ca774", "indicator--11683871-75dc-4dfe-9540-ab809e0eb86b", "indicator--a0d2e3cb-e062-4612-ae2c-d7b929d167a9", "indicator--9194d8a6-930c-48ff-950e-b691ab8ac5d8", "indicator--7d3c5bad-a286-4864-a94e-06cead7f20f7", "indicator--c45aecb5-07cc-4c8f-a50f-8a9e156ee85e", "indicator--04514721-d188-4a74-ac97-e4c95b19b1d8", "indicator--133d78e5-8502-482f-b54b-92a4804a019e", "indicator--3a949dff-e60d-49b3-8f38-6694ccbb4d74", "indicator--02e3480b-5755-42e7-9d23-238bcc20abc9", "indicator--103eb0bf-4555-48c6-8a3a-55bbd68ffd90", "indicator--95e4746c-0d97-4304-88dc-4dd89064dd8a", "indicator--22035b69-a87d-4d05-8dae-a472a03258e1", "indicator--02d7901a-8cc3-4705-83c9-61ed41aca55b", "indicator--f809276d-b010-49da-99c7-fc3bec9fb2ba", "indicator--6dc02f3f-b4f6-41f3-9c60-580b3ee476dc", "indicator--36992486-07a8-4b7d-8287-c8a4594160fb", "indicator--da267406-87be-43b8-84c6-f46fb9860a73", "indicator--7e56660c-1deb-41ab-8fd9-ffed81cd6081", "indicator--2a62e20a-a51c-4357-8f90-ac611b89d0b3", "relationship--4b9e4969-1d63-4ba3-a91e-9fbae2eff2cb", "relationship--05e986f5-0233-4fce-93c9-725b6cc38ab1", "relationship--239d730c-a90f-41cd-a5ab-ec51393013f8", "relationship--71973586-054c-475e-8687-fec7f50c463c", "relationship--9690e07c-2ecf-4e38-9d20-f7130b42e701", "relationship--dadc2f48-5c0b-4218-afc0-c6599a9f044f", "indicator--87641af7-8007-4ca8-9129-2cd0a0f77eda", "indicator--264eaa96-9b98-468a-8c70-e4231c0dc3d5", "indicator--26e15bb7-8fbc-47a5-becd-bdc4196e95b7", "indicator--10899300-9d34-469f-ba25-7a1b020576a5", "indicator--495ed0f1-622c-474c-a395-b6480e0bfd60", "indicator--ab903cdc-6f72-4a29-aa03-1c8103edd805", "indicator--9f7d6874-ce25-450a-81f7-806b07804121", "indicator--f04165c3-900e-4d5a-b023-c416e172581c", "indicator--823528f9-a070-4d32-9b19-acdc0a78abe3", "indicator--b4ca630c-40f6-4320-b8db-f193ebd4ec88", "indicator--915b9303-8795-4806-bdf1-c30b71e99fdc", "indicator--fa287359-bfbf-42c9-97e9-59451fac0735", "indicator--5a3e49ea-2b4e-4e7b-929a-941857ba901e", "indicator--70fdff92-6362-444a-9090-ce5350ec613c", "indicator--b43bc9f4-5aef-4b41-ac71-36db7682063e", "indicator--6422a64d-92db-4d98-8d72-fb2807336043", "indicator--c7c473e3-e0dc-4804-a6a8-64f6099e2437", "indicator--5155d973-57e9-44c6-94e7-d961261d1c86", "indicator--eace7585-4a48-4180-8720-83d99b52c29a", "indicator--60e1a009-31b7-4889-8ab9-08e9f24df085", "indicator--99468dee-c755-4b6f-990d-b283b9875115", "indicator--4fc62bc3-b3b9-4aed-b764-6762adefd42f", "indicator--6b0a830c-ece0-4799-bbc0-2ae605b23e75", "indicator--82dbdfa2-6996-42d0-bcc0-eddfb6a9def4", "indicator--41e48c69-d126-4a37-8b46-3371d6261149", "indicator--81327027-0cbe-4529-ac52-67dd3a94e5b5", "indicator--a25f57d4-8812-43a5-a54d-79fa93f3fbe7", "indicator--a2889368-29c3-485a-b51e-cd6a7b911de5", "indicator--2e38ec8e-4e68-44ba-9139-e6fd28737297", "indicator--fa40d39a-53db-4082-83c4-c8d3e959063a", "indicator--f30394bd-9deb-486b-a924-22eaa149e123", "indicator--6834bf66-e900-4ae0-8f3f-608e2c8a4fdd", "indicator--ab75ba37-a61e-472a-bbb0-2ad49f0cfe73", "indicator--503fb2ab-6df8-40e9-98fd-63b42326685b", "indicator--4d647a8b-a808-4aad-b540-f9f55fc09f01", "indicator--fbc93dc4-3712-4f4a-a7c1-f8cea1d2b55b", "indicator--857d726b-3510-4234-a2ab-e126269a8e12", "indicator--0e9921f3-29b6-4d0e-a76e-8843dcab9f3b", "indicator--8ff94284-2078-4349-b180-9511c1a6ffb8", "indicator--c3384370-194f-4923-96a1-eb0a602cdc22", "indicator--af10a367-8104-43fc-8f6f-6e96a453069c", "indicator--aa27c3be-5250-4332-941a-a0e07f088b5e", "indicator--ac00dc90-b01b-4a47-9fa6-3582ac3442ba", "indicator--4932e392-cdd3-494c-9686-8b42145a9249", "indicator--3d655739-4ec9-4aa4-bfbb-cc155515ba99", "indicator--2d85b594-03b1-4662-a258-f333d940c395", "indicator--faab9ccf-9931-4376-b2ea-37a6d6cf8a08", "indicator--9457ee97-5355-47d0-8b2a-ca23f37e85b8", "indicator--71a423f6-062a-4a54-bb01-b8fdb332923a", "indicator--3484ebb6-0021-4b59-9492-bf37883ed853", "indicator--6bc2cccb-a477-49b8-9a6a-27738c1e42ea", "indicator--dcb9b0de-7aa5-428f-9d9a-2b4b25a1ccaa", "indicator--5bdfd4c1-36ff-4731-b0fa-2a2340da84e4", "indicator--9e6e324a-96a7-4ce0-9dc9-e68435cd0d4d", "indicator--174fb6d3-2723-428f-afe3-04cc369c4b65", "indicator--a15fba99-1143-4352-874b-6fb651624e5d", "indicator--9636df54-a74f-4299-bf35-1f20ee0f4ac0", "indicator--e17e61bc-0c0a-4ff8-a319-6338983e8a1e", "indicator--1ba71f3c-3978-4136-ab8a-1f09432df0f8", "indicator--99948963-2887-4a70-bcf0-8945cc8c8b6c", "indicator--b582a6bb-ac29-445b-862a-183dd9a3eb57", "indicator--16ce0da7-4b4d-49a8-b1b0-ec80015313f9", "indicator--84fd8b5a-50f0-4ac1-8d03-ed685791c482", "indicator--98f0d703-726f-43b2-bf16-23784b914a0f", "indicator--bd928294-6685-4b11-a6e9-70dd7e03449c", "indicator--052a5128-e426-4588-8b13-da70722579b2", "indicator--96d4f28b-e8f4-4eb5-9056-969f325557f0", "indicator--33516fd8-ce85-4014-9ffa-6a7b746ad3d0", "indicator--1c8b3159-44cc-44f1-9f65-c9012e7c0f9c", "indicator--beba5f30-de7c-405d-a489-a44ade07f368", "indicator--9003ff96-f52a-4e55-bc9c-ba30f301a1f8", "indicator--bef9d59d-e6f6-49d1-b60c-569feb2858f0", "indicator--9fa7ee0f-d33f-44a8-b81d-a69470d76a91", "indicator--d89b697b-a156-4ba1-ad18-5d5300c79a8d", "indicator--44c89f04-90a7-4e0b-9177-6cb32d0cd017", "indicator--0335a7fc-1c32-41e3-ab30-221153eee4ec", "indicator--bbd4645f-1f9b-40b8-8705-0f91ef15766f", "indicator--c4901951-8220-4a66-80d3-4365a803b61f", "indicator--b5f89ef1-9c81-4bf8-ad13-9ebb81fb67c8", "indicator--f81b8178-de02-4872-a9cf-be9cae7ba697", "indicator--a6ae110b-d0b1-4f58-9ef4-b7b7fdd58ced", "indicator--74ffe2cf-30c3-49dd-b676-823f10a4f9f5", "indicator--3d8441fe-4e5d-4609-8767-82ccbedf8b1e", "indicator--b72e507e-bd65-4a2a-b4dd-f87a8317e81d", "indicator--0b23c62d-985e-442f-b6f2-6ef5bbbd09d4", "indicator--1369faef-62b3-4be5-85a3-8f234bcf5f9e", "indicator--6a87991f-794e-4642-bbaf-b7e4a225d032", "relationship--adfd4477-2cfd-4171-9942-ea1551e70aa6", "relationship--84747dad-f09b-4194-af94-8eff7169144b", "relationship--f338392f-f45f-4e7b-b048-c39302ad973b", "relationship--ce864b2f-a8ea-4ab1-9abb-b67280f35be0", "indicator--e0c4f30d-750a-484a-adfe-2a94eda8ebf9", "indicator--f33c377f-4e4f-489f-9812-0a2039722a0b", "indicator--5a055ed2-8245-403e-adad-5f52ab305a6a", "indicator--b3335b09-5143-4f74-815e-1385e686eef8", "indicator--ecccb582-a6f3-45f2-ae80-ddf986e44b24", "indicator--0c8c7c27-2c7b-430f-8657-b872978c013d", "indicator--2140f4bd-eb85-4a2f-b5e0-e62d013cf49f", "indicator--4d0963e7-c3bc-4139-a151-0c88711f62b1", "indicator--c937349c-2e4a-499c-bcaa-a7a5df475678", "indicator--a61523f0-8572-40f5-95ab-2565375e9223", "indicator--1ecd2a7e-1b3d-4dde-b549-0e8f33417230", "indicator--6fc3463b-f20e-41b5-8571-a42073f8a16f", "indicator--d49c3749-3853-481a-8ec1-10e772b8cc64", "indicator--5538e5df-d7f7-4a03-8fff-4d95b9236b22", "indicator--df048e99-39b6-440a-98b2-385af81ddd20", "indicator--e017c807-197c-4830-9b55-07a0b961db78", "indicator--5f4ff4e3-f131-4a86-a0fe-b2535dc04980", "indicator--fc32b103-f4aa-4829-8bcc-9d0481e90979", "indicator--90498f46-5355-402e-b66b-21eab28e8769", "indicator--48685047-90fc-4ecf-ac1f-4da9f2dd1760", "indicator--dd121fa3-5b2a-4e4e-a027-18277243963c", "indicator--5ab7e3ff-8c39-493e-bb14-3890534e203b", "indicator--79fd0a8a-b32c-4cc4-b825-0ce99c4d6f71", "indicator--7e791db8-b075-4cf7-bcfc-6a3f15f9c42c", "indicator--27f5af0f-5001-4008-9e0d-1a6386419c22", "indicator--195ccba8-65cc-4325-becb-a0e46fb0504e", "indicator--44dbea92-25d6-4f7c-8015-ac4a1618c77e", "indicator--d726ab67-d247-4494-b7f0-b175e554daa2", "indicator--f45dc868-f83e-4854-9cbd-66287c5ce7e0", "indicator--1a6ea402-58cb-439e-b0c0-a836cfcffa82", "indicator--05f84321-c8a4-494f-a583-ad10cf69904a", "indicator--266603c8-42f5-4e0f-ba88-07e575de37fe", "indicator--1f56fa8f-58dc-4946-94e6-a60e15b8f9a4", "indicator--a420ae10-21c5-4b75-a5a9-5e27e3d32845", "indicator--6a766c01-3e1f-4465-873e-d1effa11e424", "indicator--33f1e1f9-1aad-49bd-a5d8-0c7d2d9aad80", "indicator--a4b1ad87-2d17-4557-a790-9ff812901369", "indicator--501d91e4-1d44-4506-96d6-0f59483481f4", "indicator--36a8a6d9-cb27-41a5-af3f-03624e0d0062", "indicator--837735ad-bf08-462b-b505-9ad7e6328222", "indicator--5794ed00-e81a-43dd-a056-5be44ba78569", "indicator--7197b4f0-9486-4b5f-8bf0-0d3acfbac0f1", "indicator--3fb10882-7429-4e10-a942-bf9b99d6dd69", "indicator--73197c5a-a62a-47fc-8c6b-198ffb687062", "indicator--e63357e1-32c8-447f-a939-4aa0a1d0fd24", "indicator--2f54bff3-1c9a-4a2e-9bb1-f365984002fe", "indicator--8579a878-d657-4820-9602-8e14dec5be3d", "indicator--5c3aefef-3ea3-480f-b828-284038547b0e", "indicator--04e502ff-7440-416c-b686-daa1d5314277", "indicator--bdd7d746-4d01-48c7-a892-0ee8c4cbc901", "indicator--24bc0325-8718-4187-84f5-03d9c764cc68", "indicator--7a6ebf4d-970b-4c8d-ba41-01a1e9a7f75a", "indicator--1a9cc0a0-680c-4c46-b945-2738e5c32c58", "indicator--44577d10-238d-4c9c-a4dd-79d73ab52c6b", "indicator--178764ac-1b25-471f-a5d6-7e7765b5bdbe", "indicator--ed0363bc-f23e-4802-8adb-ccac19cea808", "indicator--5c1153f4-3527-4222-aa49-493c05ebb14d", "indicator--add12a24-8afe-4edc-81e2-ded13406a18f", "indicator--d58f2fb6-97cc-4cbb-b48e-7521e7f94670", "indicator--7f6f1976-0eca-4ff9-a0f3-18c86bc9c7ba", "indicator--0e5d2dc3-3850-429e-8b2f-5950d8b0f9da", "indicator--da7ada57-4700-49ec-90eb-dd8c6a33b234", "indicator--cc7e883a-029a-4d3d-9f1c-0034081d324d", "indicator--9bb2eb54-c008-447d-b628-c60880b65ba2", "indicator--79e95df5-3a81-420a-8abd-7eafb81b29c9", "indicator--4a360a00-ec0f-435f-b2bf-f0dc94dc7e4e", "indicator--f3b4584d-96b2-4ef4-8fd0-e312887fe07c", "indicator--2385e3d1-4236-4461-8172-ba714d716f9e", "indicator--552c9dcf-7ed1-4a95-8d74-cc187cc418ad", "indicator--a22bc00a-a8c3-4e5e-948d-6581a04c6945", "indicator--4a11a6c0-4fd6-4bc9-827d-6b8ea437eee1", "indicator--38a66343-bf49-47d5-b2ca-37bd3c070b93", "indicator--9b645cd2-0061-4c7b-9695-910f196a3a31", "indicator--17f6aeb1-0abc-40a6-a79c-b2a329345acc", "indicator--981246d1-407e-45bb-97c2-f7c03e7c0215", "indicator--f97fd375-6553-4e08-8ae7-38c14a35a63f", "indicator--7c67bd82-fce3-4dc6-8e9d-8f3305f2ea14", "indicator--943071fd-2d1a-46aa-800b-7f2b2e86f843", "indicator--8ad20431-d0eb-4afe-afed-f49e600d8b9e", "indicator--57e02c60-2ba6-45e1-bb46-7db07f28a075", "indicator--641d1f5d-ebb8-41ee-9222-a0eee474337e", "indicator--eba34d72-e211-4279-8b12-e5b1212423a3", "indicator--639e154f-1897-4ebc-969a-2115bb842869", "indicator--fd9b05ea-f55a-4e62-846c-7a9893bdc967", "indicator--889dd985-43f7-427a-b480-3c5a2d75e46d", "indicator--24870ae8-d598-460f-8010-9d795596abca", "indicator--1dafbd0b-f571-486a-8f03-3baf4911a8a6", "indicator--98f33a9c-7aed-4f3f-bb21-e6359617342a", "indicator--326037b4-11fb-4827-8bd3-c67662a3d788", "indicator--7ac1240b-fcec-47dd-86e6-85ae4a9fa877", "indicator--330ada46-1496-4ef2-a251-9f3b5e10c7f0", "indicator--7dfe2ec3-42d1-4762-912b-fc00b907c4c4", "indicator--d28fd6b2-6d8c-4cae-8877-cf38bcf90a58", "indicator--54b32c3f-7f9a-48bc-b76f-5fa4b1b15696", "indicator--b8561f8d-40db-4371-8cd4-2b4a15143535", "indicator--0315dd8b-5b96-49d6-bb5f-3a9a74ec2a34", "indicator--cfec6454-6e15-47ae-9072-67a8eeb5ca74", "indicator--a888748d-d8ce-401f-9010-8aebfa7ac27f", "indicator--89e13058-2471-484e-9090-c9a83ff7d078", "indicator--3bc431ff-86ac-450f-90d8-3c2ec5c7fc8f", "indicator--c3c5e00f-ce03-4db5-8a98-dad3221b038f", "indicator--352b114f-ba10-432e-90db-52e7cc84d1ec", "indicator--a3bdfd12-8218-4741-be83-6345467fea71", "indicator--bc2bf09c-d3da-466b-a4f5-e884744e0376", "indicator--06f5e52b-e58a-4086-8701-4dca96411ed4", "indicator--30fd3745-6970-4f8a-93a6-4d3430d30b60", "indicator--cfe50c48-c8ff-4ddc-b586-9d521ce94db9", "indicator--38f3cf43-0824-4fd7-9cac-5fc6310b2af7", "indicator--2644b97f-c21a-44a0-9f7c-de0fe28ab60f", "indicator--5c5c7d8c-ae1b-49c9-bfaa-6eb1051d956a", "indicator--cc672345-5d42-493a-a6e1-b02f82399d4f", "indicator--4def9808-ac96-4d84-9b72-a374cc43ac68", "indicator--90099f8a-9418-47c2-8e92-b2da71c6727f", "indicator--1f4fdcb1-b2c3-4f02-b831-ca62eac9b8a5", "indicator--2e68c4cd-c08a-4c38-9e89-1d792b8dc7b2", "indicator--29b8d1f6-8958-4b12-b201-b4f3a63793dc", "indicator--bb9ed80c-5f6e-4c26-993a-717af6699a8d", "indicator--86371877-14a0-4317-944d-2ba705759829", "indicator--15b28c02-008f-46d1-bcab-fb76561f1ee3", "indicator--75bb19ad-adfd-4b2e-ad22-dcaf3aa2a112", "indicator--e709d9f2-d012-4a17-bd90-3e050fbd65d1", "indicator--d38892d6-f304-42b3-90eb-3107190eed8f", "indicator--3efc23ab-ffce-4b38-a92c-f853db154439", "indicator--dcec0f78-4d53-41b9-801f-58b002440c58", "indicator--fd300dc9-9dfe-479f-962e-56bc6982c72e", "indicator--caf27b73-1642-46ef-b102-7b2b7b41c7fd", "indicator--9c8a916d-97c8-43b3-b3db-1dde78f3e89b", "indicator--8bb6685b-2117-431c-8d72-3d21db8f2785", "indicator--ada12bed-1566-4980-8b0b-b2175877e6c5", "indicator--4f267d87-20e3-4414-9b4c-402b64a0cc06", "indicator--83d6cf65-9f44-4423-8f00-07bd88cf4fd5", "indicator--6c0c2d7a-9e66-46be-92f7-9da34cb10fc0", "indicator--3177aa5d-1ee6-490e-b83d-08bb46b03b5b", "indicator--906ccf95-6ec5-4dec-880a-c460c8d4a242", "indicator--d8f8bf0f-ba24-46ba-aded-26a07ef71c5c", "indicator--99751c7a-1821-4411-9f0d-c1a9e7934e38", "indicator--dab80d45-1c41-4a8d-8b98-5a9c9eb54d92", "indicator--40068cfc-a02c-4534-b41e-f100df360390", "indicator--291edfa6-e219-471f-a42c-c001ef89a8ea", "indicator--43fc9844-043f-4183-947e-f37088017590", "indicator--0393319f-c395-44ea-aa98-756ad341f736", "indicator--1856b063-d557-4a73-8e4c-13585c7756a9", "indicator--59396f21-66bd-4b66-82fa-4c95964999ab", "indicator--f7038495-7d38-4b93-ab20-d5acb2248c28", "indicator--4082b4fd-f2f1-4a1b-8c3c-cd703414f6a6", "indicator--17569b33-64d1-4d98-b710-a5fb80a54bc9", "indicator--1794dcaa-4176-41c1-89af-90ac42e46cc4", "indicator--67e48852-82f6-490a-8599-dca9f329ad6d", "indicator--b50cf724-3917-45cf-85c4-50313cfa645e", "indicator--53790313-e154-494a-97bf-55b6661e8c94", "indicator--404a55e2-7abd-48b4-b648-e72323f61a8b", "indicator--65322cff-01fa-46aa-b721-1f053e72f1ef", "indicator--6a667535-b2d9-470c-bb2a-0f9d8d22b9fa", "indicator--9a211641-135b-4b78-ac49-4dec8e47453f", "indicator--3c31b247-e983-4f90-8d68-43168e01c652", "indicator--ff7bb23d-3e1e-46dd-a455-f452e1f681fe", "indicator--5c704d6a-e175-493b-baba-8a378dbcc1d9", "indicator--a3368da5-f0d2-4654-9797-560a4d8c5f60", "indicator--fa280628-edc4-4f90-96df-d001a2fc5d18", "indicator--fa82dbc0-29c4-4c5e-9429-c60a67c6b70b", "indicator--ea016070-1a3c-4bc0-92c3-7b75d35569d1", "indicator--a205d3fb-e6b6-4aeb-9358-81272e92574b", "indicator--ac20947f-f8d1-49e2-afa9-a808d86cf54d", "indicator--3ad55b9b-284b-4214-ad9f-01b8783b632e", "indicator--380ab746-630c-45f5-afad-80bf4f022131", "indicator--ceb4551a-0c76-4fad-852f-934c04d548cd", "indicator--5ca7cc92-9447-4201-9e84-1242633ac7f2", "indicator--9e529b25-71b3-4083-8e0b-54ca8a85a3b0", "indicator--9c834ee6-bd8e-424c-8f82-fa0810a4bacc", "indicator--931a7115-4449-40bf-86c0-f31a5c74b927", "indicator--93f46a6e-bff0-4abc-b225-84db241b8131", "indicator--4552ba7c-43be-4ed8-b4cb-3cff96274673", "indicator--da7352fe-da35-4293-8677-e4c802f54bb7", "indicator--aeeb5226-324a-4782-a5c2-b3465ef92821", "indicator--b7d1c09f-2074-4895-a046-f5364564b304", "indicator--a020adfb-660d-4b6e-87a2-752879285cd6", "indicator--776e9f5a-3087-4518-ac41-2d43e5956374", "indicator--e27c6dfe-0fc9-4e22-9179-9c0080606bb5", "indicator--f1062cdb-8960-4be0-ba9f-1347bdde43d2", "indicator--acb67645-bf7b-4c29-b473-ffcf3718b58c", "indicator--26e2fde6-0fd7-42e8-9dbb-ab7929eb88e2", "indicator--d7025456-db12-423a-8e4c-2ecc2b05f533", "indicator--f1ce66ed-3f6c-419f-b5c4-05b67159d9a1", "indicator--ade63e45-ecff-4217-9bd3-0869dc6a00a5", "indicator--518f233c-bb58-4699-855f-6a0f60484d2c", "indicator--4e3196f1-979e-4c58-9827-a6b17f14e2aa", "indicator--c33b8a33-47c7-4fc7-92f4-e74e7308dbff", "indicator--2c91f7fe-e831-442c-b1c8-efb16733b8d0", "indicator--56869f4a-6b3f-4944-b3ef-83e8f8662188", "indicator--d76b2f0d-9080-40f8-b27a-dd2b0e44248e", "indicator--6c78c840-f4dd-41db-b025-089f40802b11", "indicator--034aa563-4aec-4545-a06f-d5d0439c81fa", "indicator--721a30fd-6206-48fe-ab3c-7d234436f9a4", "indicator--e6e3b83b-1e8e-4696-8849-6df82732d1b4", "indicator--86f6d7c0-3c83-409e-90b6-27a9adecfef4", "indicator--fe88da26-65d2-4c49-af6b-9a654fe95c0b", "indicator--cc683c24-ea09-45f2-b641-884c0039d888", "indicator--3e2e5a40-9eff-4e3b-861e-cc548016af42", "indicator--107fda91-0944-477d-91ff-3d1d11e343b2", "indicator--163768dd-051c-40b4-81da-6d98f7383477", "indicator--79b1c639-42f5-4e9c-8d68-b7498a89cbcc", "indicator--7c1d47f2-41b4-4505-9f6f-142f41d9b200", "indicator--f39ca83c-853b-48bc-bf25-36b5e3b22733", "indicator--18ad0870-7ea4-49f7-8f50-82924f61afc9", "indicator--e6c79688-acbf-4b9f-b2ba-3604f9429e4f", "indicator--4dc61cb3-b861-4465-845d-1173244b25c2", "indicator--e07b393f-c043-4883-8472-d795cc86ef22", "indicator--b6e51bc2-1b24-469d-931f-35c09b0555d4", "indicator--3b8cca01-8225-4eaa-8bb5-6740819c9955", "indicator--ff089aea-083b-43d5-b4db-c335d10f63b8", "indicator--ae15f83a-c617-4838-976e-2534a6d0237b", "indicator--86af9769-d6c9-4453-999c-ff0d18888933", "indicator--f540d9b9-7ac7-45e8-9f09-6a4e0e1e56fe", "indicator--0b6fc1c6-7c66-4909-ab23-8f47ae25dba1", "indicator--c663f7a0-98ef-4e98-be61-b3aea9704607", "indicator--b9ad44d1-b7df-4bf4-bac6-34e6b77bf12b", "indicator--f19fe3bc-bcb4-4d9f-a8fc-734212046e9a", "indicator--eed31f4b-ba4f-4fa4-ab0a-6e96f1fa1c67", "indicator--6a1d7315-c8cb-457b-9768-b0b39096a625", "indicator--d671a70c-b923-404d-97c3-bfed0e8a980a", "indicator--f2a938b7-06b0-4c56-adcf-b10a5ccfb036", "indicator--2160acd6-6bf7-4d85-9719-ead98189e039", "indicator--523be2eb-7227-4f22-b3df-7f2f7f7beebc", "indicator--3e3811c2-badc-4f26-a36b-caf139ea842f", "indicator--f1e60124-d901-4a5d-818e-82ea387f3678", "indicator--48934287-48b1-4c4e-be04-ed9473abcd74", "indicator--d3e3f729-d9df-47d0-b80b-2de6ca2e969f", "indicator--504ba599-0ad2-4c38-bbc1-a91cbaabe6dc", "indicator--08d678ab-6161-415b-a525-31508285c658", "indicator--7a0321ee-98e4-4418-98aa-c9ffdb478651", "indicator--b4023f4e-beca-4ce6-986b-812adb0da60e", "indicator--fcb2e188-da53-4ea2-b3bf-2323f3b15747", "indicator--d85a3795-9d87-4b3d-9033-b6ef42e6c163", "indicator--7e84fe0a-3fca-42ac-9d55-e0eff1115831", "indicator--e08f784f-47d0-4884-b25e-a33a2c3e553b", "indicator--b214e205-a9f3-4a05-bf39-c2ae22ba2f0e", "indicator--af204326-944e-4d8f-b68b-03fe05bebcc5", "indicator--7be4fa9f-6738-4b8b-acf9-d3b80a9f13f0", "indicator--ca63930a-c507-4f8d-b680-3ced1f74ecb9", "indicator--3d65d7ae-5b19-48e3-9ce1-3edc653bb7ca", "indicator--baaf7e69-af5b-491f-975d-5f160a96f2b3", "indicator--868957c8-7826-4934-8e20-0ee1d9523943", "indicator--28293cd3-4541-4130-96a1-c757b5e5b1b2", "indicator--018e209e-b8a4-449e-a9fc-80c03844c9cc", "indicator--92f28c5c-eef6-42f4-a593-3e8c62f75295", "indicator--742a6c3e-b614-4541-9c69-a01370e79fd8", "indicator--0a8ad5a2-0097-48ed-84c4-3d50bfdea157", "indicator--8ae595ca-8740-461c-8ebb-ee91a4d73bdf", "indicator--7453b0c1-53ea-4aac-aa98-3596b43e4fb1", "indicator--34059bb2-7414-49f0-ab9e-c9d62d0f62c6", "indicator--7e8969fd-8288-4435-a9dd-1c2823a4c6cf", "indicator--41836ce8-b653-468d-a996-268dac9899dd", "indicator--1e95f242-2b75-4d52-a744-6f28135eb6d6", "indicator--6633bb1c-e49b-49b5-8332-0dea584c1469", "indicator--5b055b75-c973-45bf-8686-fb56df8dad3d", "indicator--d4083763-5645-493e-a224-c8aa4515b574", "indicator--d1649846-3a55-40b4-bf60-4100a966eca0", "indicator--daf75e75-b35e-47db-a0bf-4f1286358c2d", "indicator--231715f7-d2c4-406c-a4fb-ea67f633373f", "indicator--70dff808-1055-45bb-9752-7be2c28d36e7", "indicator--5c75c18f-d7a3-4484-8f78-ed3793dcf995", "indicator--68e6e436-e6c9-4971-b757-141b3860271b", "indicator--e8acff8e-f2e8-4768-b4e8-bb50fee571e1", "indicator--5769c524-025c-41c8-a64e-eaf1236f4b23", "indicator--170fe939-e792-429e-99cc-652e48862cbf", "indicator--38cd00bc-a057-415e-bc6a-e85f437dd0ea", "indicator--280cc643-d102-455b-bf6b-b330dc35844d", "indicator--abf3afe6-43b3-467b-b8c7-cabe1506392b", "indicator--f29bd187-ab96-4411-abb9-b90c458b6368", "indicator--79dd10d1-cba1-450c-8ee1-f558785e3ab2", "indicator--979409d3-d209-42d3-a5d8-2dec81c7ba72", "indicator--5d407806-f894-43e0-a9b0-cbfe41578268", "indicator--853fe346-3c1f-4710-bf71-252a2ded621f", "indicator--250e5c0a-f479-4899-b55c-23ce17251603", "indicator--7e264e64-8585-4f59-9f6b-661ed3d77a8f", "indicator--08fa3866-d5cd-4d2c-a52b-0a1ce264dc46", "indicator--cce8484d-d4ea-4736-a7dd-52fc4fcaa958", "indicator--a3724219-27d1-4acb-8e3c-d6b31d3ccfa8", "indicator--996c217e-b000-4f18-88d9-b03f4f201bed", "indicator--13d18959-c2d7-4ea0-bbff-261b02137258", "indicator--6906bf3d-09c5-4dd3-8a7f-7a7ad192f0d6", "indicator--e0de438a-c965-4bdd-a1a4-6b7a216af85c", "indicator--f898739b-e846-47ee-9e47-8ee20b3ad4ea", "indicator--897093bb-76ed-4895-b7f1-5b4a7aee730a", "indicator--6918de85-866b-46b7-9243-a88b04a20423", "indicator--6cc1e80d-a827-4a9f-a046-2a8ddb9c2473", "indicator--ecc022bd-1a51-41db-a443-468384b725ee", "indicator--d450a345-7dd3-4431-8826-63354aad94e8", "indicator--8c04358a-9e9b-4a78-aed1-3a763c9e9988", "indicator--2f174d83-bf82-460b-9418-9dc339ac869e", "indicator--92a91ef5-8ddc-4ba1-9750-2c30e02f33ed", "indicator--54b7215e-f74f-4a27-9276-97b41a76ed97", "indicator--b1e912aa-0b29-414a-8120-b8a40c23328a", "indicator--fd2d723d-dfbf-410f-aaef-3d1eae2d6a31", "indicator--c43a214f-23d1-4842-bf44-886eb5b11aa3", "indicator--f48ead07-fb21-46d6-ab4a-ee45f1b08da3", "indicator--9038629a-a06a-48fa-8bc6-dce5ad048af0", "indicator--83a70f45-0a34-44dc-af9d-92f9a959cfda", "indicator--d9051ed3-853a-480f-9870-a8a58516cfea", "indicator--5ab7218d-1458-4e76-b244-889ab539e215", "indicator--439f7fc5-b7eb-4a7d-b7f5-ca3bf86d4bc5", "indicator--bac2a54a-cc76-4e79-b1b0-fd6f6e1ec98a", "indicator--df19ccac-6b42-4f64-b85e-dd7bde3dcd07", "indicator--b8f2c1bf-1eb7-48a9-8fe7-1bc576d6158d", "indicator--d3ae078f-1faf-4165-98f8-40293045018d", "indicator--2ac66381-066e-4158-8b77-34520c616710", "indicator--895bc284-77da-463c-935a-3604d0b8242b", "indicator--50583266-8575-4e8f-b5a0-d9734aa19665", "indicator--6f56432e-2b07-48a8-9a5c-ba91dee76179", "indicator--780b0210-b319-4efa-8b3c-1f2a5f6b186d", "indicator--88c037fd-89df-4858-9287-9dcc839bbb39", "indicator--9353c25b-f254-4c63-a541-2d39a06acc6b", "indicator--f60d0913-94dd-4aa1-9b31-c3f7efc85cd3", "indicator--93bdd1e9-f19f-4e89-9605-970181a26299", "indicator--6dd1f037-26c4-419c-8f5a-222079a8d0a2", "indicator--2c40b90a-cc99-4576-8c2f-d7bd04118e3c", "indicator--4356ae5d-b944-47ba-9cdf-6e0a99d8ff43", "indicator--86cdb19b-4156-48dc-98a1-1608870f0ca5", "indicator--ea3ba893-7001-4984-9f7f-efc82f9bc209", "indicator--7343ab40-dee2-4485-bff3-0700b29183fd", "indicator--cedb5185-b517-4bed-9046-71e7c61c96b3", "indicator--76f81a3d-ef79-4e24-91ac-c56cb3de7c59", "indicator--780414b3-9c29-4a12-89c1-85140ac2d417", "indicator--880b87da-715b-4b82-b5c1-c950b24d6202", "indicator--d8bedba8-c1f5-4f1b-86f3-1f94bb892e23", "indicator--4049543b-2621-46d8-b928-e17e5691a3f5", "indicator--fe4b4b0b-2173-4184-9cac-41718affa238", "indicator--281ad78f-b241-4903-81c3-3c91db59e58f", "indicator--97182802-8e4d-41b8-a7a2-af4cdaff782d", "indicator--6bf64050-84e5-4562-a22a-7e301863d259", "indicator--88f849e1-7ea8-4da6-ae97-c5c308bd4a75", "indicator--f7801909-6467-47ff-b5de-d6d3ed6c227e", "indicator--9618c4cf-28de-4623-a8da-042e1bd032f9", "indicator--5b1c143c-f0aa-4634-b38d-a0693d352846", "relationship--76d97849-1de6-4960-aee9-6811e1a45924", "relationship--49d77890-313c-457e-a337-e99f0f32a7c6", "relationship--e77ac3eb-633f-4aed-a144-a6b265c8aacd", "relationship--fff16bce-4213-4b2b-b1a2-2b8a2969eb78", "relationship--0571a572-db75-47fb-917f-b1e29b380ebb", "relationship--e5647d9d-912e-4236-8f78-febaf0c7f800", "indicator--1c52c7e6-b725-410c-8d55-a4091c49ccc1", "indicator--ed59b450-57c4-427e-b3ec-2539bb99b477", "indicator--38028dd7-8f4b-4c95-93da-9c22ab888006", "indicator--200fee4a-c802-402b-8d10-2729b571973c", "indicator--7423caa6-ed10-40c6-8756-28f808ff257c", "indicator--5da310a5-1ae5-47d3-9b58-96e285b21b7b", "indicator--b0c33940-d80f-4000-9245-435b62bcd1b0", "indicator--90634457-0a99-4c09-aeee-ec22c7109daa", "indicator--45f2129e-1256-457e-a674-5d5b5b4273ad", "indicator--cc20a39a-6f34-4641-92cd-945c7be5490b", "indicator--eef8ae1c-7332-4a02-ae1e-b29f5a2c3fde", "indicator--152b1c6a-2a34-4764-a062-889a6c21bd06", "indicator--acfe23b6-9620-499c-8b7a-e1d154293efd", "indicator--f299afaa-c0ee-49b7-8a2d-cd54494d231d", "indicator--9a377cf1-76db-45d5-81da-5e6e81a50e7e", "indicator--b6d2d419-bc55-47b9-bf46-17afd07e8b26", "indicator--1720c397-979d-45d5-8c85-299b3a0f865c", "indicator--d7cf85aa-7b81-4c2e-80dc-882eeb6d4b63", "indicator--b246d4f2-1328-4496-885f-633994999e80", "indicator--a116ee84-45c3-4a1a-876d-23dfbe4b1270", "indicator--65db650e-26d5-4f57-a27a-364559821402", "indicator--1c3075b0-b398-415d-a8ca-6531249280ce", "indicator--e83b83cc-ca54-41d1-9f6f-15ccdee828dc", "indicator--deb8a4c4-5887-4629-b424-6aefb3cf191b", "indicator--914d88f9-0475-4318-85fb-c83c55a7e3f1", "indicator--e75ee492-41d6-4372-913e-a318b1bf2c62", "indicator--2b26d16b-7ca7-419a-aee7-8ce7aebcdb43", "indicator--7c912a48-3475-4250-96fc-aab9d86cf879", "indicator--0f8eb60b-c07f-409c-8a43-3f83fcd2d65e", "indicator--7610c222-9036-4a76-8c05-9c9880577f4b", "indicator--f08b69f2-498b-4754-b804-791243e0092d", "indicator--438ff447-8c7d-432a-898c-edf99d5d9ac0", "indicator--fe916cd5-1250-4cf2-bdb3-204b90bb9ebe", "indicator--b9da79e7-ae30-49d4-aad3-f2610af560b6", "indicator--70b9fcf5-68ee-4396-b8d6-15eb72bf912b", "indicator--bb4dca8a-9a1e-46ba-a560-afca6afcb039", "indicator--38c98110-38fe-4674-83e8-01e5c122b1e4", "indicator--9f7344a0-46f3-4766-a0f2-35035dff6c70", "indicator--10bcee9f-f4f8-49e8-a5d9-30c0b261dccb", "indicator--43dc5a57-5f69-43b4-bf2a-2d70f24c07f1", "indicator--47d9b49a-21de-4fb8-84c1-898d626ad5d0", "indicator--f1e464c3-3f3c-41e7-9952-2cea1e4062b7", "indicator--80332119-d367-4c4f-a4d4-bce928f0dde9", "indicator--296f5030-b5fa-4c6c-80ca-5e3a5d0f0aa6", "indicator--90631a90-1d85-4791-99bc-db3af9a3ffd2", "indicator--30e10874-a2d6-45b4-8e5a-54a84d30bfc8", "indicator--84c60371-dd37-4b79-9f92-368c46adb609", "indicator--2eaadc8e-43c7-41f3-ba27-1f8716d875ad", "indicator--a0de1a71-e748-4dd9-856d-b257b6a04f11", "indicator--9abee19f-1718-4fc7-8a97-2fa968d1045b", "indicator--649ce841-78ba-4a28-b21e-0a8b444878b9", "indicator--f727cd05-026f-4cb0-9168-bd170178d3f5", "indicator--48b34759-5415-44c5-a98a-57545dcaa5b4", "indicator--7b65fb7b-75ad-44c1-9a7f-50ee7bbbac0f", "indicator--3c9c8e79-8732-4d88-8c98-a312415c9d32", "indicator--16cd32bb-463b-42b6-a814-362bfb0dff6b", "indicator--131b24b2-d339-4076-9bb8-fbae612a8f54", "indicator--5561b9a1-d607-419d-929d-389add84ed30", "indicator--dc97348e-df12-439b-a6d4-049cc36bf478", "indicator--0d3e1742-beac-4219-ad95-8d1d27119ee8", "indicator--c9c4a248-fa23-438d-bef9-77a746d4c2dd", "indicator--f423b94c-4696-4545-b42a-5efa497960e2", "indicator--99e55484-43b1-4040-b524-42b919f17327", "indicator--bcb5b388-58c6-4d84-9dfa-b6b68cb2b003", "indicator--9ff14568-117c-4616-9fe9-2aa47886ae63", "indicator--46aaea64-efa1-4d61-8c74-3bdd9f98e664", "indicator--f58a6a9e-a2a1-481f-b696-7489ae9fb8d2", "indicator--7c5c9202-7819-4936-a58d-b675cc6338af", "indicator--9c0c2146-690f-4420-9383-d2802922ee04", "indicator--15c6540d-fbe4-40fb-a712-1143ae2188a9", "indicator--e99a3bd8-d3b8-435a-8516-9dd8595e741b", "indicator--212087b9-0cde-485a-907f-d121a824da32", "indicator--bc20c342-e284-4c2b-bdaf-e58f35570ca6", "indicator--68613353-be8b-4ed9-8260-2faf3f8063f5", "indicator--177da7f1-d40f-4324-b0c1-8f664ced7716", "indicator--d928618a-eacf-49ed-b49e-90346161bbec", "indicator--007a2582-45d8-4f1d-ac7e-1077a6b29052", "indicator--a9d94a06-b6c7-4d57-b572-55464eb30867", "indicator--59539cd1-079a-4d9b-bb49-4501eda5616b", "indicator--63ea95dc-a805-43eb-938f-647f5b2073cf", "indicator--e654b1c8-b8a2-42c7-8ad9-55b241aff54e", "indicator--3c097a4f-1d71-401a-9ee3-f12f296ff264", "indicator--1398c5d5-83b9-4205-bda2-313e39973892", "indicator--89c583c5-6b0b-4036-b451-0051ef40d63e", "indicator--761bdba1-ef08-436f-9a38-b3b9804dd5c8", "indicator--206658d2-30dd-4f10-9cfd-0b144adf6567", "indicator--8a480b49-4f9f-4a32-9e3c-c6d9d8528bb3", "indicator--e73f558b-cc4e-4460-a0b7-4e845f78ecf3", "indicator--8053e8db-3aa0-4b71-9358-0f42ee652a3e", "indicator--a2d0fa8b-48b0-414e-9f53-a25d1220db88", "indicator--704d93aa-d6b0-4817-888e-0dffb4e58b96", "indicator--49e3a82b-9342-4629-9255-0156dbd2bece", "indicator--bad49aef-d522-4637-8a27-d621aec6971f", "indicator--da6f23f0-32cd-49e6-8709-7e690fcc2d01", "indicator--6d8da886-6fc1-404b-a05a-c030513e97f1", "indicator--960f29b6-6011-4eae-9284-3b883b7cbad1", "indicator--13e87cc3-6117-4634-9f4d-94a909204911", "indicator--0a0e9462-9cb8-415d-aa33-3450728da131", "indicator--410ad01a-f21b-4b0d-ac26-8b3a9e8a6a83", "indicator--0a263876-52ad-4731-8a75-66caeecac389", "indicator--74f1eabb-7a41-4451-948f-80954a4e88b7", "indicator--b7e8f362-8ce4-4a05-827b-d8fa6145b61a", "indicator--cee5f33f-cfa6-4b93-9d88-f14a836ea808", "indicator--d7101251-273a-4362-b1ca-844b341fd75f", "indicator--e461003b-691f-48f9-9b6b-b6e9ccae9319", "indicator--3b1f0faa-cf8f-4a06-ad7a-dcbc27edf9de", "indicator--d0a999a7-91da-4c54-a39a-28041a9119a2", "indicator--7d99d409-98c0-46e5-a738-522d770a15f2", "indicator--6e354541-b575-48f9-97d1-afc79c02c085", "indicator--e823d18b-9c3e-4872-a060-6f2130f5759c", "indicator--825ad83f-2a05-4814-b01a-2c7bef116d99", "indicator--5f303514-1211-46f7-8abb-1cc5dbb57bc7", "indicator--3862fa67-2466-4aff-a0b5-0a52d4b7311b", "indicator--6ececd4f-f04e-4998-98df-2af495365923", "indicator--f4b7cd13-1cb9-4781-9fdc-92ae81752e55", "indicator--c489ae21-1387-47eb-885a-7909102ceeaa", "indicator--157697d5-4745-414a-a2f1-0adc0f12f48c", "indicator--ac514bb2-c4e0-45a8-b0f5-05518ad3bd98", "indicator--c605d7c3-8a58-47d8-9964-c49a8ac88e16", "indicator--83a745ef-5458-46e3-9223-14150f95088f", "indicator--9ae168fe-9f63-465e-b7e9-9bd9a543e4da", "indicator--63c5fd68-f34a-44b3-8cbe-6b44c2e61b91", "indicator--706396b9-c0d9-43d5-b2fd-a65f0bf53bd4", "indicator--b601f244-13ae-491c-86da-b98a908da680", "indicator--2f0fe92d-a917-461a-bd59-4ea82565aa94", "indicator--292612fd-3728-458f-a9a7-47ccfd4dcb89", "indicator--c0f41a97-2531-4d62-85bb-dab99cc0e457", "indicator--4b9d8549-8f43-4fed-9848-3b5c2000651c", "indicator--4b3636f2-16f3-47f3-9586-48ef28c567f5", "indicator--13295295-5470-4c56-b5e4-e6bce68dc8fb", "indicator--699c233f-de2c-4853-9999-3e5fb453d706", "indicator--5894b60b-5cf2-4f6a-b8aa-8bbeadf86e30", "indicator--5be246c1-3fe3-4649-a336-20a713dfae1e", "indicator--3e0619c7-c433-4281-be4c-2db9d0c625fc", "indicator--35bb891e-1e6e-474d-b71b-02bed0b1f759", "indicator--ad9aadfb-d85f-4fbe-b726-e61532a0c178", "indicator--8d92e4fa-c3cb-45be-b79c-042b95604af5", "indicator--e90fc492-0d39-4573-a817-73121a3fa1fe", "indicator--3bfde503-61e1-4936-b990-c1198b74db0e", "indicator--8c324463-3434-4198-915f-41b134c6bdd1", "indicator--4c2fff00-616a-435c-9ef2-06695d1a67cd", "indicator--e17e9986-70bc-4b53-bfa2-c8c21b24d79b", "indicator--59d04db5-c2ba-4ad2-aac1-17605d8db9b4", "indicator--cde5029d-7576-4b96-b378-42c0edd5f5b9", "indicator--1f33562f-ac4c-424c-854d-4ba9c8a0e383", "indicator--1236ce0a-b2f6-4b9b-877e-3c13072b818a", "indicator--5c027b37-5a60-4507-b4fc-afd93dd07e3b", "indicator--6c89eb67-77bf-4edf-a180-90c7505a3f82", "indicator--b0ba0665-cebc-44b4-8bcd-f43eec8406d0", "indicator--d6120a8c-c9f7-4ee2-84d5-17de9f346ee3", "indicator--4d9ad93b-8011-44a2-be93-c7ce5b7b0ce2", "indicator--9282c249-006b-40d5-b9e4-0c650a74b9ae", "indicator--6e0cac78-38a2-45dd-86be-df70393ebcc5", "indicator--250218f1-8b6e-45cd-8e6f-deee7f3f1e94", "indicator--1c9e4ec0-30f5-42bb-b975-864119e7c856", "indicator--5788a31a-e65d-49be-af76-15acf6e1a879", "indicator--f351efa3-8863-4357-a1d7-56d1344268f2", "indicator--f5eb5817-38ab-44f3-ac2a-7f4f236cb23a", "indicator--c469f8de-e4a2-4b64-ab83-50a9226c5302", "indicator--96b2e721-dbaf-4f15-b989-6aef135ba18c", "indicator--f85f767f-a1d6-4322-b569-d535849b8056", "indicator--22f4689b-9d2b-43b0-b112-c7fdd6a98d77", "indicator--e86920b5-7029-4d19-bdfd-a4436c266e7f", "indicator--9d31def7-9670-43cf-8f21-a0801dc7b678", "indicator--7f039b10-368e-4a9b-9c36-5207a2fb91ac", "indicator--96b8bf45-d8ca-4f4f-9c5f-b00223fe9161", "indicator--d8152e6f-e7f0-425f-ba88-5bef690aab2e", "indicator--448eec92-928a-41a2-88de-4b12c31e2d5b", "indicator--ff36a502-d455-4171-9356-9698b7d5e50f", "indicator--e82c902d-1420-4b9e-80c1-5b31b7a2ba5d", "indicator--a6e8904f-9011-4535-a347-6887901c6c01", "indicator--f95f5f30-4420-4ebd-ab4a-a6c7ddce2c81", "indicator--04890475-88ae-4a2e-b66e-bcb06bad93bc", "indicator--99792a5b-383c-48d0-9bd9-4b286d09a4a2", "indicator--54c9a1d0-6139-4497-ae1f-37f0a334db05", "indicator--86c58a52-7e43-4a25-a46a-b62c1ea452df", "indicator--f55fcfc5-edae-445d-8a65-80fee67aa040", "indicator--2aca8857-c689-41af-bc5d-79c71a03c55e", "indicator--9a801c1d-1495-4f8f-aeef-c5999c56e95a", "indicator--9e9228a3-6bb0-47f8-9b74-8cb4366fc290", "indicator--78571af5-7d80-4c03-8a0b-35f62efa47c6", "indicator--acb0e58d-d933-48c1-be54-ee6fdf1bd85a", "indicator--c450d376-61dd-4ae3-8a2c-1229d4230c78", "indicator--74e62b9f-7ab5-4c2a-9652-c0f11e4a82a6", "indicator--eaffdb03-ac8e-4350-b3a2-ed0d61978ec2", "indicator--374bf25a-0dae-4e12-a314-1d2036066586", "indicator--e69673ed-c893-4706-bc0e-2aab8c5bb2aa", "indicator--14db0953-24ea-4c2a-8048-1a49f1c3ff5c", "indicator--5336e6cc-f4a8-430f-ba76-0227fb8ab836", "indicator--5ed4bc35-4748-4421-95e2-767cb375f1df", "indicator--d8608c79-298d-4618-968b-0de1873add53", "indicator--cae3ebee-a6a4-4d1d-a13f-2919b9706d3f", "indicator--a8c607a7-a46d-4822-834d-5b5793dd765f", "indicator--9b8036b1-c9cf-4d19-888a-b2a07652017a", "indicator--aac23fd0-9277-44ad-92d8-7a8cedcb2f8f", "indicator--160e3d09-8c2b-4764-8bfb-187782732eae", "indicator--6ca94ea6-f55b-420e-82e8-bf72fd7be3c4", "indicator--ba137d8e-81e1-47a5-8130-e0cd19d511ee", "indicator--4b9afd71-7cfd-4d82-8a5e-a40dee15dd1c", "indicator--7b8ec159-b724-409d-a055-7ca6108889c0", "indicator--d319f195-1a65-40b9-859b-89927243231e", "indicator--96fa14fd-e429-4585-af59-e746bc63c136", "indicator--72d93020-8b91-4259-96d0-798c6351f7ea", "indicator--51a9b7f8-816f-4eab-9ea7-a70bc30a68aa", "indicator--5d830a3f-7233-4ad2-b8d3-664afe468116", "indicator--cba68437-f9c9-463a-86cc-81167eee61c0", "indicator--00f60bd4-5474-4d0a-87ce-253e385330bc", "indicator--184f6ef2-0e7d-4ebd-9715-fd39c1871335", "indicator--03442d48-4517-4617-b16d-c9b870b184a2", "indicator--9068a01e-5dee-43d4-ab18-d8eabb7acfc6", "indicator--20ba726d-7233-4c97-b566-b4f4308cd9a9", "indicator--6fb4615a-a67c-493c-989e-8610ba94021a", "indicator--7e84b3c1-e68d-4206-8d0b-8eb2c823571c", "indicator--f8ca1699-fd46-4131-aa9b-147833061fcf", "indicator--ec2bf24b-1d27-4ec2-aa2c-4122c7ca09fc", "indicator--18afdb08-5086-401e-9b55-c0a5a31aff38", "indicator--8acc62a6-77f5-49a8-92a0-96fd95d97ff1", "indicator--51fe05ee-7768-428b-ac92-8522f74b2bb2", "indicator--47fc4eed-4add-473e-bef1-674b90e56140", "indicator--7dd33e1f-0375-40ff-a870-31b8fc89f647", "indicator--f2ca086d-b60c-4ae7-8269-3ee8a2f0b8cb", "indicator--66b170b6-9c22-40a3-b7c1-f4c0857f765d", "indicator--0f50124c-88c8-46b2-a6cc-5677495e57c1", "indicator--10851658-344a-4cf9-899b-feed924bf194", "indicator--f52f54d8-fdae-4201-a959-804909c97295", "indicator--27a10d39-fca0-4e17-9037-58df45ed574b", "indicator--9f334efb-ab1d-4515-9491-ad44511d7fa3", "indicator--6e0b3df1-80f1-46d2-8647-67efc6cab33c", "indicator--3df45467-0969-49ee-aa17-7cb2f4afa797", "indicator--d22eee4a-f35f-4d34-82f8-e88f9812840b", "indicator--525e0145-a167-4978-86c0-5ea87e89b098", "indicator--cbf3cfa0-1544-4453-9624-a2721c10f8d7", "indicator--7360bc5f-796f-4140-a1b1-69bd63bea5f7", "indicator--b1d81534-dea1-4d04-9713-298030734862", "indicator--bc03bd0a-51ac-4e37-b187-5a377b6956a3", "indicator--4bdfa603-eaad-445b-979d-05c933adf65b", "indicator--df562efc-5317-4ddf-9170-bac992f3f302", "indicator--66e34ca8-3c0b-4164-ba48-fc5d4421c54d", "indicator--334b91ff-6337-4b93-95ac-2ed16f72659f", "indicator--6848ee5c-1110-46c7-8227-6903e31f63bb", "indicator--750747ef-bedd-4ceb-a3bc-76b526ded91a", "indicator--d461ad17-e969-4b29-a39a-0890aa29ff3d", "indicator--b3c86559-eca4-4da5-a23d-358910ccce6a", "indicator--988911f9-d1d9-4a97-a773-1e4ab61f072b", "indicator--243b0e15-9dfe-4ef5-8037-b0f5674e711c", "indicator--83b028ff-e19f-495f-a2c2-7567ccfd7cbb", "indicator--83ed5185-7152-42ec-9bca-3e1a18e01d3e", "indicator--8b1e83a1-29a6-4ef5-9dc6-03daff5cb6bc", "indicator--ba618bed-4974-447d-a1d5-0f0fd6b785a2", "indicator--a7240931-d2e7-45a8-b950-27dd1a2e0526", "indicator--27319b6c-579f-4f26-91b0-157d84e065d1", "indicator--c68b3f0f-3e7a-4e9b-bfc0-4ebd42e3abff", "indicator--d1b69fea-b5a0-4378-a8a5-57f4dba83250", "indicator--df36396f-dd54-42de-a8a9-d7c527cd27d6", "indicator--120cdc89-056f-4c9d-9b5a-d365bc971d01", "indicator--8fe3cc65-d981-4b40-8f58-ee299112dfe8", "indicator--1204d631-2be7-41c6-a816-a7dd9a9ac3fb", "indicator--e45f06dc-78e9-4946-ada8-94c6d9518f1b", "indicator--f0e7031f-7413-4fea-bdaf-3eccce4cda47", "indicator--8f76435f-9796-4b07-a6f7-3f75a42f2f2c", "indicator--e69a9236-94c7-4ea0-b90a-214bdf86967c", "indicator--ad7f2230-ab94-4457-b0eb-d71863bf6279", "indicator--1a4e28be-9e60-40b6-8054-e116c273437e", "indicator--1bc9f581-4a12-410e-a04b-3573ac403fdf", "indicator--ac7366ef-838a-40d1-9bdd-dfad4a5a46ca", "indicator--74077866-0a2f-4a6e-bf1b-5f43f66cec2d", "indicator--ac74a406-306d-43f9-b9c8-52b81a77830a", "indicator--f1477640-7c02-467a-973e-54e047418847", "indicator--df8bc42e-2d4d-4a91-85a8-fd42dc772b77", "indicator--f826e2b0-68bb-43a4-97b8-574be79889ec", "indicator--0d8412dc-7729-4912-9f01-516ac6cbeac1", "indicator--57c352fc-f29a-47cf-819d-976fa45b2786", "indicator--6802fc5b-71d6-4f2f-98b0-4c908fa755ec", "indicator--e6aa15f6-2a48-43e9-9ebc-d053426a752b", "indicator--57a5e175-dc18-40e6-bee9-85a43ab31bf3", "indicator--beba46c2-f8ad-4594-8471-9bf2396cafc9", "indicator--f34ee09c-a364-4b77-8160-87549bd8ff06", "indicator--5975ddd6-1a40-4f8c-a0b1-4fdf683e4e7c", "indicator--8f290e84-b168-4094-985f-4719f324357a", "indicator--1891ba1c-6553-4389-8047-642ac4b0e3c1", "indicator--a57ef41b-9bf1-48aa-a4a8-d0c501c856b0", "indicator--fe2eca2d-e419-484b-8223-e904d4406baa", "indicator--d34b2e55-4bb0-443f-ad6a-0ac7ce06b9a6", "indicator--c9963d2d-a223-4812-af2f-626e83f73768", "indicator--98c2b0c8-6c82-4b21-a254-2c178731374b", "indicator--1a57c266-c5ea-4940-a7ec-544665a40e65", "indicator--15c93064-4ef0-4732-ae12-74a547fc1d89", "indicator--e38ddbeb-b29d-40f7-98bc-a9ec38ca7599", "indicator--9a8ad20f-ae46-49b8-b042-29e3911d4bc2", "indicator--a56d5f2d-eb88-4031-b668-94a73c4bc8ec", "indicator--f84d5c47-84ee-45bf-ac90-90520f48e186", "indicator--616f4f2a-2268-494e-9c10-3638694bf0ab", "indicator--f5b14422-cd37-422f-ae2c-437aa7ff3553", "indicator--01216005-b365-45e1-9c71-963bcdab6a6d", "indicator--62605fb8-6b0e-475a-8dba-739e9b2010d1", "indicator--5d97ab18-6df0-441a-9ca9-90ffff9e8a1a", "indicator--8db327bb-f087-448d-8e39-10bc5c4ad267", "indicator--5cc2cda1-3778-45c6-990a-0dea1f80915e", "indicator--331d8bc5-d010-4c2b-9882-1126989185f0", "indicator--729d51cd-b69e-4ff1-89b1-159baa784143", "indicator--8fa39cb9-19b6-4ad1-816d-314bb5a6b232", "indicator--01179bc1-685d-4d15-b7d3-81fbdc784a1f", "indicator--9e342bfa-2739-437b-b14a-f65aec4b625f", "indicator--bddd5b1b-5b0c-4c81-861b-cf15efb70d9e", "indicator--11bc5ffa-5d6d-4461-b40f-05e89ebede5e", "indicator--b6762187-80ea-4d69-b70f-b1559ed086b7", "indicator--0785c885-b20e-48f0-9d58-d9124de9b00e", "indicator--1f339e40-0722-4f50-8f6e-f9a931dfcf26", "indicator--c3583df4-4cb6-4399-b049-d41c02eedb8d", "indicator--567cd0a2-e307-4e9a-b26d-49f172a7d515", "indicator--c172c417-9ed6-45e3-944f-7777943143aa", "indicator--6fdc520b-49af-4caf-ae7d-d8a345f497cd", "indicator--a48cc294-3ac3-4ce9-9ca6-cccbadb5eb35", "indicator--2b0dfec3-8d77-47a8-81a7-9d492b03cb6a", "indicator--098fd7cd-76d3-4041-932d-07769aa303c1", "indicator--591c8070-33bb-452d-a10a-65a85ddb26ef", "indicator--c5d49d6a-de74-4bcb-80d9-aa33fbef07ce", "indicator--d05e82cc-204e-4526-b804-bb3b47e096f6", "indicator--064c7d0f-4b61-422f-bbca-f9a0eb26fb52", "indicator--30b93098-58f6-4cf5-9b28-fce364a664cf", "indicator--7f6bf525-817f-46ee-8091-16fc5cee7e21", "indicator--c1ecb735-50b6-403f-8a46-7ad7c3086e60", "indicator--3b9ff01d-97ba-4290-896f-d148fcc4d2c6", "indicator--783add8d-e3d2-43c2-a1d3-c5e8d57667c9", "indicator--275e59f1-5de6-463b-bb22-5656b1ab923b", "indicator--53c656f1-6c54-4fa4-8304-28e04ef21340", "indicator--ea50d2ba-2ce0-40a5-9a91-4a7015fd46a1", "indicator--6c9eb70f-ca27-40c6-8578-bf2057a42f47", "indicator--b3442e26-d8dc-4d1d-8681-ffcf03697c7f", "indicator--2543e3e3-3d97-4dee-ab58-7dd3ae026bbe", "indicator--02d1efe3-4024-44a9-9236-4ddfe3a8766a", "indicator--89d7cbf0-bc27-4874-873e-5ac8bc28e0a9", "indicator--ac652ac4-76c9-4002-bf84-1d0c1e2d7e56", "indicator--bcb552b2-4970-4e76-b66c-28578ce8610e", "indicator--9993d601-69e1-4a2e-91d9-6d078ce6bbd9", "indicator--fefbc329-9b2c-4ecb-98f7-9279609c7fa8", "indicator--b290af94-130c-4fe1-9f04-aa9a94aef848", "indicator--835a3b85-8a56-4177-a40e-dfbe12100a87", "indicator--41e33fd8-cd1b-4339-b880-90b21c89869b", "indicator--30bc120a-6de2-4717-af1f-3e07c33ea42e", "indicator--fe694276-c7b2-4ad2-b198-37a72f5ec00f", "indicator--672bd468-f10e-4916-a04f-6baf21d908c9", "indicator--f94e9b77-8788-415a-99cb-d0eec59088dd", "indicator--82008f49-4fa0-4611-a54c-6b6af407da18", "indicator--ae1afcf2-c748-43cc-8ef7-dd69a3530049", "indicator--2fa79472-3d22-4a68-accd-0cd4f74f971a", "indicator--94b4b9eb-4a98-4712-aad3-ce1367384265", "indicator--f2f279a5-c6f4-48d4-a2ac-90b3b660b3fa", "indicator--6be943a6-3958-433a-90c4-c62b548f395a", "indicator--96b91650-43d3-47cc-afcd-720a2a52ec47", "indicator--401a60f7-0c63-4722-aa32-695d166bf43a", "indicator--a734f3f0-76bd-46ec-9003-ccf213ca7328", "indicator--eb8aa81e-8cd5-4ff5-974b-475abff14a08", "indicator--66c9e389-7b0e-4afe-853a-75c841e35966", "indicator--a083c315-4ac1-4d40-ab2b-173306bcede0", "indicator--9eca02ea-4543-4691-a66f-0833ef2083c3", "indicator--70b01e87-348f-43fa-baf0-15b1d17735ec", "indicator--9aa8833a-4565-4889-9983-c09fa547587c", "indicator--ea876720-1e5a-42c5-b13b-c99ff6300c6e", "indicator--c484ab92-2266-4486-8c3c-3e92e2e2ccb6", "indicator--c397b793-33cc-4ed6-b575-94b59533f494", "indicator--53747447-0ba1-492d-94ee-83b99e6710f7", "indicator--728162df-22f2-422f-bf13-a04e6340a39d", "indicator--4c3c5287-ff88-459b-95ca-c609f9f87191", "indicator--17826ef9-b936-412a-b915-f09692abe7b3", "indicator--1f44bb63-5ded-47c5-ae91-09cc16eefe77", "indicator--6c21222a-c5f6-42e8-97b0-4a11e25b876c", "indicator--f644a803-7fca-4e3d-b82e-6c98669a2661", "indicator--28e1ff93-5f89-4e17-a8d4-97cba0d4e437", "indicator--4995cca4-2b96-44b6-b939-cef93a824cdf", "indicator--85621be5-c12e-4dc8-869c-c248f9f04763", "indicator--bab94bbd-758d-4829-bc6c-3871d6857984", "indicator--3a3b8fe9-d237-495c-87c4-f976c844b811", "indicator--20ebec9a-62c5-49f6-a950-9ed8694d672c", "indicator--8ab6209f-e9c1-4e05-a39c-dd191b660e99", "indicator--6599b7aa-9472-4097-b8e3-44bd7870e6f9", "indicator--eab72f0e-519b-47e6-bda2-2e4bd3e71a48", "indicator--070b2a2f-6d24-44ee-98d8-3e9dd04671ce", "indicator--510e5c34-c7cc-412b-a9e4-627e4388fc63", "indicator--67a6b9f7-acb0-4290-9788-d1c3aff3b98a", "indicator--146beaa0-ea59-48e7-97e0-afeaf1943ea2", "indicator--f2ad0d8d-72b0-4706-8bd5-56bd42f5c46b", "indicator--4765ef69-c87d-4750-8df6-59e4d7ed25fc", "indicator--36621f6a-859f-4ad6-905f-d4cfb797302d", "indicator--0176f7ef-3637-467e-ad77-b4943b83dfbf", "indicator--c8a84e8b-1ce2-4cbd-b840-205ee5f76b2a", "indicator--762f8104-89f5-4e82-b78a-0f9481f0cef6", "indicator--66be540a-8025-4061-a51c-eecce2e1f4c9", "indicator--3e77b499-8af2-4b87-aa8d-9cafe70d01e8", "indicator--16a71b61-dee0-497e-9abc-323b740b848d", "indicator--e328ca1e-58cc-453c-9f92-45b077228f16", "indicator--3adc9a24-a432-4185-b6f8-08e4492623c3", "indicator--eac165e9-9369-436b-b66c-9613527ca3ff", "indicator--9cbe5d23-bb13-430a-85ba-a665d31e93e6", "indicator--21037b77-351d-4c37-8ab4-2473689087e6", "indicator--9be32b08-21f4-490c-aff1-d426bfcbe8b3", "indicator--5db5f4d1-9a90-42a5-ad48-c7c7f8c19a17", "indicator--50c4678d-75d7-4db8-8986-55ce6a305ad1", "indicator--12005cea-ede4-4b4d-b2d5-f6efc3e42071", "indicator--721cb633-fa0d-43f5-aabe-85e2907783da", "indicator--5ea94855-1a19-4408-b3c7-cb912507b2f7", "indicator--a3fdeacc-0896-4309-9f8e-5d4ca4d46113", "indicator--0791d92c-0290-42ce-8633-75b47d2d4343", "indicator--963d5862-d877-43ca-91e3-d6c93cc69339", "indicator--3e5dc035-2fc3-45bd-98aa-7faf1fda0f98", "indicator--10eac651-da9d-4b8f-98bc-25e08cf66bbf", "indicator--51e854a2-50b5-4b35-9415-c5ca50e41cfd", "indicator--64ec4912-7594-4739-9ca7-b3a7dde97bbf", "indicator--993f043b-d5e0-4105-91d1-20aff84e25d9", "indicator--68b96598-d5d8-4126-8fa4-fd8b721f9568", "indicator--0218bcb3-e9ee-4edf-90c5-925be51c252b", "indicator--27a800a5-3704-4832-a70c-abad8cbe37e6", "indicator--5b1a6f04-a9aa-410b-b903-7fcb410fd7b8", "indicator--15e7727e-d2af-4bf2-9482-94a39a650fa4", "indicator--3ba31451-7999-43fa-b6f3-22223f787b37", "indicator--22ab68d5-e68b-48b0-941e-c9adc0d400c3", "indicator--8e93d167-3ea5-4949-9df2-e12d03bc1226", "indicator--c07f4b72-70c2-4e89-a93b-7002479bce49", "indicator--4c2bc0c4-2e7d-4458-8a9c-a35d462dc1ab", "indicator--e17b05ca-5b06-45d8-b5b3-26d9bd0d6ef5", "indicator--9d81e938-5e93-450c-a8c7-dea327bdfa0a", "indicator--c39fc41e-e4b3-4ca0-a2d7-a21daaa930d7", "indicator--bb902274-231f-43d5-8405-0ef5782aeb6a", "indicator--5f59c4ed-fccb-41ec-a055-f4f5fc60f379", "indicator--d2897444-9972-427c-9ca5-230cbdb1fdcd", "indicator--07b7eb21-caee-4374-8a6c-26dff6bd05ea", "indicator--fe0d691c-8bae-4bb2-a4eb-3ac2082df763", "indicator--a1b3e9f0-2523-4b6c-b735-fb31470bd77b", "indicator--396327e5-e25f-4a3e-9ac5-57dad8cd41ea", "indicator--c0bea392-a8ac-4f3d-8fe2-19d1e6b02508", "indicator--5de99077-5be0-4c4b-9719-4634601ed21d", "indicator--8d57215e-91c4-4635-ae22-1f98a6360d94", "indicator--fc1f02ae-9247-4d86-9dca-fe29027d1566", "indicator--1a77a0a8-a910-4fe5-ba0d-1173e85c8a19", "indicator--478ddbe4-361e-4589-850b-05274516c0b8", "indicator--85c8f5b0-cd28-4b38-bc13-0aa4b913976e", "indicator--6c421dfc-2fd6-41a9-b510-f9320bb508cd", "indicator--8341e6ce-4b05-4ac8-bc8d-65d7d1fd2c70", "indicator--dde0edaa-eb8b-4259-90e8-c7d73c0949da", "indicator--2f49aeb1-a440-4fa9-a846-374848ce9ea2", "indicator--8c6ec887-3cce-45d4-86c0-2c81eaf0178c", "indicator--90263aba-eaa4-4da0-b2b3-aba34b6fcc7e", "indicator--56b251ef-bad5-4670-86df-729885321995", "indicator--39702784-083b-4d1d-9396-00ac115d6ffe", "indicator--f45c9cfd-81d8-44c7-90d4-d344616cc088", "indicator--8734d20d-6885-4451-bce3-7904020edb3b", "indicator--e76f66e7-4aee-4081-b540-4921d96781a2", "indicator--8115549a-54ab-4f1e-98be-eb60553f70d0", "indicator--94a63d9c-8d59-40ba-8ee6-da68938d4ec3", "indicator--8db0dde8-5705-4a2e-a8ea-0854da955a1a", "indicator--73422589-24f8-436f-9a30-392f09ac5cde", "indicator--78e0716d-e088-4917-a0bf-39853059a517", "indicator--2153ee98-5438-43ec-bcdb-74ff738fa673", "indicator--60d6821e-cbdd-4edb-84db-b8cc27b3bf59", "indicator--27f12eae-a5d3-4626-9f54-238849b7fb49", "indicator--a3765646-5b19-456f-b82c-ef34b3c00fc2", "indicator--fa476a4d-be71-468b-b527-3d8e1df61144", "indicator--d42f5d26-9907-494c-8f21-242c5b4dda8a", "indicator--0c855cf7-889d-494d-b1ef-29f6e5317b0e", "indicator--61f21a45-272b-4d3f-ab3b-251adafea7f9", "indicator--97231346-7d90-45b5-8eaa-bed3b1ac9697", "indicator--c417256a-a5cb-4208-a8cb-35432128ae83", "indicator--b2991fc6-4cad-4efa-8e77-b5c4c912cc1e", "indicator--e0bd2a6f-d783-4d50-a244-13f9f8bdc23f", "indicator--72308882-3474-4c7b-8a11-b0dec8386ddc", "indicator--573054dd-685b-4e63-abbd-7bad130fd8fa", "indicator--13acf0e4-b061-4e77-bb62-2c2ca1452c53", "indicator--bf9e61d9-ed23-4dca-8bec-70fccfa3f031", "indicator--18627f02-5037-4071-bbd0-8d6ef5414277", "indicator--a4901af3-5cc4-484c-b039-b7c83c19473d", "indicator--edb7b301-ea69-498a-97ae-291a141df5b8", "indicator--334dc855-ac77-45e8-ad5b-32e2a72e60b9", "indicator--d5202a9d-815a-4d96-a788-ed56d74fcc5e", "indicator--d6304a8a-621c-40d2-b79b-b214f1355d2b", "indicator--57c7ef75-3ac5-4ea5-b244-c621fec64f75", "indicator--608dcf09-ac74-4967-a8fd-2c1194f932e7", "indicator--425fdece-aa38-4e77-a2b3-25a17004356c", "indicator--a4bbb3a0-9706-4425-bf61-83f60177f184", "indicator--b675aea0-8b97-4adc-b2d8-49fec426fb3c", "indicator--d19f865b-d393-4237-b2f8-f4446e01181b", "indicator--3ca6a62f-2c8d-490b-b0da-e01ff976179e", "indicator--6bbd3ebd-711e-4ed5-878a-35ed059514e9", "indicator--c2d79fc4-9a88-44e2-8047-264f7acd4361", "indicator--a33d3177-f15f-4e55-887f-eecfa25e24fb", "indicator--dbfc4b58-6bcb-40b5-8782-4e92d6e05f70", "indicator--1a4750a1-035b-4982-bef7-49e8f7fe4f40", "indicator--f663b17b-d284-48a5-a95c-f01c2e25585d", "indicator--f251b100-a248-44a1-b21b-cc8f47a8fce6", "indicator--1ebada35-83ec-4bab-98a5-f0cc471654b3", "indicator--0e539958-a205-4f84-8b77-b0055c08e43d", "indicator--202620d6-77f0-45f2-8519-fed99c1129a1", "indicator--baa26a98-8ac2-43ac-8929-9f33f743deaf", "indicator--86a2ba03-733e-4b08-9cbd-da65a1519f51", "indicator--582588e2-1261-422d-85b0-3770dd7c15fa", "indicator--43afb2fa-0654-43d9-9aa1-1d9af15befe3", "indicator--9695766a-d442-4080-b65c-5cb68b62fc4a", "indicator--f3c27601-fd58-4d7d-901b-d52bfdb54598", "indicator--0ffeef33-2393-417e-add9-7347975a722d", "indicator--88c1db54-6c89-4f82-ac2d-90909ad8dfca", "indicator--8836f7b0-eefa-463e-a27b-7cc88be59133", "indicator--f42a3468-d0e7-4581-a27e-8fc3eba90ac9", "indicator--a3ccbb2f-4000-4818-9b50-54a7baabbae1", "indicator--0bf999b8-6862-45c2-b568-ced4d986d59b", "indicator--a3116263-c7a0-4122-90cd-9abcb9f39ed3", "indicator--ad1bae39-a276-4de6-9303-2ece77cab2db", "indicator--b3bd75fc-08c2-4333-888f-4ac22e21799a", "indicator--df48047d-0d85-447e-a0e6-f77ea1a2232c", "indicator--0a565266-0f4c-4fd5-a14a-74028ad4fafb", "indicator--a611d2e6-f81f-44a5-91ec-74f077bade72", "indicator--3e94735e-db2b-4073-a315-a89aeed3e978", "indicator--349baf41-872a-4ae0-9b74-7fc1d41c6929", "indicator--b9822eb7-b7ae-420f-ab6c-df2bdedf8d1d", "indicator--f3a1cef9-bb05-4ec1-8642-69197a94d055", "indicator--4a7a3c26-643d-4968-89ce-319927fb6109", "indicator--f7a9b1c5-af69-4061-9f68-0df23c6bb819", "indicator--f833b071-9f6b-49cd-9f0b-edb1a87ceaa6", "indicator--54e61551-bef5-48ba-b446-83768d8ea864", "indicator--92446410-cbd3-4902-bd41-13010c53dc02", "indicator--96465421-e6eb-4ab8-a77d-ed88b960a28a", "indicator--4ffe6504-7e32-4745-920e-2fdec66f4b72", "indicator--45a4de1c-4d93-4ffd-9d48-1e37fc86c09f", "indicator--a6e4927e-4c60-42da-80b6-3ed3194c96d3", "indicator--2bd5bf7a-1340-478f-8a81-ca4f8007f515", "indicator--8b72769b-3f74-4601-8592-7fd0d747af4a", "indicator--0d9d1f06-363d-4c97-ac34-f99a344e9271", "indicator--497f182c-5cf9-42f5-a7fb-ae4c780ec3fa", "indicator--1345739d-1a50-460d-b744-b69f9cf57deb", "indicator--d30e979a-ca53-4c03-882d-669b91e63ed6", "indicator--6d993ce4-aa25-4801-9b21-4292322099e2", "indicator--b91e8ce8-49d9-4f61-bb6c-a119e2583da2", "indicator--252d3a47-3cae-4d2c-b740-fcc93881cafb", "indicator--9eee0f6e-f5f0-4374-a19c-dd8832b63007", "indicator--0d28a0e2-b41b-4bd0-a506-ec2d0cccc949", "indicator--489983c2-6d73-40d5-b52d-15088c9038d8", "indicator--183f3cc7-39ce-4aeb-9cdd-177d8104c083", "indicator--a93be335-7fbe-4ad8-ba1f-076378a1f4fd", "indicator--f8bc8c67-5752-4bef-84e3-0943a53c2fdf", "indicator--56b2ae6f-9ff8-44a8-8b65-d612bf15e328", "indicator--ecd64245-75ab-4b4e-99b2-d2d653a82b95", "indicator--5c93e0c9-f587-4ccd-ba2f-746d5d1ce7d0", "indicator--d37fb47e-f141-4007-a7ab-d776d94f1e2c", "indicator--be10b3d6-3a34-4d52-8a4d-5c93a06e0df7", "indicator--6a76b270-3b69-41e1-9921-1409f55a4660", "indicator--dfa7a4aa-1fc3-4883-b80d-82ebf4d22af3", "indicator--6ee42916-fe43-4006-8ce9-31a98ad925b5", "indicator--faefe686-61fd-4daf-81ef-9b382b3df580", "indicator--cec21650-59d3-46cd-8a8c-4713657c5ec7", "indicator--03e7687e-65a6-4229-9675-82209bba6fa7", "indicator--dd99c11f-8a88-49d1-a73c-fdf7093cbfb9", "indicator--ab630ee0-5b88-4e71-abe3-e86c937c615f", "indicator--b2eb98c0-f247-4e3c-83ff-68c122862173", "indicator--cd696e0d-5712-4176-a8db-0f370e0e6807", "indicator--0a08b67c-ca2e-483c-804a-0b7996b50433", "indicator--bc4a285c-94f3-41c5-80c4-01988427467c", "indicator--b5b88967-0030-4a11-b11d-df78f60958ce", "indicator--6f079124-3d84-4d9f-9b6b-dcadbdbc2608", "indicator--37be142f-ba4a-4608-94db-a97d21fe8725", "indicator--dae15fc0-6b67-45b5-b4ab-a7bbcef083f8", "indicator--60719887-c878-4ccb-951d-d6e70839b654", "indicator--d442f51e-dab6-4f02-b20f-df14d26fee17", "indicator--e0090020-d7e3-4622-a276-aa870eb0b571", "indicator--d83d9793-c701-443e-be66-7a4c5e7d3207", "indicator--71fbff3b-1d73-4298-bb81-8aec8a9f01f3", "indicator--380342d6-46e0-4609-8987-8fdf2338ccf3", "indicator--8b01fb61-041c-4fa3-8cd2-b7a7c91e7304", "indicator--909ab6b6-f3ee-4742-b702-477b86fce0ec", "indicator--b75c192b-6608-458d-ab65-acbfe9a85813", "indicator--4045e281-7c71-45b7-8326-f924b23facdd", "indicator--437f3fad-1f7c-4e1b-82f7-6d710f76d39b", "indicator--df695742-2240-43af-8b5c-d12af5b17a3b", "indicator--31e6fb5e-f3a5-48e5-8fd2-76ae53e82733", "indicator--2f598122-bef5-4a36-a912-1bde0e8b60bb", "indicator--13cb912d-faa7-4cd0-942f-06244bf4d029", "indicator--6c186832-e625-409e-920e-da11fb1bc4ee", "indicator--9c62a6e7-93a3-437c-ae64-da67b3cbe3b4", "indicator--85453793-43a5-4d06-9879-5e87e125dadc", "indicator--fb705837-039c-43a7-9069-c36069a64a8b", "indicator--f0741e08-501e-4cfb-9f88-dfc19de5c98d", "indicator--b0dd679b-288b-44b6-a679-ae35f62d6b1b", "indicator--f975dffa-30a3-4012-ac6f-0075c8428d78", "indicator--98bb4fdd-fb3c-4b86-a58f-a768ed6c2b51", "indicator--56918151-4406-495f-88a5-f2b307e00e55", "indicator--03900194-e87e-4305-95e0-8f0019c80828", "indicator--c0a7d469-c18f-4831-8d3a-8bd30caf1771", "indicator--8665d4eb-0a96-440b-bc60-b4fb5cbca655", "indicator--e5c35a66-5242-4d36-9d04-2174af41352f", "indicator--2d99a8df-e37a-44b7-9b53-6884f862bfeb", "indicator--67cedb4e-4b67-4dec-bba0-7b311c2b37ec", "indicator--a17e366c-ea10-4480-93e0-97a76e586688", "indicator--cc5eecaf-9db6-40ae-bf36-fa2ad3b6b0e0", "indicator--2cd780bd-1dcf-46f8-baa9-54da5012bc48", "indicator--058d6994-2ed5-41fa-8528-af178d4c5c6c", "indicator--d48a9aef-7f43-46a0-a4e9-029594a1ce6b", "indicator--efdc5a32-4af0-4159-a056-563f780a9cf7", "indicator--b695ef18-40f2-4bb3-9159-dc617a253341", "indicator--0ddeb954-36bb-4966-ab4c-d59077ef630e", "indicator--dbf738db-56fb-45b8-93f5-631e432dbd46", "indicator--6bf63247-0026-4a94-a042-33429158aa8d", "indicator--b732aaef-2b86-43af-a9c8-a726139b5754", "indicator--a6bb3826-8c1e-407f-9782-3a0643545232", "indicator--ed5e7bf1-f394-477f-b57d-f6814aa6e6fd", "indicator--befb56a8-bb14-4385-8f41-c53200b1ab97", "indicator--1168aed7-ba40-4c2e-af9f-1feb35454c94", "indicator--e34089cb-6b6e-465b-b7e1-f990ef5f847e", "indicator--42880d4b-932f-4339-84ef-e264dae64e9c", "indicator--940ff804-5bdf-443f-b921-111bcd44efc7", "indicator--aa460836-400f-4f9d-836d-fdd0c61929ef", "indicator--67830dd6-e754-4e6e-ad9f-8f0207637bc6", "indicator--e1ca636e-1ecb-4ab5-aaac-70fd4a90920b", "indicator--899eb6be-1b36-4304-a71f-ce260f8522c8", "indicator--fd068d21-b8cd-4f68-99f2-f2aa96d3e680", "indicator--67e4afbb-653a-46b1-a51a-2c649e951315", "indicator--61c46d15-b915-428e-a6ff-c0c2d4f45500", "indicator--487c00b0-f9ad-4dfa-8b64-e9da6c0514bb", "indicator--e630bae0-fb60-4d60-901d-9eb6d0d1947c", "indicator--1a6fae1a-0c3e-41dc-9f03-4338b7a29f4a", "indicator--11d7cf7a-707a-4dbe-a0c8-0547921e571f", "indicator--ef1b1508-2089-4422-a5fe-bdc25ba11f64", "indicator--6fb04048-17c8-4340-9bb8-98b8c1159575", "indicator--82038eb9-0061-4620-9de8-74f102f32739", "indicator--f3d3b68b-e0c3-43c5-98a3-d371766965e6", "indicator--b06bcf82-6c54-4e80-9939-47498f36981b", "indicator--e0a8f522-3b64-4193-b7d6-f5387e290de1", "indicator--1948e16e-daaf-40ad-89eb-a26ee591b00a", "indicator--0bdc50aa-aa64-4ba2-b003-28e1e328d8b9", "indicator--e7edabb7-72db-4f5b-8767-ff669e125d95", "indicator--39a69f86-91c2-4b14-b976-88806e56e267", "indicator--d6c53a47-049f-4a87-b00d-3a7213fa9129", "indicator--25901813-7fcc-4efd-916f-2a817e5cfc74", "indicator--8d992f55-ec44-4614-9637-569cfdb5a52f", "indicator--8a210f89-a004-48ee-9e07-57f1474b871c", "indicator--663af7d2-4975-4865-ae0a-12715619a546", "indicator--684e3bb5-cc49-4014-a487-c7b6a4b2a954", "indicator--f654cdc7-3e4c-49b5-82ad-7692014f3d4c", "indicator--6947c878-0585-428c-8c74-a6519b850b6e", "indicator--98e99caa-7a85-4024-bcd5-9cf196a5973c", "indicator--4616318a-6a97-4b7b-bfcd-60e185536557", "indicator--19a96b61-a027-4c20-bcac-11e98e5dccb9", "indicator--60afe33a-c2c8-42fc-b94a-82da8ebf3c7f", "indicator--912a74a3-8d82-47b2-9bdb-8fc964f007cc", "indicator--318a059b-2365-4c6c-9473-5d71624c7660", "indicator--8cc6bfd7-8e29-4e78-b14b-24490815641c", "indicator--153c29a9-935e-40b3-b64d-bee7298e34cd", "indicator--64dcb84f-5cfc-4cce-84d2-70586590205f", "indicator--8b370318-b092-4751-9604-02e885011b49", "indicator--3f5a5752-b095-4647-b1cc-8a71b1d69285", "indicator--0ff44e9b-5767-47fa-9958-b2ba624d514b", "indicator--72498d33-422c-4de0-b619-909570495998", "indicator--2021412e-2de3-4250-887e-dc80b62cdf87", "indicator--a9cc2001-d098-4303-8920-17dffcbb3cbc", "indicator--9688d9a2-52f0-4d53-898c-25c34cb19683", "indicator--158ffeca-3b4d-4cb6-8c44-f48f78af78a5", "indicator--9f2f3a53-1bfe-4286-af55-73618535342b", "indicator--31f59311-0e19-4eeb-98ba-46f58b9ec9e0", "indicator--25d7d2a1-8dfe-4e06-9652-09ed39772ce1", "indicator--2884df00-e7ba-4d22-8d11-f99d659144d6", "indicator--3d3a636f-0239-462b-82f8-07d22ef57a9d", "indicator--60758788-0c0d-436f-b341-ac1ed5cdc8f5", "indicator--ca900489-0dbb-4562-8a9a-93d5036aedb3", "indicator--71faff47-e1bc-4464-aa13-8289bcaf311a", "indicator--5b2d9c8f-538e-4be1-9bcd-8bb6e10cb9e0", "indicator--52236418-bbe5-4416-b800-834c8fa1e686", "indicator--9ab292e3-fd9f-43d5-880a-09aa132578e5", "indicator--46f30f55-684b-4c40-ba56-42450812d935", "indicator--188fd45e-9291-462c-a64f-2a7125cb447e", "indicator--38b75cd9-98c6-475c-8787-4ac194361f27", "indicator--e34aee27-d02b-41bf-9342-bee323be295e", "indicator--df3e740d-1718-4400-8daa-3a844a63142f", "indicator--d56508d0-451b-4da0-9224-c2cbc5d23c37", "indicator--f9ce12d1-c9c9-4808-b4eb-bd2285246f4b", "indicator--f90e4a21-1f7b-4f4b-80c8-15c149495759", "indicator--47281104-7178-4ba8-b1df-f21710c78d49", "indicator--7d71c66c-2dd2-4b11-80ae-dd6a44aa2796", "indicator--70b9625b-2399-40e5-8d4f-486277f1b586", "indicator--ec9200ad-e186-467b-8f05-a9730366c80b", "indicator--f171d57e-24a4-47ad-a6be-69b865513da3", "indicator--31c54809-a1c3-420b-9c7c-298d08e17f14", "indicator--16b738ff-ad98-40cb-9f09-8f242639a381", "indicator--6ac853f0-6b2e-4ee5-8afa-72bfe5526825", "indicator--e80124b5-15ef-4e57-ae4f-4b45dfa9c7ab", "indicator--3dcf4d55-96c0-4e1f-ba1a-5653088ce29d", "indicator--c9ce683b-6fba-4d2b-a721-7dc828f3222b", "indicator--497c848f-a7f2-4d1a-9c34-d065963f8641", "indicator--4cb88264-3981-48bc-a823-b6cd1d98bdee", "indicator--979a2c4a-af8a-4cbb-9272-65b7bea3f21c", "indicator--e988184f-c336-4adc-b72a-afb8ac65418c", "indicator--502a72a7-02ad-4138-8ab3-fc995a6d1291", "indicator--ae878950-06de-4359-b51e-879a9edb5548", "indicator--76af431b-192b-4e0c-9deb-95caa14d8d4e", "indicator--94051280-746b-4c1f-94f8-4a321c21b8f5", "indicator--261cd78f-be08-407f-9fd9-1c1a202f3d13", "indicator--cf575dbb-7045-42e3-8918-357a8efdf9d6", "indicator--53f76c35-df54-439c-8a98-c9f6aafc38dc", "indicator--fd7b76bb-5237-4d08-918d-c2bab6c82c89", "indicator--7399b83a-79c1-42cb-8bcf-215375a8c08a", "indicator--1d796411-ad32-4da6-9a96-3542db0b5fea", "indicator--3bee5c78-676f-484b-86e3-b3eeb1cabc28", "indicator--427ac501-7b14-4bc1-a622-a888795af6c9", "indicator--6a96f527-168a-4801-b60f-b9c3a2e65370", "indicator--5aefc778-c446-4d6e-97ff-9beb1403a2b1", "indicator--65494d97-a7f6-4920-8446-3eecee9b5e16", "indicator--a98dd196-0031-4178-9ccb-0e7884a0bd7d", "indicator--5289be2a-58f5-430f-98d3-b89db3874350", "indicator--ddcbaf20-5373-4a00-a957-0b826ff5995e", "indicator--a4296727-61b2-481d-8683-bdfa223e74e3", "indicator--60b4cc12-d20d-401f-aa96-d2e88094d835", "indicator--69008cfa-fb40-4259-8589-74380a308d2b", "indicator--18a01f34-ae7a-406b-b55f-c92ddc9d58a5", "indicator--1b92c94f-380d-431a-80ea-e65692e6b483", "indicator--2abe5623-47fb-4392-bbfe-8f9cb1ba0e95", "indicator--3c4f16b0-8d48-47b2-99b8-c74f078cb9d8", "indicator--16412145-31a5-4be6-830d-0f4835a6aa5b", "indicator--e718e3ea-bb3b-4697-854a-7e47d63c78eb", "indicator--bd383bf3-a4c5-4640-892c-8a3f09a3c8b9", "indicator--4119269d-5e65-4fbb-afaf-79a527e17718", "indicator--a13f341d-5554-431a-bae9-b368fca62b34", "indicator--f2a10993-8a75-4922-b40f-e62d43d9d476", "indicator--d85126c1-02a2-45e9-b3d9-e3c73343cd1d", "indicator--3d47d933-8c16-4efd-9ee3-17d0d9c3f01c", "indicator--4aeaa176-197e-4f24-9bae-aeda6635e01f", "indicator--6e10e8d9-5819-4e97-aa80-20aba564ce46", "indicator--7411f1d2-7591-4294-8fa1-0c05bd0aa06e", "indicator--a1361d80-070d-4ded-a7f9-f25f900b00bf", "indicator--3188faee-5ca4-4280-a83b-24bdcca5c897", "indicator--d71c5328-8b62-4092-9e8a-b3e19959962a", "indicator--2b5c075b-d853-43a9-83d5-f207ba8e823e", "indicator--eb3b3970-6419-4f52-8663-93e58570b75c", "indicator--e8506c53-baed-4213-b8b4-b691df6edbdd", "indicator--ea0618c5-8639-4485-aca8-84be882e426b", "indicator--6795bccd-7dbb-4a97-9aae-ba090cb2667d", "indicator--ee9d22dc-aee3-492d-9027-0ecfd27e8e7c", "indicator--39644b6f-33e2-4d80-937f-023a42242136", "indicator--ec16ccba-c800-43d0-b4c6-140b3e995db1", "indicator--59a4571b-5d36-4634-a499-16b3cdf94c61", "indicator--d9437f97-6672-41ae-8468-6ce102f390ad", "indicator--f72cd864-3b3e-402a-9700-2623863925e6", "indicator--eb7735de-2c25-4488-8451-3379f40d0160", "indicator--ac33afd6-0b6c-4102-abc2-10e98011dd9b", "indicator--c54b890d-92f6-48cc-bd49-47906494529f", "indicator--4b4acf6d-5952-48c4-88dd-04b28c6bce95", "indicator--5a8f1f66-d271-4c99-a83e-8edd61f0af54", "indicator--0be4e565-ec83-4138-80c1-885579152984", "indicator--b246360c-ee10-4edc-90a1-3ac27de76f27", "indicator--ae614bcb-4f64-4789-80a8-bdbe652e7f78", "relationship--57d548b0-3837-48e1-8fe8-0899f873b5a6", "relationship--ca76a481-9f3e-494e-81e5-45ec61c95a38", "indicator--cfa6c848-5134-4291-bd4e-8b05c85f7f65", "indicator--0f85f4da-f087-4383-aa3c-19b91fafd303", "indicator--bef6a446-3a31-44c3-8a9e-27bf474a2459", "indicator--347d32d5-a73a-4e21-ab3a-e0d79f33e2cb", "indicator--9ab3eb86-580f-4af5-bbcf-54ff955a415d", "indicator--6d2daf24-14e3-4d7b-a234-71703d813d5a", "indicator--694e9a0f-f040-46f2-9626-4f1982c1cef7", "indicator--45539930-6781-423c-b7b1-b39932c4538c", "indicator--332c6902-9019-41da-94c3-8e5ac9c1ca99", "indicator--9dfd35c1-caca-4ff3-8b38-5221ead79044", "indicator--e56c318e-4527-4d65-a022-4681d21ff450", "indicator--94dfc2bf-83ad-4a57-bd2c-c45bc2db677b", "indicator--4371864c-1b90-4f61-a126-fce9a6120a41", "indicator--a7cd8691-1a3c-4b87-8fad-f902328ad52a", "indicator--7b008a3f-c37d-4318-967c-2c934cb453f6", "indicator--7e02149c-7de6-4aee-94cd-29ed99faad3b", "indicator--fb688de0-e3db-44cc-8749-491abe9029c7", "indicator--2ea0b906-8cd5-4037-87d7-2247f2257ba2", "indicator--0d3eb55e-6b91-4b5b-a6c7-a061890e563c", "indicator--1cdf6492-d4f8-4487-972e-f85a7afdf876", "indicator--595e3689-1596-4be6-92f9-17319258d5c9", "indicator--dff365e5-a973-4288-be3e-5dc28951132e", "indicator--98d2ba07-dfa4-413b-b37f-a4640431922c", "indicator--3fc6bea5-4818-4f1d-bfdd-a398c5b9afdb", "indicator--b2df33b6-07c4-409a-9aa8-898a8163f48f", "indicator--7826c722-970f-40dd-a1d5-df52a7281439", "indicator--39e343c9-39c0-44cc-b132-504b3d2586f2", "indicator--9a06dece-9ba5-4030-b185-eb96223f0ec8", "indicator--11137346-b0cf-48e9-9fc9-465dd0c79b6e", "indicator--0805a7fd-4eeb-40d7-aa92-4ee764db8dc4", "indicator--b1e6d88a-2acb-4379-9884-408e9205ec32", "indicator--4a656919-6e0d-4ac9-9b08-c338ea01223b", "indicator--57b56e48-2e25-4cbb-8bcf-975dcaa98b98", "indicator--fc2551c2-d6e0-43e1-8e25-2626b8c45d8e", "indicator--b0397220-fb7b-4c88-9aff-9dff879893c2", "indicator--9e0293e9-dcdc-45ca-8e16-09ba84fef966", "indicator--e6262231-f6c1-4d5c-8d41-727af2a52031", "indicator--fa7adfd7-7489-4c5a-a3b9-2ea75f0c71b0", "indicator--4262b082-e9c1-4b61-9d17-c77595f69fd7", "indicator--f8cc9d69-b9e1-4eae-9f14-a5de41739f6e", "indicator--21180d5e-c0fe-43dc-bf69-ae6da5107bae", "indicator--8672b017-2cd0-47ba-93f4-67baa734d0fa", "indicator--c4b58a45-b765-4a23-b30a-09a0672d21a8", "indicator--eddb6853-a56d-4adf-bdea-f45e7d5ace1b", "indicator--07ab7728-6441-49c1-a9a2-82ec2e7fa500", "indicator--d583a93e-11ec-4edf-9bc1-013bc4879b9f", "indicator--b8054f75-3134-43f5-829a-62d4c4b4eb10", "indicator--056c8c50-2bc4-4b23-a4ae-20ded72462f3", "indicator--4038fac5-c5aa-4a62-b7de-c43796b9433b", "indicator--681f50e1-e3f8-4e2e-b41e-1b82a48eb454", "indicator--c07f079f-6a1c-470c-a4c6-6f9ef61243c1", "indicator--4e88c19f-a078-49b6-832a-40a13f01ab84", "indicator--41f40960-cce0-47bc-84d3-3f418c55ec96", "indicator--0b020505-0513-4f52-ae6f-0b737bc1aa5c", "indicator--0cc3f093-d1ba-4b37-8841-b6a9fb9fbb37", "indicator--92967d5e-f13b-4fcd-9384-203a61e1b45b", "indicator--c2c420b6-d314-49e5-a41c-148d8c31da6a", "indicator--cfa1d8c9-f9e5-4ec4-a93b-6008ac7231ad", "indicator--5b929d1b-2b68-442d-a6c9-4a24cb103258", "indicator--8e7b9ca1-1f50-460d-ad1a-255b8b8e2c47", "indicator--df755c85-ab85-4058-9cdd-81711980ccb2", "indicator--a87fca08-1588-467e-a5e6-320c8c1d5011", "indicator--cd064de1-72cf-4aca-ad15-ea61b135a79e", "indicator--2720495a-0bcf-4211-a96f-004bab4c2132", "indicator--303e2818-32fd-4824-ae8f-a81681bada71", "indicator--7c90eb04-fa27-47f3-8464-98d834a1d40a", "indicator--640133c7-c267-43f4-8117-93659d5f4fe6", "indicator--415dacea-b219-4a76-9c3d-74ef3a71826b", "indicator--1f39a014-96d8-433a-8063-6a43b5f05ea3", "indicator--0a18c693-0787-44a8-b20a-4b2d9907ac8c", "indicator--abac88d7-fa40-43b9-9a83-47228e4690cc", "indicator--f8bfa87c-16ca-4b52-a7e2-25d97ae722b7", "indicator--e5a38388-26f1-4e09-b0f9-931307830d42", "indicator--b3b8dd21-e938-4444-b0d5-5effbb90a551", "indicator--4cf88248-e640-409f-8634-30cb8d4da03c", "indicator--ac850387-bbfa-44a8-bfee-7c4795e64fed", "indicator--02d20cca-8bc6-4667-a113-9471b95c960b", "indicator--1ecd37e2-ff5d-403a-9b00-6b3666466c47", "indicator--0e54e326-dd26-4cf0-97b9-f023a3c3f666", "indicator--fbb75035-952f-4871-93ed-88be03237d2a", "indicator--f7465c87-77a3-4062-8e35-174282103016", "indicator--01285780-a183-4517-ab49-1b0d6725efaa", "indicator--f90e5663-e7f9-4a13-9cc5-207989ab1ea1", "indicator--2b0977c0-ac0f-4cc7-8367-efd2da3a5a9b", "indicator--975e425c-db37-4209-8e34-3e01f05e33fb", "indicator--6293ee34-da43-4d76-9450-10514da3a5b9", "indicator--1ea9af96-ef5d-4bef-8afc-24036add0fc5", "indicator--218060ee-7762-4838-8bed-c4161a38a812", "indicator--e20684d6-5094-4078-921a-bf1acf67cb38", "indicator--83010cc7-3775-4f8a-88f3-14cd9242efae", "indicator--4481597b-2d71-410a-bcc8-99374227fa0e", "indicator--4c01b3b5-05a7-4b46-8169-6c4c7291582f", "indicator--8910fbe9-976f-47ef-af9e-d78856e61eef", "indicator--0ef6fd69-3b28-4ed5-9d3a-418b4a96610f", "indicator--e0ce61eb-f47a-48be-a6f9-f5945db5e338", "indicator--d4f6f091-679d-4b1d-b633-965fdf4db1bc", "indicator--a7b65824-94ea-4ad6-9344-8066e23cd50b", "indicator--05ff85a5-7f2b-4df8-8711-ecce92563846", "indicator--a6533721-2824-4f56-954a-148d08e16e36", "indicator--188685a6-95bc-44d8-94f9-d5ce2befc6ec", "indicator--c17adb94-896d-400b-afe7-03b34dadc3f7", "indicator--7c4bd1dc-9185-48a7-9cd7-cfb36bc05913", "indicator--49ca736e-048e-42cb-858c-2d565a85e738", "indicator--891b8e9c-3c2c-432f-8cb4-2eac4eff8d91", "indicator--ea6a2d1b-c7c9-41c6-acdc-a433ae3a5de9", "indicator--abee4cc4-ee9c-471e-b09b-79c8cb36798f", "indicator--f05e9e79-4365-4df2-8ce6-49170ef612ab", "indicator--3d843e38-b98e-4f3e-b631-698f8b186d1d", "indicator--802d8a77-1e53-4f08-9815-158bf710cd39", "indicator--6a7a2dfd-5886-4ed9-8068-fccee76d29bd", "indicator--d2c7e32f-647a-4a8f-9a18-3ad41ecdd979", "indicator--b494039b-e89d-4876-b332-bd0a2ae0c256", "indicator--9a42c21f-4518-4c86-974b-b66926c42e01", "indicator--c61597c3-d8e2-4151-9f6a-3fa6547b2505", "indicator--1e3e32a5-85fc-4254-a6af-b1574658c094", "indicator--6b49b891-56ef-4d2c-beb1-788961257858", "indicator--19910a91-9e4d-42c7-96f7-50bef16d55ba", "indicator--c91c25c6-22ad-4118-8998-2e35a3d4b93c", "indicator--10d0246d-e665-4c57-b2f1-b967e70f8460", "indicator--c355ea98-d6cc-48c6-9c21-690523c6efb5", "indicator--9262eb03-6ea0-4157-b3b5-276cc58bf84e", "indicator--378a03ad-bef6-47a7-ad01-d093781aa4f6", "indicator--85dba42b-47c3-440e-a8de-13014574fd99", "indicator--8a950328-0f26-4f85-a365-3e8e4e4b054f", "indicator--6c83553b-70e6-4d4b-b07b-5d5e42ffc42c", "indicator--7380eaa3-f007-497e-b618-37ae36cbb108", "indicator--01e792c6-b674-4313-a62c-32754ac092b2", "indicator--95816363-b948-4ddb-9026-fc7ac9aa6afb", "indicator--11d2857c-21e7-46cf-8126-2e675fa5f0b6", "indicator--c0a1aca8-7aef-4f2e-b1e6-b1efcfb78add", "indicator--f305513e-d751-4c6d-9ded-67bc8faeb451", "indicator--ff910e46-0bee-45b5-8e10-0e927385a376", "indicator--2d9a7236-f719-4d7f-8778-b14ecfa53adc", "indicator--2dc42975-dc42-464b-be18-ec519e60baef", "indicator--99dfac12-cb6a-4dbd-b4fd-8c1d533534ec", "indicator--bd84857a-0b93-464e-bf09-7ad300fa51e0", "indicator--417f95da-e5a6-41fd-89e7-bbe93e08f8c0", "indicator--d2d22ed5-c6e2-42e6-a7fc-2551e256fe2f", "indicator--a1388748-8d96-42ee-9aeb-28f8e46ab724", "indicator--eb154f68-d7ed-4426-a1e6-86c8840639b7", "indicator--f9552f8b-99fb-4358-a768-a89613e9d0ac", "indicator--37653c7b-43b2-459a-8a24-7d3d5f4cbed3", "indicator--4de760d7-0ed7-4b8d-b11a-fe40b7e627ca", "indicator--89692e5c-2555-4f63-a6af-cd35c9bf817b", "indicator--21ae6796-58b1-473d-bb00-cc4188af4147", "indicator--5220ef44-556d-4036-82d6-8bb38673702a", "indicator--67f830b9-9463-4f78-8b81-42c73e4480ac", "indicator--ed762403-2468-4b55-a306-34f519fd82c3", "indicator--82495bc5-88fa-4b12-aaea-4d73b6090a52", "indicator--cb3d7b90-4f77-4fd1-8e27-2a5f181bc4a9", "indicator--edc18707-af14-4e57-a638-bec12752462a", "indicator--a67819b0-c1a3-4bea-b7f7-e6e6dbf15011", "indicator--2cbfd9fb-33b6-419b-b466-53ef1c0f0d05", "indicator--04e6da3b-c014-4abd-a33f-2f1e3e0a76a9", "indicator--7a74b441-55ff-4690-b719-a36363c0ed0e", "indicator--ffb80e6c-d9fe-4aaa-bc28-041863395f70", "indicator--808685c3-fad2-430f-a612-903c814273ae", "indicator--3d025814-f502-41d3-acf6-0de28434a844", "indicator--85a5f116-24e0-450b-a2ed-8bceb03d741d", "indicator--bdb654df-40c3-42f0-ade0-17e5f3eeda2f", "indicator--4b32cec1-d582-413b-87d3-5ec4357ea62f", "indicator--61be5991-509f-4b3d-8495-134775a7c36f", "relationship--94b6d94d-f1fe-4055-8f25-e2a86e10ce59", "relationship--223c3bf0-f314-40c1-a108-ce1e5ecc002b", "indicator--470b800f-a6cf-456c-bd98-6e705b7f34d6", "indicator--3bbb49b8-5d1b-4101-87eb-e12f271d193c", "indicator--84b99bde-b1cb-46db-9343-431841af14dd", "indicator--f4f157c7-7e08-4c18-b3e9-5d785fefc899", "indicator--98b67115-997c-4bed-bf8a-659e3e973c3f", "indicator--aa81bc74-bf3e-40d7-9f8c-d7b2aae58776", "indicator--24400c31-72a8-4168-aeb1-93620e672775", "indicator--5d45e04e-6e2b-4979-b4f8-9d9751402737", "indicator--4a6708f3-7481-4b25-9696-e978f1fce20a", "indicator--e75fc163-d73b-4249-8b2b-41f5eee4c46e", "indicator--455ca927-6aee-4b99-baf3-a0cb2244229d", "indicator--bfe7bbbc-cbcf-480a-804b-022b95255331", "indicator--b99ede71-172c-4d92-ad06-e5643dc1e67d", "indicator--0b11f459-d126-4b56-90e0-295a3c56bc0a", "indicator--d7b765a9-2298-4cfa-af09-811171666ea3", "indicator--40c46829-20b1-4b57-8b28-5138c17bfae4", "indicator--06c48097-2e3f-4eb6-bdcc-d965279e8f56", "indicator--a4986b11-40c5-47c3-826e-fe0ccb91fa58", "indicator--916a18ff-6c25-4e2e-b996-9bd6fb92a8af", "indicator--6583bb3b-a457-444f-8297-f41767a76237", "indicator--6c0d9ce5-83c5-49fc-9c92-d1e08860e514", "indicator--344ac68e-2954-4e1d-bc1c-6a3841c3b387", "indicator--859be15f-46fb-408e-9757-370d9ff2ee7b", "indicator--6bcf598a-d84e-438e-9fcb-0816f3478a60", "indicator--1a4ac5f9-944a-4168-acfb-e29b07954a67", "indicator--0ff7709a-a259-4f6c-a101-ed48ac127609", "indicator--2544a945-1985-4332-ab56-0c6001a74c72", "indicator--0d71b646-fb8e-4def-beae-b18e1da855a3", "indicator--ed684fec-31dd-4b70-bfe5-ed762c4732cb", "indicator--d4e95e8c-f23b-42b5-9c5e-a0ed1015bf78", "indicator--5c7a60f8-2d94-4507-9c96-31e7e1519fbf", "indicator--98028aaf-7cf2-4b75-a8b6-ac717eda702a", "indicator--a3aa5e22-af15-4021-9aa9-3a1fc1f7abe7", "indicator--a01a8a6b-de15-4543-b66d-57cfbdefa819", "indicator--9786f513-1b60-40f1-8dbf-ee6d398044b1", "indicator--25aefa5a-cf7d-48e1-9912-7ec84912b52c", "indicator--c4ffe710-6a30-49bb-a59f-f4508767e141", "indicator--be86fde9-c5ba-4a7a-b10d-2db23c50c2e4", "indicator--9d1cf9ba-a212-4af0-a224-d87ae11ed7ac", "indicator--7855c034-03ca-4875-9369-3bab52040573", "indicator--be627c29-5118-4e46-a15a-ee3830f1b78d", "indicator--9115b12c-e0f4-4e55-9deb-af03af4ebbc5", "indicator--f20dd0f1-93a6-46be-bb68-74ed7b29ded4", "indicator--392ddeee-f041-465d-a905-06a504bf1835", "indicator--6d6da401-348f-4a20-a118-b5c46f7cb480", "indicator--68d29f6c-cbb9-448e-945e-813c4dd60eed", "indicator--f385e41d-131c-4536-a1e3-0e7e7d81f6ed", "indicator--523383de-04e3-4924-9ceb-e356b8ff5bf6", "indicator--062c2b45-71df-4421-af9a-d4b57fce0b48", "indicator--1f2ce0e6-cf0e-49b7-86f0-5c9f3932ee51", "indicator--e820dd97-775a-48e4-a255-07515cdb1838", "indicator--327858bc-97ac-447e-96d2-4b5de58245e1", "indicator--c710968c-068b-465f-9cae-a9fdc302147b", "indicator--66198227-13db-4920-bc18-d4d1cd5652d9", "indicator--4733ee20-eddf-4bbd-844e-78d0a2c16dcc", "indicator--e96dcd36-6ecc-4126-b573-12457c3d30ce", "indicator--a454dedb-d719-42af-95cb-10a55afee610", "indicator--4caeea4e-e4ee-48b2-ad36-31a16d027a29", "indicator--448b4034-458c-4520-b95f-0e5d4918e536", "indicator--73b437ed-8ea6-4933-bc7f-e00d53fe77b8", "indicator--2e6ee658-9570-4a32-abc9-10c261c7480d", "indicator--8a808003-20fc-4e06-8feb-44a10dd5a849", "indicator--f42188d7-2ac4-48a4-9def-c2e65a5016e4", "indicator--120ff497-1cf0-4468-bf3d-4a17dcb62206", "indicator--df1e55a3-67e0-41a7-a0d6-5efc77cb818d", "indicator--9b1ad3bc-da8e-47d5-a343-80a23fd4b03c", "indicator--9335c1ca-1de2-473e-bc88-a9bfc155cadb", "indicator--cd909e4e-d54f-47e8-8079-a2808b91b878", "indicator--b720e370-3d67-4b16-92d2-468dd40b82f8", "indicator--beb35125-ba14-467d-95bd-2b061257b85e", "indicator--1c81e743-d530-4dd7-b5c9-ce2b1cc506f0", "indicator--f68db7d9-1e44-48cf-9769-3ede2a6d6354", "indicator--0f6ad01b-ec2e-4220-8cfc-2d272c7492c4", "indicator--771fb8eb-f6c6-4cab-9d5d-c11259e19ea2", "indicator--a4f1e1a5-4110-4347-9163-169a0b3dd198", "indicator--48fe6a95-6a6d-4211-98e9-ed098afd2ede", "indicator--aa85c694-9223-4d3b-a6f5-dfdd552d089b", "indicator--7012dd41-837c-48f5-a612-301b22e6aa9c", "indicator--910d6232-7da9-4535-86b3-8df5e1abbd1a", "indicator--9b0f53c6-5092-4755-bcdf-5a51fa1e891d", "indicator--a05a7e00-b51f-4cbe-9794-ec9cd1f19c55", "indicator--15746ca8-87a5-4e52-a6ea-b38e67239711", "indicator--9f90d8ca-b28d-480d-b583-4e2634778851", "indicator--7ef47d17-abd7-4e69-ae52-a3fcda44f38e", "indicator--24247ebe-4f1a-43fc-bdf8-ad9bee7aed65", "indicator--acc32728-8765-46c4-bd09-65b38f11310e", "indicator--af4443b5-a90f-4cdc-bd84-704f09cd74d8", "indicator--a40bc3a7-d875-4bff-aa49-b9c32952f8ac", "indicator--f2640bf5-d6ac-4c23-8024-9e6945f23518", "indicator--ee0c7eab-8319-4286-890c-fdbee49f30bb", "indicator--c30fb01f-e49c-49b7-80bf-00659014c078", "indicator--2c0fd05d-a773-48c2-96a5-574e2a32f55b", "indicator--d87b8501-1047-443a-bd31-0af705637c94", "indicator--8966ed9d-8890-402a-a012-127bad2a190d", "indicator--f8a474e5-f70c-4823-81df-0e91732f95ff", "indicator--5c16b0bb-507a-4b75-a501-4dc5dc410393", "indicator--77ed4ad4-3d59-459a-8d41-48882197ca9e", "indicator--bb356bcb-1368-44bf-8be9-254e4cf05599", "indicator--9752b336-4be5-4abf-a84d-e6d421c1ad52", "indicator--1a18c567-af62-48e6-aa21-ca8db212980a", "indicator--cf153e66-d137-4a2e-9709-e3d84039bd3f", "indicator--674fbe0a-1ee8-4a4b-bfd9-ad72516ec830", "indicator--e91a0205-74a3-4e74-96ee-0923b312ce24", "indicator--03294e24-f5bf-42f1-9e68-8d872f8ec05f", "indicator--744b60b7-5a35-4ce9-ae74-b9e3646c829c", "indicator--9ed5e1b2-002a-46a0-9b56-a0676ef55ccf", "indicator--53f321df-1532-4194-b0eb-bd8249024b8c", "indicator--4f742cdb-9ab4-4b5f-9cfe-fe68480a8436", "indicator--5dc0a2ec-4ab5-4847-b0da-47296e96baf6", "indicator--0590ec39-ad6a-4be0-9e0d-c4fd68f38ec0", "indicator--c3dc69a9-2a99-4124-8a9d-6a97f5c25a18", "indicator--b33043a1-5417-4dc7-9dd2-5e0209961c40", "indicator--6e0fafaf-f1e1-487e-9f48-75b0850b03b9", "indicator--befb0011-f68a-4ab3-b2aa-9a1f11596fdf", "indicator--f5da61f3-3fd5-482d-9264-bdf26184074a", "indicator--f6575904-9f43-4574-b1e1-e707919911a4", "indicator--db46d36a-c5c8-43d4-bf27-ac6ebc6b3ee1", "indicator--a388315e-ff59-4d0d-8905-f457cecb92b4", "indicator--65320688-0fd8-4541-a8d6-f9beb411d21a", "indicator--988c8b1e-8ef6-4ebc-a025-ef448098a732", "indicator--3383b236-b63e-49b4-a30c-ed0c7b672804", "indicator--dbf974b7-d31e-4e2f-9a5d-b15f1ceb5e50", "indicator--84eaac16-e510-4e5e-809d-8f880e070e98", "indicator--ba8b184b-3b25-4305-a1ae-67c318d44609", "indicator--8347df99-2b74-4c70-935e-4331cfa79eda", "indicator--f5ae417d-5aa1-4177-8b79-e81f6840d969", "indicator--9f3f1533-a9b6-476a-bd95-a28e03e58b3b", "indicator--e9e06530-14ed-40b9-939f-19c13dfbfeb5", "indicator--f185b33e-e925-4620-8f10-2ce5d17d9b30", "indicator--4036176e-2596-4fec-9b09-2a0f29a8c621", "indicator--7f5a2b89-0ac3-432c-8d76-ce7b8b3cdf95", "indicator--2fb7e71b-365d-4878-b380-ac48183ac1e9", "indicator--05d2d08c-3803-4526-8f62-3338f3c2a0fe", "indicator--9644ac2b-a6e8-4553-8297-364425ba20e0", "indicator--713c0019-8983-480d-ac07-9309878ae007", "indicator--49e79b8e-e144-4053-b464-af7755e3c2a4", "indicator--f875b9e0-8c0b-411d-b1ea-64366d754f68", "indicator--a7fa4d97-df54-4db0-9417-0a7c18a63856", "indicator--0c214f54-244a-40ec-99e0-885a374457ad", "indicator--573c0911-50ce-4bfa-bd0f-5b0b81b5b733", "indicator--15892ff6-5eaf-4e31-95cd-9f50f7924d91", "indicator--a1a07e45-a869-4766-aa28-81d69faff986", "indicator--efa40708-e556-4585-89fc-d3449216aca7", "indicator--e31f12c8-0192-45c9-b9f1-fbaf3fddf940", "indicator--6c59e96a-f320-4819-82cf-e90c88d00855", "indicator--16cea2df-677b-4873-a55d-f39ea50010a3", "indicator--e69601e7-c2c8-4bbf-80bf-661be581c253", "indicator--3a645e3a-fb38-4600-9ab8-5229ecec1903", "indicator--7cfe62e5-f15a-45a0-a983-497b8d14e201", "indicator--90d3a049-1a45-44ad-a077-e038c7588808", "indicator--906caede-f42b-4fcc-9277-20cbadaa01d8", "indicator--ddbfdbbe-9d1b-4a5a-b8c9-acb750ca0bc7", "indicator--89548225-9daf-41a7-bf99-a8011c5e222f", "indicator--0a0eeacf-5599-4e81-8527-4e3997b1569a", "indicator--d66b0731-c105-4aa1-830c-7a3cbf8aaab8", "indicator--208616fa-569a-4480-a1cd-ff73863afd22", "indicator--574708f4-9692-440f-b72f-dec5a6414a61", "indicator--e38a706e-5344-431c-9215-41ec8497707a", "indicator--94fc67bb-6d46-4f2f-b17a-ab308bad6663", "indicator--7d05f745-d6e1-46e3-b37a-4aba3b92ad46", "indicator--f59bf3ef-4032-4a04-8696-ee811ba73c2b", "indicator--cf3d9ea5-69c7-44a0-8a7f-c9a93b0f13be", "indicator--7d3bc2e4-0662-423d-9a35-2d4c061be72f", "indicator--ce7ec9f7-d394-47bc-a909-1b547379c6d6", "indicator--c2c5b71a-8424-4af8-ad66-f285d1bad858", "indicator--d7302aec-c717-4b0d-8ae5-e176cf568e7b", "indicator--64c677fe-486a-4227-ba63-79b23f233365", "indicator--d697f1aa-47ee-4446-8d2c-f454e132f0b0", "indicator--38e01ad6-71c4-4b6f-909e-589b9d02e23f", "indicator--6a5de49f-e81b-4478-acd4-68a73d9ef8ae", "indicator--8a366702-279c-4e2a-b122-490a1b5bb5cf", "indicator--964b0448-45db-45c4-98ef-c7d5854d81fa", "indicator--f9ba4897-f613-4c48-befd-2509f5cd308c", "indicator--3b6765e3-a578-4b0b-a3ab-09996db86636", "indicator--e90fddbf-7ce3-4867-b826-cb07ce4bab7c", "indicator--468f83aa-9583-488e-a454-822994378828", "indicator--c3241428-7d4c-4d7b-a9ef-906087a53e00", "indicator--5318cd45-b581-4691-b25f-9b204973b680", "indicator--3839b24a-6d11-4203-a916-89f4dde531a7", "indicator--eb0523cb-a426-43f2-929f-e4a78feb48bb", "indicator--7239832e-a0ae-4a4a-8dbc-35b9e85de391", "indicator--ba59ef4e-ca0e-4241-ad01-c94e1f78279c", "indicator--88a501ee-c06d-4990-bbf4-c4fa8bced9da", "indicator--0d696710-891d-4985-9f2a-7e8850bd8c05", "indicator--ebbee5ea-fe24-4698-885a-0a5f6e0f49c6", "indicator--e6699b98-6fe7-40e4-839a-3fef31c4afdc", "indicator--70f35024-a1b4-44a9-943f-9d86a8c5dacc", "indicator--09994008-c3eb-4814-b4e4-089f8d26a6a7", "indicator--740addf9-e550-4f5d-ab97-905afb1b6836", "indicator--76b7f434-03a6-4d67-b952-c8660f178c84", "indicator--17443839-f789-4eb3-a9bb-93db875c3d0c", "indicator--ec43a2a9-8cd8-428d-8b05-e66084d9b952", "indicator--226319b7-cec8-4dd1-8b48-3f987351966e", "indicator--6f70b6e8-1f7a-4ba6-8ab1-ab824aa5f174", "indicator--bfa618c9-7868-4eb6-90f8-f05310cac142", "indicator--8f1e9573-b06d-456b-af35-5f0259ec1e0b", "indicator--db5d96fa-b946-4e21-b5d5-d1cfd38b4715", "indicator--6ce3067b-10d1-4814-b3d5-c60dbd8eb54b", "indicator--b9799ca1-cd3a-44ad-9273-c39265ee7a84", "indicator--3729aecf-ad31-403e-a695-eb1ccc0e87e4", "indicator--4cfd6dc6-305e-4c10-ad54-9b229a85d714", "indicator--ccb30ea1-cd34-4266-b6d8-c163765f8afd", "indicator--38b60ed0-8eeb-4fdb-bcab-26bcad17ae79", "indicator--88e80ab3-7f3c-4a67-9e58-0dce7ac3916b", "indicator--119cd28f-31f7-44c7-872f-0fbee7e6d992", "indicator--a6a3f79b-591e-4f7e-ab8b-c4d9211d9f74", "indicator--5436413a-2f65-4ef9-8475-0841f3a4dcd4", "indicator--4ec2bfb2-6f16-4eb6-8466-c8e672f060c9", "indicator--06ce2da3-812f-4258-b7bc-8b331178944c", "indicator--6536d8ef-a656-4259-bac4-a5c59dfa462f", "indicator--6b5f0ea0-4270-47e9-917f-5893e73f0319", "indicator--40cc2a57-aaad-436c-9e8e-29fec47cec6d", "indicator--29c5f954-b4d0-4589-9115-a624d0d57b2b", "indicator--aff8a84a-8980-4f28-9e4a-c3a27e3bee6c", "indicator--53d63c44-7297-4423-a0ba-6a4a5994e358", "indicator--cd316bd3-d8b3-487b-855a-eb25a6e1d199", "indicator--8d0419ba-206d-40fc-a2de-1e62ff08e994", "indicator--aeb075a1-01f8-4b3b-9419-3afccd75913e", "indicator--89dfe511-0f13-4555-8f60-2ce43938aefe", "indicator--8b263b50-e5e2-4b2e-8c7f-2644996120ec", "indicator--2c9586f9-4195-4850-b807-ef0cdcc9f30d", "indicator--a5dec7c8-09ed-440b-9efd-e6c39f1664e4", "indicator--5fe5c8a0-f680-411c-9c74-274c76f2a918", "indicator--c20fa9b0-d5c7-4664-9cac-f30d73f2775b", "indicator--1dd68fa9-61ff-43da-9064-d7c50425d947", "indicator--0a762c79-4b5d-4d2f-95a2-a29a4a5fc346", "indicator--796fcd7c-9317-443a-83e3-2cf54d93dc3e", "indicator--4bdca56b-8a22-43df-bfe6-cab22d712fcb", "indicator--a9751477-82e7-4ce2-81f5-181864ea505f", "indicator--a5b33662-ab26-4e52-ac74-648be7489769", "indicator--535640e7-4f9c-4d43-971c-8321c8f0f2ad", "indicator--32b43124-d236-4415-812d-24f0714b3492", "indicator--de3ecbe9-b252-4a7d-ae5d-171aae3176ca", "indicator--63e066c8-d09a-4a88-8c85-912116a02cb8", "indicator--0a1af7df-4408-4403-96ff-451a7702706f", "indicator--22278e11-8172-44bd-a8fc-0eea925c95e7", "indicator--db6a94c2-af12-4b9e-ac59-fd3e1f557481", "indicator--87eae58d-c403-41b4-b079-9112b4fcbb7e", "indicator--c164da80-7f66-45f8-921d-37ab884c4392", "indicator--20bfe07b-18f1-4dac-85a2-3ee00b15f805", "indicator--b48ae6d6-0f32-47de-86e0-2d89105b2e78", "indicator--696e629e-bc52-43ab-80a6-334a281d5a29", "indicator--24c59b74-d650-4b05-b881-bb5f5153a7b3", "indicator--8f3f6c14-fc51-4512-8386-bcc5d4ab61cc", "indicator--409bd010-bb6d-428d-a57e-73107504bf23", "indicator--04af682f-6ea5-480d-9290-dca363736a62", "indicator--8d7ec274-257f-46b5-add6-a1a7911968c4", "indicator--e4841c5c-a08f-4ad5-9e46-af9a6c8332aa", "indicator--4c9a7b77-ee7e-4995-8bbd-393852140a5a", "indicator--69ee8f88-fca2-4e42-9593-acf70ca9c90d", "indicator--137fdd5d-7143-48f0-9f05-d5299acb628e", "indicator--e8ad8b17-b235-4208-ae79-1af5bc16382e", "indicator--d505480f-030b-4e7c-848f-42d8b8d34bcc", "indicator--74b7d033-3d92-4db1-af33-8a04702a4294", "indicator--b292ef52-0917-434b-9d86-549e3d4f5131", "indicator--34c06268-99b1-4480-bae2-aa698a86d187", "indicator--d0267e3c-e54a-4c29-908d-4929add51d44", "indicator--cd69cca4-09cd-4fe2-bdf8-7c0231623bb5", "indicator--14b5252f-a4b7-48fb-922e-4dd65046f856", "indicator--40d52388-46e2-4798-be55-dba72dcb2a93", "indicator--ec6bde54-90a4-4586-a05e-5640f77fb9b9", "indicator--61ad0d15-28c3-4b1b-b99f-a6ab04c616d6", "indicator--29a68d95-4f7e-490a-9d17-7a5d5fe89362", "indicator--78422100-cfef-45fb-93e9-b19f4b22bf1e", "indicator--c705321e-4cef-4959-9614-5278037d01c5", "indicator--e0a707d8-a208-45f8-a6f7-5cba95baecf5", "indicator--1293cfdd-b9dc-4e32-bf2d-c4357e2741f3", "indicator--23362962-6d05-467c-b4bc-66c5b83c72b3", "indicator--f07d28a9-efe5-4849-90aa-f18755fd8216", "indicator--b2917863-4f88-4609-b199-588c4983e577", "indicator--bfe8ae05-114f-473a-a6bb-a564eb3a7bc0", "indicator--50676239-9868-4aa0-ab38-a807fc8329ce", "indicator--d57456ed-feb2-440e-98cf-61e395cf845c", "indicator--184bd2cc-18de-4ca2-92ce-9f54954b1506", "indicator--040379f7-a6eb-41fa-b52b-dad6782be8a9", "indicator--bf255fc6-50e8-49f1-a0a6-d6bf80165f3d", "indicator--69c7f4f4-c009-48b0-852b-c634b2cb1102", "relationship--4a156618-588d-4fab-ac09-cd5aff707623", "indicator--41941b20-bd6b-40d0-b1e9-40afdbade358", "indicator--81c16ff8-45c5-4714-93ee-8a7c6fd1144a", "indicator--528d3f5e-583f-4385-b23b-5e4fe0696dba", "relationship--abaed623-979f-4306-9d2b-ef27fbf06d90", "indicator--650fe6eb-6a60-4efe-8dbe-2c2a98036a0e", "indicator--576da97e-8032-45c8-ad5f-65d3a1d9a8a5", "indicator--2d40e569-236c-4cd5-8d7f-dedebe8d3f46", "indicator--1ee4133f-543a-4f4a-b61e-c8f1db93a49e", "indicator--c6af1cc7-258b-42cf-a355-f0735cc13ee6", "indicator--231431c5-7dfa-4dc1-9efe-8d29ddd14aaa", "indicator--1ced6206-4635-40a4-a167-4dcab473cf96", "relationship--59b204e6-b1d0-411e-a791-0363b111ad3b", "relationship--202d750d-fee3-408d-a5b9-e18b2d88c3cc", "indicator--6d813d5f-5534-40be-a965-017a7313f0dd", "indicator--689e18dc-6df0-4e00-b0b5-12ae992c9d55", "indicator--27373aed-a300-43da-9a89-0b598cf662e7", "relationship--edcc25e4-1a7c-44e9-94f4-59c22b28a07a", "indicator--88166770-b4a8-4955-a556-dbf39bb56611", "relationship--6ea4e941-8a08-480e-a9b4-0af9a05e5061", "relationship--ff5d7ea2-571b-4829-995f-ca932452965e", "relationship--501e6049-d8cd-4c6d-bcc9-eaa4f85296da", "relationship--4c22cdab-3ebb-4b0f-aaad-60f0b7708d12", "indicator--18dbaf66-5132-441b-a99c-9ba8539bdefa", "indicator--3b8d9ad4-1145-4e62-8a8e-1c33032be872", "indicator--4d8d8507-6fc7-4db2-b16d-a9a541743296", "indicator--e3157193-a47c-4cad-a3ef-27263848c525", "indicator--3ff82c66-8f7f-4cf7-bc7a-86ba75beda04", "relationship--9a92eb2a-8b5c-48c2-b4c8-f27ee5273782", "relationship--6c52a0d0-6568-49a3-a128-3f04942c9b13", "indicator--a7392583-4318-45ea-bde5-24f27a59a933", "relationship--14f8bc20-2071-4fda-b6d7-dc05ada2a6e2", "relationship--9330fa64-3870-49ce-a505-8180646e53b1", "indicator--e935704f-061b-45f6-8125-0e3913628478", "indicator--b6a6c1d3-d590-47a3-a164-f2b6a4472763", "indicator--3c866840-b890-4072-a9a2-79e6894b55f4", "indicator--2cf8479f-4603-4052-887e-0253ad9fd727", "indicator--6735bd8f-2968-4161-b7a4-0490f062ba84", "indicator--97e939d8-dd28-40da-9629-cf607b457d76", "indicator--b017e3e7-47d9-47d4-ad87-1db9d461203a", "indicator--7a0838bc-6ec4-4922-9992-45d5dbadda4f", "relationship--9c92680e-fb7d-43ed-9553-e1482b693142", "relationship--faf1f6b8-d0a3-4c50-aa82-d0a6342d84aa", "indicator--9a36023b-ff66-4aab-935c-4dc1976267df", "relationship--f826e980-7526-4f63-8aeb-3be54fd764dd", "indicator--3e5573c7-166b-4937-b895-dc8950d40485", "indicator--1358e55b-efb2-4c52-8436-6c35ccc028a6", "indicator--01cb2f83-c3dc-4d2b-bcc0-d9b15a7b6c1d", "indicator--48aa9f42-39b3-4596-bd23-163dd8a6c679", "indicator--6f623d1b-33d5-4d0c-818d-fcdaf37a2409", "relationship--d6597a94-9fea-4247-8108-98b3ab3d87e6", "relationship--e34a4643-b080-4079-b56c-22464fc74041", "relationship--16eb26a4-c3d6-467d-a516-21824d02a7fc", "relationship--8ad61e69-04e8-4aa9-bd5c-5f83348b7739", "relationship--d87c37fb-94e1-4dad-9eec-85d5e560e73e", "relationship--79cae864-11b2-47df-9697-2c4e2ce8c10b", "indicator--94f322d8-245c-42f0-a6b4-131257b0baeb", "indicator--5cfefa6d-5118-4346-8328-262861833ef0", "indicator--9fd3f2a0-67b1-421e-ad04-de8cbc52a738", "indicator--41de66f0-522c-4ba8-bea1-835133f618d0", "indicator--c280f406-597e-4926-a9bb-930860150b10", "relationship--f60909d3-ebc3-4836-b5ca-f23071dd73f6", "relationship--a888792e-5e48-4a8f-8df4-0c6b8dfe8f9d", "relationship--fca2fda5-7d31-476f-9a8b-d477ccb493fb", "relationship--326f7e9a-1707-4926-8230-5cb8b0051755", "indicator--56c1affc-7ceb-42cf-8d84-5d60f5016b09", "indicator--7ad0543a-9511-468d-bab0-3d57365d6937", "indicator--03a4145c-9f4d-4c0e-839e-5b966d524dc6", "indicator--8b8282d4-1288-48b6-94e2-29889d520978", "indicator--f970c137-12af-4fcd-a3a4-0bfd385cd025", "relationship--487c3c14-3e93-4497-b7fe-d4adde4b3f96", "relationship--d1193150-2101-45db-afe8-45fb0c987b87", "relationship--e16f7d28-3a5f-4697-8f61-235468519be7", "relationship--15596f62-daf4-4409-8672-2861f1d78935", "indicator--a99158d9-718a-4e33-9053-4f7f862be2df", "relationship--67f0cbb2-523a-4c53-befd-155634955528", "relationship--f4c0273b-fdcd-4920-a961-ad3b53f19ce6", "relationship--99ecb9dc-e5c8-4a54-94dc-6eed6a306f13", "relationship--852323b1-593f-4fe0-bca5-cf7b98fdbc69", "indicator--0538282f-38b7-4a17-9b14-fb786d1581dd", "relationship--d77223a2-d225-4f1d-ad94-1dcee753c8a4", "relationship--e237e117-a2a9-4f8a-b78d-80945b0e078c", "indicator--9668fc42-b0f2-4a12-aca1-055a0591c836", "indicator--b7ba8fd7-b0e8-4177-a7eb-ae76bef0c5dc", "indicator--84e781a0-c31e-4d85-98b0-cb9e54e2911f", "indicator--d7c69558-f1ca-4db0-804b-1f35ca389d04", "indicator--0c4f1001-e683-4964-9f3c-02722bc718dc", "indicator--bd874c5f-ff51-450c-aeb4-c527169f9572", "indicator--46efe40e-f164-4728-829f-5d0f70f50ef9", "relationship--72a10c2e-bb1d-48b6-830b-fa953dd7d9a8", "relationship--211ad433-2386-4cdb-b8ec-07d4aadc4292", "relationship--59b194af-a6a5-43e7-90d6-43bb1c78e648", "relationship--4295db9c-9d26-451c-9282-3c521b586c62", "indicator--26496bab-affb-4ae1-baf5-88ce0cfd5742", "relationship--44ff3dc4-9d4f-4918-b72a-b5745ce61c8b", "relationship--c39e8da6-5152-4dfe-a89f-e18b12f49e4b", "relationship--85941995-aa04-48c2-87c6-a7ac6a83c780", "relationship--5a3da629-848a-45dd-a6e3-57bcb9e6d49f", "indicator--6230bbe0-12c9-4046-92b1-40cbdb29e9d4", "relationship--eeb094ee-3571-42e6-b851-a9dfdd13488f", "relationship--1ede6cfe-8582-45c8-80c8-e1e909fbf1af", "relationship--5af8d16d-b9b4-4b1d-96c4-8af627979ca6", "relationship--10bff3ae-6389-4db7-980f-438c44f06614", "indicator--07df97d2-5a92-46c9-8866-f5baa0906e38", "indicator--a18a8a1a-8242-4e2b-8b82-651191a18669", "indicator--9e07cc29-826e-40d9-b370-7ab1e1462f61", "indicator--e53ffb7b-db0b-4a20-9d18-2dc7cb251559", "indicator--07edcda7-9ef2-457f-9860-b560e2a534f5", "indicator--b98551a1-3ed1-4b68-8239-8dc270f33efd", "indicator--5f62e715-384e-4ae0-99dc-c1b01ecf632e", "indicator--405d7480-4ac7-4fb7-a1ce-b9a187fa3d38", "indicator--c9f5d43f-f968-4007-ba69-952fcc18d39d", "indicator--fb05de2f-41fe-4b63-86f8-8acc6b0dae3c", "relationship--b5b955e1-3a15-41a4-a5b2-c403cf4ac8c7", "relationship--9b774193-0ad9-4e5e-9493-77f28bb9aeef", "relationship--e0342d50-bdb9-4c6a-911f-72ed62595187", "relationship--4188d42f-597c-47e2-a67d-d0d78fd7b545", "indicator--cfadcff5-21d6-4773-94de-81ea189211f5", "indicator--a013b692-0976-4cd5-a689-d820b0136be6", "indicator--1a7eb812-0ada-4799-bd58-1354504159f9", "indicator--790be167-f7a3-4fd5-af87-fd2794238e70", "indicator--f654ad2b-16a0-415b-a846-a6dc0f5b56bb", "indicator--981fc9a7-418b-4579-9b17-4edab10cd21d", "indicator--7c957856-aa5f-44e9-9083-79a2336c2fe2", "relationship--6f59ccec-a0fe-47a8-9729-10cedcc47dae", "relationship--46849ceb-17bc-4ff6-a040-db8f9fc042ae", "relationship--4f36cc3b-7ab9-4655-9eb6-04a9db7c48cc", "relationship--f96574db-0bdb-4c30-a728-605a675667a8", "relationship--5d62aab4-9af6-4fc3-983a-5a3e06c8f087", "indicator--d9ae1f0b-4422-4ac4-b47f-5aefcfbf1a7a", "indicator--5bfe2735-5012-4bcf-af44-e68d51e2d01d", "indicator--d9f21027-8723-4994-b368-d055f6c5c911", "indicator--d5d5fc9f-269e-488b-8adf-a8ec0ee8f747", "indicator--75015f51-2d11-4e9a-99ed-ceffa89c0294", "indicator--d7489736-a5b2-4329-86cf-ed2a26a73b96", "indicator--cc874d9e-34ed-4298-9d0d-663a28492d97", "indicator--bbf6ca29-e3b4-42db-9b6e-156a9953c5ac", "indicator--38893ee7-412a-4b30-a6be-916e0a953d32", "indicator--c3ec4162-0ab4-4e35-9da6-60519074b5db", "indicator--8fdf8084-3a25-456a-9a5a-f94f4fb5fcde", "indicator--09fca2f7-aa56-4ab4-8f53-d9683d348888", "indicator--8a146968-c6d9-4287-9873-db4adc44cd11", "indicator--dc575269-b6d8-4185-8874-8322ef602a76", "indicator--67fc6983-7242-4cd0-a543-6a3131e52ab8", "indicator--7ed028b7-660a-4daa-940f-b4d446d9723a", "indicator--854fdb60-51bd-4080-a1fd-4595567943b8", "indicator--07f2ec22-54d0-4dfa-9e5f-aaf9ef5926ba", "indicator--60016df4-f778-4af0-8410-0d5067f7ba48", "indicator--d7d59824-a8fb-49e4-98cd-61d00b75af57", "indicator--4b49ed16-528d-4fc5-bf08-0110409f26bb", "indicator--f556e1b3-52e1-4bd1-a09a-e14b8eeba3c9", "indicator--ec65c40c-24c1-4009-9e4b-94a6fd2218ab", "indicator--89ebaf4a-e1be-4811-bf48-79ad621b29f6", "indicator--ccdf7a01-a8ed-484f-9012-62b8079baf44", "indicator--88bbf05d-869f-4b50-a338-91f165296332", "indicator--147f0d83-e329-4566-aba6-4022e567a56f", "indicator--f90d41ed-0094-490b-979e-1cdf9662b05f", "indicator--b0d8ea4a-82c2-4bba-93e0-0582917ba76f", "indicator--d40facaa-d76d-4726-acaa-e6a7189998f1", "indicator--00bfd03c-5235-4e59-bcb3-f217d45cbda9", "indicator--7582527b-7b7c-4b5a-9ce4-68afa8ffe24e", "indicator--e5380364-8285-4c9e-96c4-89260f065b1d", "indicator--39d1bc85-09ae-4c4f-9d86-2439d066eeaa", "indicator--fbcbe1f0-e287-4973-8dfe-af5d375c3974", "indicator--4acc4882-9ef1-4474-9da8-751a99583d56", "indicator--6013bf1a-9e47-4727-b7a9-04a6e2b03cc1", "indicator--ac72530c-c8a7-4d50-a378-74f5b9c3543c", "indicator--e535df0c-19d8-483d-99dd-2072c2fce34a", "indicator--0aef3b00-fd6a-4620-ab53-27a9f22fffa5", "indicator--6356b591-b199-4899-8fb7-7c7a2b6b42e4", "indicator--b7f2a379-4373-44ce-ad0d-83f06ba8d7b9", "indicator--180c1495-02e0-4a9e-ad60-72c05fe12792", "indicator--30e20592-0e83-4e5d-9c6c-e6e05306eda3", "indicator--838cd65c-ba1e-4a6a-9311-25deda47c76f", "indicator--40831bc5-0872-4ae4-b4d7-9c11af944126", "indicator--41d37138-382f-4dfd-955c-1f39dd125946", "indicator--cfe6942a-5ba6-4431-9e89-a723032b5e96", "indicator--3b502cdb-505f-4f94-905e-ed27ee5f015b", "indicator--b4dbd871-ce48-4fd1-8322-c80c6c7a0323", "indicator--b616d529-9c92-461b-bdb8-cbc04388f5e9", "indicator--756e9cb7-fab8-401c-86d0-e1fd42c72339", "indicator--4f7f6c7c-bfc5-4a54-acb3-aa9af6990eb1", "indicator--6a24b150-b375-47a8-a3c9-4e6396935160", "indicator--5710ec63-208a-498f-b878-2fdec8679db1", "indicator--3a09635c-2b37-4944-84c7-051b67ae866a", "indicator--a16f8141-879f-4ab7-beab-7385194558c8", "indicator--30ea995c-7885-4814-81fb-3ff3eddd6611", "indicator--3f0a1c76-ef94-4ffb-bbde-1ac71ebbdb6b", "indicator--b38fae4f-d489-4290-83af-de2dc30987b0", "indicator--ff98fa37-7d7c-499e-90bd-6a4482249ca1", "indicator--69b7d6c0-298b-4f72-8e89-5c8049a859ec", "indicator--9165c42a-7188-409e-b7c8-06dddbcb4580", "indicator--1ae1dccd-7d5d-499b-862b-99eec1194479", "indicator--fb50e454-7f3a-40a3-92e5-64127ea0dad5", "indicator--22d2107d-3b16-4c2a-9143-59fa8361a217", "indicator--001a4a34-91a6-4de1-99ef-b11b7814c8a4", "indicator--69dc4cbd-91a9-4dbf-a5ea-6269ca978982", "indicator--e91bfb5c-6f2c-443d-87e2-7b14d61ef203", "indicator--8f0b6f08-5363-42cb-a42f-67382bb9e459", "indicator--b396f90f-2911-41db-89f2-440553c8ca83", "indicator--504d3288-c1c1-4273-8426-b07851c9ef4c", "indicator--9488b163-83b2-4706-a44d-3daba11fa4d1", "indicator--0ce0ea07-00eb-4bde-8153-e532bcec23c7", "indicator--1c93fe6e-099f-41d5-a224-96e20b3d3b8b", "indicator--04d9f9f8-546a-44dc-a2c1-32b8675ec0ad", "indicator--6d38d4dc-2796-41d6-8823-6d20d5e61592", "indicator--3bea5a3a-0b1c-40c6-adc6-f9b9b393eb69", "indicator--8ee7241a-3de2-4303-a450-4df1ebe4fe8a", "indicator--7d9cadbd-1a8b-489b-ba2d-7508795f83e3", "indicator--d22092f4-f3d9-47ed-96bb-929f4054ab2a", "indicator--960959ba-1339-4de7-917e-03449fc26548", "indicator--6f2eccb4-f268-4099-bddc-3fae73f2bbb7", "indicator--f2180651-377c-4e01-aaeb-5c1eb278dbf0", "indicator--03ac238d-318a-4c7c-a798-b289f8aa01f0", "indicator--da666ac7-e7d3-45c5-8dd3-03eda00ed71f", "indicator--eafe74fe-bd0b-4798-bc8b-2210fc7637b9", "indicator--f3073a4a-ee29-4831-b95b-513de8345be9", "indicator--f2e65e0c-4ffe-444d-a3bd-3c423bc9769f", "indicator--ad29b1a7-7101-44ec-9df4-ef1cccde4de7", "indicator--a6854208-784c-4c5b-9b80-3c1cbd3d6e23", "indicator--eee35b9a-cc9b-4f04-abd8-bf8cb73cc1e8", "indicator--25883470-c774-43a3-a7b3-e16148b813da", "indicator--c43ddd9a-9a7b-4511-bb88-505ec661c5d7", "indicator--91edc07d-1285-4a34-b55b-14bda1d115c7", "indicator--ae8ca64d-bf00-49d9-9096-2f17111ae80c", "indicator--bdf6d0d3-9a09-4e89-ad3f-e31c25eb3a9f", "indicator--e0b34231-7e21-4d34-b453-a8e1713eba8a", "indicator--b09b16a9-8572-482c-b761-0d248b2f0995", "indicator--b7e908a1-fcdf-4c3b-8584-71d7b6f92e6e", "indicator--5573b892-d067-488e-80b8-a0cf3441ba5d", "indicator--30e8f008-c996-4b86-8f8f-499d9b56c982", "indicator--2db19150-69fd-40d8-b554-37f5f6723fc8", "indicator--cdca84cb-aae3-44ef-91cf-7d57495b77df", "indicator--faefdb1b-fa6d-459b-a7c8-f6815fca3135", "indicator--77631ed7-4e0f-45c1-ae6e-70e2b1f74ec6", "indicator--100ff346-9cd7-4420-a2f8-05758d3bac07", "indicator--e8db0d03-e353-4d7d-bd0f-fad42fc2df67", "indicator--f71082b2-ac9f-4cde-a0c4-6ce91e9b616a", "indicator--20f4887b-abee-4d78-8bd0-13f91d4bb74d", "indicator--be9d79ac-24d6-4020-af80-48d614ac0163", "indicator--6b701ced-d83b-40da-b972-868d7f3d2ec4", "indicator--f350cb5a-f3f3-4958-ae93-c6067f56c3b9", "indicator--8c038a24-6afa-443e-866c-52218b97469b", "indicator--aa310bba-193c-4f7e-a28e-69d2f1827c92", "indicator--71a28822-5a98-4a95-ba64-a09c0884dc68", "indicator--b78de6ba-388b-4a5b-a08c-5ea111cd1521", "indicator--38a1d544-b2e9-40a0-8e8a-637406ba3ecb", "indicator--6f02e030-6207-443c-aa84-8bde3dc29f45", "indicator--0605f310-9e20-4957-88e0-1ccb9cc72de5", "indicator--16f6e8cb-798c-4c1c-803d-b1cb2dcd141b", "indicator--ab29f8e1-e5ff-4a0c-bee1-eea6e20f4ed1", "indicator--7f8e4abf-5566-4624-93d3-f19f7bd3dd0d", "indicator--f33c511f-d435-4436-abc9-4913ca4c1bd1", "indicator--0bb51753-472e-4f90-8971-3724812029a3", "indicator--30af3253-be1d-41d7-be1f-c5c74f655f25", "indicator--5e76ca47-7ba9-4698-9393-a6cc5be3b494", "indicator--ea4e3aa7-3413-4b28-9743-9379bda35bf3", "indicator--9e4da502-929f-4f1e-8c91-3fe476c511a6", "indicator--57ccd310-f359-4e5d-ab06-a975d7f49c57", "indicator--e970985b-ce3e-4446-8742-3934405d8232", "indicator--3e9fc631-9d06-45f2-80a7-7748535270fb", "indicator--5fd6382b-7841-485f-b7ca-99767bdff9ca", "indicator--6e9c8b2b-0dc0-4da7-9c2d-83eb2defcd80", "indicator--48f5d9c4-7175-4079-9cb6-d8198f933e70", "indicator--85f5426a-b547-419f-a6c9-814c5cf31029", "indicator--4325b1be-82e7-4335-9045-c839e3a7f504", "indicator--bdb37e7b-b68d-44b1-b0a0-09c6032e84ba", "indicator--34f0fc83-833f-461a-8bd0-6fe843b195fa", "indicator--b49283cb-634d-4bc2-b44b-bf82ca27c48e", "indicator--641f2c56-6a78-43a5-aa7e-42dd8a1fd636", "indicator--f9101c86-ca34-47ba-bf86-ba78b128825e", "indicator--5017b061-2b74-47ce-8e11-f2474a516691", "indicator--ffc2e59d-4f65-4855-bf16-3add7e60a96c", "indicator--45b6b73f-87fc-4241-afc9-b3f9d3f3bd61", "indicator--79fb1a19-862b-4feb-98e6-be61d1ad9eac", "indicator--70629bec-17ff-4cb2-a095-0be47029e494", "indicator--8d6d500d-7c23-4839-a52c-376b973e3000", "indicator--7fbdf6d7-3451-48b4-a2ed-47b19fd0ea75", "indicator--b94bcaf4-94ad-4b2a-810c-83d58671bdc3", "indicator--5416ad4b-72b0-47c2-af6a-f1b1b658d9b1", "indicator--2e90c4ee-4808-408b-9fd1-b95d54bb405c", "indicator--93ff4568-7582-4029-b5f4-dd040eb5bfc1", "indicator--cece63bc-e005-4a8f-be3a-fd5c284d5f16", "indicator--17c092d7-37a2-4c56-8381-91d83f1f6ca0", "indicator--cbe771d6-01b6-4c8b-84e1-1f790e3b6bc7", "indicator--22c42df5-e307-4d34-a2d8-dda2abfc2fc3", "indicator--30cd1501-9c5b-4d70-95c6-c4c58cf4fb5c", "indicator--0bbccab4-3791-4671-a372-38d9ba655b6c", "indicator--98345e45-7489-4c66-91f3-68f49791fea7", "indicator--808e37ff-970e-43d3-b2ff-957e92c747ff", "indicator--bc9a06cc-20cc-4ae8-8c96-ebf747b2a312", "indicator--03c664b0-e0fc-49c9-bba3-1fe7c9b84597", "indicator--b1ec9318-3083-4436-9da6-43ee99c35b21", "indicator--32ca91ce-9249-433a-b7b6-fb0b45d5593b", "indicator--20a67b38-a5ce-442b-9531-9b7e0c64f1c5", "indicator--2a6f15ee-db1b-4d48-a527-11019fd27bb4", "indicator--4838fedd-3a4b-49af-932e-d9cb317e0975", "indicator--28f1b60c-b202-46a6-958d-ad9cb9fd9629", "indicator--a594ba04-efe2-459d-b01c-98d915a2b231", "indicator--2f9764d3-690e-49ba-b95f-a863d426badf", "indicator--847e5e28-8388-484d-a0a4-8a14b4f9126c", "indicator--9e6b52aa-1a6d-4859-8cae-9bb1a79bb8f9", "indicator--6a921e31-e5bd-4cb2-9656-9be2b1a937ad", "indicator--e2b81202-be82-4161-84dd-d923af4dc4f2", "indicator--8ba5555d-a466-4944-9053-f834c07cfa71", "indicator--27c9cd83-9661-45f5-8065-8c159df64bbb", "indicator--43216858-7dea-4539-b88b-fae228881471", "indicator--a2c0b07b-8721-4fff-9e08-5f3963d8eb70", "indicator--ef791596-ca14-4c15-9309-dc4058e5e09a", "indicator--915b9922-c14f-4d9a-a018-69f4af75c82d", "indicator--b9a248e8-395b-49b0-a064-28228f596424", "indicator--6d4a90e6-afcf-49fa-a735-1278e9d1933f", "indicator--b2f03d47-cff4-4102-938c-fe07be81b64b", "indicator--81c36858-f8ac-4f75-9eb1-9179c67cc45c", "indicator--847809b5-8489-47b1-85cf-8f4e31dcd053", "indicator--9c5a0d94-a010-4a1a-b004-c5940d597f59", "indicator--329fa3ce-7f11-42f4-ba24-0865c0640046", "indicator--8affce5e-c66a-4fc4-867a-01b142483fcf", "indicator--ceb0453a-cc88-4605-9fe0-2ce02eda704e", "indicator--6798b51d-d8df-484a-8659-477c4a9f50b3", "indicator--974ad2da-9d52-4c8c-8c14-36953dfa34c5", "indicator--8f7d817d-268b-4454-9f9a-2fe5b8b3f796", "indicator--1c01a063-25ae-49f1-833a-e3347d08f333", "indicator--b3276502-0395-46dd-a930-809d9a61932e", "indicator--cfd5cfc6-6dec-4005-8e9a-d654dc13676a", "indicator--2db9ea3d-0480-4fdb-b609-dff0f630c0e9", "indicator--079f13de-650c-4363-a4ce-f00be1029cd4", "indicator--006dc597-e9b1-42db-8618-1f3bed3f3a98", "indicator--5360cf87-2e85-467b-a7fb-131a0b6edb17", "indicator--fd643fdd-d64d-4fc7-b979-c891120ed7e1", "indicator--4df26660-fd5a-4caa-9664-34112ff64eaa", "indicator--bfd375e8-16f1-4c91-8dd1-92b5a8bc96c6", "indicator--f61f700b-b90a-4284-940c-88108ec721dd", "indicator--dd33112d-be27-4335-8f0b-e0eb86d44cb1", "indicator--7f0f377f-4b8c-4ccf-93bc-6066ce6adc26", "indicator--b8c49e5d-bb43-4541-9fe2-0f418077e791", "indicator--8c43da68-9c76-4d83-9408-bc5be0d70945", "indicator--574cf473-c429-4846-ad6a-ad9cfb80299a", "indicator--157ec47b-e90f-4220-83ef-d81e5415ac96", "indicator--0d43f1c4-b9b7-43d5-beeb-f9df56560b4b", "indicator--1d649c70-03e0-404c-a04e-cb6a0e6b4607", "indicator--8e57bc28-fe5c-4119-89cb-1d11ebd0a4ea", "indicator--a250caa9-3791-4fd3-abf7-228dc04c2acf", "indicator--18e3078f-4027-45b5-ae5b-ef5b49747e8f", "indicator--8af26f09-9d36-4b69-b4e5-a4d3caf71fb9", "indicator--bb98985a-3ae7-4e2f-9593-45a79039ebae", "indicator--6f57b410-cbac-49d8-8d48-23cedff8568e", "indicator--ac6693c1-3e14-4665-af32-8a872e8618c6", "indicator--3d6d0507-a023-479f-a779-c337d631900e", "indicator--fae5d330-25cb-4116-a547-86fa460f8a48", "indicator--56431a58-43f0-4fb7-bed3-01fc9b4d1a3c", "indicator--1e775ef8-41c1-4149-a16f-7eda0a9f2af3", "indicator--0d74e78b-53c3-4ee9-9082-2cc7258a6eb1", "indicator--87ede879-b56d-443c-8807-665752b29386", "indicator--25775e6d-9739-4d9f-86b0-1f39cf4f830f", "indicator--b0e7fe32-8f0c-4068-a5a3-b3274ae5da95", "indicator--f485814e-eb2d-4aee-a813-67a70bf119bb", "indicator--d026aea9-8778-470f-b527-dc8c2d1a7718", "indicator--d2c364f8-38a5-4bab-8d51-fb7ee98341c2", "indicator--1cb22830-4ba4-483a-9dff-3ae547c7bce3", "indicator--d41943f0-cfb6-4167-b3b4-4d1d9731c869", "indicator--2664611a-e62e-484f-b90d-4466b1ec6408", "indicator--d538179b-92c9-4361-9a67-908b09b3bb3a", "indicator--c59830a7-1f3a-442b-950b-0040b3616b0c", "indicator--55c3de53-f9f1-4045-ad11-2e5463eb0096", "indicator--e31ba406-a503-4f74-9a3c-ba864f84a901", "indicator--0c378dbb-7114-4b87-891d-ef2801adc107", "indicator--166045fc-c986-421e-b0f9-b28811ad8214", "indicator--cfd84b1f-0286-456b-8df3-7953d73081c5", "indicator--603be068-30d0-4d22-8ade-c8e703ebc5ff", "indicator--f962f403-6565-4300-834b-6e6fad23250b", "indicator--655dd266-d621-414b-989f-dad294eac1b4", "indicator--70a5a0c8-3102-4b81-9a39-7f6d966172c4", "indicator--8897bd07-5f93-41db-a637-d808c9cd1092", "indicator--0563c9cf-7057-498d-b46f-8a3f30908785", "indicator--61f79e61-ae57-4008-ba6e-c9323a3bd15b", "indicator--c24b2a60-b278-40d9-be4e-ddcc43c5a574", "indicator--a049b9a6-c392-41da-93ca-d0f77dc25a2e", "indicator--957fd419-8d63-4152-a040-b2d77e1f5f04", "indicator--5f7fde48-52f4-48a5-801f-b54a7598af42", "indicator--dd552cb1-d78f-4049-9bd1-eb8bdcfe306d", "indicator--0ac21d5d-1712-4024-8ed3-77f8ffef070a", "indicator--76bfb3c8-3759-4ffa-9fad-b0ecdee011e5", "indicator--7a342d53-dfe3-4df4-b1cf-960147e51220", "indicator--1df6c6f3-1be4-4f5f-9326-1298e354921b", "indicator--02584b90-50b2-4ac5-9161-244a8163bb00", "indicator--54f37b4c-7c21-448b-8dc1-78f47d91dfb2", "indicator--f81ef9a3-7a8d-4c3f-b8da-3cfe3b28e9ca", "indicator--25bd6a93-1d97-41c6-b903-ecfb6de626c8", "indicator--1fdfefa2-3f54-47d9-b562-5e4c57d5f451", "indicator--ea145aab-9797-4782-a5f4-14ee53978a3f", "indicator--53d02345-49a4-41a6-a782-a2cd6e5ebaa3", "indicator--fdfd3479-1733-4eb3-ac9a-af8f9710a64b", "indicator--2c1ea2fb-1b17-427f-9bc9-649e8a9748e1", "indicator--1ffcb49a-33ea-49cf-8835-81658f9980ce", "indicator--87feb2c4-1350-4e94-b392-8076ab0b4098", "indicator--fc6b9fe3-783a-4ddf-9553-8ac6e08090fe", "indicator--d2b29e0c-c672-4ee7-8977-25fd6d4ff444", "indicator--656139ae-d1ea-4eb2-a885-ee9a2e13d926", "indicator--96e14ef2-0647-4e82-a3e1-61e980f878ee", "indicator--4450d400-67a7-4a59-80a4-8e6b9dde4d65", "indicator--97f329b5-24f6-4775-afc4-d74f40a788fd", "indicator--cebc274a-2c63-4fca-92c7-abf279d9dd99", "indicator--a33a074a-9cd7-4969-a98e-42c5e66a4989", "indicator--2b0e329e-bb32-49a0-9106-fa16e02b2242", "indicator--41b8a84b-e20c-4daf-9d05-685d82eb5998", "indicator--17a44d33-0462-4642-adf3-2bbdc0d2bcd7", "indicator--b2cc2e67-8c7c-49fd-ac64-d65b8105cd75", "indicator--15ba00d3-d00c-4700-b15a-6489a8097a88", "indicator--836f48db-7a81-4472-a476-f0e1f6b2e9d3", "indicator--2b774f53-a375-40eb-9d0d-511c5ae31253", "indicator--7b5fbd5f-ac86-45fc-a75c-32c1b22a0efa", "indicator--077ddd91-1d4e-448d-b9bb-6e3d70ac8364", "indicator--358be385-80b3-479e-8dc3-a090a1ff9bed", "indicator--6d51f4b6-5397-413b-98b8-5bbe76c5f125", "indicator--a6116e9f-a588-4644-b380-4fe3753eba82", "indicator--7867a6ee-45f3-4468-97a1-babca2371de0", "indicator--f129a3ce-bde8-49dd-a582-cfd208180e59", "indicator--a6028d75-d982-48cb-a44b-ff5012dce977", "indicator--834c5c5c-1b8a-432a-aa7f-ffb104b2ed24", "indicator--49ccdc61-9324-4659-8da2-8648f41c0298", "indicator--f2d750ef-f623-4348-85e1-aee0a8333595", "indicator--9c0f3eae-9373-43ab-a000-6ed68d93a521", "indicator--acf7c47f-c32c-4015-bc15-1a5990df12cd", "indicator--69743beb-ac0c-496f-b2f7-897c1f683c2f", "indicator--5675ce2b-c527-427f-86ea-66ca332cf00e", "indicator--8f6e93ae-fbcc-405e-b554-84ddfcd2a40a", "indicator--04cc7cb3-3c71-4f0d-89d8-7b5f5f88ba43", "indicator--2215fbca-0d89-43f3-9e63-cdd2afa36fe9", "indicator--9fcce271-4f6f-4e9a-a1cc-082cd4ba2efb", "indicator--b239c240-216e-4c00-a27a-17ea75385198", "indicator--f80cb446-1247-476e-b8a2-b1bf9df8a81a", "indicator--4ff29633-f03b-43ab-90ac-e1c4b5acbdde", "indicator--43b79cdd-83f1-44d3-b74b-6140affbf799", "indicator--d4da3061-c7ab-4681-adb1-c956611475b2", "indicator--ced0ec6c-97e4-482a-8ef0-ee2a29633353", "indicator--0f1a1937-3d1f-453a-aa7f-5e740d626b15", "indicator--52bc400e-7d3d-40c1-8d99-8e51c965dbdc", "indicator--52a91ea6-f9f6-4796-946a-23804aef58c8", "indicator--6a5bcc28-ea55-4ad4-959c-2ceb7e0ee566", "indicator--611210b0-e1c1-478b-b0b6-3636ea79a830", "indicator--2d966788-4b7f-4410-93e8-d8369c02feab", "indicator--45af4cda-33f2-4308-ab61-7b760788a954", "indicator--42bcbb30-7913-4ef9-aedd-6c3fa3fe5a87", "indicator--5004d177-ebb3-4e0d-b266-4c517f6da6c3", "indicator--e84fce4b-fc44-4177-a0a0-033f76ac9aec", "indicator--84c62a30-bdaf-45b7-adac-02936ce93dbb", "indicator--9ab2b608-8ef6-465a-a45d-0f38714feecb", "indicator--3f494d14-75d6-4173-8ec9-1aec02812d00", "indicator--7330328e-e65c-493c-bd6f-8ab4fdf7e8ac", "indicator--3be4957b-7f8d-48e3-b4e1-bd42d578f957", "indicator--e4946867-ab25-438c-a45e-799189988e1b", "indicator--726456d1-69ff-48f1-8d6f-9e4d2bce5856", "indicator--95d47ed9-0bda-47df-b770-90a0d304ccaa", "indicator--64ef7b50-9b41-42d0-894c-b466d51848fb", "indicator--4d8cfe0f-3a04-4489-b679-f9f740c0e400", "indicator--c1380b52-0c88-4cc9-87b1-4092a1f2d51c", "indicator--7ec6a386-5935-41be-adb6-b814ba631506", "indicator--4f566920-f496-45f9-9cbd-b29a07c9c2e0", "indicator--a8367204-19dd-4551-8acc-e36facf181fb", "indicator--92ea673e-7832-41a4-99a3-33e77595c19e", "indicator--45f39259-c230-480d-9471-5b58b65d7e56", "indicator--f27c47e0-9b53-439f-a59b-5958ccf9c56c", "indicator--aeb3a849-bf39-426d-8f03-f9fff8491bb6", "indicator--7971af31-40da-4b26-818e-452fdea253db", "indicator--f03ad11d-7efd-458d-bdcb-694010537633", "indicator--ab8ecd22-6af8-4b90-bedc-b4f132e50c84", "indicator--2a48bc11-0ac0-468c-9b66-a95f3bec4c6c", "indicator--84473d26-55dc-4d7f-a8b4-4a018d500a4c", "indicator--a5b86d80-955b-45b9-84a3-613a8f25a236", "indicator--298bbbda-0413-4257-b467-65821673dcba", "indicator--31328681-dcd4-480b-8acf-094fa492947f", "indicator--fddcf279-51c1-422d-b066-62c3f81538e6", "indicator--c23e1790-425a-4f76-aab8-62e86f1afcc3", "indicator--0be6bac1-980e-4264-95a9-e2e377c997a3", "indicator--ad254563-11a7-465e-84e7-09975bd36ea5", "indicator--e82b6b56-33de-4f61-afd8-132acf00cba2", "indicator--35584c17-10be-40c0-a477-9e3f683eb148", "indicator--c7c9aa46-febb-47bc-ad6c-cd0780a6d99f", "indicator--556f6984-fb9c-413f-8cd9-5f7e8e3fe6b7", "indicator--4d9b8961-86b3-41e5-9898-94b2df0a9561", "indicator--f11b5bc5-bebd-4875-9f17-0a765ae93302", "indicator--d1f40ca3-56f6-4e08-9c74-9788da28a731", "indicator--4133dc96-3a15-4239-9a57-2f121d2301dd", "indicator--de4c20b1-ffc5-4359-b289-85f1cc9c3e51", "indicator--ffb95707-b2c3-4b08-8bc6-6f50dc13545d", "indicator--ce9fb9de-bd4f-4ee4-ab0b-d301c0efe63a", "indicator--17ed4099-f5ea-4a5f-8955-d2f14a47d4de", "indicator--959dfc8e-c6d2-4af3-b89f-60259d457c91", "indicator--5d15eb7d-9714-4c7f-a92b-9c028d1d1b4d", "indicator--9868b174-b458-485e-a9a5-0764eb94bd44", "indicator--30f4a294-6787-4fa2-9ddf-38183e9922b8", "indicator--54688193-ce02-4fa1-b8b1-aa0608ed90e2", "indicator--1a00408a-3c17-4b63-999e-d284791a7a69", "indicator--8dd1c8e7-c4a0-401d-9e79-c3acbb752992", "indicator--512cd3a5-16a2-4137-be1a-d87632f3df5e", "indicator--057429c1-67d3-4c9a-a5f0-3e78c15c7809", "indicator--5ed624f4-70f3-4688-8c5c-e8df396071c2", "indicator--de4af172-c8de-41fd-af96-b65f6677e88d", "indicator--e86bae84-41a1-4423-8ee1-367e6d7d7dce", "indicator--fa63335a-53ab-4409-a852-c8f2a9244160", "indicator--0f6eaa75-5f5d-45e7-8769-a52f01669a08", "indicator--0f9ffb4b-5d95-45bd-b1b0-e10950881779", "indicator--91c960bf-fb55-4ed8-b1fe-b0131d6af1f2", "indicator--668a1eea-c647-415a-9415-1a9ad36fbd18", "indicator--cf32ff18-fffe-48e5-8782-cc64d3a31f78", "indicator--6484fb87-a4a5-44c8-b7b5-1e93d95680d3", "indicator--e7efbce9-3623-4b2f-9e9b-f643ed18f119", "indicator--e4d2977b-a5e3-4217-b674-90fb5a1612f1", "indicator--444ea460-a492-452c-a123-41b805039c5b", "indicator--bb8ef838-5f19-429b-a46b-2c3c27b1412a", "indicator--6addb226-de20-42e2-8e0a-7c6d6b789654", "indicator--ebb527ee-23ef-4098-bcfc-d727c5892b55", "indicator--ffdea50c-d63d-478e-a276-ecc45d55de66", "indicator--41edec2c-b44e-4a5b-82db-99b42eff55ee", "indicator--56928340-e5b9-4697-9599-f949d3b581ad", "indicator--102a4527-fe01-4817-9732-3e2f4717c466", "indicator--63f12bfe-0434-4056-a036-a47a678525b2", "indicator--5b763006-21ea-4455-988c-8d3caf4f91e0", "indicator--b5ac796c-3919-4095-bf3c-71221314bab8", "indicator--493c32b4-5960-4f3d-a5c9-8946130954dc", "indicator--dd865838-9274-4afe-a47a-1debe09e0633", "indicator--ad7b2415-9ad0-4d9c-a558-c917199177b1", "indicator--27729c0d-8d19-4242-b9e3-21e8f8070bbd", "indicator--b4d9bc5f-dc27-412f-8c55-d1bd6fc3a7c7", "indicator--b20b931c-a1b4-4390-8d5e-15171deb6d1d", "indicator--05e4a2e9-11e6-472b-a9c3-339e0fc2fcb5", "indicator--dc04d5c8-a642-42bf-baa3-df229d6973c9", "indicator--8b3eef96-44cf-49a8-bf62-d381991cfad2", "indicator--36e7f334-c394-4d05-9d19-0cc9ea7c9428", "indicator--e089b04d-4da9-4e9f-8df1-eb2b3d957d18", "indicator--dcb6eeb9-66d8-4e4b-9a44-52d47b70c5bc", "indicator--c5b2b365-1daa-4aa8-b465-ed62409d7548", "indicator--9c59d9a0-783c-48df-8fff-514f8c950ab6", "indicator--e449bc7e-4f6e-458f-8d7a-590a72c96c4d", "indicator--944df2f7-bb18-4505-b4a7-8ba9e5353536", "indicator--cf47781e-f74e-4b58-a461-8bf5a3106821", "indicator--f352cdd2-dda6-4507-9427-5d45952a2b00", "indicator--2c66c8dc-b8ed-4da4-97ab-f4b40ccdff0f", "indicator--c253604a-0463-416c-8936-e8340a35ba28", "indicator--6daac873-44ad-4c05-9560-76d6f78650c9", "indicator--c7ac14e1-18a6-4dbf-93fd-8061c03aca31", "indicator--4cdede9d-c0b5-490a-bb83-e7c95a45356a", "indicator--c387f795-7e15-4835-aa2a-0c534da338ae", "indicator--83e34a3e-f7eb-4b27-b112-b22b28aaf9f7", "indicator--39bcb679-44da-4ef6-8bea-12a9da91c34a", "indicator--813106e2-dff1-4003-9e5a-fb2b76a75e2b", "indicator--69ce7495-368d-4c76-af6a-0897a8392352", "indicator--9d7b1ecb-ddb9-492c-8374-ad0112cde9fc", "indicator--e579a4b4-4be9-41e3-a490-508627080167", "indicator--8ebf74ce-5cb3-4a2c-8e0f-a189cac10c86", "indicator--df89257a-19fc-4786-8080-9f11f0ab69ba", "indicator--db03856e-a14c-456f-be4a-689fcd5a542c", "indicator--71ebe986-bfb0-4f35-866d-27950b4fc67b", "indicator--7dba66b8-3579-466d-86fb-a7cb72244df1", "indicator--fac78af4-8fd5-422f-abab-94b591ada921", "indicator--d6481bcb-cc74-4b89-88d9-da2bf394372e", "indicator--0af75bab-f6e0-4372-882b-1776aabbf10c", "indicator--ff141304-b5b1-4a5a-9e18-3805d2e603af", "indicator--51ef87f7-1cb0-40f2-bcbc-5fc0f84ce991", "indicator--3e34079a-d38f-418c-bada-198f993ccd4e", "indicator--68017a58-4112-435d-9752-4842457f0ade", "indicator--991e1c8b-dcd3-49a4-be58-848ac7ad60b9", "indicator--72a385c9-372d-414e-bafb-cfec871f183e", "indicator--bdf83bef-51fd-4415-96a9-326792b3b35f", "indicator--3f93318b-ead7-4263-ab74-050cdf491c3e", "indicator--2053ca51-57a8-4d41-a46f-765c7b1b9d57", "indicator--84e0534b-7139-4de8-9b48-a6f48d8ee09b", "indicator--ce5151be-5129-4697-98c8-f174bc2b7c79", "indicator--ed595b1e-e303-422c-9b0e-a53edd3029d6", "indicator--72f03af3-6c98-4ae5-b613-f44d648f5556", "indicator--fc7e24b8-9cb1-44b0-8263-57f7ebece338", "indicator--a0e424b0-0f59-4f5d-bc87-defe34d1087e", "indicator--52d1a4a9-522c-4e22-bf5c-7f075f876c3a", "indicator--e7203e86-0b9e-41b9-b989-73320a012414", "indicator--63b0d469-f42e-45d0-924e-ac4efe55d0d9", "indicator--522028a5-9d05-4105-9dd1-a5521984c1a5", "indicator--913c005d-9911-414b-8444-6b18fd0af75d", "indicator--0982be5a-690a-4370-97e0-0e4f96171ccd", "indicator--90b9c00b-be01-4c7f-98c6-e7554a614802", "indicator--64542475-3e49-4705-88e2-a8085257314e", "indicator--09573583-2bcb-4758-a7a1-693bf2732cc5", "indicator--c15d9ee7-eade-4a7c-8193-2b5af609cd14", "indicator--0bdbb6ef-81bc-42d7-851b-2e4686b68b4d", "indicator--b2223342-6063-4650-9daa-1940be36f55f", "indicator--7a573666-22b7-4bcf-90c7-158642547273", "indicator--647e0062-1217-4d1d-86e0-4ceac7689857", "indicator--a1b3e8ec-998d-42db-bd09-b7eaedc0dc12", "indicator--213282e1-2941-4b25-ae10-be025d4513b8", "indicator--736c65fd-585d-4bd2-a71a-e5ee04222c50", "indicator--4bf4d1e9-78b5-4097-8043-ea5b17e11509", "indicator--c6852590-e3a2-49d7-8efb-f0a17aa68fb8", "indicator--a3353bde-367e-406d-b03e-9c5ffc622185", "indicator--774e9982-e63a-43b1-82f3-43ff8f763002", "indicator--1ddf9ea6-b7d7-4f32-b5ac-bd3638852cdf", "indicator--8ce448cf-cc75-4375-973c-442244620a0f", "indicator--9ed781cc-5ebd-41a7-b39d-9f1a9786be44", "indicator--b920ba99-39df-4d74-ac57-4d1d1bfdf485", "indicator--5199083f-f74e-4539-8377-238b69cce557", "indicator--26026515-be67-44b2-b4ab-1db1f5dc4347", "indicator--6c948626-24e0-4b59-83c4-dafd13c535a3", "indicator--98a76151-3888-461f-a4ff-06f117daca18", "indicator--326f8075-ce7c-4a70-b6a0-5f1977204df5", "indicator--dc74fb26-e5af-476f-a3ae-d924c0f125c8", "indicator--ac9f9369-5f23-4fc1-b153-a5425f5d49e1", "indicator--bc66043e-2e27-4061-839f-d97441d98e48", "indicator--36598607-26bd-4944-9a12-51decec46817", "indicator--8f45b604-9757-41f9-a785-8a1558a2138e", "indicator--735a4e3b-2535-4409-bf9b-2dd2f6051d1b", "indicator--d4e9f12a-af11-4e89-83d5-1e3e98a4c126", "indicator--2b9f30cc-03ae-4fe7-b43f-ec1767721797", "indicator--fc0d3b6c-aaf5-4776-a92e-675ca3f38105", "indicator--0bfdff89-6af8-4503-a31a-0f101248173c", "indicator--7d459db6-74b1-4396-be64-554e4b81479b", "indicator--6f09648e-498e-4df1-9bfd-ba69badf6559", "indicator--c41e8a93-a09a-48a0-b966-ed24a63cc52c", "indicator--f06476f0-a1ea-4fe9-94f9-80d210b56a1e", "indicator--c1820137-bf55-401c-94dd-1b295acad6aa", "indicator--ff261c9e-55ba-431a-9c6b-12e06d57dfbd", "indicator--e161f29b-1315-4aa5-b10f-2420f465dec0", "indicator--bac87977-afd1-4a8c-bd59-b67aad4f4a3d", "indicator--8bbd1f08-0e6b-4b86-a256-f9c390448a2f", "indicator--e70dd544-f461-483d-9dd7-64f4a466ac0a", "indicator--367bf9bf-9eb6-4b28-b542-b302cd575255", "indicator--0880e7c5-3cf1-47cb-8059-484ef3cb3571", "indicator--1a7e230f-36fd-4841-aa1b-87458232f8dd", "indicator--fd807861-23db-47e9-98f1-a88ca944f7f4", "indicator--d001ce73-105f-4a36-bb18-39fcbad69118", "indicator--833dbca2-7c7e-4e58-8a66-3cf8cf43b6ea", "indicator--80b427d0-5676-42a2-899c-88ef6eb60b74", "indicator--5e78fff5-7778-478c-ac82-c8f5e3c833cd", "indicator--83c9f183-85ab-49f0-bc2e-4a57a407090d", "indicator--39062563-dff2-4894-b305-e474653f1ea9", "indicator--a7278abd-753f-403f-ab06-4fa0923c08d4", "indicator--38e9d450-0a2d-4be7-92a9-99c6ba950873", "indicator--322df81f-482b-46ac-bda4-b9fcb769a323", "indicator--9f04cb46-416a-4f9d-bf5c-df6c9856636e", "indicator--e49fcdcd-1320-4512-bc9e-44870ad23c4f", "indicator--6d87ddc4-ecf0-4c85-9814-a580dc29f861", "indicator--be0308b9-3897-4637-a29d-9293871ff97f", "indicator--665bc87f-7d31-4afb-a4a3-431702790aff", "indicator--679aeec1-818a-4e48-b32d-3eaf40737c0f", "indicator--8b20da21-8009-4c2b-9d3b-9d950111b432", "indicator--013f72ea-6127-4f58-a676-79e3bf0d2e82", "indicator--76f549a8-42c9-48ca-a2a4-9fb167247f0e", "indicator--e0282fb2-76d5-4025-b99a-b941f01a8480", "indicator--3b984d81-149d-488b-ac52-17de89b9f1a4", "indicator--817d7753-e3ef-494a-bdbd-e41532f26619", "indicator--caac2d9a-5c1f-44bc-b01c-cafd9a81fa40", "indicator--a78cf6bf-a800-4444-932f-c9eccc94b83b", "indicator--541e506b-42ef-42cf-a32a-d9da685a3fb0", "indicator--cc34972e-0d0b-4e70-bc8f-4897147f3eac", "indicator--c9fa5c2c-879c-4f83-8a2b-35853ed9ef3a", "indicator--32e82b63-00dc-4389-bfa7-4117cac1459e", "indicator--ed72db61-753a-417a-bd0a-923661399339", "indicator--1473b7c2-dd4a-4a75-9cac-cc987133910f", "indicator--784fa6dd-d1cb-4339-b574-5a76abcf3770", "indicator--023e6a5e-55c8-4832-aa08-15695e6456e0", "indicator--055c0b82-8e0e-424a-a9fc-90ee282d5df9", "indicator--31b24a02-8758-4410-9eed-0984669868aa", "indicator--3f149135-fcaf-4458-bec1-90280d9647e6", "indicator--32e0e41a-7330-4d57-83d8-02778427be3f", "indicator--0d81e002-ccd7-422f-8e4f-0015bd6e3b19", "indicator--9b4abecb-1540-4614-b360-e609506e1430", "relationship--34c71d9d-6ab4-4c48-83a5-094035330fd3", "relationship--ae739d44-e887-451d-8634-2d84f1b8ff3f", "relationship--b40ce314-10ab-4dff-817f-7032bff1752b", "indicator--6ef9b359-060f-4f6d-9e5a-387fc8067d30", "indicator--d47e4f83-4902-42e5-8b0f-48b64f5abb48", "indicator--cf31f9ec-07e4-49c1-b275-58dfe8773019", "indicator--1ecbe934-cdcc-4ce9-aadd-798aecd2f45b", "indicator--07baaf6c-9621-486b-94a0-4bb14f7d2421", "indicator--29512c59-eb7f-46d9-b00c-e338aebac0db", "indicator--558a663f-8af8-4014-91af-f7324304f02b", "indicator--c109250b-82ef-41ae-9ee9-24d12fa32e8b", "indicator--086e1a90-03a7-4be9-80ee-bbea577bbabd", "indicator--18ee9316-04be-4069-8709-c897acc7411b", "indicator--6be31bfb-e5eb-4166-a9ec-1b3ec027e90c", "indicator--431131d6-1008-47ca-8c45-89718f0b7282", "indicator--63b14d4c-767b-4449-b9df-d425c222581b", "indicator--e4b79399-16fa-4677-86c5-144e9ade63b5", "indicator--007a96a1-a884-4ddc-ae69-2f41f0c8f44f", "indicator--50dfd573-98e0-42e0-9e22-51efdb73b546", "indicator--56f9d4d0-31a8-4cd0-b7db-a85f36290bf3", "indicator--fb40889f-28b0-4ea8-a435-e70d58e99159", "indicator--63560ef6-2846-4ca7-a1f5-cb8d77b2a065", "indicator--d60e2044-1bc5-4057-921f-b709adec3cb4", "indicator--804937bb-718e-4b94-b9f5-c9e9c02e3755", "indicator--3b0a072c-4485-4200-8683-d2ca8f6b0705", "indicator--2ccef78e-28d7-46fe-88c3-3dc8a59e77f8", "indicator--86b9e3a1-f548-4205-956d-547b3ea0462e", "indicator--a4dbe0eb-6f97-4885-ae55-ffb11d5d0c24", "indicator--c8f26799-0859-43f7-829f-70520ce8aa8f", "indicator--1e7e10c6-9342-46ac-a3c1-ad96165d13d7", "indicator--ea6df09f-ac3c-493f-b79c-ab8aac05a455", "indicator--0a8b8a7c-ec61-40ac-aa74-a8f2e2c239d5", "indicator--bcea79dc-288b-4e3e-a78b-f612d098f9a7", "indicator--95ae7114-8cf4-4655-bf14-f419ccc21012", "indicator--a6162559-b04e-4e84-a4e2-52e74fbcac8b", "indicator--31a2e9bf-4708-4f1d-b410-7b9303780f2c", "indicator--e455aed9-3aac-4b11-8aa5-670d44c41b59", "indicator--dd22a5c9-4b77-4957-984e-558419fdb883", "indicator--e3017b28-0dff-4c9d-aa5b-eb0f4eee3240", "indicator--a4cd1f58-693e-46e4-a54e-36326b03dd69", "indicator--8999c97c-8073-4896-ab22-e0bcb6ac7b96", "indicator--700fb5f2-82bf-4343-a96e-51c9391d0684", "indicator--25ffd5e9-8518-4450-a471-d24db05c77fe", "indicator--4dc935f1-89cc-4a4c-8b55-7f2029b85ee0", "indicator--02e93dc6-50ac-482c-b626-a08358ccd372", "indicator--408cdbd0-cab6-40e3-b82e-41541e02daad", "indicator--1a52890a-ea12-40e0-ad27-7e6fab226d25", "indicator--9417e5e8-29da-4797-ab8a-4c4a920212cb", "indicator--0a711032-ca3d-4972-9b53-3cd6829c4a1b", "indicator--f070234f-fa2a-40bd-ac68-e897b6a4cc29", "indicator--674631ed-ffd5-4f0f-bd5f-b0f30f4e3509", "indicator--222ad500-1148-43a5-90a2-a7535ebd3bec", "indicator--526552a3-02cf-48e9-8966-605055be9b2a", "indicator--cc85df45-d6a4-4797-add2-ce707f27f4a2", "indicator--065c22c6-f12a-4b21-8c6e-39bcc234b467", "indicator--26ab94c8-c4d3-49b2-870d-be57972e659a", "indicator--e5adcef4-0427-4eaa-887b-69f9ed6b1119", "indicator--4b844afc-1430-485b-aa95-9eac418ffc1b", "indicator--c2151f07-6750-4968-b03e-9d5714ecf48b", "indicator--465e72c1-f636-4c61-ab54-b4614da5105f", "indicator--955df534-819e-4f13-bc57-416d8323a2cd", "indicator--64537af7-99da-4755-8ae4-21e5dc1ac268", "indicator--9cda9887-fbed-4290-ad77-7b6ad2299a1b", "indicator--9cc61a85-8be4-4a38-8921-73b25fc785a4", "indicator--fb4d253f-2a56-4939-aec4-4d4dc7b15524", "indicator--a8988772-f71e-4144-8478-110d6bcd436a", "indicator--971f18a2-e725-4ed5-89a1-1cb9af882f19", "indicator--cf03253d-8eac-4660-8c06-e3b66730ed00", "indicator--4e801ad6-a337-4c88-94df-b98645472693", "indicator--85e294ff-79b7-4b63-a488-fa637d85b7c6", "indicator--6364ce2b-b6f3-43b1-acba-795329c2b69f", "indicator--1f6adfbe-82d8-44af-8f60-587baae00887", "indicator--79c883fb-b1d3-4372-b422-c016ea52d157", "indicator--69bc0f49-b01a-48fb-b800-0212d544156e", "indicator--c52065c1-779b-45aa-a814-68bc0be8cb3d", "indicator--8e4df4c2-9400-4c02-a65d-8ea15f78b75e", "indicator--f852ac40-a2f9-4ac2-9d85-ee40c46e63c3", "indicator--869f296b-a398-44ce-91a7-4a13b58aa31d", "indicator--541bec32-81e1-46e8-8760-df62fa00f533", "indicator--5d68784c-169d-4e3b-9d02-d8bb73d8b0a3", "indicator--e5b8aa42-d678-4616-adac-9b458bee08ec", "indicator--cac6fc3d-97b8-4f4f-b4c0-dd76665fd1db", "indicator--8e3971eb-10a2-461e-8432-d56332f659fa", "indicator--1d4cb226-a156-468a-8099-6e80aefa6b28", "indicator--a3626023-0b86-4c27-b2f5-a54bc7d1e859", "indicator--a9116554-440b-4ad4-8540-21d2bf6f75ed", "indicator--7518b409-3727-4a64-9255-6d29260f6c73", "indicator--7caaf32a-d8ce-4aed-8cd3-e4f289452b62", "indicator--f0d6b52b-59ab-46a5-84dd-341edc820874", "indicator--8caf1304-9f5c-46da-a785-7bc279c5f9f7", "indicator--1b1bd2bf-0c6f-4949-8dbc-04f88ee5710d", "indicator--91689ac7-3878-4ee0-a489-934e880b9533", "indicator--720fe04f-c734-4168-b6b4-6cfe46371f73", "indicator--1a26e406-ab91-4d3c-9637-5e932f77f75d", "indicator--1e8be10e-0680-4160-b635-022cacc8a7cc", "indicator--f3776b87-a867-4c89-9cee-3f0205570060", "indicator--1a6440a0-af38-432e-8f96-c0f8dd163e4f", "indicator--fe837765-5f23-49a7-9e9b-822533255e87", "indicator--c33d0a19-c2cb-4be6-bf8e-e8014fabd4c8", "indicator--dd529da5-fd36-427d-a9e8-04145ed4b18e", "indicator--70a2b3f8-fa26-46f6-b3a3-166bfcf3c377", "indicator--fd0c2dcb-54c1-4189-b94e-a3d5d6222093", "indicator--9d63b496-7d08-4038-9cd5-62b27e718765", "indicator--ad5c57e2-a5c5-43f8-ba18-cbcce72665c9", "indicator--82f0dbb5-60b6-4cd6-a45d-ef0404a18ea9", "indicator--1a2613da-2486-40d7-a001-e123cdb9861f", "indicator--64c0df6a-9c80-47b9-ae58-7f4c75c4c173", "indicator--c89088ef-42c2-460a-ba54-4f4cd699d0b9", "indicator--09bf2759-0bb8-44fb-8509-6305a118bd42", "indicator--9a479773-5e33-43b0-a24f-7eca625d6a14", "indicator--87a5e8cb-1e30-425d-bdcf-0414a6908205", "indicator--0bc95393-c2e2-41d2-903c-ce07e295f403", "indicator--dbef0902-ea57-46b9-adfc-3901d45cc70d", "indicator--47f7fdec-68f3-4397-b916-063bfd752b6e", "indicator--85cf225b-070d-47b6-bf15-3b0e38e9cd57", "indicator--c1bbc45e-f882-4bdd-9138-66ce0563e00c", "indicator--d49c0eda-e2d7-4eff-a92c-9eff9151c526", "indicator--260fea49-04f8-4070-afb7-585c527e1372", "indicator--1fbf3406-1096-4860-96c7-191723bda88e", "indicator--af23f610-2f2d-48e3-83e0-04e935a03b45", "indicator--88309f6f-98c0-4bec-a878-224737d852c0", "indicator--8f62694e-eb55-4858-9083-35464749ba17", "indicator--a6eb4dc4-de77-41ca-8e22-ef3a2d5318d3", "indicator--f132ab77-8708-4ae7-96cf-07b6dd195657", "indicator--1b570240-167e-493a-9812-bd892e7dcb89", "indicator--8d936030-e677-4d7c-bf02-9d863f8b10a0", "indicator--7e8b4364-ba17-48cd-88cd-b54bc1d33e42", "indicator--d0fa9132-0ba1-4717-96a8-fc8e22ebf7ba", "indicator--642c8571-1e88-474b-bbaf-0d187cf9adfc", "indicator--41ce1370-1924-4528-9057-9480487dee85", "indicator--f32b91b8-1a75-433d-85a8-2b885aa9562d", "indicator--0946feb6-dbc7-4fc6-bcee-440f1661abff", "indicator--c3f3053a-3b3e-4dcd-a92e-3c40abb5765c", "indicator--eaede208-8360-43f7-833c-aa6b07d6a94d", "indicator--27f855e8-3d1f-405b-82cc-739588ae0333", "indicator--67e8406c-1a0f-472e-8dca-07f193ddee56", "indicator--9c7254f2-bfb8-4e64-8f35-03b1897493b9", "indicator--1c4d6e5a-2e64-46ba-8f2a-e9aadadea999", "indicator--084e08a5-cb0c-4eee-b472-bf42a46c70dd", "indicator--7f873a54-90a9-4ef7-a4ce-96514a9c175c", "indicator--e901ee78-6380-46e5-9a5b-c18e9b9bbac8", "indicator--5b1b041f-b0ae-4744-8bb8-9f63751afa55", "indicator--510522ec-b5a3-41bc-ae51-511d58607253", "indicator--e4874501-a3e8-4a61-bd30-dd93808dfacf", "indicator--b289a69a-9d8f-4ef9-b6c9-bea2e4f0cd5b", "indicator--9ce0e934-4e18-422c-955e-d295d99bc35e", "indicator--6935acb3-358d-46d7-963d-9ec1069078f2", "indicator--ff6ed8b1-e197-4d5c-8a33-efe5da29c48f", "indicator--f7ee67d4-9406-45e5-b0df-4913f3f7ae78", "indicator--31e683e4-dd72-4502-8254-d256980d9949", "indicator--c568abe0-49bf-43b0-81a3-54033396f72a", "indicator--3448c126-7a9e-4af7-8bf3-d7ac93503546", "indicator--1a9f7312-d9ac-4837-bbd4-d52dd9790b5d", "indicator--cef1cba0-5343-478c-b24a-665a934fbca5", "indicator--df7d16b4-a9da-4a6b-8be4-dbd7fab3e60c", "indicator--823f4bce-45cf-4bff-ace5-e135a0e10803", "indicator--374e9525-8f7c-4ef1-ba2e-e2bc2f58006d", "indicator--573eeec4-4e24-4a47-8ee9-0255126e0f72", "indicator--7f10e6c4-701a-4372-9396-38de4eafa650", "indicator--72c05fc0-8f65-4a1a-b803-4cbc8a0522fb", "indicator--233fba54-bb21-45b6-ac98-a9cf7f6be419", "indicator--8e1dd71e-dc47-440e-b56b-f9165c0659eb", "indicator--5daef41c-524f-4832-b010-75925072c81a", "indicator--3b4d3cd1-a592-4906-8e68-61e72a76f01d", "indicator--cb7fd527-081a-4932-b2ca-81527b0af458", "indicator--ad6f5e17-1a58-4e6a-9127-30ce6d115db0", "indicator--e9bf048b-6f2d-4b4f-b44a-67cacd444f08", "indicator--eee48ae7-57ea-4d76-ba4f-b49dea8a4800", "indicator--adbe63fe-dfa5-41b5-a7ea-69547ad0ab86", "indicator--6694810f-aca8-4166-b2a4-9c3eaa51dd84", "indicator--d35fc85e-06e2-4d01-ac37-c2480b61840e", "indicator--5f4153db-8b3b-418d-8610-5a091e95a4b7", "indicator--021b958d-6401-45b1-9e40-ba11f9f30fc0", "indicator--a769016c-d14f-4f5d-a2ab-300b50160f92", "indicator--8b0bbd7f-f00b-41c7-b1e1-4de6f19cdf4a", "indicator--e7050ec0-d09b-4305-bf95-a62549ed1b51", "indicator--f3f4d47a-9e0a-4010-b65f-6851f5666620", "indicator--6b132bce-c899-4732-bd18-85eb7aacb720", "indicator--7fd162b2-6f37-4f6a-b270-b512db2cf3aa", "indicator--6c562bbd-b996-4303-8f3c-7f5a55ef5a67", "indicator--d0882509-c392-483a-84b8-64022600b806", "indicator--7ad4e675-9d48-4fc7-b259-de100f8322cf", "indicator--a0fd2b0b-b46e-442a-b544-ab4f415cd4f4", "indicator--2fc845f9-ecdb-409a-8bf1-86ef1dd05389", "indicator--28aa5181-935c-4f42-a7fe-401df103913d", "indicator--23d4be8d-57f3-42af-a67c-57b7cbd60fec", "indicator--a2aa11e9-a1d6-407f-b5b6-90827fbb067b", "indicator--8f6909c3-b8f7-484e-ab17-6553fea58f69", "indicator--c8b8affb-2dab-4677-ade9-2a1decda9d63", "indicator--4f680989-ab10-483b-b5b0-6d4301c50b3f", "indicator--12341695-ef71-425d-9023-22e905f1011d", "indicator--766ff1f0-698c-4ac7-8d1c-8d2faa5eaf48", "indicator--a77d598d-be79-42ac-b6f9-8333ad68f5dc", "indicator--750e3748-7aa9-4692-b050-1afd095f3d10", "indicator--d8010b9c-dbcd-463f-9b35-ecf7e07e7db2", "indicator--c10d0707-0a18-4a98-a00b-038736432bab", "indicator--21f9a036-bf2f-4a6a-b3fc-139661f4ae89", "indicator--a9cad1c8-26be-4e3c-ba47-5ec7b9d63c68", "indicator--9e4dd3f7-71f9-4635-a4a7-fdd6ba547492", "indicator--9fb1272c-5c57-42e8-a5ad-eb3f16308b37", "indicator--26d65d3d-f3d8-4a19-b286-bc93094294e0", "indicator--8893d27f-68f9-41fc-b6c2-81cc295c22e0", "indicator--c2677a85-d2b4-4f54-9249-64c420732a03", "indicator--41b36db8-f000-4451-a38a-3200de80aced", "indicator--ae344626-4db6-4b18-9ed9-fe5412cc1aec", "indicator--8ecabc79-c751-4001-95df-99d3b2a770c7", "indicator--322efc1f-936a-4361-bb99-862b5fe88e3c", "indicator--40028ff0-55d2-43e4-910a-5950dd97b51f", "indicator--0e18f3cf-6f86-484f-af18-7c3fd4fdf8d9", "indicator--ff3a6825-2be9-447a-8b85-69bc1fe9be5f", "indicator--9d43c0e5-92c4-48c2-9bb6-aeec9ac64caa", "indicator--b73806ae-afac-46c6-be28-6460a251807c", "indicator--0a8e1e9d-ef21-4a43-a11a-5af42ee49184", "indicator--c2669c66-9461-4060-9523-10f96791cfae", "indicator--a8b4f47d-60d2-4b0c-995c-d94d81cdd970", "indicator--955d44e6-297b-4fac-80d0-2d3f0daf9189", "indicator--00c7cc51-c48d-40e7-ba99-346a6f166449", "indicator--f780ebb2-04ef-4bf5-87db-2182be082394", "indicator--aa68ea2f-1cf9-4c43-a858-53e3d7a49cd2", "indicator--e2e6ed16-128a-4484-a778-64de55ad7885", "indicator--f20610ae-375e-47ef-987c-6028bb1aa4d2", "indicator--1c07dca5-dc3e-480c-addb-891fcb0f68ec", "indicator--2126e676-9117-42f4-9880-a79652652ccb", "indicator--e57884b1-8b4e-42df-9497-4ed6f7cd1e9c", "indicator--600558a0-0297-438c-949b-ebfa08b16041", "indicator--8cc2f6d0-e5c7-4d39-8030-f81c4feec5d0", "indicator--d45beac5-44a7-4396-91e7-364c23156e35", "indicator--3a362449-1a6c-482f-bb78-dff5b5f20ee6", "indicator--d8f99e9e-7b99-4b59-b4af-78b43631fea8", "indicator--80ef45cb-ba51-4b2f-baae-614536f5bf2e", "indicator--17646810-34de-4111-8c75-c97825b543d3", "indicator--b8b27ddf-a479-44b5-8981-9dd75b44964d", "indicator--d43f13bd-992e-4ce9-950b-9b87c45fa3e8", "indicator--5a004edc-a544-4896-b4f7-9655940a098e", "indicator--36e0a393-78c2-4299-9be4-e9b52f56f087", "indicator--5a94d63c-97e7-4c1a-8058-852b1f8d304d", "indicator--bdd32d77-e260-4097-bd0b-04abf635a1a6", "indicator--59f7c8f7-9106-4271-9964-2645619b5304", "indicator--a886a4f0-d962-4aa6-a5c5-8242150c423c", "indicator--ed4dcb3d-6cdb-4051-a824-8db635bd32f5", "indicator--f4a8bb23-6b42-453b-950b-db64e6cecbcd", "indicator--9c8b70d1-56fe-4b1b-965e-88ac4af74526", "indicator--48fe9ec5-3149-4bce-ad0e-e5759f58f1b8", "indicator--a8421edf-6647-47cc-8ee1-4091f3259f58", "indicator--e62eed8b-a9b1-451c-9242-7102387d40b8", "indicator--b2b931fe-6714-4f27-a90e-66df50b9b07a", "indicator--b46fb919-9528-41a3-8d92-e0691cec395b", "indicator--a2708162-29bf-4d47-b480-4d29eb31bf6c", "indicator--4e3e41d4-4f8b-483b-9e5e-b6b93e06ed2f", "indicator--c3f88a83-b409-4dae-9c10-1c3a017a7df2", "indicator--b0d33bb5-af7f-43cb-9ada-8fb50dd8b37a", "indicator--b5459341-4d5e-4f7e-b7ec-43bdb935d9c1", "indicator--89d8f39d-2eae-474a-9b20-ed8a2032caff", "indicator--f6035449-d80d-4a0b-b2b8-806924bb904e", "indicator--0cd38544-337e-46ca-84bf-6fd80e49e1b9", "indicator--69b5d30d-b8eb-426e-93ee-a7baee8ebdda", "indicator--a51fcecc-495e-4724-8de2-f056a83fbc5e", "indicator--cab02e23-4600-478f-8fcd-8df320ef1efc", "indicator--9984ef31-bec8-4ae9-b41f-21d7561918b2", "indicator--8eda645c-1bc2-4dd7-997e-6f307badb8b4", "indicator--353de5e3-97f9-44e2-8078-3fbdf72a7cf7", "indicator--af003bfe-96da-43da-8562-4c6b5740bf41", "indicator--23344915-b798-4adf-bbce-f396e6fdb032", "indicator--fe1ce1c7-df03-4f72-8935-5f7ea98ff1da", "indicator--0c999877-4c67-4621-92ef-b8ad6db278b3", "indicator--a61b9c47-88bc-4f62-b360-1bf9ab6a8362", "indicator--04638480-c603-424c-bb16-c12290d302ab", "indicator--430ee227-317f-40f8-8385-3b8398f59cd7", "indicator--dc8fd128-da18-44f5-ac6a-2396c4ac7911", "indicator--bfa68db8-8ad1-4998-b1f7-05600f9b7573", "indicator--0582b275-b0aa-46f4-850f-897f2f7d85ab", "indicator--21eebf56-2985-44df-8dea-e9078bec5b09", "indicator--e64cd318-6308-4548-a358-5e47c672ddb2", "indicator--9ed0316a-ed1c-4c79-97c0-6ef0e1e30ea4", "indicator--a6307b8a-d31d-4f88-bde4-3a7ad3309814", "indicator--92b31146-7cc0-41fa-a5d7-18da1841c5fd", "indicator--e6545cc9-12f1-4408-93eb-0a272491022b", "indicator--70dead1f-5472-4bfe-bca4-c51901161d42", "indicator--aa7d455c-0b07-4efa-a336-8744e7169c5c", "indicator--dcb1d26f-a6e1-4239-8442-8136d53309dc", "indicator--da5f02f6-e898-48e5-b61f-e3801e8a0207", "indicator--69a6dd31-6886-4574-a911-d0d648b0f005", "indicator--e0fff0d6-6839-4eb9-b9d7-8f8f0ded35e6", "indicator--6c9f9509-4be9-4875-a3ad-2ebb0e7db258", "indicator--3d872bd9-21aa-494d-97a2-6534aedb70fc", "indicator--3c29aec9-f7e8-456c-97fd-b8f6fdc1469f", "indicator--31406895-6c0d-40a5-b5dd-77c981cf44b4", "indicator--6ab849ff-6b2b-4f1f-a7ac-cdd5cd76dbf3", "indicator--8f2c389a-dc65-42cb-a787-d5eee331d403", "indicator--59b941a4-ee16-4366-9e00-22b8bf92abc7", "indicator--db60c847-7f17-472d-9207-4591fdb23243", "indicator--3ba7960b-5970-4d4e-88f7-423165171673", "indicator--ec865e0c-becb-4fb1-a5f2-89305f9db098", "indicator--3f308e25-af04-44fb-a42c-b15495857339", "indicator--30d9d40c-2278-45bf-9418-03d06cd2ccdd", "indicator--8074558b-4511-4326-9a5d-81f5203a302b", "indicator--bdf8a1c0-2d11-4303-afae-af8b5cc4a682", "indicator--79a9017c-9ea0-48ac-b717-778a316d5f65", "indicator--62a4d5c2-781f-4a27-b37c-dcb8e5f8c675", "indicator--318f90b2-4fba-4f60-8ae6-9e42ac5f2168", "indicator--a37b3e19-1e53-4517-b881-e59b552db0e0", "indicator--1a5a932f-5f69-41b5-a6e2-aafa2ae1b683", "indicator--4daac8f6-4f73-42ae-89a4-2db0aa01f40a", "indicator--91ca00b2-78e0-4736-b5c5-8e0fe75374c7", "indicator--fab22def-0511-40b2-8486-505c1f9ff6f3", "indicator--b89cd18f-b2b8-4c41-ab7b-2697e944ce5c", "indicator--0c849323-60f8-40fe-ad23-a1710c27c08c", "indicator--ffac10a8-f717-43c0-a799-bb77d774c2cc", "indicator--ac2df6e2-4fef-49cb-a8a0-c15ac6fd7f15", "indicator--e27b2c4d-dd71-4437-9007-dc7017035182", "indicator--31beb87b-a5fc-4bed-a197-d53857ebe378", "indicator--167d3cd1-7a22-4cad-97d9-ce28048a1336", "indicator--bcb4e0da-9780-4356-b1e8-0b27ab7fa734", "indicator--5554ea6b-5dd3-43a2-8bb1-78f9c41ec624", "indicator--1a57037c-da30-45ee-8c84-f43427cb0607", "indicator--ba7e4fde-596c-4a2c-b6fa-526ecbd9777c", "indicator--544176b4-2785-48c8-b4f5-1dce76ce4174", "indicator--5b2eba89-2072-45a0-9578-5628e61c0432", "indicator--0162f0ba-a0e8-4eda-b705-495d633477fd", "indicator--db007097-1302-49f5-ab96-44b62646ff5a", "indicator--f1be860a-803f-433a-85b0-aed31e234cc1", "indicator--78eceac0-bbd1-4999-a688-f9031d383189", "indicator--95f3ce20-6e45-420f-9763-644ed51f4f79", "indicator--ad756a7c-8440-4a8b-8ae9-f44959c6cf7b", "indicator--51579e01-9b18-4536-8dd7-8788eef5d46b", "indicator--c740f288-4991-4ff0-a7b6-dff7d5db4874", "indicator--7db05640-eb3c-4d3f-b0c2-7eb590b88e3c", "indicator--ac4786fd-9db2-4779-b9b5-60f64a65a4b4", "indicator--85a3a126-45e1-44b4-bb25-5d65cee1ef5d", "indicator--182b9c3a-ba36-4b9a-a231-0e2cd775f5b8", "indicator--7a6cceaf-9e81-496b-b629-1c6e5b20a914", "indicator--05d6976b-6e4f-4c6a-ad35-05bf80735094", "indicator--40bfb0e6-4d49-418b-92e6-a4237fc7da63", "indicator--4d523e40-bfeb-43c8-94d1-e42b3b324b3d", "indicator--96542b48-2440-4629-a12f-32c2132ed963", "indicator--6d349ff1-e71a-464f-8c89-65c602149d1a", "indicator--41ad25f9-b5b7-4de1-a9f0-01243852b93c", "indicator--9c2cfd06-3c30-43db-88b3-72e2979fdc34", "indicator--b892d305-2d8e-4de5-b219-64e2628bebf4", "indicator--ce98663b-ee74-4ec3-963c-8af56bea2625", "indicator--a6ab9f93-ec4a-49fe-a322-c1878dd697df", "indicator--83183527-f50b-457a-b231-dab419e591e3", "indicator--cce89eb6-91ba-4971-b269-1b05e753dfae", "indicator--5c9c47f7-7f7f-40d2-9523-dfc2c3827c30", "indicator--a2008d84-e521-462f-8e7c-714a9a0db340", "indicator--00af8a58-aba8-403a-ad51-e6675414d3f2", "indicator--8bb9596c-6c6f-44ca-8274-64899d2554d1", "indicator--7160f921-69e8-4197-82e7-ee3f037090b0", "indicator--7c0fcd35-2b9a-4c73-8174-91f70f84348e", "indicator--3bbeedaa-5e4c-48d8-ba5a-7e10a4111693", "indicator--20457ea2-f6cd-435f-b2c8-5bdefd431a91", "indicator--d49d1e0a-6343-4c49-8c35-c68d85cc4f1d", "indicator--ba1732fa-6793-4533-b1d4-e03f66c5bc01", "indicator--e80c2eb7-b523-44c3-a095-e9f0fb9a7204", "indicator--ff595047-0947-41bc-be14-a750c9895f5b", "indicator--94ccee44-4b66-4c40-a834-d134baae8068", "indicator--3934b8ad-141e-41ab-8b06-aa643b04b0e6", "indicator--efad5df4-1264-40cd-aca3-f2e533b9b88e", "indicator--db8a217b-f7a6-4d52-93dd-52e93cc64155", "indicator--b2f0c0a3-8fa7-4e77-ba0b-fed40336f496", "indicator--a9904eb5-d644-4003-9038-28374d603726", "indicator--2ffce8d1-84aa-44ca-a872-c7e4ecc7d423", "indicator--9da0696f-3b9e-4fee-bb45-503c6147b221", "indicator--b73038a1-6526-4f17-bad7-8360dd938d92", "indicator--f58c82df-e807-4758-b74b-8ff55c77fd6e", "indicator--ec3c61c9-b6a0-4229-9dfc-a3b5c81bb026", "indicator--d2a920a1-e760-4454-9334-877c8d254e09", "indicator--42e48f69-846e-4f46-887d-55e78b568b07", "indicator--265f1ed8-4154-48f5-a07c-3a544effdf00", "indicator--46c59ae8-51c8-4d25-9f7d-b6edbc73cd60", "indicator--74871235-f261-44f0-ab47-9bffe641253e", "indicator--9e3cf7e3-9091-4155-90e7-c553685ae82c", "indicator--28ec64c9-2165-48d8-8055-ec44d68c5a79", "indicator--faa1a4a9-1c50-46be-8327-ddd237218313", "indicator--a83cb44b-5b5e-4c67-9f13-bef2971ff11f", "indicator--4efb3083-f617-4b4d-8024-49fa4166519e", "indicator--1318dcee-1b7e-4013-b335-dec9edec5a97", "indicator--cf080ea9-b521-401a-93a4-0e28bdc00a28", "indicator--6be1bdeb-f8b4-46b2-834a-ff5c3a184545", "indicator--8c859df5-b363-47b7-ac31-73c9d1333ea2", "indicator--210da16e-f7cb-4d9e-bd71-b7df331b4227", "indicator--22b20732-5a0b-41e0-be8d-902b0fd2976a", "indicator--f1223b2e-c2f3-4994-a9b1-070da64e44dc", "indicator--a2c46f9d-ba75-4159-9c29-f4081e31d7d1", "indicator--4a3e7431-ee93-4205-a13f-8e338ee03b8d", "indicator--7034cb5c-ec25-4825-ab36-3faf40ba50b8", "indicator--ec6bed53-87c7-48b3-894e-f892cd00ba6e", "indicator--b1a657a5-70d2-4ff8-90dd-5daa8feabb70", "indicator--6538ab2d-fea6-4d26-8bb7-4792368f1553", "indicator--71a10ced-16ea-446d-916e-1c595dd13c80", "indicator--1554151e-2028-4057-85a0-881f21cb0317", "indicator--a0578d56-56ae-4b30-af44-c23867dda320", "indicator--e75bd37c-8ba8-4552-8a62-1c253c5b30d6", "indicator--eea6e593-d683-477d-96db-9b2538a10116", "indicator--39c2d147-8a96-4abe-9dd2-afcebd0a3c94", "indicator--1d68343d-19b4-4950-b08d-87be319aea24", "indicator--57f68b6c-7fb5-46f8-ba4d-3ba85e99b0c0", "indicator--fde52bfd-fa46-4a64-985e-9d6502fa9625", "indicator--47b6d78c-ebef-43de-b316-e6db9a6cce20", "indicator--a14859e0-f69c-4418-a089-3cec3a4ead85", "indicator--1b318a0e-6493-41a3-8fc3-e999169107c9", "indicator--1ac0fa99-3656-4649-87f6-3f7c015763f7", "relationship--9fada690-1dae-4fa3-a577-c2e6f81249ea", "relationship--ce93dab9-178e-45bb-b9a6-f1e8865c11c5", "relationship--fadac612-258d-4fae-adf1-c0fec6f69a96", "relationship--b8bede7e-7cfa-40ed-b5da-c98ee931365f", "relationship--95b6b15f-b6da-4b68-9722-3974081f0a8a", "indicator--5a7026f9-28d9-4e15-8d46-683f1ca38ed0", "indicator--035d4590-4ce5-4956-b344-006be5b47933", "indicator--07e88b13-3162-44d4-a81c-c85824d71627", "indicator--367ce33d-6670-46af-b267-a1a39807fec3", "indicator--36627a91-0c39-440d-9f3d-8b3c59a38679", "indicator--ea5c765b-f9b9-411e-902f-767885a1e3e1", "indicator--96acbb37-f183-495a-a34e-95dc218ddf7e", "indicator--3ec4898d-4991-4e36-9af5-84b143a17042", "indicator--b1a15a7a-400a-4753-bb67-6446c98114e9", "indicator--05f02577-e06e-4cc2-91c0-88e548580b82", "indicator--a80b21c3-37e6-4ae0-81f3-bb8e7bf335c4", "indicator--50178ee6-574e-4c00-8ef1-5363b99f08e5", "indicator--57fd8ab2-f21a-439e-b56e-792fbb2d44dc", "indicator--97a86a2f-df4b-4b66-8669-669fb9b5cb4b", "indicator--0fc645ab-64a1-42da-b591-19ff6c70061d", "indicator--0a1d405a-64ea-4744-9a9e-524b5522bfff", "indicator--6fa1cd42-f8e5-42d3-807a-0950a0c0c626", "indicator--518ad994-b043-4199-a397-a5b0c2c804e7", "indicator--056b13ea-63f3-4dfc-8c54-8fb5b5bc22e9", "indicator--7cf8c9cf-701a-4ee8-8cce-b82c1866bec8", "indicator--e1783ae7-725d-4971-b8a6-c2767a512e8a", "indicator--6d3e3583-4695-4d43-9580-738e14ac61d1", "indicator--f1379db4-e85d-4906-9374-f2a891971965", "indicator--1b3d21c3-da8f-4b10-9bc7-068f11689d3a", "indicator--6cb81e9b-bb10-4636-8f95-e5fbf765c815", "indicator--f289e49b-93e3-407f-ae35-4226b9d7c618", "indicator--e5e22966-0002-4d4d-912e-e64014e1346e", "indicator--91401fe7-770d-400b-b906-e7f6d5ea4b71", "indicator--b29a049b-4698-4823-855e-d29cd7f32f53", "indicator--a3ebe580-d6c1-4691-b7d2-982e0fb19db9", "indicator--38e4fb0e-5e27-4e8f-b30e-8241424f9a7b", "indicator--f7f2ffe1-0fdb-4e5d-8ad9-2853b3c2c0c9", "indicator--bba34c58-6c18-4f5f-9846-942cb62c7c62", "indicator--1c26954b-7639-4b02-a9f1-8933eb274c13", "indicator--c8926a99-d95a-44f8-b543-6c474b20093d", "indicator--266e8f5b-55d5-4dae-ae22-973756ba4fe4", "indicator--53e8a192-b5ea-4d7e-a5d0-71151288862f", "indicator--2cf14f99-8865-458a-a8b4-89f8643cce2e", "indicator--2b257776-b43e-4d35-8156-2dc6ac5c3e89", "indicator--96dcf586-2a10-4ebc-9d8e-3334d86bd1eb", "indicator--ef299c04-cbb2-4690-b4e4-1cc64a876a38", "indicator--fc776b10-c3b2-4689-a964-2330cfe4fb4f", "indicator--ed82c06c-5e5a-49f0-850c-61d1653f4433", "indicator--3fafe553-0d9d-47e7-aa37-6f70a92b70cf", "indicator--d0de9c87-4a48-49e9-a28c-d335db690d2b", "indicator--9cdce9e6-67a2-4493-a9ff-cd75a2e9b51a", "indicator--ae627fd6-d84d-4dd5-827f-16d9c410d5f5", "indicator--697f2919-985d-49a4-a68c-5407248d269a", "indicator--88bf7738-e0b1-4f0d-9a6e-f57acd194593", "indicator--dab14d7b-5886-4890-bd3c-6cfe43541e40", "indicator--3cb9f436-ca46-46aa-baf7-1580f0555f74", "indicator--7a0abafe-fbb9-461c-a1ff-e0b0d68fdfa8", "indicator--d43f5193-aa39-4226-9558-be13c0ad371e", "indicator--eb2a5e87-1420-434f-a15f-bdcd26e80e30", "indicator--11e37ec9-7200-4092-b081-1462df097e23", "indicator--cfb71da2-cb47-4615-b863-306a5d9e9b5b", "indicator--bc527ba8-0ff0-4932-87c1-d48a964e884d", "indicator--98c4c742-c3ae-4b15-b842-ff52c440c4fe", "indicator--e6043765-6a1f-4daf-9184-a65f434707d0", "indicator--e238d024-8c22-4751-a3fd-234c6ab586f3", "indicator--bd062f6b-9b14-492b-b328-7ed5ee6946fe", "indicator--6c110be2-64f9-4bcc-b047-2995387cf2b1", "indicator--6c622cef-f483-4cc5-82a2-376ed35af489", "indicator--2d6073b8-324d-4b6e-93a3-d9d709df2044", "indicator--e0717848-1525-4b3e-8f68-5746fed1475f", "indicator--0a99a3a4-58dd-40ac-a510-2fd4f746374b", "indicator--c85835c9-c2de-4e1e-bfd5-81cdc98ee017", "indicator--85feae8d-f099-4620-86f0-7749f9ce9768", "indicator--67d8a67e-430b-45a0-a17d-62c554516040", "indicator--6570c42e-c185-485f-acf4-eb2c0581d0ce", "indicator--7ca6e26d-2f45-4739-b81c-c02314eeb162", "indicator--711b8425-d65c-441a-877c-7e4061e910fd", "indicator--6a084ffa-85bc-441a-b172-c725a3b84573", "indicator--1b6cd893-908d-4671-86f2-1a165419e280", "indicator--29c10147-336a-4a3b-ba98-021559ba34d4", "indicator--992de442-ff47-45d1-bd13-372babd71774", "indicator--475bc987-c3ed-448f-b2d0-fcf23ca1e262", "indicator--e25adf3a-b4f8-4adf-bd44-c017255445eb", "indicator--ff54d185-7e87-4ae2-a190-1f21e782b949", "indicator--19ad758f-f61f-4c90-8a5a-7887fad93bfe", "indicator--c998cb05-9119-49c5-834f-4f96bdf000a8", "indicator--6cb5d39e-e559-44e0-9584-e1a97f3925f5", "indicator--3637ad94-cbcc-4caf-b3de-7ab75ce2d364", "indicator--8cb79b8e-ea11-46ac-a7bd-c82da8b39272", "indicator--f31d920a-8b8d-417f-af0c-7933c603a37b", "indicator--e85c3674-05f1-4716-ab9f-0b2ba71aa396", "indicator--b7d5af2d-0587-4966-be7d-49848f22573f", "indicator--162e1892-eb7d-4d9d-9509-744b0c9bfc5c", "indicator--da7c7837-5c46-444f-9ab3-fba4e62c2a24", "indicator--d16c14fb-fb9a-49d7-b892-cc9992ebb551", "indicator--9727c982-28a6-4a9f-8496-003b1b9c62eb", "indicator--70b431bb-a2e8-4431-8b12-e4e58ca95f7f", "indicator--ab996885-1ddd-4a9a-9b97-50abea729135", "indicator--302c8eb8-394d-47a5-973c-7ad1b118eff0", "indicator--8d8004a1-b044-4a94-b53d-0917a940590c", "indicator--4f385322-7f62-4017-99aa-5e2ff57e1077", "indicator--e9428892-7032-457e-95ce-d1da1ea3a976", "indicator--e7e88b14-2989-4a97-b3b0-e999ed005d94", "indicator--4d46edc0-3bc9-49d8-a50d-99525611f78c", "indicator--5c387965-41f4-49ad-82fe-060addb84980", "indicator--77cb8eb0-9d7e-4ba4-83d0-c4d701fe23d8", "indicator--15834d5f-9be3-444a-a16c-9cd8866356d8", "indicator--9660fdc9-ed73-4bad-b6f2-6a6ff4583060", "indicator--c58802de-75d7-49ea-9672-7f583af1759e", "indicator--436d9119-9dd4-4cd3-8a57-be980cd08463", "indicator--aa551aa3-1bf6-41a2-96fc-35d75b0f8e08", "indicator--2ce7fddd-a722-40ff-9eee-a10e631347f3", "indicator--aae359ed-44dd-4683-b0d6-a1f0de2b6b1d", "indicator--fee2f121-9f69-4048-8032-6e367f1b181b", "indicator--c9f08462-959f-45ac-b073-0af0f42dc151", "indicator--f8071784-2d61-4a43-9dda-16c941af5e2d", "indicator--e591823b-87ad-469c-8128-e361e1f029a0", "indicator--b12e4d05-c8db-4fc2-88cd-b2a73f084f8f", "indicator--56b3c3bf-ca10-4707-bf73-9b079f600d63", "indicator--3f5c4d5e-138c-4026-af0c-0709ec226786", "indicator--3f10594c-dcca-4c78-8edd-4318059710eb", "indicator--97be3822-3dd1-40f5-b8e0-1dcee6f5ff31", "indicator--e8fa9ee9-a064-4420-896b-1ea981a5a136", "indicator--a092f422-bc3c-48dd-917c-f447b21e72ac", "indicator--b298ec0e-f5f4-42f7-be20-12e0cf814289", "indicator--1da62539-c94e-4031-9a82-35518760eddd", "indicator--2f977e3b-03af-40ae-8de7-35a0ece4fec3", "indicator--018d100c-5439-4964-82bd-506b258d4d0f", "indicator--f16e09e8-7925-4dc9-b0ec-ee7518014c05", "indicator--f71e3fe3-1e6d-4530-92e7-03db8092c778", "indicator--d40ce99f-fccc-42f7-98a5-65d9cf6d7efd", "indicator--f4e59531-6ebc-43de-9ec5-158d4b645c0d", "indicator--b1619465-4319-487e-b84e-00d0b8dd95d1", "indicator--e47a0937-a295-4178-b243-863e99fab170", "indicator--fd715f37-5fbe-4149-88c1-c40fe6f7d5a9", "indicator--14cd2f18-68c3-4c8c-837f-862ff57c9de4", "indicator--bae35749-5974-452b-b4b6-47faea61d65e", "indicator--6b9821b0-8795-4541-86c5-4b1d4313cb50", "indicator--28044c40-ebac-4cb4-a1c8-63dd19171675", "indicator--cd5afcb2-ef3d-47a4-b370-f1984a01924d", "indicator--7b6daf6c-533d-4f63-aa12-455756b01961", "indicator--92178f41-1068-45ec-b95c-4e51b0884825", "indicator--95b5349d-8979-466b-ad79-2a5714767237", "indicator--88469f0b-bca0-488e-bbb8-f7c6217113fa", "indicator--0b80ac7f-ce7f-451c-8541-8664f156df0f", "indicator--6e04ee4a-b762-4719-9c0d-148479ea6a77", "indicator--dc9c0225-5132-4028-ae65-1267e779ab4c", "indicator--96aedc8e-2159-4d1e-a603-923ba64fc8b3", "indicator--840ebf0a-6c2c-472f-b531-4969a150db4b", "indicator--6f1c3abc-21bb-42ad-b50a-bf0a3233a01e", "indicator--1d0160ed-81d7-4283-a4aa-9ee129c31182", "indicator--b36de560-2766-4f67-84d1-d1225ad01251", "indicator--20ab2309-badb-43fe-9935-2a6729fed691", "indicator--3d261ebb-7771-45ac-ba70-0be5ba5967dc", "indicator--cb07ad26-f1bc-442b-8f2f-612ef8813376", "indicator--6e2e7f99-97c3-48fd-8ed1-39f36013f396", "indicator--1b474ba3-a12b-46e5-b74f-92be7987d47d", "indicator--fd963c72-23c9-4f66-8050-82f930a094e2", "indicator--0f1ed26a-bfad-4cfe-8bf2-2a726d96c0ae", "indicator--30f028be-e8b3-438a-bc58-eafee9883aa5", "indicator--5bf065c7-5b87-4a38-bbb7-594a940fd07c", "indicator--526539ef-5ddb-423e-9d2a-063beacbae30", "indicator--478f6381-1b7b-4723-ba6c-b54c1fcc7f98", "indicator--101fcc45-0a9b-4818-aa46-78c19fd93811", "indicator--d8cc58ab-7e59-4834-a768-960bcf734757", "indicator--954e5a08-95df-4cd0-aedc-0bb6a5b9291f", "indicator--2838bf8c-0b56-4ba8-b5b1-778d256c7d9d", "indicator--bb93e603-c62c-4510-9642-32a5d1d4a0ee", "indicator--6b002ced-a02b-43d6-8c72-aaa0aa179ddc", "indicator--726eb808-d137-47a8-b656-e72a9b1e257d", "indicator--831b9889-3011-4015-9b61-340478006724", "indicator--d645a764-9df0-41c9-adb7-92bf340acd55", "indicator--ef06eedb-c7b6-4217-affe-2a1251daefe3", "indicator--d4f9aed2-fce4-46eb-8ad0-db695bc23f03", "indicator--d4ee377d-b7c4-4ac3-b4c7-e86b93b5e4c1", "indicator--c9c55947-a7bb-4a82-abb2-686ce4fa71c8", "indicator--3c66865e-af8a-4600-b45b-388fa0448689", "indicator--3ca496e3-fc32-49e2-92e2-09b1810e062d", "indicator--a8674914-361a-4aad-afd1-29516d8c4c2c", "indicator--6e4fcf0f-a098-4f82-9c5e-56c9796ca691", "indicator--bb534b0d-2b11-4026-aece-421d3fb1b4e4", "indicator--c2e2cbb7-1811-4522-85c8-e4ebce20d8a4", "indicator--a0e7e45b-3f01-425c-90f6-855126995954", "indicator--4cb602e7-4c01-428f-abbc-b65a93a1c77a", "indicator--d69db247-4795-4887-818f-3272cd0eb262", "indicator--e317a1b6-fc42-43a7-8a77-1fed781650ef", "indicator--eb0d4184-80df-42aa-a948-ffeee93a54fa", "indicator--d62189cb-63b1-4448-a7bb-08a2d2dcd112", "indicator--b11501b6-fe14-413c-b92b-d6d147768c46", "indicator--b5199ba8-7c45-4a40-902b-c446a977bd57", "indicator--76651998-cd0c-43fe-ae46-ce35a8cb2662", "indicator--3ad89b75-53c4-45a0-9a2e-d06332977c36", "indicator--c7ef04c2-faaf-4744-88a9-e59b569d298d", "indicator--1c0ff2ec-780b-4129-9395-1afc1c20f6eb", "indicator--29202f55-dec3-455a-a6bb-b5ba5cf82895", "indicator--342f8773-ab19-4fc7-8a2f-c32e0a776554", "indicator--e12bcdd9-aa94-4f5c-b947-ebd14a542e06", "indicator--c696c581-931b-4a4e-a17d-6a1c3cb48e06", "indicator--554fa226-31c9-46f4-876f-9ab7315f0305", "indicator--5c9c9cef-49f5-490c-93ef-665c3243fbe7", "indicator--2806e6a0-7e14-487d-ae64-73425c091e37", "indicator--882e4233-1f59-4d2d-8937-3b8d76610e3e", "indicator--dd4b0718-86a7-4ac1-8b1d-0cb917165688", "indicator--bd8679cc-750b-495a-a541-ed13818ba413", "indicator--8080f6a9-6a9e-4a32-8dec-2de4d5034770", "indicator--4e1f6be1-3929-473e-a092-070ca652e4ee", "indicator--0deedcc9-38a4-41be-a913-717775975232", "indicator--24468631-62f7-4fe7-aba9-0f3eafaac12a", "indicator--38e4e8ab-5168-42e1-9ea3-27c4e930b45a", "indicator--5dd0f816-b1ca-4631-a334-2152be96d393", "indicator--aeb1f669-b747-4c33-b1aa-1a30f28ff89e", "indicator--005244df-8011-4bbe-801a-e5594ebbdae7", "indicator--46250594-0829-4d35-9cad-192887935032", "indicator--26088f39-f174-4678-8807-a010b936bbbe", "indicator--751c4a6c-acf8-4c1a-84c1-3b0b4d241a30", "indicator--17039d22-be13-46f7-b8d1-6ea07a3ec587", "indicator--e01db8f1-69cf-4bac-95f1-a4710332ae11", "indicator--d3c16427-1c5b-4c35-984d-17a3fe1c6522", "indicator--e1d72f57-fb9f-4276-aa6a-84eade7bea37", "indicator--e3338d64-0a22-45fa-ac1e-9eefde7397de", "indicator--25fb4629-9cbc-46c0-9c04-0055c331402e", "indicator--33d30487-5ea8-4209-8543-44fe36cee264", "indicator--d59011fe-aca2-4d27-bd3d-b76b22401726", "indicator--31620533-8099-43f6-90eb-29f66db87dbb", "indicator--e74b4ea8-8269-4779-acf5-4a8e3b36ab21", "indicator--e47bc5af-7b05-4797-99a6-7e36ae6faee0", "indicator--84d68c28-6b07-4db4-9de3-a2c2a1479589", "indicator--18cff63f-934f-4a9c-8f75-cf59374a1cff", "indicator--2d97ff5b-05c7-45ad-84dd-ac68f72d620a", "indicator--b28539c7-86a3-4825-8ddb-9b2b0752dc47", "indicator--ef64bb09-8ddc-40a3-9366-91fad7014de7", "indicator--fcd79ad3-0db1-4554-a2b7-eea42cf26d0c", "indicator--7fbd0b23-93f6-4d65-958e-d7eddbc4635a", "indicator--bc419fc4-f7aa-412d-a55c-0c0789a85678", "indicator--9111c411-9ac8-4bf4-8d51-e5de69525b0c", "indicator--38d735c4-de3d-4849-9881-dae9be0b8f80", "indicator--b5893ddb-2389-4de4-8ba4-ac4bf43fd003", "indicator--3e5d1fdb-f420-4756-bbd6-23296ba61566", "indicator--276d9fb7-6932-442e-b31f-b337b830ed7f", "indicator--2c002818-44b1-46df-b6dc-165f33c4ed64", "indicator--9b4bc50f-d4f3-41d6-85d5-78f7d1e2a9cf", "indicator--ff4a4635-5959-4860-963d-ecb7507b4970", "indicator--f7db7f61-1a3f-4da7-8858-1696ae253156", "indicator--b19e0cf3-a6fe-45c6-97ab-25a9c9c326d8", "indicator--4bf46770-ccd3-4f9c-99b4-751f26d9b249", "indicator--0bca7f00-374c-40a1-b9cc-c547911af0f3", "indicator--92f22e23-36be-44ef-81b1-dd58158d98f5", "indicator--4da208fd-bad8-47e4-8191-0733b70769d6", "indicator--a29e05bd-12e6-454a-bbe0-05558241b915", "indicator--c71357be-609c-433b-b075-89abdd2f77ba", "indicator--25bec116-e9e8-4df6-8061-a356dcac84e4", "indicator--4bd40c8f-26b4-46a7-8561-ea48700a952a", "indicator--e275bce5-42aa-4418-9d43-c688b2d52ba0", "indicator--cb7dee91-f695-4b8f-a646-b612140653b2", "indicator--f6772210-d8a6-4e18-aefc-30ec22893e27", "indicator--0a212c45-f3a3-4b2e-8181-2fad0c9c8eb7", "indicator--b347147e-5f5a-40fb-b9fb-1729fd71137a", "indicator--8d83cb1d-ce7f-4323-a574-5135865607a2", "indicator--b8ab0f93-193b-451a-85cf-382c9d778a48", "indicator--bc3dd975-9f1b-4232-88b1-9032b5486a5d", "indicator--628af9ed-2157-4408-a6f6-2beb29099d98", "indicator--1646b61f-7e62-45df-9de7-e26bdfc7321a", "indicator--399bcb6d-a96b-4728-ace2-893f9e2702be", "indicator--c9c62025-fcad-45eb-80f1-ef74ae3d4084", "indicator--927cd293-7e86-485e-bc87-f562c37c5b06", "indicator--7bfcd27b-1485-4f49-bd03-03c083b9c111", "indicator--f045c892-ebf0-4503-89bb-1a68f5c142f7", "indicator--0ca0a88b-a1ad-405f-bb9f-913bd6454226", "indicator--e37c834e-de9b-4367-b169-c926fa7bd7bd", "indicator--0aacb710-b489-4bc9-9ac5-aacc4abd4319", "indicator--aa427cc9-4799-4148-bd19-bea2f1c40e24", "indicator--169f51d2-6644-429f-bf6d-b5fd62868f7a", "indicator--7f38a516-56b0-4e7e-8cf9-baf7a58c0005", "indicator--befa7eea-3708-4cfd-9f21-6a89387735bc", "indicator--6559b6a6-a83d-478e-9f27-d7ff9dfc28b4", "indicator--c5c61034-c300-46a2-8960-cc6c4dd97cb8", "indicator--8116985c-2dac-4528-a8af-8145c30b34a2", "indicator--66a74b81-f807-40a7-acfa-17f3cb74330b", "indicator--18bd6844-9c1e-49ba-b4d8-9b6dedbb1119", "indicator--a60b68d4-a825-4f11-a4c7-72d9935ad92b", "indicator--2d666268-91dd-4e87-9588-396efe506341", "indicator--695cf4e2-4d40-4f2b-ae12-1ddc64548ca8", "indicator--6f332dd3-0a47-4172-af3c-417caf9c5523", "indicator--3c023d66-7d13-4e61-8bbc-edf53f310975", "indicator--d6f2fb30-e3b4-4d08-b833-7ad5ba75939a", "indicator--b3907ffa-72cd-4944-b837-aab0fecb39f1", "indicator--4ea2e0b9-de4f-46e0-b32f-fb343410c1c3", "indicator--7da4fa86-65c4-4b2d-ac93-2158804e380d", "indicator--6835b82a-c09b-4b1c-9f95-fcfaa29574e4", "indicator--c80812de-7b7f-4e43-bda6-5bfa781ab3e3", "indicator--c220d17a-3c05-498f-8132-90e35bf38b63", "indicator--ac9dd600-2bf9-4a38-b9fb-f4ac93a71c29", "indicator--8801ff1f-ecdc-45b5-beeb-25a5f0cad200", "indicator--87f002ab-94a5-4f95-acab-0f8caac9ee06", "indicator--6428f2e2-6c21-4545-9518-a32987a5f9ff", "indicator--21b7ab1f-7ab5-4ad4-a323-3d4dc51766d1", "indicator--f25274b5-c763-415a-89c3-6a33c613e5e7", "indicator--84255b26-5834-4969-a601-e286ef98be4b", "indicator--5a946ac5-98fa-40d2-9bcb-ab9cb1c8b40e", "indicator--624b336f-4407-4a51-a5bf-5ab3c1ffd944", "indicator--2bb37c7f-fc8d-478c-a76f-c4e9a844545f", "indicator--43c23366-e4b3-4993-953a-7aee82ee02f1", "indicator--c05ef231-6df9-496f-a510-1216586e7681", "indicator--e0f2f28d-384a-4b32-951a-45c9d117e544", "indicator--c4d71c60-e0cc-4465-8ead-703876500836", "indicator--7fd1141f-2c7b-4400-8d72-8f95d37e0c34", "indicator--6b3d0b1b-32a8-4336-8387-45466142d1aa", "indicator--14c89975-95eb-4798-bf39-b94fd7aaee92", "indicator--fedbd4e1-ab03-4e9c-805a-cedd7d9ffb4c", "indicator--28882876-2f1e-4d08-8f5a-1d3a3f13e7b1", "indicator--1d37e222-c476-4563-9359-f37e6c786007", "indicator--dce51bdb-73ba-4e40-bc6e-1dc62bb43ace", "indicator--3bcf166b-c93b-4790-aff9-5668ed975baf", "indicator--d73a30e9-f84e-418e-8bfd-1912047f8662", "indicator--67dfd20c-b851-4155-8d87-fc8518d03ad3", "indicator--654df315-95bf-408f-8754-0c9c72558e9c", "indicator--67109c0a-7a83-4274-a897-7380b7f69e35", "indicator--875dfdcf-4da9-49bc-8878-5f7a89986cc8", "indicator--9ebe89b6-cc4b-4ba5-af6d-bf9b8cca6220", "indicator--ebf812f8-b49b-4061-b044-26c06b4996b1", "indicator--a67d1108-8318-4088-b6f6-0eb9c2d0b067", "indicator--fefd6948-68d9-4822-bc0a-00f1bd432644", "indicator--cafb3210-3dc0-4431-a362-f9168e312ee4", "indicator--36e15fe0-89c8-44bf-a59e-ca980295201b", "indicator--bcc4139a-03d6-4dff-ab00-6fdaa6ed4e31", "indicator--4ef6a99a-4c57-49ab-9600-2cbbafd1f377", "indicator--961847ae-6551-421e-a0f4-42466c6a95b2", "indicator--ddce9e5a-5f9a-4ef8-be25-cae12e829a07", "indicator--944d6bff-bcbf-4489-8c9b-66433cfce957", "indicator--6ec10c71-1cee-4887-b52b-6b947c6ea3c5", "indicator--ae376688-2145-4717-b96a-24240b94a36f", "indicator--b7be95e6-ada9-4574-8e06-acd41be51fc1", "indicator--7c1c0962-410d-4c54-aaff-7618b6f26c8e", "indicator--0a3e990e-f3ff-47dd-a2cb-26e816747c8f", "indicator--35bb9b3f-bacb-420e-8197-5a8f92328e7d", "indicator--3437ee95-cc3f-4070-8f62-dcdd334b54cf", "indicator--2b210133-9ca5-492d-8d71-b75d86a95cda", "indicator--71c8d18d-7bc3-4305-a289-18f585936823", "indicator--adf55b80-6807-442c-91c5-c5dd9190613a", "indicator--3edc1f56-7bdb-45a0-899d-588e28b2ea2d", "indicator--968aaf23-1db2-4686-8246-bcd51a12558d", "indicator--ddf651e8-36f5-4298-b07e-73c4cb8737db", "indicator--6ef48708-97f5-437c-b773-964e65ceae70", "indicator--8cc926ee-d34d-4d99-81a4-b11d6b7499ea", "indicator--8f0d7934-f597-4d82-bc29-3d7f25cb69bc", "indicator--59100bfb-7a55-4a8a-bc21-2d73192f1869", "indicator--c3ea7950-df78-41b8-b065-1e93e96feae7", "indicator--6314b9fc-5421-4013-bced-d949114b6f04", "indicator--040e642d-0969-48e3-9d9d-ac11da53af29", "indicator--12309e58-da23-479d-93e0-8cb081c0189a", "indicator--020aa608-364d-4d6c-8a51-dea449262a8d", "indicator--628a8550-a23b-4a3e-b190-34d80b5c02b2", "indicator--11717a4c-65dd-4333-9dfa-aab1ca805716", "indicator--800c5001-b091-4fa0-8d53-cdbcc8a08abe", "indicator--a4d4d0a7-9eab-426e-9971-59f91b958297", "indicator--01e6230a-f721-4c77-a5bf-22478721338a", "indicator--0510563c-9873-4d7f-bef3-e0b420c12de7", "indicator--9c2d43d6-0741-491f-b5dc-337c60b99a27", "indicator--1eaf5845-2052-43e4-a586-f8619d127e16", "indicator--4667153d-aa20-4248-a87e-23d78ad50523", "indicator--13f99ba9-4853-4cc0-aaa2-70a2795507f2", "indicator--b1b27b2f-8ca5-4ff2-b044-09d291fb75e1", "indicator--8bbe828b-41de-44dd-a5a2-434dd643c3f3", "indicator--21355a0e-9494-4511-8738-fc5f82e7155a", "indicator--fc165c23-cd78-444e-9426-17e0b5f2b543", "indicator--97203ada-baca-4ce6-aee4-b34864684487", "indicator--35bbef4f-542b-4b2b-9357-cc5146e15f26", "indicator--fa8485af-06ca-4d8d-b667-31dbe2377b8e", "indicator--d09c923b-b875-4778-beaf-514ceacbd654", "indicator--5b248cd1-51a2-4919-8252-f6b948441680", "indicator--6a120409-7d69-4579-b2b3-a395e3538c25", "indicator--0df30f0f-df0e-4669-84dc-9e8aca02b4be", "indicator--8c5cfa97-6c1e-4161-8ede-8d244babca45", "indicator--308906ac-2fc4-42d9-8305-6affbcb26dcc", "indicator--90bf4d23-096c-4e08-942e-2f0c748e50ea", "indicator--a157b841-36d0-4245-95f3-791de2b9ebae", "indicator--60cc8cf3-86fd-4e2c-a5cc-6044995b99a9", "indicator--26bd2147-11bc-46bc-a04b-c0469132aebf", "indicator--f4dfcbe0-91a5-4562-808b-ab693062ea60", "indicator--d646ae21-9969-4684-acd2-14b70a290150", "indicator--b414646b-c234-46f4-b4b8-742045a90d8e", "indicator--4f7e6d80-6af8-459a-9539-c25f9f99bc08", "indicator--137b0585-1e33-4647-b2f3-080621901b39", "indicator--c6437731-618c-4d84-ac52-ea82325ba12f", "indicator--d354b8e1-51e6-44d1-8823-69c07ff095ed", "indicator--de47fcf7-60e1-4735-96d0-7c62ed5708e2", "indicator--48419a97-08b6-45ed-85c8-e7ce87056a16", "indicator--18087ef6-df09-4f06-8225-db776fbcd5ac", "indicator--4b5bd388-cd13-4416-b778-d2da7a260f26", "indicator--4d5e238d-a4f6-4264-8ac2-6d7495b36632", "indicator--066a4301-290a-4294-8a40-0c001ac5cee9", "indicator--969fde94-9a47-455d-a4ca-c0d3ac782919", "indicator--330e83fa-98fe-487c-8d4e-dbdd0642a96b", "indicator--919f3ad0-046a-49b0-b7a5-5f39c6e12761", "indicator--5dbcf7c2-e492-442a-9cf0-c88e6b65e3c6", "indicator--dce560ed-0681-4a67-9110-49ab4274612a", "indicator--8669b8f8-5c6e-49a0-bbf5-ebc1c57be79f", "indicator--411c5091-9e39-4a48-9c9f-46e806837de4", "indicator--9c4169e5-557f-48f7-a65f-b096766d0bd2", "indicator--f7b0e137-f9cf-4aab-9048-c32bc5ac6638", "indicator--59d527e6-2735-4223-bc30-865d34eaa917", "indicator--b070953e-56b7-4554-8fcb-609cb35f84c8", "indicator--94aa3918-1cac-4931-90d1-bfe002f90c94", "indicator--eca14ce2-61b3-43fa-a748-f4a65d57dcfb", "indicator--b8100cf7-a765-4591-a781-042e958a5ebc", "indicator--7db53a8a-c27f-4905-9dea-90507c74e70c", "indicator--8d3ed047-cbd5-4627-8d70-f8844d1766dc", "indicator--c3752e54-8b1d-4a34-b8c3-a3a4e2cfdded", "indicator--2e58b7e2-32ed-4973-a5da-e95b8829ca25", "indicator--95ce365c-dbb5-4d19-95f6-3bb448a5a89b", "indicator--dda62ba8-260b-4a23-9e44-6473c436a159", "indicator--f72ea04e-635d-4fdd-87aa-150c04ae4589", "indicator--211276fc-e6ac-4791-a356-e7e8469ad669", "indicator--c8c971b7-638b-4401-aa86-8d93fc966ad3", "indicator--eb36783d-912e-48d0-934f-21ad6da7ce60", "indicator--978a8b95-8108-4853-bffc-e9494f9d18a8", "indicator--8086900d-9ca3-437f-800d-5cb4f3c7a2c1", "indicator--e2868614-910d-4ebe-8510-c0eb4d03f008", "indicator--7562ac42-8d94-4777-ab67-43466a1e26a6", "indicator--827740d4-5ca8-4df1-b765-963c719dbac2", "indicator--f5e3ee4a-bb85-4883-9b32-a6aca91f4bc1", "indicator--b35e2e3e-1957-472d-94fb-56632fdbaa3c", "indicator--4c122b46-7c18-4e72-ba00-d151fadc0ac3", "indicator--51933274-84ed-4a2a-849b-c4329ba8b271", "indicator--f94d8d0b-e31d-44c3-8c89-5d3ccbc09106", "indicator--12c1d59f-622c-4588-a4e1-a3b88665e58c", "indicator--1bcbef0b-c996-4cf6-b41f-19bde76f0998", "indicator--2bb58509-15e9-4a53-b137-001e1549a50f", "indicator--a188f52e-f38c-42f8-86d9-6505e8e2fa7a", "indicator--f4c1c5a9-e4cf-4b15-bb43-c19f215cccd9", "indicator--19aa5163-6f47-4b48-a471-b541b48f9984", "indicator--a0320c0c-afab-4cc3-8819-613c34517440", "indicator--4b43c07c-dbb0-49de-9bfa-0abb320e14c0", "indicator--bf2c16e6-67ae-4fe9-a535-4cb19851843e", "indicator--bd33988e-3472-4c7f-b11e-f13e5ed9c1c2", "indicator--bde31680-06d3-4cb3-8b58-24e031a933b3", "indicator--ac363ccd-ee22-4143-971c-948b9ae2e62a", "indicator--420b5cd6-3595-4900-975c-e9f297ca7baf", "indicator--35277c0b-8307-4893-83c5-8ad4ff134876", "indicator--6ecfd434-a2b6-4f9a-8423-a35d25885ab6", "indicator--211b41f5-15b4-48bd-8a1b-352872faa219", "indicator--dbff7c56-0874-4eb2-9410-164005d47365", "indicator--f4a5263c-a9be-4aff-8375-d97ae0b59d53", "indicator--f63751d5-e9c3-413b-9ecb-3f44a4f0ce31", "indicator--ffef54f5-b011-4e06-bf5f-a8593b041315", "indicator--d5a1e209-d85a-459c-877a-3e0674cca56e", "indicator--b97fcb80-3ccd-4d29-a207-b203b50e0981", "indicator--d2f590e3-ed07-4048-bbb8-6c0a6c2b6255", "indicator--c34e08ff-06c7-4e17-87b8-ec024e905e49", "indicator--6344d71f-064a-414d-a653-6f7614d90a0e", "indicator--ae5f85d6-0895-4ee9-8c84-f74c991a89fa", "indicator--08185086-09c1-4348-8733-5d9365406d32", "indicator--b1a6b005-9819-4a8e-9977-64349b5ed0e1", "indicator--64cf3043-7e20-4111-8d38-0c7d7a6834e5", "indicator--1de530fe-1e73-41a7-a3e4-8bc886e67552", "indicator--a56ae881-3383-4d0a-98ca-f48700ed1d3e", "indicator--a1e4f140-7677-49d6-ac33-4227d58767fb", "indicator--8c0e4a0b-06d5-4685-abcb-857ae16d8a3b", "indicator--8de283b4-80ff-4c2d-add1-f5954a385dab", "indicator--1cdb85a7-9ef6-46ba-95c3-664515fbecc2", "indicator--7cc5424d-00c0-4956-b5c0-4b6650a4d312", "indicator--8d00a8ca-12ff-4e82-99d9-d2fc86db4270", "indicator--09d116d5-5449-4544-9d3f-016565902ef0", "indicator--d9b5418c-37f9-432e-ace3-f286eab8275b", "indicator--6aedd594-9982-402d-a8b2-ba927548acea", "indicator--d1e0d02b-a454-436f-a1b2-833bfa7b7e39", "indicator--36b2d6ea-43e8-4855-b3d9-f2b02205567d", "indicator--66932f27-6d78-41a1-812c-b25cf0fb0829", "indicator--c992d835-8b01-4c9c-99d3-9209ecb61c78", "indicator--4e4f4334-d4e6-489e-8fa0-3640c9adb1e0", "indicator--9865096e-3c79-440c-a95d-0000f1228659", "indicator--3d519b4f-414c-4836-bac2-6be040c231c8", "indicator--32403975-26b5-4bba-9023-d08f1b5997a4", "indicator--7c72799c-7c49-483b-b0c9-85e775a8fd31", "indicator--dbbe420c-c5b5-445d-818a-3c34d27d1d5f", "indicator--89daee36-e66e-4296-9f67-e8adb580b365", "indicator--e4e23e30-0c09-4eb6-9a7c-65332d091ddd", "indicator--2173f951-c22a-4783-a119-f4f9acea4faf", "indicator--bfe77d93-7d45-43bf-8453-036b3f932542", "indicator--4e8271d8-193d-49a7-b28a-e1fca77bd86d", "indicator--2e3c7d8c-a3fd-4161-ad74-e68aa830ffbf", "indicator--c2c44b6b-420c-4709-bfdd-0689e0051a0a", "indicator--33ad4b39-5cee-435c-bd28-c70eaf7b400f", "indicator--daed4282-7d10-462e-a3a1-d348cd3c7dd9", "indicator--898f86e3-1da9-4ad5-bbe7-cd43dc924a1f", "indicator--9948e9bb-89fd-4ad5-b4d7-3a02940a773f", "indicator--20a298e7-23e0-4c57-9110-e80647c0383c", "indicator--2ac28037-2cde-4f97-9277-b1c6180bdb89", "indicator--fc1c3fa4-69a7-4573-b11d-aed7d3bafec4", "indicator--2f75223d-3522-4885-a15b-4324b784a77f", "indicator--bd4ca3a7-209d-4309-a115-32ed5acbe93c", "indicator--53d2d0f1-6ab7-4804-98f3-134c08eff0cc", "indicator--3ca38655-cd3a-40ee-8431-f4f84d12e9da", "indicator--ae79134a-2157-4bb5-843d-e87267dd8d9b", "indicator--dfa20563-e039-4491-99cf-d6b89132066b", "indicator--ea022800-8634-4aa3-8abe-560d917b2a1c", "indicator--d185a40a-32d3-4cd0-a9ee-9e5e6bb541cf", "indicator--28c194a0-be47-4aa0-bf36-3cf6be0d4fd2", "indicator--4aa95019-dabb-4f00-9fb7-1923e21fd1e1", "indicator--05d73c2b-11c7-4d61-ad9d-77005c49f76e", "indicator--cf2061a8-d847-4b8d-a6c0-5b533f00634c", "indicator--1a400517-d48b-45d8-9c33-08dca6f77af3", "indicator--3586346a-39ca-4474-a5eb-cbd2132d91a3", "indicator--e2f5f712-6f72-42b6-b60a-52863895602f", "indicator--37fa5db6-c117-4554-a5cf-fcea54a510b2", "indicator--6548f840-8b66-45fc-bf48-e11936dd7001", "indicator--f5be78f6-4e6b-415c-bd08-78138a23eca1", "indicator--8dc58461-892c-43c9-8034-bfb55135c877", "indicator--4dde5a31-faec-4771-b3f2-2df1d7a6f7ee", "indicator--14043f27-0a33-48e4-bcf1-c59506a52add", "indicator--b1f2b0c9-6529-4f81-88f9-c96abcf6b399", "indicator--52c12f98-fef8-48d5-96fe-46839c4be493", "indicator--d84d0783-dece-46f4-95b8-5e1d323316e8", "indicator--cd3299ff-9bea-4803-bcc0-63e688aec2ef", "indicator--04c8b51f-d0c2-4fd0-9ef9-1075c33f0734", "indicator--97bbbf05-fc10-4b33-9b8c-188e5675d16c", "indicator--7b5dcaf4-23a7-441c-8d57-2d2d5231c42d", "indicator--3786c79e-1eb6-47ae-ba76-19d7f447c87c", "indicator--6fc4383f-1471-4eae-b2eb-a8b2ffe9bacb", "indicator--fefcd37b-be91-4b3f-a376-0984fee8f6ca", "indicator--392a2a71-8406-4e33-a4c4-d1f18bf23173", "indicator--694159d9-c3ff-4914-b0df-d1e1b9614e5a", "indicator--de35f623-85e5-4c8f-a3bb-756b4547db64", "indicator--75c1d760-64c8-4942-b376-cadfbcf4c338", "indicator--83b4aa60-6bb9-448c-bd0c-f3734d4d3934", "indicator--0e53435f-4b11-4e3e-867b-e99a8dfabc8a", "indicator--9e05d847-f1da-45a9-9621-35310f99c5f0", "indicator--a320dad9-4760-4b18-97ed-090c59a4e2ec", "indicator--eea27662-ec24-4d3c-912c-c412b2126a3a", "indicator--78f96b26-d87f-4993-9518-704f808e9189", "indicator--a7dfb3ad-1960-4387-8187-0da1be44f10f", "indicator--5afbb4a3-067a-4bff-aa90-52302755f46f", "indicator--9aa6ee8e-d85b-4862-a9a5-c43006e8f998", "indicator--2507e234-854c-42ec-b1af-610d796ad4e5", "indicator--61868ec7-5972-44a3-b42c-0a2980dca68e", "indicator--b13f711c-2348-4026-a8e7-5326f5a49dbe", "indicator--915d611f-20c2-4c26-a7b2-0b6e313abe83", "indicator--8b235525-000c-4a47-8e84-1096bc3fa799", "indicator--f3870039-26dd-46a1-ba04-cfaa3961cf9c", "indicator--b7801470-59e5-4a0c-8d66-26f7a26b9f50", "indicator--2980ebf5-35a5-4b37-9df4-716f722c0d9a", "indicator--c93185d9-2bf9-48ae-8b62-9ef2f6b41c37", "indicator--7a7e35c3-755a-4544-a8e2-98f2c7216d43", "indicator--16838e33-ad19-4494-897f-0d798ebba2a6", "indicator--7a782056-4605-44a2-928d-210de5e468ed", "indicator--a1f13c53-e52f-4ff6-9333-4628464d0cdd", "indicator--4c766c5c-23f1-4649-87b2-7bba6675dacf", "indicator--535ad3fe-0978-4b29-aef5-ba8fff6ccf58", "indicator--7eb3a6a6-960e-4a7d-a90a-87caff03eab7", "indicator--0a178881-bc20-485a-a504-9264db1d9b6b", "indicator--06f16161-e47b-403c-ac95-105fa03d5873", "indicator--086a8b17-a135-4ebe-bb09-1952fbfd2155", "indicator--b9db88ec-6cd7-49f7-8cd0-fb0935c5e246", "indicator--6f9b3179-637a-4450-b3bf-d940b66ddce6", "indicator--c398efef-5cb3-45e2-988c-48254d6a1c4e", "indicator--8abec604-0049-4fde-aa1c-cb2d9064fc80", "indicator--6cd47467-e66e-4431-b330-f754321013b9", "indicator--cd54ea35-00c7-48bf-a2f3-64c64d84bd13", "indicator--463dfbe9-a0eb-4a0e-b9f1-9fcd46b6626d", "indicator--9178a5f8-0634-4e8d-88c8-054226821b6e", "indicator--3bdabb93-92b4-496e-ac93-db4e01ea438f", "indicator--226583a9-37b4-4a43-82f2-d265ea729302", "indicator--c660313b-9fab-4743-a6e1-fcfa5f1c4ad7", "indicator--4ac38d76-06f5-42e2-ac35-ba4403ae0307", "indicator--cb5c7fc4-94da-4c5e-8c5b-ae0c89ac09f2", "indicator--60d917b7-0599-447a-9787-a748016f0b57", "indicator--11df0a0c-2b7c-4252-bbef-4abc75ccf12f", "indicator--cffbe048-8581-4395-b65f-70120c8257a4", "indicator--fc8628df-dd24-4f11-b86b-5242e452a51f", "indicator--8571d708-86b0-419d-8b3d-da60fe6c678b", "indicator--22ab399c-8dc0-4029-a3a9-522c5d87fd6c", "indicator--6467059c-342b-430a-8584-9c0d05bb2c07", "indicator--b98a4b79-c021-4bf5-a17b-ebab651b3e13", "indicator--18145812-f4f3-4839-9a6f-54209bddc51b", "indicator--96803049-6a5e-49dd-be2f-e6c0ba5a5dbe", "indicator--8df6dfac-4886-483d-aeef-d95430b2e5cc", "indicator--0620d011-c85d-4a40-ac58-78d85d5f9d2a", "indicator--d1db0437-294a-46b7-ad2c-a0413f7bd22c", "indicator--ecec0e2c-4949-4977-89b0-f92034a1cd3d", "indicator--c366108c-a887-47ad-9e40-759b69813d5f", "indicator--b353e99b-2a6f-45e9-be5c-b95978954139", "indicator--d38d3045-a659-4539-a70a-70b112a538f6", "indicator--becbb27f-5cf5-4ab7-99be-e2b29d399f40", "indicator--1de6d5fd-15e9-401b-97fc-256eb480a30e", "indicator--f38b4f8a-c17a-4f28-b21b-9133c09609c9", "indicator--18629dfe-c7c8-4a8d-ae9c-75d2a75466b6", "indicator--133905f9-1016-4f4c-8c35-3e6f261d97ce", "indicator--ba5515ba-9dcb-4e4d-aa55-80827c14a63f", "indicator--c1e04e72-65f2-4695-b87f-890dcf2b4b6b", "indicator--2c47a1bf-f715-4efa-a7b7-c5d2e693d256", "indicator--42acac69-f477-46d7-9ec4-812297dd55a8", "indicator--a391ecc7-141e-471f-8a38-81403e6887f3", "indicator--70081c6d-9b2c-4311-8062-89257a032d15", "indicator--6c8260e1-03fc-475b-b81b-fcffa5e0a330", "indicator--b05929db-7fba-4200-b23c-c0d4e07805df", "indicator--99f94e42-aff1-4e12-95b2-ffdee774f427", "indicator--c8e35df1-7c8b-4894-b508-a58711fffb0f", "indicator--0ea56919-f670-4355-ba5a-e75805b6e660", "indicator--87a0148b-cb96-458c-9fb9-a7625426b63d", "indicator--44636af3-1a67-4a62-a6a6-d735aa1b1c90", "indicator--f706f730-ccc5-4ce0-be47-c757ef21b580", "indicator--50c717e5-16dd-4397-9b94-2ce5c1e34169", "indicator--97dc8e40-0406-405f-a9d3-21e35163a6f0", "indicator--466c8c4c-3d2d-4571-95f0-951104cd4beb", "indicator--25cecbd9-fd86-430f-9fff-81c1e524096f", "indicator--d676c841-c576-4ed6-a30a-267655060355", "indicator--f2b103b7-6a38-4e7a-926a-9eb3876cd5d9", "indicator--20c0ec7e-0d42-4837-a777-ba47a6e56fc4", "indicator--ea8d2002-339c-406b-bf75-3334c15c0f38", "indicator--5ddc3b88-569a-4ee5-8143-909b7e284868", "indicator--075ca0fb-aee5-4632-8e8f-92495d9bd4af", "indicator--a53bee90-e103-40c2-bff2-3ee9ffc6bf8c", "indicator--26a85d1d-7895-4b4a-8554-93e82a4e399a", "indicator--9cc6ff25-3737-4993-aafb-d8e3214b86f4", "indicator--0f767eab-d673-4a80-a140-050d1d6750eb", "indicator--e9acabe4-61c3-4a10-97cf-bebdda98182f", "indicator--97256396-94e1-4e84-8f48-9bbc3f60a263", "indicator--a4c99d8f-a9a5-40ba-b528-44c41feccce8", "indicator--c4870da3-3d2b-46ca-bdfe-d264ea286062", "indicator--63080b95-0964-4c76-9c0a-4c21a5fa0659", "indicator--2f4f3877-c38f-4a1a-ad9b-2fa3ac1ec7cf", "indicator--79ca6d57-074c-4a06-8600-1567fb965513", "indicator--3c03dd48-8be0-4963-8d2b-2a8c5962a8aa", "indicator--9754e88f-b7a1-4d37-bf3b-23d1bf963fa4", "indicator--93ff4c92-9c96-4824-a186-112cbfa1ae4f", "indicator--0b46cc86-e88c-4612-a340-12dd09d0a3de", "indicator--11c2c807-1d1a-4550-adef-10d2e3aa2a1e", "indicator--17e2a515-b1cc-4ae9-b406-bfbc8a4f0383", "indicator--5c430fae-b1e0-4c09-8e0f-209600d5ea7d", "indicator--46ed5858-5edf-4d01-907d-76ebf4c91dde", "indicator--f6d9646f-99c4-439a-85e0-ab566f38dd51", "indicator--5fcf5966-d71a-4355-b29b-5a7243da00c3", "indicator--5ac52a8a-5ec6-4366-93e1-a20a671fb3dd", "indicator--027ba37f-3326-4fa0-bdec-a3fde3e24d2b", "indicator--7abd0fc2-1505-46ea-b85a-5f725e6fcf04", "indicator--250ed132-be24-4a6f-a600-2a76fc952d76", "indicator--77f6a9d2-156a-40f2-b7df-d12f2d3a92eb", "indicator--11acf950-b871-4722-b8ed-d6365400e20b", "indicator--6e79a456-48f1-4560-8799-19b37687820e", "indicator--42d434ad-cf94-4374-9165-57ecf9288f13", "indicator--301199a0-d654-43f1-a75a-02b1441124fe", "indicator--526f0faa-2c43-4ed1-98ee-193c04088686", "indicator--1f925ada-4c06-42c9-88a3-b69cc147f33b", "indicator--4b839eb8-9ffb-4f4d-ab62-1c10c1ac243c", "indicator--bd9b5412-671f-4c5a-bd79-c61a87b978a8", "indicator--93ad77fd-6a67-4912-9f30-c91a16d3b8e0", "indicator--eac7bf1f-6489-4bd5-ba84-cb926dbf7590", "indicator--ece337f0-9e35-409c-b308-e78154bb4529", "indicator--fd597bf3-dad2-4053-91f7-b763c2954e56", "indicator--d193d72e-4592-4f80-a1e7-9219ccf7d042", "indicator--f45c8895-4d26-4b5e-a64c-2d36bc14f2e3", "indicator--badb7aa1-736e-44c1-9a4a-33b9b1e9d2a9", "indicator--eb989a94-4c09-4ce4-a279-81feb02b046d", "indicator--ab27d1d0-4b0d-4524-beb8-781c97240248", "indicator--ee7acff3-55dc-482b-9850-7d1ed34a1968", "indicator--080cf8b7-18d0-4c92-b643-55fcda753567", "indicator--cef2b6dd-fe1b-4734-af26-fae332d88aa7", "indicator--d4716647-c851-46d5-8e8b-3e30708b8219", "indicator--9d18a46a-e96a-4fe6-b238-bb7fff2e5b14", "indicator--02109868-d448-4350-94b4-2032bb4e7e81", "indicator--2a9604d0-eea2-4767-837a-b8847ccabade", "indicator--cc14e94c-8ce9-446e-b73e-143d97cbafc3", "indicator--85c7e7ed-17ad-4fc5-aada-6bfddc6db052", "indicator--3fe1cd29-9481-48a3-a643-02fbe42d9f5d", "indicator--f0a96154-a276-4e74-acfb-46a8a4cff67d", "indicator--d9583f39-93d3-4a93-a049-d1c349194609", "indicator--e1480cfb-654e-4f4b-83c7-a03331b88bef", "indicator--276bb2f1-64dc-4fef-91ca-285fb38ee6e2", "indicator--b4864d7e-d321-448c-bf57-22df8289ef22", "indicator--d314fbca-9b32-47ea-bfcb-00be7612ffb8", "indicator--b30aa0c5-d610-4e46-afc4-b9c715daf5bf", "indicator--c9bd9f96-42f6-4828-830d-32dae2216707", "indicator--794a6467-1143-41df-8edb-5449cad44a38", "indicator--35ded171-fc47-47cd-9eae-23a83e12002f", "indicator--5b318505-4af8-4bc6-946b-df5241af8ba5", "indicator--b8ebc6ee-fa7c-4ef6-9eac-90f33325ea97", "indicator--80310985-1368-46b9-bb34-03ad64a311f6", "indicator--c604e137-57b9-491b-820c-5425cc450f2b", "indicator--9c568f9e-4d12-4abc-a8ad-1ab63c3b0c8b", "indicator--8776a2ee-6d95-46c9-a7fa-95be6a28df8c", "indicator--18c49212-babb-4a35-ad8d-f7848ba4cab3", "indicator--a3809319-e7f4-4c01-a73a-5ec50eaa4592", "indicator--29f1f47c-4a4c-4e4a-b5f8-3cb4800f1abf", "indicator--2f8ef2c7-6f7d-439f-ada5-829f4e876ac1", "indicator--7611f74b-14a4-400c-99e8-38a1e7f46343", "indicator--36c9dba7-9104-4e3c-865c-5f4e9a5525a2", "indicator--2afbdf50-a33d-4d9d-8110-15af6b431e8f", "indicator--e2caafc1-ace8-46bf-b7ff-bac16ff32769", "indicator--9a17aa9f-a026-4e07-8f45-6b6b11ad3dd7", "indicator--a41cd7e0-4862-43b5-9ad1-268cf5e7e152", "indicator--ec75f112-ea41-412c-864d-11061e3fec03", "indicator--f81c103c-021f-4b4a-81a2-e234c62db0b6", "indicator--c67b7aee-7dd4-47cd-859c-0f6b3369d53c", "indicator--94c3b6ac-1acf-484c-b547-a9561c9dffeb", "indicator--ff06beb7-810e-4f60-a83b-a536a90c0be5", "indicator--6c66aada-4c85-4e90-85f2-f4dd6caba4cd", "indicator--48b84f99-28db-4c84-9a93-a91c8435cdf4", "indicator--73a45d6c-b85e-468d-92ad-791d6742d019", "indicator--3d764108-aba7-48ef-a16d-6b6f8057b465", "indicator--38a60edb-8dba-45d1-b91a-34e4093d0a70", "indicator--762f7e39-b980-4e7b-a4b3-cdef73cbd1f9", "indicator--0c068bb0-2ada-408b-b96c-21afdc52bb87", "indicator--78b09eef-21a1-4ac7-ada6-60c45fca1e96", "indicator--dd377b34-07ee-49a3-bbcc-64ca77092851", "indicator--0b234ad8-897c-480d-8793-81ab486c631b", "indicator--8f41cacc-bd35-4dbe-9a26-8697700491e5", "indicator--d7a47404-44db-4aa9-bc9a-5ee37b02199a", "indicator--3ab0373d-6255-42f5-9cda-a69fb29e8e76", "indicator--0ad81f25-9657-40e4-93a0-7e36d0233299", "indicator--b93bccab-ee7b-4e27-8dc2-4bda00916167", "indicator--c9a68907-135d-4e3c-9c4a-760e0511359d", "indicator--97f097a3-9b54-46af-8135-7f2b7a97dc81", "indicator--acd1fdef-a24d-40bc-8293-55c7bce68941", "indicator--995e9b1d-9f18-4b81-a6fd-615149201bbb", "indicator--dcfb55ba-cc50-40a4-bad3-2943c3e449ab", "indicator--2d01ff80-7cd0-4b5f-8a9e-33ca06c86e13", "indicator--0138e397-da1f-46bf-b42e-8527ec98afc5", "indicator--bb6870c5-b37c-4204-82e4-ef3dbdcdb50e", "indicator--2ad5e97e-9ff5-4a61-8198-39d28f7d581a", "indicator--f14b46cc-f67e-4a71-9fa5-5181e7e29f07", "indicator--8fd51c40-cd89-423e-95a9-54f3b1ec3ef6", "indicator--be3ba1e0-5cfc-4f4b-a275-592c52499c08", "indicator--d0cdba91-0803-4923-9874-bb0284ff951b", "indicator--72e72612-3109-496b-854f-e7b96c14dc20", "indicator--c345600e-835e-4546-9502-2591e833c4f9", "indicator--b348e554-573d-45de-a804-30c6a57bde53", "indicator--ec68be4e-f8bf-4e1f-ba9d-81ae472ac455", "indicator--f76546ca-9fe1-4c22-93cf-945ff15c9d65", "indicator--618ea68a-d17a-44bc-8b62-7ac7f1c8a957", "indicator--183791e1-749e-49f2-ab82-7bad35d2d5b0", "indicator--7c18ddc8-632d-477b-85b6-55f443676881", "indicator--76d9879f-06f7-432e-8574-bffaa970c1af", "indicator--3e62c191-6806-4282-b903-f086a2fe2732", "indicator--be274814-82ac-47d6-be0c-3a6de3479aa3", "indicator--0d201b8a-459c-4604-b6c2-2c1d11ec9834", "indicator--e099d8d7-9e9c-400a-9770-8372726848c8", "indicator--5ae4f73d-1ff5-4508-a32b-ab9a343bd363", "indicator--bb56609c-295d-4a29-943a-156ff62372e0", "indicator--7cd344a3-7a79-4c84-8d9d-08c8d5672a43", "indicator--fe73437e-d9dc-4fb1-a7ca-c55e86d6bdbc", "indicator--eb1c18aa-52db-4839-84b3-280029778b92", "indicator--f9471236-44d0-4b56-8e4a-d1e6bcdd1f44", "indicator--8522665a-7107-4f0b-a553-171844b7ceba", "indicator--dd193271-ecd3-4915-989b-c18342115331", "indicator--c7928a28-8bad-4b8a-a178-a6254c3c3a61", "indicator--510d4882-bbcf-483d-a95b-614e4a8661e7", "indicator--ece5bda8-391b-4406-8f23-626fceaa6146", "indicator--63895c5e-f4e4-44fa-8336-12a704a85635", "indicator--09c108e8-1df0-4cbf-b5a7-b6faf129f747", "indicator--e41e8b65-808a-4fd6-9abb-870c7c930f9f", "indicator--4433c018-831d-43c4-a837-a81991724485", "indicator--893d9395-5d62-4e30-9d6e-d14ffc5e4197", "indicator--95a909a2-1128-4f74-8d2b-d0c9f8ccb5c3", "indicator--b0b3302d-0cd1-4828-b7f9-2e94e86feb61", "indicator--2b1318f5-0d3b-4dbf-be1c-804729ed42f2", "indicator--5beea604-fe50-43ac-97d3-7c3204137dd3", "indicator--98dbee2a-5806-4b7b-a318-ff1a71def003", "indicator--71a0f8f2-d25f-419b-875f-2d4541199459", "indicator--3d4cc4cb-03f4-473f-8e5c-3a4bd758dcc5", "indicator--f36d2fb9-624d-4023-89fc-9f257f5e9b18", "indicator--d52ab9f4-43b6-463f-aad2-6caaafc51946", "indicator--af6350a4-b8c2-4b4d-a9bb-9be650d77e6c", "indicator--1acdfd92-80f5-429f-b6ff-efb902f76728", "indicator--402902ec-9e24-4acc-8bb9-693c726b2291", "indicator--60363d2f-2ac5-45b3-ac72-2207e31a6a70", "indicator--b766e2f7-466e-469a-b4d6-d784c26bdf3f", "indicator--64200ad5-c52f-4821-bb7e-34921eb256e2", "indicator--ccd25b0d-dd65-41dc-9953-3d226e41e970", "indicator--dfcf77dd-a5f7-4b2a-9f72-27a3b6dfd9c9", "indicator--cfa778c9-4936-417e-8b4e-c68dbc6c209c", "indicator--b55804dc-bd84-49f2-ac08-59c42ffa06b5", "indicator--ef88f95d-4826-4733-a229-5d8f10b511e0", "indicator--12e9a5c8-0285-49b9-a744-f5bab74b6667", "indicator--6e7f73df-c69b-4cfa-af1c-a1d88eac4bc4", "indicator--86f2bd8e-aaa2-4a79-9ff2-b013f705124e", "indicator--371c9916-5ef2-4994-9061-81881d8678f6", "indicator--d5da3da1-e188-4888-a070-c3a6e938104d", "indicator--6c00e552-60fd-487c-aa55-c3de64c937c5", "indicator--08507a80-b0cb-4cf1-b8c3-3340c6cb3926", "indicator--c7d276a6-8502-41d6-a988-6dc8b90aa0ed", "indicator--18b09b7b-e9a0-4ff6-a665-28b630349b9e", "indicator--14fd2365-9c58-479e-8e24-f37b144f1a9d", "indicator--60b523ec-f243-462e-aca9-29531f78f13f", "indicator--c88d5cc3-e141-4d6c-9dd5-e38ad6578598", "indicator--5c1fcd87-de72-48b3-ba8d-bb92ec9e1745", "indicator--1ccc0393-92db-46bd-bdc6-d5faed4bbd4b", "indicator--f72395e3-8d5c-459d-9e9b-19490f52b48a", "indicator--de818076-e467-460f-8340-f6e76ad4affe", "indicator--26877f3e-24a6-4c4b-8e11-33454bda56df", "indicator--1532d134-2210-4db5-b0fa-e1a2526bda9c", "indicator--e0b80b5d-1650-417a-9e45-22d0e67c2ec6", "indicator--7d642b2f-cfbb-4cf7-b2dd-4659cb83feb0", "indicator--8362caeb-9cd0-4805-b84e-674b60de4f85", "indicator--551e5cb0-8f73-4404-b846-23778b8762fd", "indicator--abcb6b19-f75e-4516-ac2f-2c60d2b28995", "indicator--b0fcdeef-befe-47b2-8020-6bef1ea10131", "indicator--6c0452a1-1c74-4492-bbce-1c1c1d78c6ac", "indicator--1cbfe2b3-3d54-41f6-9c10-ee6c5cf39966", "indicator--800494f1-b7a4-4dfa-81ac-ea93d35b923b", "indicator--abef4eaa-22c4-4371-b32f-4ccda50d216c", "indicator--1c013203-88cb-469a-9659-6aaae1fea4f8", "indicator--749a1807-3e09-40d4-bb4f-064e8a92585a", "indicator--06e2cbe8-9fe8-4be5-89c7-21d9f0dc9bf4", "indicator--9d1d95bd-5b1e-48aa-b463-d85f6823343e", "indicator--f2ccad33-d935-4e7a-83b8-f1a5d55cf82e", "indicator--21896f6f-8d2e-4b60-89a8-4718b28f0e37", "indicator--4aa3d29d-bca3-4328-b0a2-ef6efeadd142", "indicator--29de5a75-2fc0-4747-b3cd-f32904e0aee4", "indicator--a506a00e-aff0-4054-be58-92d76214a863", "indicator--558d3ad8-64c8-491e-8a63-c00a26b5625b", "indicator--e0a1320b-7ebc-4397-a728-0a9903d30601", "indicator--42c19512-5e6c-4116-9260-28966891a746", "indicator--c4c56ec5-4286-446c-875d-c9c6f90c9416", "indicator--5b6c0742-9154-4f0a-838e-77931a823c2e", "indicator--cf77b8db-8a35-412c-a580-4bd23d947a3b", "indicator--1f938f4d-0c4c-4827-ad25-08fc09d907c6", "indicator--1d00a25d-c5cb-4aba-9606-0ba765fd03d1", "indicator--7e3a36bf-0b6b-44b5-8024-d009e2340f1f", "indicator--56571807-f8b0-4be2-9e76-1ad3c7c9e0b6", "indicator--5535e054-bddc-40ac-bd37-ebee44f8bcba", "indicator--d0e553de-2de1-4a04-af70-ccf29658c29b", "indicator--94dc3391-182c-4192-b7ad-6b7a90c206bf", "indicator--c5898463-3dc3-4c00-8c0f-ee9227bd22a4", "indicator--0a6d7453-9151-45f3-bfb0-7bfb870c2cbd", "indicator--1a3ff6c1-a920-45f1-bdd2-ba3a6a5875b2", "indicator--01363d4b-23b0-437d-a7d9-26f9e370ac47", "indicator--72d6da10-e800-41d8-80a1-1233e14fe779", "indicator--8732ec28-e74d-4fc2-b5de-14ef50fedd5a", "indicator--50a41124-5ee0-40b0-829e-ac5571164844", "indicator--55bf97b7-2e58-4184-9bf7-147bb4e0f3bd", "indicator--619f037d-f404-4632-80c0-d60a578782b8", "indicator--25fea065-0604-4ac2-a157-051b35b47635", "indicator--d2881fc7-78ec-4375-82a6-fdf90745d624", "indicator--8662d3d2-2b64-4e49-9741-8cf525f01ba9", "indicator--f7f29a04-9144-4c02-9be1-2f493e6b7588", "indicator--2025cdab-ecd7-444f-80d9-efeb1f30dc36", "indicator--c8bea919-c893-436a-99e7-4f9c5762e5d6", "indicator--0c2b6bc3-ad42-464c-9bef-806bbdeff475", "indicator--a12b0e7c-109a-487b-82f5-d6e80eea72f4", "indicator--5e007287-f0c0-4ba0-8cbd-5a40f0e34570", "indicator--bf77d7c2-9f5f-4f91-a704-8948bfcb3598", "indicator--00e18389-b165-41cf-a246-fef3a51daba8", "indicator--3e909f0c-e136-4d6e-8acf-5b42a002816b", "indicator--4a304225-8869-4430-869f-a479d799d578", "indicator--db783535-7af3-4e27-acd0-349d57d38250", "indicator--ee9fb58a-0053-4a32-a96e-0d1ccaeb9805", "indicator--23b282e0-2a65-4e95-bb85-41aa2339862a", "indicator--e7d5d459-92d4-4098-b7ab-abda975c789c", "indicator--32e44d17-4647-4643-b859-874f47afe5ca", "indicator--14d6d0d1-197b-4189-ac91-6d08ae4be1a1", "indicator--5675308b-449e-4996-9674-f0ae7dd4279e", "indicator--4d368138-dc05-45b4-88e0-2af6455613d8", "indicator--26513036-62da-49da-82e6-2548fb363910", "indicator--7564050e-2c97-4c9e-86ae-812c708a7463", "indicator--f22c092b-3d33-4f5a-987d-9674fc8f12be", "indicator--0e7ed964-31ab-48a5-a5e3-6c74504c50c6", "indicator--666b7ff0-7593-4d51-9380-9b0a8551ae58", "indicator--dfe6a1dd-f40e-48e6-b8a9-07d7040d5e02", "indicator--a823f4de-d207-4dee-a8a9-d45fcea482ba", "indicator--3c7dc5e7-74c2-49c7-a092-b40e65751edf", "indicator--aae0a940-247d-4633-82ca-663d0fb5fde5", "indicator--cb280453-6cd5-42ef-bd5f-2cf06f010ad7", "indicator--44b6d058-3bc4-48f6-bdb8-588d113e3105", "indicator--66ad1738-098e-4ec5-a452-9a6d2425f0cb", "indicator--fc4bad2c-3a76-46a3-80d9-42a324f5d07c", "indicator--d88ae17f-3c17-4dc3-a255-84f6971df779", "indicator--c9585431-d7ee-43ef-a933-4b09986e4659", "indicator--4c480070-a0a7-467c-9a9e-8b40c4826f96", "indicator--679d56fb-5ea4-4123-8b5c-a9930ed66849", "indicator--2b69e446-8901-4f0f-9ed7-7c1b1b573718", "indicator--91707ee8-2258-43aa-9f40-b3279b8635be", "indicator--ccbabfe8-c2e6-425b-b52d-a04a5171eb9f", "indicator--d4aaa5a4-7369-4cab-a19a-c9bc744797a7", "indicator--bf00608e-c0d3-47b0-9ebe-ac3958e05270", "indicator--7811ffa9-4730-4adb-9d3f-cf6156729ab9", "indicator--1fb1f7bd-5800-474d-9f41-eb0f2270c4e5", "indicator--e8be5a61-f55b-406a-95ef-7aefc2390eb6", "indicator--1c0c1bc8-2b3f-44fd-8fae-b3d64c86c481", "indicator--aee19db4-4f14-4dab-9530-82a9e662986d", "indicator--3e330c76-e2ee-443f-9484-e57ecf8f6952", "indicator--c171a36d-27f0-492b-ba0a-3afdeee2d5aa", "indicator--9e6de094-7459-46a5-896b-5939451e532a", "indicator--28772f12-1483-485b-8aa7-01f6d900bbca", "indicator--f21f906e-c43d-42ba-a285-39fbdd0dcf01", "indicator--03db77e2-738e-4992-b983-0fa97ed46409", "indicator--3e2afe28-560c-477b-8e23-ed080083d36d", "indicator--ca3bcf95-6ef6-4fda-8895-69b4377b4b0b", "indicator--c4fc9e2c-4a37-469a-b569-fbee5464c6c4", "indicator--77ae1863-4fd4-415b-a742-83a2f301d7fc", "indicator--b32bf99e-91cb-4eb3-9756-0fba65e05c81", "indicator--3a6b00e5-26d7-4dfb-8023-7bfb06fc658d", "indicator--1601650f-001d-4223-9818-c81670589986", "indicator--a59c284b-d0d2-4dc9-8780-efa100b8bccc", "indicator--d9934391-e4b2-4490-aee9-44b56584c7d6", "indicator--5444204b-a0db-4cb4-a0a6-b542a6c1896d", "indicator--837a4297-3f7f-46cc-a819-82b5593e1e0b", "indicator--525e0d2a-0c3c-4b75-8982-fe6ebd5a7d77", "indicator--e06289a3-dfbf-4e26-8bf8-394639f0029d", "indicator--8ca16e93-5ed7-42e7-868d-c31c304847e8", "indicator--5ed8f1ba-8545-464f-b734-43fb3e3b6434", "indicator--2238a10d-0677-4c04-89d1-a06a857a7684", "indicator--48c441cd-d735-49e5-b411-cfb66ca0dc7f", "indicator--29681a61-0f1f-4e25-a1f7-41f1a028e6dc", "indicator--9244db83-c901-4cc1-9ca3-242af5a52589", "indicator--1a19c8f0-4824-43be-9b89-7b36759d583a", "indicator--66a14a75-d62f-4e95-99c8-0565d63d14dc", "indicator--a086bcf0-35f2-4520-b536-8d31ea92b2f0", "indicator--b0f4b3d4-379f-4b6d-b68d-90ead1c8a54b", "indicator--42cd8bd9-a3dd-4ce8-9b58-678c63d81e00", "indicator--73309408-4405-4fad-891d-e61fe633ddfd", "indicator--beabae6c-cd2e-47ee-be84-6b0254ed6966", "indicator--856e8d34-6bb7-4ebd-a08a-b10240d414d4", "indicator--cf7cb122-0809-4d02-9274-08c69a77914e", "indicator--c875aba0-9fd1-423f-9de3-c83d8072ca02", "indicator--f0e2a06e-80f0-497c-bf9c-a60bec5d101f", "indicator--fcdf19fb-1a36-4795-8353-9e56e2a9891a", "indicator--6cba6697-9ddc-4b57-9cd9-7ea3205d48c9", "indicator--1b920d94-d3c5-44d0-bc9c-d240f265d989", "indicator--a9c49570-6450-4a95-98ff-87893e927156", "indicator--e690e139-8b78-4c9c-9aa3-43bf53a4fdc9", "indicator--0b6316a6-ba35-447c-907c-e0f9359a4ae9", "indicator--1b649761-d1a4-41fe-a7cc-24ba4c3c3c6b", "indicator--cfbcd825-746e-490b-9921-98d3533fbdfe", "indicator--ee61a514-c725-4fbd-b8fe-51e3e5b1b4d1", "indicator--dd422081-b3ec-4327-b894-3dfd8df7b464", "indicator--5dad77b2-ae6a-4ec1-8364-53d8bdb1d42e", "indicator--4f70a16b-f6bf-44b9-941e-1dcd22454767", "indicator--f88a02dc-1c62-4b35-953f-9131cf3513cc", "indicator--cc2b1064-b97c-48dd-a269-498cc45632f8", "indicator--4285b385-8c38-45fc-aa4a-2350c90e5d21", "indicator--d3bbdd7b-130f-45d6-ab54-d04229bd40ca", "indicator--ceba758d-4a7b-47e4-afc3-264bedab9f04", "indicator--a31d6136-176e-4893-84e6-01b3c5c8c62a", "indicator--45b5c651-a9bb-4381-9ce3-337f9bfe31ed", "indicator--027071a9-b3ab-4dea-ab54-e9e523d33a75", "indicator--2a55dfd8-00e6-4f96-ae4d-b29ef36e6c9d", "indicator--8279e8ec-92c0-445f-924a-77a454bbb3c3", "indicator--dae9abad-ccd7-408f-99cb-4e222322f495", "indicator--ef91789a-07ab-434c-b3b8-ab78e8487b93", "indicator--f5befb8e-61b9-4840-92dc-180630d0b9cc", "indicator--132f7cec-cbce-4e5b-a085-3990a7474480", "indicator--77dbb516-663a-4d40-85a7-9054c08cb31b", "indicator--bea1b480-02af-4d78-a25e-a9527810dd58", "indicator--ca4faaab-da5e-4579-a3ed-7d91baf2ce5b", "indicator--fd5a6cf6-4c09-482b-84f5-bddf78a2c2e4", "indicator--e57f193a-1e4e-428a-99a9-23d21706bdac", "indicator--a27c570d-de3d-4824-973e-698ef23c5478", "indicator--bc97c82f-88dc-42ae-81e6-556dfd98f3a0", "indicator--29bd19a3-7981-4ddf-9d78-35b90f7a6a86", "indicator--0e0c440b-1caa-4ba2-bcae-e1372db72138", "indicator--b4b10c9d-afa1-4b55-af25-60f967382128", "indicator--878c789e-0e4b-43e7-b1d9-04a308611b9c", "indicator--6fc7a91c-cd2c-4e97-afa0-3e5a4f98d0a8", "indicator--564afb08-76ee-46fa-a5fa-fc22684e9053", "indicator--f83791f5-3f3a-4902-a686-fbf028bd9bd2", "indicator--6ad406cb-9812-4435-afcb-c8d1402fd143", "indicator--c988d404-ce36-417e-8332-f6af1c97feeb", "indicator--b6c627c5-1763-4de8-af7a-ea3e044fbe9b", "indicator--1fb38763-cdb0-465d-9ca2-c468d66dac6d", "indicator--d1d43f5b-2e8f-4df7-9e58-2ad59e12906a", "indicator--f73b6f12-5066-4ec0-85b2-d22663185ba0", "indicator--e276f8e1-0b82-4456-a820-651f50fd5666", "indicator--e3d77a26-f0d5-40d4-869a-63e6918b7df1", "indicator--835d0d2a-15e9-4c42-9b45-ece49b73601c", "indicator--55f8b7c7-7ff7-435f-990e-9b7a44263b5e", "indicator--0802275d-28d0-476b-86fc-0b1321fda08b", "indicator--9a75bae1-6ca1-4f94-a79e-4ef41c9d1a24", "indicator--e9239360-ed97-4fc1-a42d-b4ad821d883f", "indicator--c98f1568-39bd-4d65-a141-12af7630e469", "indicator--5e58b4b3-953a-4259-b01b-eafc320846e4", "indicator--ce97dbd4-eee1-4cf6-a913-0adb95a91e3f", "indicator--ebb5726a-b25e-45f7-b167-0f7bc69baa2b", "indicator--2b8dc0ed-1434-4db4-a860-524a2beb2eab", "indicator--d8cbdaad-8e54-402b-ba11-f03482d78930", "indicator--c2952301-0914-4df9-9f38-e8ab9448b11b", "indicator--3c783208-f00b-4f71-9c65-64685a3d657a", "indicator--c6af1ce0-dd30-496f-980a-2b19e5df6316", "indicator--711a3886-6c72-4fb4-8036-b24918b4c4ae", "indicator--ebb02eab-336e-466c-a1eb-9f8dc9d2e41e", "indicator--6e6590df-d04c-4d0a-8107-e4015f65e7da", "indicator--17280e7f-d9e3-4083-9e97-3150b7e104a3", "indicator--1aca50c0-72bc-492f-a0dd-1e28a76e0606", "indicator--8655d9fb-e593-43a8-94d5-c8ae74be75fd", "indicator--24748e9b-b4de-41db-99bb-fa99bc9c39d7", "indicator--fe7b0634-a25a-45ca-aea9-c9a6d03cee96", "indicator--8d765d53-ccde-48d9-ba09-c645c7297b8f", "indicator--df7bc055-fe67-4b40-b619-f3980ce624b7", "indicator--e8b4295c-8e03-4d80-a567-23d3b1e732b6", "indicator--989d23f4-30b4-496f-a187-cd3567e588c2", "indicator--7b9f9c99-19a6-4a3d-b300-716ed5f04eb5", "indicator--64ffe9b3-f4c2-4402-91df-7f3be796382c", "indicator--570cf845-e3b8-4598-8de8-bf5ae00f732f", "indicator--ecdb7c6f-fe09-418a-a9d3-60edfe96a47a", "indicator--95a0b080-f0f5-4f12-bffe-d5c861aa0f21", "indicator--c9dce8d7-0e83-4e5d-818d-296b45a5a0c3", "indicator--ea5ca6a3-218b-42d8-a0e4-7c0a2abfd805", "indicator--329dadea-8970-436b-8e30-c803b32b6f01", "indicator--c7b745c1-af10-4757-b759-6ee4eeacd203", "indicator--eb12a244-3829-4210-b1d0-416bcd95e8e4", "indicator--a5229aa7-67cc-4f55-96ad-88359bc8f310", "indicator--ea2fcad7-a9b0-444a-af27-c6950e67932f", "indicator--5b5c59a4-0b1d-4fb4-81f6-a846927fc37c", "indicator--b0d6d811-b63e-4a4e-813f-b725ab70946d", "indicator--6739c418-274e-4142-8915-45cd07a0d8d5", "indicator--76b4b369-2cb8-4182-96f1-caeaa19952e4", "indicator--bd76a0f4-1756-4350-bb7f-ac54b23328a1", "indicator--dd7d8d78-513f-49b8-b8e7-6fa652a07bc3", "indicator--013d8416-250d-4c72-a297-21e434ff4dac", "indicator--71c96ba3-f740-4784-a0d5-c2821f3a1191", "indicator--425c53b6-a405-40aa-bbb8-3384966c9a92", "indicator--807e2ce9-7da3-4df5-abcc-d21f76d69626", "indicator--4469ca9e-aa25-4ea4-8f33-d65b7f2b9df6", "indicator--0e19dd3e-bbd1-43a0-b4a3-3884590a792a", "indicator--a9d512c2-7382-45bd-bc3d-09e788250fc3", "indicator--6dca160d-f90a-4ca2-9bdd-f22d6334250b", "indicator--096f4fbd-d18c-452b-941e-10026fd84c1d", "indicator--7c61c514-393c-46bc-8a04-05c10cb958d9", "indicator--8571d6d0-a9bf-4d1e-992d-70f4253c02e2", "indicator--4082ac82-58b5-4368-8ffb-ea809c0023b5", "indicator--3cd52856-d0fb-4690-86c2-57e99290d34e", "indicator--b6c92b07-c940-4b9f-82a0-45baa943725b", "indicator--b76d590d-ae32-4fd1-8479-79ab761de52a", "indicator--351489bf-4fea-464f-bd88-545dabb3b279", "indicator--7f601908-8f20-440d-9993-4c74cfc56f2e", "indicator--dd322ede-602b-458e-91f0-30c4fce294fe", "indicator--2a4144a4-c597-4f06-9884-2e281119f403", "indicator--a57055c6-56fb-45c1-a16b-1f22d9e6fde1", "indicator--2109e9e7-b618-45b2-b2df-14f5e0cd8b83", "indicator--cc4e55b1-498b-4351-bc39-5982e20b8213", "indicator--2d7cbb1c-9a79-4185-84ac-8350f6746fdf", "indicator--bd096d38-8b82-4603-85d8-93a925018d4c", "indicator--a8c91cff-075b-4790-9a63-682866037dff", "indicator--8cb2d5ea-9283-4d88-94d7-bfc8701f7190", "indicator--fd07fc8a-0fa2-409e-b331-384c9229e1c9", "indicator--f880bc37-1878-49a1-b396-a590fd8353e2", "indicator--c0567c2a-06f5-4b43-b497-94111e906049", "indicator--5421978b-4cb6-440b-be92-5ad96329bb20", "indicator--3ac950cf-d3f7-4fe0-b816-298a08b27794", "indicator--68a4e39c-11bf-4960-a068-d03fe08b9409", "indicator--2999321e-93a5-4327-9cf0-dffb4177e07f", "indicator--7215e8ab-e671-4fa8-840d-8a17dd6c7a90", "indicator--a72db90b-214d-4db7-a0a5-899e65ff8a50", "indicator--49d94899-92fe-424f-a3b1-3c7a8073a98b", "indicator--7a87a92b-c179-4420-a010-28d58f38aff9", "indicator--30ee4821-b228-4fa9-a8be-5b3b25be1a0e", "indicator--aece95b3-6d87-4b82-8bd3-1af73882cc94", "indicator--5087c4bb-e9ae-49ab-b111-44b7e7d62db6", "indicator--c5a0be4c-82a6-441a-b6ab-e44de2c895f6", "indicator--b652314a-cffd-4365-bcc0-d978437f564e", "indicator--c8a46e89-b84f-420d-bc57-65a2ee4bda9a", "indicator--b989b721-2534-4770-a0ca-225bb99e91ca", "indicator--d17ca992-beed-4154-9588-b9deeb8eaf3a", "indicator--962a5581-ed7b-487e-aed8-3171ae2bdd14", "indicator--fce39a19-4b80-4805-90a4-459e0904f734", "indicator--2d656d2c-5734-4866-8677-594328803270", "indicator--5b2423c5-4aba-479a-b994-a1a18ee604f1", "indicator--1f85b5df-8e84-4862-9d57-63e9e6271340", "indicator--1f0d0ec8-03df-46a5-a2fb-f48559bd3ef4", "indicator--48324066-9237-4a0b-ada6-184207670b63", "indicator--cf1f00c2-cac3-4239-84e5-5760f989da7a", "indicator--65f0c626-69ca-4a13-9ba5-f1269e1e1af7", "indicator--3fe78e7b-1021-4f91-8f0b-a90659531acc", "indicator--8e502869-02b4-4cfb-8ff3-183ad7902539", "indicator--80bb76c5-5ece-43b7-a922-ff921196ace5", "indicator--18e9779c-72d9-44b3-8558-3061e9d37176", "indicator--0ad5aaed-c4f4-42a0-92b4-90f1638f99b7", "indicator--debe1bf1-bbaf-4d2f-b3d5-7956d31708a9", "indicator--62bafc5d-b10c-45d9-b319-2178393615cc", "indicator--52e2d9aa-e513-4077-9eff-c8840f6af736", "indicator--d88e7f7d-8152-4adc-ba28-d071e1976866", "indicator--dda34d92-8069-41ec-a4de-0b99942c715d", "indicator--4ac5bfe5-678a-4c81-9052-55949121875e", "indicator--d6c215e0-74fa-4b7c-a4dd-a0ef39e648e2", "indicator--82063005-6025-4c67-8644-f103b53372e3", "indicator--02ca0d2f-fa13-4790-ba9b-ce97e309dc07", "indicator--09ff6ccd-ea8d-4523-8955-bbaefc35575e", "indicator--982f086c-fd40-4613-9504-a01a18fafd2e", "indicator--71e5c3bc-094e-4d36-a89b-9f75d8ce010c", "indicator--a06d2a72-75a6-46ad-8dd4-7b2895e43115", "indicator--63f46ce7-ac28-40c3-9f2e-b34202579127", "indicator--2dee1c68-b675-4834-8891-f98b40b1eb5a", "indicator--5641a1c0-59c2-4194-957e-d5d800987c67", "indicator--07e6a4f0-d340-47d7-9b04-e05024db1fe6", "indicator--f0265aea-9c0d-4c9c-b03f-98eaf1a4bd93", "indicator--ede73ef9-ac41-45be-8e1a-d211b7c51f58", "indicator--f24b899f-7acb-4f5b-8353-83ac220d2e2d", "indicator--7e3a08ed-5a1b-49a7-bed2-aeace54a41b0", "indicator--cf4d7de9-5e4b-4e1b-8d91-2aa6fecd3255", "indicator--0b1f672a-0294-4dbf-8bf2-5e4d43b65688", "indicator--b023b5e7-79c0-4a34-9add-98da7b666252", "indicator--deeed9f1-ad96-4cc5-b805-e81da0c1412b", "indicator--d7131f64-fda1-4f85-9d98-148ec873b486", "indicator--ef6c55d8-a42a-4b55-bc4a-e96679c6b42f", "indicator--932d6ef4-2d02-4913-92c0-98fcf545a150", "indicator--ec11b78d-f845-4406-bfa2-2d51f9060fba", "indicator--ea691978-c8c3-45cd-a636-9787bc73bb71", "indicator--432d0330-c1a8-42f1-b072-2284914aeec0", "indicator--8eb42e95-d399-4bf1-b821-10f569de02c5", "indicator--d1470f8f-7478-441f-a06f-ae392bcff891", "indicator--9ffe0d2e-2c24-4842-8702-5ceb4b7bc20c", "indicator--f45faa0f-05b6-4fd9-85d0-e6611b25525d", "indicator--62a3bf34-4ddb-43e0-a149-3821ba8ff9cd", "indicator--258952b8-ee90-4d63-8617-0ba74ec5b707", "indicator--0d87c4f0-bca8-46b7-8c16-8436e81ef380", "indicator--bd8cfc67-57f2-4d9e-9a63-afd8dd85e09d", "indicator--c8a64302-a788-40e4-9fae-7d8d5907b351", "indicator--168f674e-ac36-46f4-8ad9-800b7ffcd35b", "indicator--1d7877ff-afe8-4a05-b745-e87aae1fb5cc", "indicator--3c2a2a3d-c396-4ef5-b6c8-d518728887c5", "indicator--fe8fe0e7-0b62-45f8-ab57-1f2796ca8e92", "indicator--71a8b54a-b224-4dce-8325-150182af1191", "indicator--4319a1db-982a-419e-9358-049a1955701f", "indicator--9887ab26-49a8-4041-b80a-ab681bd5d24b", "indicator--f7d86483-f065-4ec9-b866-77e8644dea5f", "indicator--406c7dbc-df7c-4272-9e59-27382141c13b", "indicator--771f638f-1be6-4de2-9850-6cee735ef1f2", "indicator--3163d951-cba1-4c43-ad8b-02b3d65d98ff", "indicator--4000ef9f-0870-47cb-9a3a-13abfc7c1afd", "indicator--30140f61-3579-4254-bd68-e9035e6a21ee", "indicator--580a4b0c-dd43-41a6-9161-01033f767283", "indicator--33849d1d-e72e-4064-affe-160e6fcfe74a", "indicator--4e5b7a65-6ab4-468a-9d8f-57c89f6fafa5", "indicator--788db783-6818-420f-b198-814c489d425e", "indicator--1cf0a3d2-116f-4628-ada7-0407e2eeb612", "indicator--1502229e-80c3-429b-8848-ca162804623a", "indicator--ae73764b-aeea-4ec3-9b9e-fed86461f042", "indicator--00b657cd-5b10-4323-a14f-31dd90da9cd5", "indicator--7051febb-b08d-4fb3-bbff-8c5dc8e137e5", "indicator--7fc5700c-e859-4f73-a246-59c6b0a84596", "indicator--998e7e62-e30a-4830-afbd-14f5ef3fc171", "indicator--5f44ca79-d135-45da-8275-447593c00c0c", "indicator--66d990bf-9e84-4093-80b5-8847f20c57fb", "indicator--41e65cb7-a9c1-403d-8673-c1dbe451709a", "indicator--af7ce6d1-c72e-4058-b53b-649f30281968", "indicator--80758f14-e92d-45eb-b22c-12204ba161a7", "indicator--9b2e36d5-d822-4e94-ae30-0ea512193c7a", "indicator--9805f0d6-f859-43e9-ab87-f6571bb3807d", "indicator--c783947c-1aa0-4659-9cc3-1dc361091085", "indicator--4bfabe26-33fa-41d9-b310-462504475e62", "indicator--03dcff77-5fd8-4394-a215-552cfb82cf32", "indicator--e3fb04dd-9e02-4458-a7ce-df02dce932d8", "indicator--f0e09a3b-8a69-4a66-9b30-ffb0545fd38c", "indicator--ca6430b2-a5eb-4524-97b5-3be2d8440899", "indicator--50c36ebb-9d2f-4efd-aa81-b379b133b582", "indicator--fea42c2e-12f5-40d1-bb6e-12cb56b73b79", "indicator--2a9c7a39-d95e-4adf-ae61-1d9632618b73", "indicator--564f899a-e377-43d7-af30-83254dd58a01", "indicator--c6a8306a-7b15-422c-93a3-586dc82b2d19", "indicator--6bce86cb-fc0c-467d-9f68-863f3100a1b9", "indicator--c066d6f8-dd35-4b1e-9369-7c7bdba4053e", "indicator--381a72b5-21c1-4d31-9a95-8f2eb7f2bcf4", "indicator--d7d76084-d4e4-4828-a808-4b11c617cfd7", "indicator--3021ef8f-4066-494a-995a-fff51efadbff", "indicator--f9d38fea-e43f-45eb-b667-3b5cd589e830", "indicator--eaee223b-209b-4c11-8e8b-8e08816e3661", "indicator--1b2f6faa-22eb-4c3c-8234-c6abb63dfc22", "indicator--5402d0a8-eed9-43a9-a4b3-179eecd2a598", "indicator--7653dd86-fa6e-45f0-8df7-f0dc5ce439c6", "indicator--0428f240-eb41-44ea-b578-ca28be080059", "indicator--cbd8064e-720a-46a4-8554-86d4aedf3459", "indicator--34775ae2-aea4-477e-ac58-c3298d661b53", "indicator--c3b4aa54-2920-4360-9f6f-fb61300bc73d", "indicator--3577aa6e-7d4e-451e-9408-4c834d0acae2", "indicator--ff1d2938-ee9c-4c2c-b77e-4a2d3ccc8b99", "indicator--7d8cac1a-ed92-4f0a-a1be-48a7546bb5e6", "indicator--f720a40f-e924-4f62-93ca-22c4675b95a3", "indicator--08b229ef-ccc1-4e2c-81e5-9fb2124515fa", "indicator--5ff287a8-b96d-4588-bb8c-9e0c9dd7fdd0", "indicator--fa79eefe-c177-43a4-b108-ade5f19c8358", "indicator--1338047e-b9f3-49bd-a93e-0f65579ebe6e", "indicator--bf17d83e-05dc-45d4-8f2e-8e3519644596", "indicator--925f8050-7058-4e4c-b137-caa7a863b8f5", "indicator--34602238-9118-487b-89e0-57b90c671190", "indicator--28da26e6-b8cd-48bf-b6c4-31cf3b76151a", "indicator--5907ed63-06eb-41f4-b3b0-eed078a5d49a", "indicator--1cb807ca-d599-444c-96de-2fe281347ee2", "indicator--e87c6489-b263-48e8-92d1-7382c6181f6a", "indicator--19257e11-e476-4297-a3f7-9ab96bb65c89", "indicator--64948005-4b54-4949-93dc-d9fda31afff8", "indicator--3d6a9e9d-0428-4809-bddb-05adb32c72cf", "indicator--65ef82ad-895a-4593-9a0a-f5a0a669eef0", "indicator--1be7a10b-f7dd-49a7-a256-5adfa4d5ab47", "indicator--5f9fb674-7b25-46ba-a04e-5ef39fcb1285", "indicator--f099491e-4db9-4690-8f99-c8290adac2ec", "indicator--028b1dc7-a236-4540-8fc3-6a30ceffea00", "indicator--15f09eb3-2133-4b9c-a67f-2a30572cda11", "indicator--071d1d42-5a62-4f89-b051-82c1180106c8", "indicator--a81dec36-578b-4aab-9cca-4050a632b4cb", "indicator--4320c3d0-b90a-4575-b941-dac828e40fae", "indicator--4589c903-915f-45a7-916e-7226c40eaf8e", "indicator--a86c51a6-dc94-489f-aedf-6591d106a93a", "indicator--1c127442-2542-4e81-abe3-f372bf01c3f1", "indicator--81d394b5-6659-4312-8ab3-1eacce7454cc", "indicator--8f09b2e6-e25a-4058-8ca5-e096e1f7e5e5", "indicator--4dc10fdc-1fb7-43b5-8e02-c89da9a6dcec", "indicator--243c158a-6934-4b00-bb95-4589d893312b", "indicator--9cdbec6f-ab45-448c-944f-9bc17b7e84ab", "indicator--b669ce2d-1b2a-43a1-983a-bbe660236e68", "indicator--1be551c1-919f-43ac-b2a8-db0ee2391e5e", "indicator--350adbef-bbf3-4ba2-a4b2-1737055cef9d", "indicator--26d66d61-1022-4c22-9640-3f2e2032c836", "indicator--ec5ef1d7-7dd4-4f70-af41-1998ad55b151", "indicator--9a647d0f-514e-4592-a73a-5e1bffc46ca2", "indicator--67dfea85-aad1-4672-be78-533d54870c6e", "indicator--77f7e9d3-7d61-43eb-a4c1-471054d00e22", "indicator--6515beda-807d-4ea5-8a71-cf546125828a", "indicator--c259dcda-ce10-4084-879f-ba5f6f631dda", "indicator--c657da96-83f2-49b6-a73e-ada9462b49bd", "indicator--f3cd64a4-2349-4b4e-a43c-9e183fa6bb34", "indicator--e1b49a07-68fb-46a2-93e3-f89cb32ab684", "indicator--c4b0eba1-ceb2-4623-a668-e82d6def8c43", "indicator--3b21299e-bdcb-4ea7-9ef3-59509a0c5eb2", "indicator--39472289-edb4-4132-9065-a44fce8a4f60", "indicator--384edd48-cb68-43a1-be84-0df17d2a32ea", "indicator--32949a69-a55e-4812-b619-b7f9d268ce56", "indicator--1a5ff62f-7931-4441-a702-888839e8b82b", "indicator--8c7bcb20-4670-4d98-ba53-124c1c9e3072", "indicator--41f11e1d-c846-4cb6-8381-3e7cec0d3b1c", "indicator--48af21c6-f059-4613-b0fa-7a28ca9c6c05", "indicator--2992b81e-7fef-47e4-ae9e-3fa3a4546db4", "indicator--6613a0ef-83d9-4490-8478-a3ae19083a28", "indicator--d518c275-7535-416d-9ed7-f96910588091", "indicator--da4647fc-be43-4200-a4d9-b47a861c99ed", "indicator--87bf328b-0f57-4021-850a-d9b3048cd576", "indicator--782632ea-8473-420d-a8d7-f66f986dcd19", "indicator--1f1161f2-0db2-4f93-851e-ace6bc3b18c2", "indicator--07ee80d5-6eca-49fd-bc4a-8e345711ac8e", "indicator--2c098418-392c-47a1-9014-dcf7daad5709", "indicator--ae47bd8b-6409-43e6-9386-530acb67e5b5", "indicator--2c6c6746-f1ec-449d-a54f-fb0b27e03b5c", "indicator--93f13f98-7932-4b84-92a9-4b4c78f40122", "indicator--75121ac6-deff-4772-82ad-931a3db34402", "indicator--bcdf98d5-22ed-459c-bf81-d3cc971e97e5", "indicator--cba3d491-7eda-46b5-9658-9a8700b8caba", "indicator--678a6fad-1efa-4d69-b2d2-71e36225f453", "indicator--f9b683b9-32c2-4f37-940e-8efd9e4b1e8f", "indicator--ac56b0e0-fbd6-4c9a-af50-1d0e577c195c", "indicator--f0790b7c-386c-4d7a-9c7b-fd0f43beb024", "indicator--142deae4-8be7-46c0-806e-4e09b08d2e95", "indicator--439fb284-d464-4484-9a8f-d2d233fd60d2", "indicator--82c85bb3-b78a-4c0e-9e4c-bb767ac932a8", "indicator--ac3ad0a6-78a0-4a4b-9778-36369bc3a112", "indicator--77c60ec6-deda-44b7-8739-de07007be741", "indicator--e444bb62-7b88-4292-bf19-850e874b4ae8", "indicator--45f89dde-e1a4-48d0-a338-2602a7e6361f", "indicator--9803d313-91f2-4764-bbda-a2e08ea08f8a", "indicator--1c5dd452-4d40-4502-a2c3-e1f6bb7157e8", "indicator--53816fc0-d2b5-4560-a4a2-7fecf2aadbbd", "indicator--c550e23f-666f-4ee5-bb6a-f3dd1d016af2", "indicator--394b7138-ad1a-4146-b790-16718eb552fd", "indicator--d22d88e8-1339-47d7-bdbe-2ceb493633bb", "indicator--5198a51a-047c-4a6b-8a27-fc24941b5a49", "indicator--82d0232e-c73a-46ed-92c6-fb9c3293e7a5", "indicator--727c0472-e39e-4830-bdc4-78c6738cf68f", "indicator--c88085fe-3d9f-40a0-bc72-b08b3ad41570", "indicator--b4485a31-d134-41dd-890d-a7d372938a8e", "indicator--45598a66-4e43-4f9f-8c92-3942ece7e37c", "indicator--cac56da2-d1b7-4099-9d50-776ca274ef41", "indicator--dbd46462-461c-433a-91a4-7f3075a345e0", "indicator--a0eba962-4088-4557-8b90-47026702105e", "indicator--ef7211b7-e3c6-4eca-a0ce-323aad3f303a", "indicator--6ff8bf48-e810-4920-8d16-4353f0c9208c", "indicator--230806d5-993b-4e30-8105-343a9caf4bbe", "indicator--6a67c21a-4f95-4d68-b836-e73829d4da70", "indicator--9d764f52-8830-47b7-adfb-628f156b122f", "indicator--1142de34-7d53-41a9-a22f-83022eb57276", "indicator--591649d2-5b86-4a79-8403-40caa1169e83", "indicator--7d514da2-b46b-463a-9dc2-f64371bc2d38", "indicator--6fd76ba0-928b-488e-aac3-f83963abcc5b", "indicator--d44ab452-10d2-49cb-b597-35bb4679d0a7", "indicator--4d16f6f3-9263-473b-a018-dfd151b5ae38", "indicator--fdcd6af3-a6e5-4c3d-9213-ca32736c1539", "indicator--ede91a66-0115-4ad5-9660-eb2402f1684f", "indicator--9396ce1e-5c4b-4141-a084-4e8f2a650175", "indicator--73b7350d-3ff0-4525-93df-b1cf71d2d223", "indicator--05c6b584-709d-4596-8d1b-66d83f549641", "indicator--38a4766b-b9fa-493a-bd1e-b544b477c0ff", "indicator--a5558df5-1534-4f72-b213-c488d15ce716", "indicator--220e2f12-b5bb-47cd-a0ac-8d33c5af2a7a", "indicator--e30626e5-4f29-4022-b900-6253eb07b122", "indicator--df6baef1-a394-42e2-a28c-e293d021b109", "indicator--bc9ef23a-ab42-4f9a-b7d5-207b57a8e1d5", "indicator--762e74b9-2c07-4c50-b18e-6519befb11fa", "indicator--0aee7c5f-b62d-4a16-a76c-9f0f537e9cc9", "indicator--b39123b7-12f6-425f-ad92-b5c8858a414d", "indicator--3e9075df-226f-488a-b0b0-2c386bef419e", "indicator--02a7054d-dbea-442e-8618-391fbc7ff664", "indicator--84a5a4fe-fd5a-413a-85f9-4ce7f38805b8", "indicator--0b1e55f9-5986-42ae-a00b-cc2d5ec64cbe", "indicator--e88cb2bc-8e28-48b5-82b8-363158c430da", "indicator--3775adac-11eb-433d-9c59-82f71c6d6437", "indicator--398d652f-406c-4a15-b85f-26b4e9827b06", "indicator--2254f51b-c06a-4581-9691-734b62e54ac6", "indicator--43ea6c08-2eb2-46aa-a322-48533947a336", "indicator--e18f7055-4a6e-4150-838e-e4f2b5c4a176", "indicator--48d0e304-17dd-43e5-afd7-62a1db8dd4eb", "indicator--003e349b-eafd-4801-a8c8-2165a42871f3", "indicator--56b92f20-8551-4daf-959d-b67adc3f51ed", "indicator--e4480b72-6471-495b-91c4-8c5cac01a569", "indicator--fa2d663c-57f3-4d79-8f6c-0714cb63d8cf", "indicator--e5320f53-21ae-419b-a788-739a4beab8ed", "indicator--82779567-b1c5-4601-a428-ba7a5ffd106d", "indicator--0cee1e15-ada1-40f6-91f8-f502ee1b153c", "indicator--28ed7cf0-e947-4b32-9701-7610ade6e5b6", "indicator--a169a961-d0ac-4487-a9b0-54aa50140c88", "indicator--49996252-a356-4ec9-8c98-3b65813eb262", "indicator--a6c31cce-ea77-49ec-be55-05cbda3337db", "indicator--17bb5e55-7417-4552-97af-38a774cbbf3f", "indicator--b11dfafa-13a0-4d9c-917a-3cefe56ace74", "indicator--eac4e0bf-b2d0-40c2-9d2d-04860c75ef32", "indicator--616c3762-b730-4c03-bd34-ed9f1686d91a", "indicator--d673481b-4ea1-491c-929b-92a87d2ae300", "indicator--1aa79d6c-f91b-426b-afd7-2123c94ce50d", "indicator--b04b116c-59c8-46f3-9977-c10824f43711", "indicator--62e31571-15e8-43c4-881d-409420cff54f", "indicator--bcba78fb-4f5f-46f9-a887-fb6182f05593", "indicator--963bdda8-baf9-4faa-a734-e060c2b00d04", "indicator--c4e01924-9b9f-46e3-bf61-f2223170248a", "indicator--35a2628b-3a7a-42ae-a30a-e551de00ec1d", "indicator--e7b17cae-d06f-4ace-afc3-391c23508e48", "indicator--bae5e905-2567-4ef3-aab6-cb080c334376", "indicator--b5ede9b0-9aeb-4fc3-87af-1ccb5209ba96", "indicator--44055280-a469-43d3-9575-31a63696f0da", "indicator--7acb90f0-bcf4-4493-a6a5-78e25ae2769c", "indicator--ed9901a6-bd7e-4b40-b49e-a013a60680da", "indicator--16741bd5-ef1c-4496-9174-337b12eb38ab", "indicator--2fc85783-ab01-4791-baed-f8f3484e6f1a", "indicator--3f03b03b-ef41-4af9-93aa-9acb3c31b4fe", "indicator--0a966371-d52b-4245-b71b-562ff2677462", "indicator--2f503968-447c-4498-9b09-ccb7a7ca9857", "indicator--b79a3031-d743-4404-bde0-ce1187329f30", "indicator--5450e350-bf60-4491-affd-1426569ad666", "indicator--fc1867ec-6e78-4abe-bdeb-b23ebacc4a2a", "indicator--ba267004-3c2d-4f72-86d2-ed921b6866fa", "indicator--b40a9e4c-b7a3-4b62-b6bf-333ab25d9807", "indicator--3dad5482-e6a9-44b4-b823-8170e285ac87", "indicator--233e627a-c952-47bd-963e-2cb1f41911bb", "indicator--25ae889c-d4c9-4591-8751-11f645532c8e", "indicator--d9c1a597-5538-418f-be73-8ec61c6a3907", "indicator--2e0af1db-7dd5-4476-a033-0e7b331c6664", "indicator--06831295-ff6a-41e7-8d9a-661c9256c15b", "indicator--8fd1f7d3-cd06-426a-b0a7-61dc79463749", "indicator--083b729e-e576-461b-98ec-aa7fccb9716a", "indicator--9c808571-fd97-4da2-a56e-472d7ff033da", "indicator--01e9c4e7-7cde-4009-829b-5c57be72a043", "indicator--af1a9fa4-d88e-4a0b-ae25-df5caff825ce", "indicator--4e538a53-012b-4fb0-99ff-bd5b88133cae", "indicator--d22534ce-697d-4fa4-b4be-5fc9c38a4e35", "indicator--7a8124d6-1cf0-40a3-92b3-299d007d49f3", "indicator--cfaf67e7-0358-4792-81f1-9b6f72214cfb", "indicator--74148b36-91b9-4ffe-8efe-9f83218eab85", "indicator--2269f8f5-eed1-4974-bb50-038f2aa75489", "indicator--9f13eb74-29eb-44b0-b1fc-4ba6a1fbd5e2", "indicator--5e6509b8-2e74-4574-9568-e19f1fcb2a11", "indicator--bcb7dd6d-0ece-4583-8d61-01c97b8851bb", "indicator--cfd3a9a7-b45c-41ec-9cdc-32b0e7275a21", "indicator--c1fb74d8-dd72-4a77-a423-88d111fbd1b2", "indicator--e2311e27-39a8-48ec-ae9d-bd26b0d805ee", "indicator--5679b43a-6a79-4874-ad9b-15cdc7311cd9", "indicator--874aebf5-4472-4ed1-a82d-34887c026c28", "indicator--b58fd573-e140-4fda-ad71-20d987b0bd2f", "indicator--617cb3aa-3c6e-46da-af47-5c8ab249316b", "indicator--2b81c8da-e846-45d9-b7b4-f8874fcf94f6", "indicator--1866bd17-5158-4f6b-8bfa-b12d2afc9210", "indicator--6b7f9f03-4c6d-43c6-924f-e5d470d6a149", "indicator--139f1149-0988-426c-935e-823e3a527a8a", "indicator--4e95215f-db57-4422-a340-149e7d5f8e8e", "indicator--e123b7fd-38ad-4a15-b750-a63560f84041", "indicator--87b0697c-c69b-4c13-82fe-77cc9be1b869", "indicator--d297d202-c9c2-46d4-8e0f-77b50a3fb636", "indicator--2ace055b-2734-4e23-a98e-737d0c0cad9a", "indicator--9950c575-9629-43bd-9941-cbbc8bf87047", "indicator--cdafb3cb-24b1-42ed-a4c6-508624c67e3c", "indicator--0d07322f-6283-4a88-a8c5-968644fd8cb1", "indicator--a68186ca-26ee-4ed5-a0dd-74dfb261ddb6", "indicator--79c8c9a3-1d9e-4b3d-b1fd-866354b3943d", "indicator--333a57b7-fb41-4865-a708-db4b3945cb68", "indicator--588302f5-68c6-44f1-ae3c-9bb273ed983b", "indicator--e89fc9a6-3794-4b77-a315-29590e2fd66b", "indicator--e6658977-416b-4a9f-b8c5-0ab5621cde23", "indicator--f1b88f27-8ea4-4d08-9a84-cb133b43c9ee", "indicator--8106700a-8dd3-43e9-ac84-ecb68cb5682b", "indicator--cb28d366-2566-4d5b-900b-ba2ba5230484", "indicator--4160e9aa-0627-4747-b551-bf82d96eb932", "indicator--ceaee9b8-0502-4dd7-8e53-a43e262ecce2", "indicator--57b1ec71-5999-4372-a7b4-c728a58a8d74", "indicator--eccc48d4-22dd-4a81-8e2d-2b31bbee65af", "indicator--2abc8ed3-7d9e-4ddc-817e-9ffa5b0e2aa6", "indicator--da1a2475-1cba-445c-99e1-4e4aade62cc0", "indicator--6078881f-a01d-4a5e-9197-cbaa2f67c4e0", "indicator--65560cef-4e47-4122-8063-a15f4c113e7e", "indicator--7d2c9106-e3ea-45d6-832d-8a31e0b5ae3a", "indicator--da459753-8261-4958-a85e-b67d2be85760", "indicator--101e8a8a-8b79-4c29-8db9-15563f4190f1", "indicator--d784b06b-6f05-4bba-a8eb-c92a5c3190f0", "indicator--7cc6938d-3ea2-4758-b7a2-6600924dbbaa", "indicator--44ef29f4-ece4-4b96-bab6-9275ed96c38a", "indicator--4f733f8d-2841-407e-a1b6-c04e5fb481cb", "indicator--630d4e3e-1f79-4c41-8c1f-111984708b0b", "indicator--316afbf9-c159-47fd-bb81-6a9726b8483f", "indicator--4c14b8f6-e079-4bef-ad35-ba37a5a9bf70", "indicator--53407952-4713-4bb9-a8f5-2f0061f2352a", "indicator--0b9dec1d-29e1-4429-b639-cbc98380a0fc", "indicator--c843139e-a0fd-46ab-aabf-7fb7b1126a4d", "indicator--7cb532e6-5c4c-4569-b2a9-7ed04ac02aae", "indicator--3332c525-546b-4ee8-a915-fd36e3e61d86", "indicator--33d1ea38-318f-4a8b-97f2-bda426bcca74", "indicator--9185e222-ae0f-47c0-9490-43da92b39615", "indicator--15ce8e9f-1fba-42f5-a7a9-81e8ed8db7a4", "indicator--d49f7d0d-294b-41fa-aaac-f329d7c75fb6", "indicator--9684962f-7fb1-4e03-bdfe-3ea58b1bf230", "indicator--f20ce372-0515-428c-8dd5-df77c105fa95", "indicator--7e8001c1-d0fd-4edb-98e2-47722c3acb5a", "indicator--ebcc1982-979b-418d-8df3-92a25d6cf1ae", "indicator--3168727e-9738-4d4b-bc65-ab084e98183a", "indicator--37ee7cca-b95a-46d0-bda0-63c9120cae89", "indicator--dd32fedd-762a-4ba0-b042-af12b6bfbea8", "indicator--f7a4a383-9c7e-4faa-86ff-fefe53f00fda", "indicator--bcaf150c-aac1-4b90-ab48-cf3a4ec2b8f2", "indicator--7fcc67f4-138d-4052-a445-a7ad425e0bb8", "indicator--5265b077-3a8c-4e53-9c7c-8f3c00721e3d", "indicator--c744a8ef-2679-40ef-96d4-480a3ddd75a4", "indicator--44c622b5-62b0-4b07-84b9-290db963aa09", "indicator--7fc2770d-0ea2-4830-b17a-a2344849da28", "indicator--512a7af4-7326-4ff4-af41-f9c7d59e5acc", "indicator--d12e2543-e01c-4964-b74f-1bb209aee198", "indicator--cc2fea36-fdca-458e-9872-6149b7d13de9", "indicator--0fce211b-9d30-4381-ac51-a67fcdc2a030", "indicator--0ddf5d69-fcb5-4ed9-9bb0-2917e9541a26", "indicator--be380e1f-70fb-46ef-9280-96fa1375d163", "indicator--53cc5794-f58e-4038-bb11-5225f1eab61a", "indicator--4a52b422-c819-4ce5-b502-2230a3aeabde", "indicator--4897af2e-949b-4cdc-9fcf-e444f6e6a3ee", "indicator--84b53b35-6921-45fe-ac25-6f0409912aac", "indicator--f198e727-b066-4d56-b650-c32e74f8310a", "indicator--76ca0934-3ec0-45ce-a89a-a8ed6c06571d", "indicator--d3986f33-05f7-479c-b814-743f1b41e81c", "indicator--fe31e72d-3597-42b5-acd1-4a715be3b36f", "indicator--de501286-81b5-4c0c-9829-806352d660d3", "indicator--41ab3474-6ac6-4b95-b0d9-70af7a00fa19", "indicator--61c70676-d9b5-4d42-80b1-7664c59804dd", "indicator--ccc215c4-d7c0-4e16-b095-994468c4717f", "indicator--71ad7270-cf6a-42ed-8a8a-2fe35a911d42", "indicator--017bf8a0-5810-4325-8bbb-a74cd5250da5", "indicator--2a5e68a1-c9f1-4eb8-a64f-a9d7a72bffd3", "indicator--77e555a9-39bd-46b6-b124-618a8369718e", "indicator--e4f09dad-56e4-412b-a033-e2ba536d99b6", "indicator--602b2f02-b3a2-492c-933f-73b897c90e2b", "indicator--76a4144e-7908-4b8c-b6a0-0b8fee71c243", "indicator--db21885d-d70e-4c31-8ea7-4fa518bb04e3", "indicator--76c0b0a0-f890-4654-b6e4-31d50255099e", "indicator--c3466ab6-c251-4680-8023-1350bb773442", "indicator--e1080d92-631f-4126-9d43-86eae4577fd9", "indicator--11261271-e395-489a-897f-46791fe1341f", "indicator--45a5e3dc-fb7c-4e2c-96a2-e8f35d76ffec", "indicator--c24332b6-4c70-464a-abc4-987c793d8f81", "indicator--51bdd1e3-d16e-49d1-a662-c6608258638a", "indicator--67089ed0-f70e-4b86-aebe-8d1c96a82c5c", "indicator--5bc0e534-175c-41c9-9665-1f1638ea06ee", "indicator--51357f46-98b3-448d-8b7b-89f5e88c28b3", "indicator--3409d283-1cf9-45d8-a1d4-44ae59972643", "indicator--11b33e05-3d2e-492b-9554-dbab105b29a6", "indicator--43203713-8a72-4a92-bd80-49c8e9b3503d", "indicator--021e5b5e-9eee-436d-8dec-3c38c83fa819", "indicator--d2520434-acdc-479f-8a05-f1ce5f3400cd", "indicator--9892eeee-b13d-4fa5-b197-de3f41caf8c3", "indicator--46c3fe6f-e3a0-4aaf-a65c-0032cee857ab", "indicator--b936a142-9d81-4786-9a13-d8dc0ab1d45d", "indicator--aeab8440-3463-4a8f-a3b2-343ca077edbf", "indicator--66fa3dc6-4e43-4e3f-95ec-08e707d54069", "indicator--6c8af76f-8e24-43e6-b504-b87e33509ee6", "indicator--7e823616-8d02-4114-acce-24c235bfc117", "indicator--64b4876e-f3ef-4f01-ba49-7de01465d31d", "indicator--7e22355e-c547-47ad-9bdf-9feedfa39746", "indicator--d42fbaef-0e49-4179-9fb4-73d0edb20a36", "indicator--ac3d9ecf-fc56-4203-9722-222bc168e1f4", "indicator--34acb39b-1c64-4f4d-9980-5f0aca05316a", "indicator--06ea94cd-f926-4ea8-aa40-21943b40940e", "indicator--a9606764-ec52-481e-8993-fba5a54b7051", "indicator--7d0cff99-efe2-4eef-b99d-b94df69b15db", "indicator--cdfa8ef7-19a6-41f4-9545-5260a082e44d", "indicator--785f07bb-5fab-4a8d-85cb-e31781b07349", "indicator--7f4a685c-0e26-4a4f-9835-c9772f82f90c", "indicator--7b8e00e3-ca75-4d12-9f21-38390c34a95a", "indicator--6f663182-717f-4849-9be3-dd8e327a4643", "indicator--67c78a0a-af58-47ee-892d-6d75058264c6", "indicator--4c5271ef-0910-4658-9349-9ce4aa588634", "indicator--89d4105a-3cb4-4bd3-bd39-223134ca36d8", "indicator--694760a8-697f-4f88-bf99-a7b5a2a1d3ff", "indicator--e1ffc7a0-33be-440f-b1fc-2581e20b971b", "indicator--4bb3c9f7-ec09-4ccc-b04e-93c522e3a10f", "indicator--ddf275ac-7ab8-4a1c-9458-53eb4bce579c", "indicator--68ef3a94-4af7-45c6-a1c3-af20b22e59fa", "indicator--c872db33-8c69-4267-ad68-c0002f6e7350", "indicator--9cae03aa-7e49-45b5-bb45-02c3c5ec6cb8", "indicator--bbd40d32-c976-4af9-9b0f-3a0f40cdf73e", "indicator--524c69e3-22dc-43cb-b4aa-5feae8f0a715", "indicator--0e734d21-8331-40ec-908c-f14975a02c79", "indicator--4c94303a-d003-4b58-a269-2ab051d164a6", "indicator--d7bcee02-d593-4af5-a110-8de324c56a88", "indicator--ece8dae9-5890-49e0-82b0-2b7a36d6eb78", "indicator--aba043ad-33e7-4984-a4c0-5f648829ca18", "indicator--40e90270-2c34-4291-b770-63beb95a44f0", "indicator--47511c7e-e7bf-4ea9-a9ce-fed3d4995abb", "indicator--d4db966d-57c6-402e-9580-fe7dae135320", "indicator--0bed48ed-f10f-4385-80f6-2a18a505c50c", "indicator--7fa82ae9-dc37-4bb4-ad34-677ea295278f", "indicator--5d72059e-b033-4199-95fb-32a319358a54", "indicator--9e270295-c74b-44e4-af0b-c6939d97f245", "indicator--e4fe03c4-c8a8-4674-963e-5e56504da826", "indicator--3da98591-195c-435a-93fe-5f44cb878780", "indicator--0b9a1dfa-5ff5-4971-9d7f-aa3e05ddf1ee", "indicator--1e8f508f-e0e1-4e79-9e0f-1ba5d09f08c2", "indicator--83d6e0a9-b461-4e89-8068-28c246450fab", "indicator--075cb5f4-196c-404b-9995-bc7d049814d5", "indicator--ce54bc58-bf39-4238-8c04-b6250ed2b823", "indicator--41890826-fa45-43dc-8f0b-47bc69d8467d", "indicator--aa9c298d-53e4-4259-b525-f79eb77f5b12", "indicator--1fc830de-94b7-498f-8300-75be5ea91c2a", "indicator--2642defc-5c9c-479d-9d12-5ef922bc3b8c", "indicator--7ecf2100-8f53-4d91-ae42-019aee20572d", "indicator--98b58219-2837-4f32-a362-058bc366d0b7", "indicator--e861212d-eacb-45bb-8edc-bd85eae29f93", "indicator--d48ebdf4-074f-4060-bb3d-1b32f30d17c7", "indicator--a814e43d-2274-426f-83c8-bd6ac25cb5df", "indicator--8b03a752-c8a8-4d38-a6c8-49242ba0e0c0", "indicator--20152d53-aca8-4291-9fec-d85ff5768503", "indicator--955b302b-782f-41b5-ac71-85ab2c1dbac4", "indicator--55a6ef81-cd4f-45f0-b183-d827d6d1261f", "indicator--f7c5c642-2b5b-4d65-9508-c70fae9f06c7", "indicator--13312d52-ddd4-449b-a583-6c28803ec603", "indicator--88c60e87-5a0d-42b7-9217-f88fdd681335", "indicator--de3e382f-8181-452b-b72a-513e904ca0b9", "indicator--7aafd9b8-ad43-467e-a914-659409a40a79", "indicator--f3cf7010-6916-4150-bf57-27ae4950c732", "indicator--ca0329ee-1446-46b9-966f-325cd0b69045", "indicator--65981508-0374-4c03-83ec-24b716910322", "indicator--60f4600a-126d-4f1f-9309-d434fcd0cfd5", "indicator--415e20bc-945f-4f19-8ba6-2f94692818f3", "indicator--7f1d5306-6a93-4a74-bffd-11030ee7c041", "indicator--d519fdf5-a005-4768-9e25-98d13e078ae3", "indicator--a190eb1e-e310-4e57-a477-6f6bdcd3bfd6", "indicator--322ceff1-5844-413c-b681-6ee402f9f8f1", "indicator--9683b839-67d7-45c2-b11d-5d384b1230ba", "indicator--b5ba5280-0cb8-4007-86d7-1e1b07f2f655", "indicator--b64ea191-8a05-42e0-93b9-f8c572962f0e", "indicator--fe19d7c4-e251-45c3-afda-23d5665bd481", "indicator--6fedd4be-2733-4638-8c99-98ab1cdb8e29", "indicator--6792b4ff-7da6-436c-8042-edf76083ae00", "indicator--6e07dea8-6aae-4df0-9738-e54623dbcf99", "indicator--774c3e30-d066-41b1-907e-cc04218eb7c3", "indicator--95564102-a6b2-4647-b63c-b487635eeb34", "indicator--371c1978-7636-41d2-9bf6-d57d24c850b6", "indicator--9f915f4d-2943-4e7b-8da6-b97f0470cd1a", "indicator--b02f59e1-d425-4470-aafe-29ecd2c95fd0", "indicator--04eaedb0-614f-4d45-9518-19e1e74e723c", "indicator--127efb70-0b3a-48bb-8b43-76fcd182b7bc", "indicator--7956e35d-9e43-4819-baf5-268bfc955bbc", "indicator--141aaab9-cc89-4200-af00-0440483bf896", "indicator--8ec6fc0a-6901-41af-85ef-04acf71a74f4", "indicator--d13222fc-5a18-42d2-aee8-656370a2b1e4", "indicator--8110738d-ed73-488a-a5b2-66cc486bb01f", "indicator--5784aebf-89a6-409f-a2a6-ba871534f57f", "indicator--976e7070-d4b4-481a-a812-1511d91d5f72", "indicator--1b155959-0e05-439a-8695-3a1adc9e69fc", "indicator--a3b1838c-abd4-4401-84f8-25b52e1875da", "indicator--45e65a68-9136-4d52-9d14-9e575d0c1aa8", "indicator--034f5454-103c-46c0-ac87-b9f592a8bb8f", "indicator--eb46df7a-52de-4582-bb64-4c09c5f4048c", "indicator--90a9126c-6a3e-443a-bd7e-650e462da461", "indicator--fbd49b9b-4512-41f3-97b4-0cd0cd02efc8", "indicator--6cd0be71-89af-461d-81ab-47f250fc1e66", "indicator--b6f518d4-b9c1-4ba8-8c43-66e9e1642aa2", "indicator--a0e16294-e80b-4a0a-ba0c-651310ac074c", "indicator--4689e68b-316d-4654-bb19-6739bd9433a3", "indicator--27cf479e-5ab8-41df-aafd-f0ace16a414b", "indicator--2325a048-95c9-44ec-9437-14c20d298d86", "indicator--57fa9544-95e0-4108-a9ed-eea9b9edc59b", "indicator--39d60c91-6012-40b3-adb7-62f827fead45", "indicator--763d7613-e8aa-4dca-9b56-a5bfa2508a75", "indicator--ffc08c54-c05c-4677-9999-f30d0c39a929", "indicator--bf4cc2f1-b477-4c2e-8d11-496412b61587", "indicator--4604f467-cdc7-4827-8d9d-1b8a61ab6f28", "indicator--f48e6ba0-9242-4fec-953e-5b69be8b9900", "indicator--ce7c36db-8233-40f6-ab18-2cf40fc872f3", "indicator--64d56679-32c4-47d3-88be-bd13b7742204", "indicator--fedf548e-7fa9-41c9-8047-b591d0b5b2e7", "indicator--b1e0e776-9882-4ab7-ad88-5bfcf07a2372", "indicator--0f2afa6f-37ba-4380-92cb-78455c5d2cd1", "indicator--138d57b0-e9df-4c2c-be70-8617c762c51c", "indicator--97400624-e327-48c1-9d94-b8464a7b5c5f", "indicator--491b9e6a-f62d-48e1-a221-ca9e92ab2052", "indicator--8687f4f7-ef64-42eb-a09d-b491c6516ffc", "indicator--10fe1ef0-52d5-42b8-bc23-3477337c7255", "indicator--620b6125-e272-40ab-a76c-f10b2a84613f", "indicator--d7a0e7f4-483f-4481-8490-394cf956743a", "indicator--4484bcc3-a152-46b6-b4eb-3972e7b5e039", "indicator--c2688805-cec9-482d-92dc-32595d6d0cf9", "indicator--bebf43a7-0391-40d7-84bd-f9017344a762", "indicator--de037334-9122-4233-9e35-86f9c0c55aba", "indicator--f170489c-0fe1-4ab8-bac9-f8323e8127c2", "indicator--de5cf047-6c5c-48d9-93f6-050feb3ed69d", "indicator--03ab0724-4bdb-47d6-b597-a62af46bde23", "indicator--26b6dcf1-79b4-4807-bac9-5c38d2623f89", "indicator--47c40766-34ef-47c3-994c-faf819da1a72", "indicator--d3d07b78-6602-4da1-84c2-1cd0b697dd8a", "indicator--7cb798c8-cd53-4044-bac5-09c9ced8a2c1", "indicator--2452fa58-c746-42ce-ab0b-3ee718a4018d", "indicator--79d2bc31-29ef-41a1-97a4-9f9924de63dc", "indicator--70180d5b-ed5f-4f90-a5e8-3aaecd84381e", "indicator--d6862c4f-0634-4c8e-9eaf-6928072fa764", "indicator--11963f78-c00c-4f09-99c7-be2b439aa1df", "indicator--24bb3bcc-7aa3-491c-9795-43dc313fc97f", "indicator--6245780e-fea3-4802-b9f2-0180b7799f89", "indicator--7d497f9c-13bf-4cfd-893e-963b56a06de9", "indicator--1661db46-4353-4107-b44b-a6ad07828c50", "indicator--5cbec062-33e1-45e8-a4a1-2e02d1f20f83", "indicator--a7316bb4-e5e0-460f-a2fd-b045d49ef115", "relationship--4aa40b6a-dc6e-43b2-b47d-25a612bb4286", "relationship--bc3543eb-ee78-4b42-acec-1607558efdd7", "relationship--e9f6f37a-8394-4a82-b1b7-5d327326afb4", "relationship--d1e27fb8-5995-40ae-92f7-c78a7aab4dde", "indicator--da53f05a-d7f8-4ec5-ae3c-14f9cb244c8b", "indicator--af0e7438-f98e-4af6-86f3-d036b2eaabce", "indicator--b2acbd2a-fef4-4d73-a6b5-6fe489427b2a", "indicator--7b98b53a-0512-4c3f-a2fe-22ca9a2a9c72", "indicator--3bbed06d-afab-4827-897c-d75e136823ad", "indicator--0f6944b1-529e-4459-a67e-842a1de2f752", "indicator--69993908-3eea-4f55-a5a1-6e7ca55457c8", "indicator--4f929b21-6d3f-4099-8765-e4ce8a946f2e", "indicator--dfee156d-5a8b-4ed4-9b6d-b693ee995922", "indicator--f9d4b950-ccaa-4de9-a644-6814f9705b84", "indicator--10e3845f-1d3b-414e-861a-56ebc67196a1", "indicator--f8a5ef28-5fa8-41d6-b087-c39b5f438a4d", "indicator--00b48708-017a-445b-b714-20aa99ecb373", "indicator--15a941dd-87cf-411b-9743-4358192de7e4", "indicator--542ebf43-6493-435f-9fa0-414bc1f338b3", "indicator--c4f73c23-ccab-4092-a8d5-7343746df76e", "indicator--3905b495-7db2-4c2a-b477-2aaff47d2578", "indicator--8c44ca6e-7d67-4bf6-8487-94fba2577cbc", "indicator--1ee330d0-ee3b-471f-a232-fb0e231bbdc7", "indicator--8fa700be-a0f3-48b0-97cc-4abbd30396db", "indicator--0d9c9785-2f4d-4390-a8ba-3c7a7fc8a8f0", "indicator--a5ded417-418b-4897-9fe6-eb94aaec0076", "indicator--122705f2-4555-401d-8735-a50c7c7adb87", "indicator--c54c0e88-9fbf-46a0-9d88-2599fffe48db", "indicator--0d84484b-062b-4e1c-b0b0-c298bb414ff4", "indicator--05419f00-a7d6-4c38-9930-1afc3ad32bc1", "indicator--c793e262-7f85-4ea4-a607-0f5ac4c8c807", "indicator--07941ba2-c10e-4413-a8c0-1c585267403f", "indicator--39c91614-545d-4538-87b1-84b4814393f2", "indicator--88197260-e192-4e5a-95d4-5356ac9fb1b4", "indicator--879d07ba-baed-41fc-a90f-c7be1dd9334a", "indicator--f56defe4-b4e9-450c-9849-042c0b223bc8", "indicator--6bfc2e8e-88ef-48ef-8ca1-5ac3fabe65c1", "indicator--a279652c-2c7d-4e9e-81fd-bf91ee0e899f", "indicator--2a2ea47a-28f0-45f2-b58a-2caa11ef59dd", "indicator--33db4879-8092-45b8-99ae-b97893441943", "indicator--1b90ec12-c65c-4da4-b140-1e7d50b29f05", "indicator--11f10d44-ff25-4d0f-ba14-7ee978f447dd", "indicator--e558189c-78bc-418b-acc9-9f5d2f8bb6a8", "indicator--523a8c8c-a390-4055-a3df-51665c360699", "indicator--28150ee6-7bd0-4442-b9ae-3d4c3a548cf6", "indicator--802650e3-1be5-4dfb-a8e2-2bbf61116709", "indicator--0c3053df-bbf3-48e0-a03b-17ebf69ebdb9", "indicator--20dc2e82-34dc-4e6c-968b-073e9e83d6e7", "indicator--6ba4d362-ccaa-4bd2-94a0-07d1ab5331af", "indicator--ad975620-febf-4a87-a673-b0ae9ec44da8", "indicator--fea8ef80-c8be-4e61-af7f-451cdd30b19a", "indicator--1d2783db-0ce8-4386-bcf1-3c208c132e07", "indicator--ef469891-e376-4955-a561-b36c36e8b8ef", "indicator--b2d19bae-ca34-4885-9688-aebc41273c09", "indicator--0446a1e0-4f6b-406a-9e78-1469deaf53c1", "indicator--6d572aba-b9cd-4a36-98c7-1ab05edd561a", "indicator--ef7a1688-6d21-4d29-b187-e62ef64cd051", "indicator--70a562ab-4896-4b56-a91a-86c4b2ba7468", "indicator--cbb222ad-0511-4a02-bc61-24758fa9cabf", "indicator--d02ed69b-782c-4b3f-a96a-869b3d2c814e", "indicator--7bc8e36d-aab9-4abb-82d9-14a97d7c8d7c", "indicator--36bae7d8-1684-41f8-8df2-bc1c1b6e2fc4", "indicator--02e23e00-6a9b-4a24-a41a-d30ab06d23ea", "indicator--13f45599-f336-49cb-b903-2aa515ee1dd9", "indicator--d4b43760-af18-43fe-87ee-d06d0d07739e", "indicator--188977d6-49b4-4f70-8066-4b65f1410563", "indicator--e258abc8-8b0a-46c6-b925-cad6df11be7f", "indicator--61eaca15-5930-416d-a762-a2f22c64920a", "indicator--bc92f7a4-5c66-4ea6-ab02-528a853e1222", "indicator--09719d06-8401-46a7-9845-53e1976dd153", "indicator--e5840a09-389f-4852-84b7-e0a9a2114a6c", "indicator--14899554-a771-4b7f-b23f-d21499844c94", "indicator--a206748c-501c-40c9-a06e-ea0914176472", "indicator--47f71af6-0d5e-41ec-bb71-dcec79e0c9f8", "indicator--066b0952-a1eb-45c4-8fd1-f246c66f3432", "indicator--93d85d54-5849-4126-96e8-8308801f50f3", "indicator--a3b98b39-aa91-484e-b73f-f162efd885b9", "indicator--f6ca04d2-81dd-4d93-84c4-39a3f8a7a55c", "indicator--ef4e32e5-42a0-4fe6-a78c-09391767d709", "indicator--32ac0558-3b2c-4588-bf29-b4a87d84d93a", "indicator--c15907f9-a706-4198-840c-208512f0ac22", "indicator--9a498d9d-2ddf-41c2-a227-09f8faeeb6bc", "indicator--b91e401c-fbad-48e8-bc82-87eff5b2351a", "indicator--f7884f46-0f2a-4b47-87f5-1af473350bec", "indicator--bb9cf335-3f33-4167-bfae-0aac7ea4ecfc", "indicator--5edd6a86-9be0-409d-ac3d-ec74bf29a332", "indicator--c84ec151-8c1b-4b1a-bd64-3050e23977e0", "indicator--06adf708-1f98-4b55-aad5-08c00807eb28", "indicator--aac7848c-d37e-457b-a413-72d4f7aa5726", "indicator--b43107a2-5207-4243-9ba3-17d00081ba3e", "indicator--79594052-14cf-4439-9735-d95c9abc995a", "indicator--927de04f-cc31-4382-953a-c842f3217e63", "indicator--2927a23a-a164-4d76-bcce-be5bc70293cb", "indicator--63da3d7a-573c-4ab7-89e7-c0fd9c9e488f", "indicator--e2a84453-3a91-4c7b-b889-e8d1f512b858", "indicator--e85cf19e-1fcc-41ec-94ca-57051aaecbc3", "indicator--5ae83456-0cc0-4b6e-a591-a83b7175dcef", "indicator--16c36dd0-00c7-4530-a1bf-7495941ad388", "indicator--1c18b93c-18ad-483c-9a46-e144c2a4d96a", "indicator--1bdaadb4-cc04-4f73-ba01-46c8973c6749", "indicator--d2b03b72-4d2e-4812-a156-28826e7b52f1", "indicator--60165273-b6ca-4eae-aec7-35be7ef2cc4a", "indicator--290ca48b-a856-499c-b12b-fe50ad53ce54", "indicator--dc9d946f-8e96-4f83-9028-9c700f16ad56", "indicator--4b523e8c-726b-4600-9c92-3fbc24e131e1", "indicator--12e65cdc-6eef-4d2d-ae93-bd76149661ff", "indicator--97692c42-6b2c-425c-a38a-9fd926f404c0", "indicator--1435c945-77f5-4e59-90e6-d5052156085e", "indicator--362377a5-2f06-410c-9b2a-b39a5cad6d47", "indicator--eef55d44-7327-4898-b71b-dae27069cda5", "indicator--2071cf0f-3248-41e9-a164-48248501c831", "indicator--5fdf529a-2a3d-420a-b6e1-26b5e405ac5a", "indicator--b2be54f7-8e56-4e52-afab-864d3e9a829c", "indicator--450be0b8-2ce6-4b91-a8c8-5c93798f0175", "indicator--094bc8e5-0daa-40af-9667-1850a9344901", "indicator--f62b7adb-9cbd-486d-838f-68c6429760fb", "indicator--73d1a4a4-f537-43bb-a6bc-f453fa830ad3", "indicator--0b9026be-2c14-452c-bd59-b7c7a904bdaf", "indicator--1ce3a20d-2678-40f3-8e65-5e7146739099", "indicator--d1662061-930a-4401-addd-da2b8424e01e", "indicator--2adef8cc-b6ac-44f6-ae3d-22b85446121d", "indicator--f2b7a05e-c9ee-4259-aa10-0a9cf2c27b8a", "indicator--4baddb80-3613-4d54-9588-14cca56be40d", "indicator--819ccf9e-e807-42a7-be5f-205cc4f7e92d", "indicator--600d0466-74e6-44cc-a452-35fe4985dcc5", "indicator--bc1af451-edb4-485e-869a-6d03d1f41533", "indicator--ed640909-2267-409f-8aaf-bf3afd419d53", "indicator--1b4dad15-0460-43a3-811c-9a9edd5195be", "indicator--a97748f2-e956-48a4-a5bd-47fc67652f34", "indicator--b76d9f54-eea8-4157-831f-c3c0ef7a17f6", "indicator--ef915eb0-fd86-43b4-9740-84ff70ac3360", "indicator--c403592d-40ca-4a2f-8047-7cc55c2b0a60", "indicator--918107ae-472b-4f33-b2fb-385d11f24684", "indicator--f3715de6-8b79-4a15-93ac-92a62ca032b5", "indicator--f455aeff-9f43-4d02-be35-a5a249272665", "indicator--e5af6391-d47e-4551-9214-6f67f9fa4fae", "indicator--c4c7d53a-f602-4c5a-a4ec-2d962d8cbe41", "indicator--943fdec0-2473-4c04-bdb9-d5ac39417979", "indicator--b4cb977d-530b-4f08-a7f3-279455edc398", "indicator--c4939f05-12db-452a-b8b4-6b7373b0249e", "indicator--9453d14a-5247-4288-af42-804d1555161d", "indicator--d5cfa4f2-d985-492c-a2fa-b5808493a0c5", "indicator--19e6c369-7a86-4a06-beb4-ff8eaac677ef", "indicator--588e1eb4-6276-4072-9300-4b555c875292", "indicator--b901cae1-6722-4156-b35d-ad15dd46f55e", "indicator--b56ab84c-4978-4a2e-8df6-ddc25635d8ab", "indicator--0c962e39-ec77-49d4-b9c0-0d39e246910c", "indicator--814177e6-a544-4183-8c47-e7ac069718dc", "indicator--ba500a1c-cd62-450b-8fb0-71092a765626", "indicator--f32abbe2-5d35-4267-b55e-edeb00136d13", "indicator--a3a764bb-7193-4f37-b605-8c6b68bfaa63", "indicator--f07b41d6-8f3d-4f29-95f0-cee0a4b863ea", "indicator--dc876659-5148-4ab2-b526-a3a2ff155a38", "indicator--a236a7b7-df42-4d85-9602-1d7b580d4f91", "indicator--f5251fdc-60ab-4c99-a350-b3847dceeb19", "indicator--fb1eff87-eb89-4c9f-bb40-4497b393bfce", "indicator--b014ab9e-2808-4063-9315-5c15ec7065db", "indicator--94bfda8e-853e-462b-9656-36252345b06c", "indicator--68c9e10d-ddfd-4418-8a7c-2d3e65a86902", "indicator--232d9427-5faa-4d31-949a-a7d7bc94c901", "indicator--4e669c07-1270-4143-84bf-12b4d19dcfa3", "indicator--cffd3d8c-47d4-474b-a459-bef7d934d7c4", "indicator--adb70152-7567-4f4c-9207-d6ec1c862ff6", "indicator--87e4ac19-4e86-4f13-b535-bd4e0d031c27", "indicator--b395355d-086c-434a-9521-bc86f6ae8d1c", "indicator--95e89baa-4883-4c53-b04b-0ecf73b78b59", "indicator--37f5bcd8-c30f-4dd1-bf81-014e3fe1777d", "indicator--64915846-5c08-4672-85e6-1f67f210afc4", "indicator--ea9e38b0-2fa5-4845-bc38-adfdfc3b5d31", "indicator--7512df20-1dc6-42d1-b744-5dedd7fc920e", "indicator--08705ae0-b023-4101-b9fe-3ccadce8184d", "indicator--39e1dcbe-b13c-40c4-800d-668237578794", "indicator--54ec6d8f-58c2-434f-b31f-e32e6e03a3d1", "indicator--8e1d86e9-2f8d-4817-a385-776f520b719c", "indicator--354497a7-ce8d-4c4d-8f1d-824d29826541", "indicator--7e894490-2a33-460b-a509-3d50f70c7caf", "indicator--61929dd4-5a12-410e-bce3-cacaf563e1cc", "indicator--1db80344-9bd5-4760-91c8-4aa04d404a11", "indicator--12d43f64-12e9-4d89-a111-ea4fae337fab", "indicator--1fe8f3ea-813e-4479-988e-84f6d7dad8ac", "indicator--3b2066b3-52b5-478e-9f9d-c9179e3cc92d", "indicator--820d97d2-c519-4968-a38a-2c4405cf569d", "indicator--c04a2996-c9cb-40b5-bf44-bc85848ee472", "indicator--252fc116-663e-463b-beb6-4bdd822ebe6a", "indicator--04e80f9c-9cb8-462c-bf03-6e6cae58adf3", "indicator--375737e2-29ca-4718-a7db-5db623440e6c", "indicator--611c63f3-f903-4fca-923a-852d61546744", "indicator--bb19b293-38d6-4bd7-8769-59607d637d80", "indicator--29971386-2e07-4906-a3bc-bca7cda1f973", "indicator--3a12ff7a-6c0f-4d86-aace-1a81fc501b6c", "indicator--bcb29811-9f96-46bd-824c-7c59942935d7", "indicator--27841ab1-37c9-42c3-8089-4c01479407b1", "indicator--c12211f0-1f12-43a2-98f2-b0cef9f34076", "indicator--5ab0fda5-374b-417e-848a-d317f857c1a7", "indicator--d98b28a6-9cc3-4642-b5cb-062a489d74b7", "indicator--e556051e-5856-4d4c-92be-9385bb2d8c35", "indicator--88825e82-0c9d-4c77-a737-11b0aa1faab7", "indicator--08752c57-ac26-4c31-ba64-bb18fadb0f9c", "indicator--75ebd69c-c635-4007-b281-9e677af97947", "indicator--03ece340-48c6-4e31-9327-f2fbd5bf6259", "indicator--acfe3805-fe83-4d91-b859-0a62c8eb3be7", "indicator--87d6499f-307f-4986-b1ee-db5d509d3bfc", "indicator--cdceb7a2-067f-4ed9-9a90-29a721950c0c", "indicator--d7b92ef1-ca55-4cc3-bdf8-7b043432897d", "indicator--fdfb5a3b-93b4-44b5-a4b8-78a5072da883", "indicator--c8f6c895-bfc8-4dd3-9c24-0f640c542be9", "indicator--4ae7b888-c0dd-4210-8be5-b4eeb6955c60", "indicator--1885b903-3f56-42ad-99dd-d4044903068e", "indicator--f8264da4-09c7-47ae-b2b3-2428c845da75", "indicator--d0fa078c-ee42-4270-b140-3678901d5bea", "indicator--d0f02754-4166-46b3-a161-3412795cd965", "indicator--1b15713d-02fd-4cd3-901b-396ad5ded16a", "indicator--a597e931-c881-498f-bbd8-9561b89208e3", "indicator--11579cbf-9528-4e0c-adc6-dbc06552f3c1", "indicator--097b95bd-9363-4825-8283-44f5957d2879", "indicator--6e764f35-2a68-401a-bfea-201801025913", "indicator--aa424ceb-0a17-46f4-bb59-4f899f7920c1", "indicator--a45d8b6d-7a78-4aea-b81d-9b0b74f6b50a", "indicator--f21f5d93-94fc-47b7-8c81-ed385f9cf7d7", "indicator--41e3e0fd-e93b-4ddf-90d6-d8fc419d53a4", "indicator--aad533cd-6964-4c8f-95d0-88e287197c76", "indicator--7e1b8acf-bdc1-442a-9cb2-0931c5672b73", "indicator--185dcdf4-9cb9-42ba-85ed-17f644150138", "indicator--bdc3a2c6-0f71-40a4-aafd-c562c40d6695", "indicator--ea8e6d84-3bdc-4d91-836c-b871270d4290", "indicator--d7022094-8b19-492b-a2de-7812933a56f0", "indicator--75995946-1895-4ce2-802f-3a92ab3c8126", "indicator--92e7a584-bd8f-48a1-a9d7-95f3c56af8d0", "indicator--f8b5a296-1daf-46c4-b5aa-459d6be843d8", "indicator--2015693d-d938-434a-8556-7b1a270b69b5", "indicator--6f005a3e-f316-44ed-b369-53549cbe5d3f", "indicator--71a1cb99-1cb4-4148-a35e-c80ccddef9a3", "indicator--2d4b0ac2-fcd6-4203-af18-55b15c793a9b", "indicator--03dcba03-8d00-4a07-9997-94b78bf4f202", "indicator--d85e487f-ddf6-4de4-89c4-569a47d7f55f", "indicator--53adcfeb-c8b1-414f-a4c1-1443c4af8066", "indicator--7aeadb01-7ded-45e0-8353-1ade3eb011c9", "indicator--adb1e766-a3c7-4157-9534-a621ade48ffb", "indicator--ec8657b8-efea-4fb1-b50a-02aedd21beed", "indicator--8c9f408e-08af-404e-ace7-679b72ee96b5", "indicator--43af6801-308c-4570-a0d4-380360ca0e62", "indicator--80bd0589-a78e-426d-bfa1-54e9e2c7bdf5", "indicator--9085ab1c-94f6-416e-853b-5bf6ee159526", "indicator--7abdda4e-3962-4e45-ae18-57f0e58afab3", "indicator--1c0b1f7e-568f-4b24-aec6-a8c5bca6aa3e", "indicator--dcdb3d20-1ef8-484c-9269-519e066d26d4", "indicator--6c71b895-6db7-4668-850d-f5087763583d", "indicator--5553f8a9-1198-418a-b13b-0bd20c60f4fd", "indicator--f36491bc-bbc1-4482-abd3-51b13165533c", "indicator--96e6b8bc-f1ce-498d-85f7-7a2d999c432b", "indicator--51f41f0a-a115-4314-9d28-16264ca6b996", "indicator--2e8db8ec-2d7f-404d-89cd-763ac3c3cff1", "indicator--aa34ad88-5dce-4d8f-9cbc-0b7ff837ae52", "indicator--ed0c3196-5b98-48e4-8275-a744da98c7f7", "indicator--ea595391-6d96-4332-81f7-ec571a9a0c0b", "indicator--4d0addba-8758-4b3b-bb20-641c3309d9ee", "indicator--2c812be4-ddf5-4b33-8353-a86facfa63c5", "indicator--c719dad5-8a46-4197-b500-68d46d80c4e7", "indicator--7529b2da-4f0b-4326-b5ef-93be9484a94f", "indicator--c1ce6218-8e16-400d-9e89-487c10feafc5", "indicator--b238d33e-e167-44df-8fcc-791d1e149b85", "indicator--06c6320c-bfa6-47ce-8787-f5a172517210", "indicator--6a870948-59a7-4479-8685-550c1d68383a", "indicator--63cdef9b-ebfd-4f3b-a41d-9f8ce772df88", "indicator--575b80a5-2ad9-4d85-86df-522e53895d74", "indicator--e95ac604-a41c-4dd7-a05e-607289450372", "indicator--cd79996a-5f33-477e-a9bd-7bb047242307", "indicator--57a14c6e-db5f-4495-ac97-56c3f010141f", "indicator--a3fc51d2-e7ba-459a-944c-a65cab9de4c2", "indicator--1105db0f-14e9-4246-9b77-d38c01c08951", "indicator--411efcda-3f2c-4a9b-bd1a-ef65a1669264", "indicator--373e7125-c3a0-49a4-854d-58e1d0d4e546", "indicator--8e5ce0c0-bf8b-4334-9286-4168757cc460", "indicator--4a380cd8-fce1-4c77-86cd-67e4268be93b", "indicator--b0ce040d-ed77-45c5-b93e-e878f8e4fc2b", "indicator--6e0a101b-102f-490a-a511-7967e4872673", "indicator--77f9ae88-76e0-43a4-934d-b827a5bcdcb1", "indicator--420bd6ae-f89b-4c22-b9a0-3d6c5db63c9d", "indicator--9e9781e1-b246-4f31-8e77-ee711e2253a9", "indicator--8bb2304f-44c4-4b9e-851d-441170758bba", "indicator--883c4c19-4aa9-49e8-9ecb-9ae18cd6a535", "indicator--414b5d2a-b1fa-4adc-b8c2-1dc18a40330c", "indicator--388b0480-7b2b-4eb4-b8f4-6c6723e07fbc", "indicator--847a19cb-aab2-431c-b02e-c7025ac3b319", "indicator--c10e2f50-84e7-4784-84bf-ba27ca3b463c", "indicator--dd8b7703-f468-46fd-8272-c16457fb4f05", "indicator--bd5755f9-3c5f-4e2c-8c56-7071b470bcb4", "indicator--412d7b99-01f5-43b4-935e-6d3431976435", "indicator--eec4ac0c-0ae7-4c58-bc6a-35ba208f4e50", "indicator--c5eabf4d-a492-449e-9a81-65d728621111", "indicator--98372211-dde1-42c5-9380-60803b178c7d", "indicator--6766981e-f84c-40ee-b9ad-4dfe878858ff", "indicator--2f2681ca-7e07-4c24-8ef6-3ee942eeb68e", "indicator--da21d52b-1fe9-4d3c-8ee5-c760d4dae7c8", "indicator--0d55059e-4cf3-409a-bdc6-b9854e0e35a9", "indicator--79baf7a8-fc99-4c6d-875d-afdec14989d1", "indicator--73eb7066-036b-4198-bf68-fcebc90f678d", "indicator--0866b241-8b95-4c77-8afb-b4e6d1b41e93", "indicator--951f24ec-6867-4867-b05b-f8b10920f3a4", "indicator--bc56f35e-9c82-43ee-a793-167c58ea5985", "indicator--7a533958-75b3-4f23-87cd-b29f788f669f", "indicator--2bece02b-bcd4-4eab-b684-e700f7a0d58e", "indicator--643e4b22-6104-4513-8436-f4ce713782ab", "indicator--97ddcae4-c620-4542-a16b-4df5c9cf83e1", "indicator--2bc3f379-8616-42f6-bf5b-a4d1686512de", "indicator--20d52c07-2b69-4fa3-b2a8-34c9a89d5169", "indicator--6a083c34-8070-4a0d-9209-b74b01492921", "indicator--cb2bc03e-264b-4607-a166-6465e6ef7fdf", "indicator--11c17278-a88b-4a91-b5aa-95afec3edbbf", "indicator--b6faa73b-86dc-4c81-9a25-893e980437b4", "indicator--15bbf979-57c9-4273-a2d1-15e6e1e5ad1f", "indicator--ed64dc19-a274-4d37-a1de-808e80826d8c", "indicator--9945a53d-6dd1-4af0-977d-d9bdcf014607", "indicator--69f80521-7d04-4321-985f-7a3780d22380", "indicator--4b30b577-17de-4b7d-9d5b-40342c2d8a8d", "indicator--4ffa34b4-6d46-44ca-a29b-432807c00931", "indicator--88b9dd7d-7972-4abc-8b1a-83604d90aa50", "indicator--984341ce-f064-4bbf-b106-8f70eba9779f", "indicator--2ad6fe93-bacf-4152-a81f-a81389d61cbc", "indicator--fa8017a6-a672-4e53-96cd-2f063ba05b63", "indicator--d7d9408f-4399-408b-b7b2-f362a98295a0", "indicator--dbdd4eb8-4bb4-4b6b-9835-cff1c59de379", "indicator--69da867b-f899-455b-835b-da75b94e33d1", "indicator--63cf6c85-7921-4ff8-b981-e8fc31e678e1", "indicator--24f04480-c2ea-446c-aad8-cf2bd07a2f15", "indicator--a1b49c2f-b704-412a-af5b-318f184732a6", "indicator--79ca6a66-9d00-4fbd-8fa0-e5a06b17294e", "indicator--cd5528b8-9159-414d-b6c9-1df11da2c3ae", "indicator--ddf9a052-6a18-4377-a95f-7bf517f3c384", "indicator--94e466b5-cfd8-4eb3-9819-7fd373d22c9b", "indicator--98a2253e-b614-47d5-aa1d-db05e9d849d0", "indicator--2be46e9d-65d5-4012-99f9-f8d5cb63d717", "indicator--a9f1d312-c4c7-45e0-918f-7a0bb3517f14", "indicator--7d05022d-9565-4d1d-b6d7-399e5476f84a", "indicator--453245c0-a2f2-4632-a46e-a0b9a7392976", "indicator--b24c2ebd-ce25-4764-ad6f-b56b6441f1b9", "indicator--fbeda2b9-a96d-4945-a328-2265c7910a01", "indicator--51d63431-4102-4a0c-abb6-b868af790fb8", "indicator--450579be-c865-47c0-9d00-b92fc812d6de", "indicator--3d5f07ca-87ec-44a0-9de0-5f9dec0ffba8", "indicator--c3dae526-3515-4aaa-b61d-1c6fa0d35782", "indicator--84e831e9-231e-4fdb-b703-b47920558a25", "indicator--bae564d3-23a7-45e8-b0a8-5ac692b23f95", "indicator--2d9ca2ba-8052-4097-ba63-e47bffb0bea4", "indicator--5269067e-30d3-4969-aefc-9edc141d4228", "indicator--8131f1e4-5c84-4cfa-bd50-d459176b7830", "indicator--7ed8d0b2-4700-4aef-b0ee-432882da2d62", "indicator--6707b88c-952e-4ae6-8565-badc51e6d9f7", "indicator--d023cd87-3aed-4b0d-9953-60c03017bcb8", "indicator--55f2e76d-ad0c-4782-98f2-4a9da17bcc4d", "indicator--77f6d966-5b49-4c1b-8d62-088fee75a162", "indicator--f73e5854-168a-452f-9c05-218c4beca96a", "indicator--8b54a0d7-6979-4c9b-94bc-b3083ea83d1b", "indicator--09c0b112-fb24-45e7-bb99-6df8c450dfdf", "indicator--dc50ac5b-463e-46c6-b740-17723e5211d6", "indicator--617e8e39-aab6-4d1e-983f-7d5b72917272", "indicator--e5d8b81c-81d5-43cd-b2e4-5463b9fda43d", "indicator--ca782f2c-ab79-49cc-bbda-f3c230d24eac", "indicator--3ae73654-4d8b-4a6f-9796-d01511bf8994", "indicator--55b4abae-c479-4479-b397-46227762f0b1", "indicator--c349063a-b849-4608-8f76-8feada920133", "indicator--d4ec2a35-73de-4796-9e68-a14aa5b958e2", "indicator--acfe47c9-5614-4535-b4e6-2ac04b82b169", "indicator--405aa20f-db7a-40dd-b38a-a70c704414a8", "indicator--566c2121-6c94-47e4-8c15-763d6f9f0a6c", "indicator--1878f9a8-4737-42b8-8f1b-b7e26b31b9cb", "indicator--5e075c48-fc85-4770-a179-5029acd5fb08", "indicator--d8d49d5e-d8de-4a1b-98b2-5df7c41311e8", "indicator--2df6fb61-b273-4607-a86c-63df33672e5f", "indicator--922b379b-adbe-469a-a67d-bf094fd00a7e", "indicator--7829c836-6ec4-407a-8b5b-f3c485108e41", "indicator--cc55c669-a9fe-4e11-9621-f6d5e29401a5", "indicator--3ed54c52-4754-44f6-a54e-66343ed775d7", "indicator--e16b6d25-d856-4a99-b879-cc76ad772740", "indicator--04bf2600-bfdb-4d90-8506-14bdcd97d72e", "indicator--cc2ad201-023d-48b8-a800-3dd65bac82b7", "indicator--9a2039f4-af6c-4476-af39-fbbe10780e82", "indicator--e81b8621-5729-4646-ac2d-3b02832c42a3", "indicator--5bb85ed0-9d09-4f4e-9667-2df7a54845fa", "indicator--20a62655-b76a-4000-a3f0-85bacde81e0f", "indicator--57136ec4-c407-49d3-a549-eeb37044ac60", "indicator--c013db8b-4df2-4b2b-acb5-398fa085cfa5", "indicator--33ffcaac-810a-4f83-a213-cee957be6302", "indicator--d658a7b2-caef-403a-b876-0da5262e6336", "indicator--b188c686-98be-424c-8a25-6c73ae0a27f6", "indicator--b2ab1945-40d6-4596-88ca-4262a68d1e33", "indicator--fdea8358-4ddb-4a3d-bd36-cafdcfb11bd9", "indicator--45cd04ac-754e-47e2-9d6c-1ae70e0c9d84", "indicator--e21a86a5-df69-430b-80a8-6b31fac9662c", "indicator--1807c9a3-a513-473b-8a46-ba8a9a2b32e9", "indicator--67552f1f-5634-4b7f-a8f4-20c7119ee96e", "indicator--cf0e3daf-07f2-43f4-bba1-84dd7d5e9cb1", "indicator--95e55af4-a94b-4263-9755-03eb82b037e2", "indicator--10ce9229-6d4a-4933-94fc-2c5783ff228a", "indicator--1390cca1-5149-4429-8c07-bb970e7710df", "indicator--1e3501f2-5700-4e15-9237-3972a7a53c7c", "indicator--92486bbe-128e-4421-b93d-83d286bafc4c", "indicator--9268e0da-18ab-444b-bfab-fd038dc4c30f", "indicator--2cb87bb4-e896-429a-8678-b720dd865f9c", "indicator--566ddd3a-5f8c-4464-91c5-e28f0d57ef4c", "indicator--29ee6ce5-4549-4842-a8ac-6b9aed7d1631", "indicator--59f66f5a-f23d-4fcd-9e17-6aea1af9339d", "indicator--830bf46e-c96f-4066-a229-8154bd252316", "indicator--e86a3e8c-773d-4976-b003-dc474a343de9", "indicator--f15c373c-f0eb-4caa-ba0f-eac27fe8c69d", "indicator--c8aa9dc0-d793-4c59-aee9-ec5a2b5ae379", "indicator--fe4dbdac-1d8e-4359-83ca-e57808975188", "indicator--f67d4bfb-4bd4-44ef-9544-7f5c7c11a7c8", "indicator--eec13ef5-feb7-46a7-895b-146e3e5ca871", "indicator--75bd004b-0b5c-4e15-b32b-8e9fe1899687", "indicator--985d6a35-79d4-40e3-a1c0-bc95bfcab1a1", "indicator--8559f86e-0880-4860-b8a0-d0930f127989", "indicator--a8fcbed6-3a13-4720-b9ae-6c48e9dc9cc1", "indicator--43ee7da1-fac1-47d1-8139-859ba400a980", "indicator--60ad7188-1e4e-4cb9-a825-ae5561e1b5e1", "indicator--f7083577-9adc-4f3d-815b-903b65845ec2", "indicator--e4a7da75-9334-4aa8-92be-2f229f8f9402", "indicator--f576bc71-ceeb-437b-b74e-7a8dc3d7207f", "indicator--8a5d91e6-b676-43eb-9711-32a154aea087", "indicator--ea35da89-91d4-49c3-b9d1-adf5f27fe9f6", "indicator--f5b2bdfe-2f4c-4daf-ad1f-968db6320d4d", "indicator--78e4b5f8-885a-4253-802a-e1b1d90009ef", "indicator--53a7625e-58e4-49db-a808-e3b7e394ad02", "indicator--f801565e-4797-46f2-9d9b-8a21cf0dbdd9", "indicator--03e6e7b9-df93-40d5-b877-c3c254eec687", "indicator--b47b1b38-a001-4a40-99fb-bb6bdad8910e", "indicator--7e0a87cf-fd1e-4b77-9003-3878a1e1a3ae", "indicator--67bc8499-1236-4a5b-bca3-40223a0771c9", "indicator--a029496e-912e-489e-b664-d3f7ae8738b5", "indicator--81407912-cf88-4d74-9402-530735be77dd", "indicator--75f53a8a-129b-402c-acc4-34840911615b", "indicator--0764cca1-f78f-4aea-9481-e6204226404e", "indicator--a8c57ea7-5ce1-430c-a071-a4816137acd7", "indicator--9150b416-30e9-4155-bfeb-f3743ab96050", "indicator--7651422d-ec21-4ee9-b407-7f816eb3a693", "indicator--455503bb-6920-43d0-b2ba-da91f9fec189", "indicator--74d72f00-b190-45e7-a02c-6373cbdf9c9c", "indicator--34d02f50-1689-47eb-b0fc-6e063392c8bf", "indicator--4262ccdc-1aa6-4599-be2a-64221677916a", "indicator--60d5acbb-b730-4698-82f0-ade8af68321a", "indicator--eb8e7a77-6765-40fe-913a-3e9171caebb0", "indicator--7ca26119-62ea-4996-8173-ac7749a7dbf2", "indicator--f8e2409f-0f55-4e0c-abf9-0b46e64be547", "indicator--1ccfd89c-587f-40c0-8cc1-bb3a8f055748", "indicator--b8495c32-4ff3-4750-ae2e-e187dc9a3394", "indicator--f13ee1b8-8429-45aa-aa75-dcb2195e55c8", "indicator--349e714c-9bb3-43ac-bf4c-7c3d198e7259", "indicator--3cb525d4-6a48-4287-8100-6e4eb1aeb1d6", "indicator--112c19b8-b41e-4678-aaa4-1cd3ec13fd2a", "indicator--1d268b3b-a3ca-4605-8e77-454761c5cf89", "indicator--6045b5ef-cae0-4e62-bc71-4881b489fbd2", "indicator--abe11832-4d61-478a-a234-e88d73bf1c8d", "indicator--86b45604-ee12-4df8-91c8-26a2d60137d3", "indicator--55202ca6-2123-450f-8548-1c1795d476a5", "indicator--bca01b9c-e255-4334-8c25-a888904c988a", "indicator--c1d29b4c-7135-4513-bfa6-ad661520c283", "indicator--0b0bfe0d-7553-4eb9-bbcc-c236583c167a", "indicator--c586443c-7a09-41e4-800d-6d95c16eedca", "indicator--eef9cd0d-1234-431d-8fad-52ac59d6934a", "indicator--1b18b55d-60c6-4c78-92c5-32a75f998a43", "indicator--f9e67df3-e471-45e3-b3c4-424165748ef7", "indicator--56a3d9e9-8565-4558-b29f-bd4fd9f37698", "indicator--f1612773-8417-4176-a4f1-1f7f4a40f2d8", "indicator--2a6babe7-99be-4fa0-83fc-eb133826ec8b", "indicator--10b31f79-a19a-47d6-9a33-ce66b8da4bd2", "indicator--50c4c59a-7183-454c-bff5-075f7d61b66e", "indicator--15cd36e0-cc85-4917-95f1-4a337c12344f", "indicator--03adeadf-398b-4c8c-9c14-42af37988974", "indicator--daeeee6a-ea66-474c-87f0-c61e3d1b938d", "indicator--b99bdf33-4bfc-4b0d-982b-aea9177af1f5", "indicator--a7fe51ca-b89f-4b2e-b9cb-8d1d235e95d1", "indicator--4fa62438-a52d-49de-a9fa-1ca50732fa5e", "indicator--4e119f2d-b6ee-416c-8d34-915721e377bf", "indicator--75b1f538-6bcb-44fa-8c05-010dc564215a", "indicator--8f0e3308-b056-45c2-8cb2-c7dcb1284937", "indicator--b8fb1ccc-03ef-4ed5-8295-0d93985b09da", "indicator--1ab32531-ea6c-4a84-bb7b-3d35353bc56e", "indicator--5ff22a0b-b887-4939-b3eb-3d73a14eadd3", "indicator--f1c82090-2c59-41cf-bd35-f1fed8a56e56", "indicator--9b0b3d2b-8208-4861-8cce-4e3134733adf", "indicator--866ce51a-3513-4bc2-9ba5-129a7950e0af", "indicator--d63a6fae-02f4-4ea8-b967-94cb51f04c54", "indicator--a85da1ef-f308-45b9-a66f-c6572321f0ff", "indicator--50a0065f-345c-402c-90e4-9644fda3e57d", "indicator--1c44f455-e76a-43ab-a503-426afdb54074", "indicator--fb129e23-9987-485d-b4a3-40c170365d3d", "indicator--07876379-d0ac-40fc-96ad-09ab852fc6d3", "indicator--527393fc-d9e1-4ee8-a2ea-4db37eaea55d", "indicator--f678a143-36f2-4644-a972-95f1e0dc6847", "indicator--f8599450-c9c5-4b33-a0ec-bf923e65d032", "indicator--dec093d3-b535-4d3c-8160-6e3fe560eace", "indicator--0546eff7-c424-4326-96e9-7216620e930a", "indicator--37bb0701-9dcd-4d49-934b-30804f5545fd", "indicator--399f88bb-1a68-4c6f-b99c-9617adb3e324", "indicator--1a998173-3e59-466e-8a0c-92049578ac1e", "indicator--c04bf6de-f070-4a88-b78c-666fad93d194", "indicator--a258b734-a5bb-49c3-b688-651cea0962b5", "indicator--b0c93223-9527-4139-a232-2939f93cc84e", "indicator--378e6bb6-8a32-4fb5-9aa1-a5ab2eb84f19", "indicator--56b60071-4781-4b13-97e8-0fb030ee2707", "indicator--cf67ca76-ac67-4d0e-ae08-1d91e63a2684", "indicator--b99e689f-0c8f-4c08-88d1-156c49c212b0", "indicator--3c3715c3-e1fd-4c50-b24b-8e29f7ae3e3f", "indicator--4ddc6e19-a948-4612-bc69-36fbae7a3a38", "indicator--e784e9bb-4709-46c9-b670-7b040dd8d202", "indicator--a298ecb2-d8b3-4b79-b637-088c79893828", "indicator--66599634-1978-4dfa-b132-c676b5f02250", "indicator--7a7cacb4-4cab-46e9-868a-bf8b23daa17f", "indicator--fe23f17c-329e-4e70-ad6d-1f5247573283", "indicator--ad9f5dbe-d3ae-4ee5-abbb-0dab1c75e8c0", "indicator--ecec5ed3-4315-42dd-b634-4c328559cdaa", "indicator--98ee76da-7d6f-4bc7-8ab7-e9cdc7e40c71", "indicator--05da8504-d79a-4d6d-9392-9520202e3dde", "indicator--59125675-d581-4146-a38f-08df57bd20e7", "indicator--92fa95a1-da5e-4452-b4f9-66867ab8dd02", "indicator--a7e94393-79b7-4b26-b038-0d5fb606caed", "indicator--31fea511-fe1f-4026-b1e1-76476f8c4130", "indicator--fc5e4491-3a9e-4e7b-9d61-79f76b55a3f1", "indicator--cde6454e-40d5-4d99-9f5c-967360fc8bf5", "indicator--38f207c7-40db-4db1-9e77-555663e59eec", "indicator--6e9a5bbf-46b4-412a-9a1a-ad0ee21c9440", "indicator--0e4a8360-fe8a-4717-9342-967d72c71425", "indicator--3f43668b-a362-4827-801c-7c1be52a6b33", "indicator--49e47cd1-77d3-4060-bdec-f1b5071a7180", "indicator--c0f3d937-7928-4706-8017-9498ba3f36cd", "indicator--29319d64-9bb2-4a74-b17d-d83b874f0888", "indicator--24054c22-eb99-4da7-9806-9f3bf08e53b3", "indicator--d1e32900-4e71-4fe5-8243-03bc5be7c2cf", "indicator--47571c3c-714b-40f1-a673-5b5a9a39e532", "indicator--57e9071c-fb00-4bf4-b48d-03cabdbd2cd0", "indicator--de0eb956-9d59-4f8f-87ed-cd30d33531ca", "indicator--808adcb8-1ec4-4429-89fd-b8de2cf6fb0c", "indicator--37fb5d12-c256-4767-abfd-ce2f5ab18f2b", "indicator--35f890e3-ea4f-48a6-b681-dbdae77b7510", "indicator--7a7f27b7-30af-4665-8e05-f6545602dd88", "indicator--00e5c6d5-7efa-46bc-85da-c7543b39113b", "indicator--44be118a-4a98-463f-82a0-d1482676f408", "indicator--ab7f5dde-9b7e-446d-b021-cf105418fcdc", "indicator--f28b1b8a-1fa7-4d5d-9455-e388c3f183ff", "indicator--e3535f63-9b93-4ae1-a5bb-2c80f7d73745", "indicator--2555569b-e848-4986-949a-43ae3c437d1d", "indicator--a462614d-bfbb-4413-af0b-6128a278916d", "indicator--ed7be71a-defc-4f79-887d-4870088686c3", "indicator--9615325c-b0e1-4ad2-a7bc-8406f70ae84a", "indicator--df4c292d-37d0-4a4f-99e5-d9c632f9f58c", "indicator--1d7de2d0-fb09-4b2c-8b71-c573371d5920", "indicator--5f4bf5be-170a-4e7a-990c-8574aeb143f3", "indicator--1298453d-19f7-497e-9620-c06c1ff88c03", "indicator--014a843b-8dec-4168-99a9-a93aea9cc557", "indicator--e593a7ca-b33a-4599-b40b-eebfc844c129", "indicator--d9ac5453-f796-428b-8972-4de81fb03955", "indicator--dac91948-ab3d-4cff-a957-b22fffb27ed3", "indicator--4cd8a349-dc2b-4d23-90fc-9a06411fa146", "indicator--091bdb86-95c8-4b54-a0f7-b7cbb6e77d8b", "indicator--71be034e-4492-4457-ba3f-7e41bb56716c", "indicator--41a6fa22-1ac5-46bd-993c-3eabb0bf1e16", "indicator--cb3263d8-0b52-4de7-92da-bee93d031f63", "indicator--e3dc28b7-4d96-440d-8100-ac998e7b1958", "indicator--5835aa0d-ee13-40aa-9809-1368efe4e0a1", "indicator--e2860b82-1699-4845-91a8-7e51f7eaccbb", "indicator--cdfcd447-d9d5-441b-ba6a-c5159d4c6c03", "indicator--827fb68d-056a-4cd6-91e0-4e565e13e96d", "indicator--e1889e6a-43d2-4f40-9230-3023ab858ed3", "indicator--374804b2-7725-4f81-b8ad-76f0da0d09be", "indicator--e57a5a15-9926-4b31-8956-a08906257760", "indicator--328a010b-5bff-4136-ba03-a5c0fb8279e8", "indicator--c012461e-ace3-477d-9435-714ceeebf76c", "indicator--47f39705-b689-49d5-9b42-e6c3d344b5c6", "indicator--1b20b68e-0fca-4340-ad32-454f400c26ce", "indicator--2288f20d-08b0-4946-8c01-726f44208327", "indicator--66dee6d2-59dc-4be8-9a7f-43de52b79d70", "indicator--99d4990e-31f7-440c-9e45-44aa5f7d4982", "indicator--b4833932-f3f6-4ab4-b0d4-368c49578e6e", "indicator--0a89701a-1383-4d70-9f05-91da389f5df3", "indicator--e9169457-d40e-4fc4-a6d5-f17e0e7a2eb1", "indicator--d29a4749-3463-49f7-a9a8-cc04c14d2275", "indicator--70cee809-f13e-4357-94d5-fc7fdbdfbe43", "indicator--4a6e5b11-47ad-4aca-8f18-98e59c0c71c0", "indicator--8774ee9b-7845-4164-974a-769603dbc488", "indicator--d20092e2-053b-47ad-8f09-9d82b4e7d002", "indicator--38a7ae18-5eb1-4ed5-8c85-56f4b0fad782", "indicator--b04b0ccc-3d8d-41cb-9a1c-14b3c34a1437", "indicator--ec89661e-6097-4896-b2f3-98fbc1eb4dc8", "indicator--9cb90962-52c6-4180-bf9d-31d26f3c7e3c", "indicator--c310e941-863d-4cef-8a3f-52dd92ed90bf", "indicator--ba658c31-c86f-4aca-874f-8feeffa838eb", "indicator--51bd1d13-fe86-40e1-8472-890f49ef3404", "indicator--ef030e8c-86f6-4fe1-8e15-c47690b790ea", "indicator--4b293d5e-0b12-4fa9-81f5-13c0eccbceca", "indicator--63b39953-aa13-4a8a-aaf5-3bf483600bf1", "indicator--830530e2-f180-4bdf-84e1-e67e91d3b762", "indicator--f394217c-25f6-4f54-9ffa-11d81c99be80", "indicator--6b3f010f-7acb-45b9-bfa3-d90acdd09727", "indicator--c9093e88-bbf7-435e-a283-f4c52a1f0616", "indicator--6ffe3002-c1f7-4d5a-ba54-0b46e5fc91e7", "indicator--1238c049-9640-480b-b005-a7f09e332aa8", "indicator--76606b7f-e985-4e1a-8ebd-56a80c08e762", "indicator--b305124c-afa4-4214-8ab8-bee5d4ba8c7c", "indicator--1f3719ab-6b1f-4c62-a010-1ca7ef0a3589", "indicator--671f6030-06c5-4b7b-802c-36b2b922bfda", "indicator--a5d203c8-b928-4f66-8a2e-1d80b27d991c", "indicator--47e36685-5dcc-41b5-9533-13c037418b31", "indicator--2d4092f8-f0a9-4fb2-996c-71f3986b6462", "indicator--86a2a176-6881-4448-8c61-70ad85be3814", "indicator--e11a716b-4ddd-413f-b279-fd92a5ade207", "indicator--770f3d4f-39fc-4da8-9395-e42b693b287b", "indicator--e0011a7f-e2aa-4411-93c5-085048b16f9b", "indicator--81a67532-bf32-4a96-8393-dcf2efd66e7c", "indicator--d4346829-eaf0-4305-a7b5-aa86661bf35b", "indicator--1caccf18-0b06-47e7-87d7-072df66e0c9f", "indicator--3cbecab2-1c5b-418d-a511-703f68423416", "indicator--d200391f-5198-45c1-8786-ab893f1b60ed", "indicator--9971a7c4-a46b-4885-97ad-c0bff51c3e81", "indicator--c188b418-59b1-44b8-b570-8782b56078f2", "indicator--c08c672a-93b3-4d22-83cd-ff4159799be0", "indicator--9bc9f38e-878e-4877-b20f-db72aa713c1e", "indicator--33a8ff70-b8f9-425e-937d-40e2926285c3", "indicator--2579620d-877f-4b73-8ccf-197556988363", "indicator--40d73384-5277-4995-a4ac-d0a4b4813629", "indicator--4a6ee588-49e1-48a3-82a8-c8321ef7839e", "indicator--00153364-4d3a-441e-b05c-9e385f2d90e1", "indicator--f88ce06f-f49a-4936-a0f0-5024fdb3cde2", "indicator--4ec8db26-b60f-4465-8bd9-1a91eb0c24fb", "indicator--4c9f7771-bfbe-4c97-9a66-52ab3e9253e8", "indicator--481a9905-6de7-4e1a-ae19-7ef8b5d29819", "indicator--5c24320d-29a9-410c-a047-45aaf0ae2a76", "indicator--67283cd1-c8f3-4627-8e63-2bccda9c0bfa", "indicator--d93050d5-0247-4981-aa18-3fc7981a277b", "indicator--61f18bdd-0612-4447-89ba-8c48916e3d74", "indicator--44a23467-bb7a-41e3-a8ee-849a686aa953", "indicator--07eeeba4-caa5-456f-b422-5b8f64129a76", "indicator--6bbe0a9d-7da4-45e6-956e-2fae4d5cacd9", "indicator--2dbf4e62-3733-44c1-abac-0601e7f843ce", "indicator--904548a0-80b0-4123-9f27-d9d93a2e6ef2", "indicator--f4c9db4d-5043-46d1-b28a-1b7e05bf20a6", "indicator--21ec4a6d-b14c-4d4f-afe3-d0a7d4d9f172", "indicator--645f6a51-8ccf-4177-8ebe-5b7f036ea9b8", "indicator--8c1efbc2-368b-47e2-89a2-bfcd9a2517ad", "indicator--009b5bd1-3b9d-4be1-96e5-c5e0f0f39fda", "indicator--ce9b2de0-0c66-428c-a0f3-5231acb49f7a", "indicator--a84ce1c6-7dbd-430b-b911-435ce15a6162", "indicator--8e21a31d-6f4c-4bca-9c2b-2c33d479c8aa", "indicator--9f7c2d14-086f-4181-88f7-dda043ea3ff9", "indicator--e693cdba-1a55-4cbb-972d-8a79ef849ac2", "indicator--2ca83508-c23d-4484-990e-74ff7576fe67", "indicator--39deb268-602b-4802-80bb-2b55a6fb3985", "indicator--710e7bfa-fbf1-43b7-b3e5-0d9b74532d92", "indicator--8fd1d19d-6721-4680-a001-fbca75a7c2c3", "indicator--68a831a9-6294-4e51-b212-0decfdd6d016", "indicator--f08c8348-2ae5-40de-aa41-02f155603162", "indicator--3fb28598-98e2-4fcf-8758-23d738475827", "indicator--565e35e0-282b-472a-ad51-233c9f36735f", "indicator--c0583184-b018-42f2-8e7c-d9b64e558d17", "indicator--2ba84159-11c3-46b8-ab33-f77f9f903597", "indicator--762089aa-7bd2-487a-8b09-fd004d60b179", "indicator--634cca69-7cf9-42ad-8852-9fee564fff7d", "indicator--56f852ff-56a1-445d-9cb1-319e1fa7b51e", "indicator--e31f8f70-3461-4db2-9d62-7f9235bbe0f0", "indicator--8e60e345-aa30-49c4-8b3d-b89f1b8e375a", "indicator--98b029e9-ae51-410c-806e-64e74898548c", "indicator--ff8c282b-a561-49fb-ba50-5232297c20a5", "indicator--e6b72a8b-33f3-4894-a312-b6f609d136d9", "indicator--baf35498-c387-45a6-b107-eadd0b708011", "indicator--9f0e04cb-9ea1-4a54-ab63-8615d7501f07", "indicator--170720d8-b9c2-4592-915c-a92aaba01277", "indicator--b0f6217a-a6ce-4313-8f4c-4a1a10bef115", "indicator--26467645-70d1-46f4-aaad-7c9f74eb291b", "indicator--332e8cdc-cd3f-44ac-a09d-9fe511b80547", "indicator--c696e9f6-acd8-4745-a486-619c347c0ce2", "indicator--5419b7dd-f2ba-496d-81a9-e66aa73b0f82", "indicator--48ecb087-dc4e-4a35-a57a-4b644ba0d447", "indicator--8dd96fd1-88b9-46f8-90db-1f695b2b98a1", "indicator--eee1eb10-4679-4ef5-97dd-9d457a5a9274", "indicator--04cd1cc3-073e-4ca0-99bb-cd7022934bc8", "indicator--96429605-976d-4cc4-ba3e-f59247277f3f", "indicator--a741dbfa-d885-409b-87f0-df3e33a02641", "indicator--627331a1-a293-46a2-a6b9-35481627ebba", "indicator--22c4788e-1b0e-4171-b3aa-514b86c34c52", "indicator--fe62617a-0ab3-4715-a25b-bcbfd7c16881", "indicator--7d5b0468-6313-4443-9223-fa2ec2930eee", "indicator--0770235d-04c6-466a-a10a-2649b6ba1d71", "indicator--43cc10e4-6622-4f02-b7f2-3fc48c53408b", "indicator--d7b92ae8-f17f-4f3a-85be-2119215fab8c", "indicator--8c728fb6-7246-4753-891c-7b5cfb81efd8", "indicator--2b4b04cd-cd4c-4ed4-a4f9-2c053b189b5c", "indicator--e88eb3e9-7b1b-4e29-9499-c0080ae8f58e", "indicator--aa64cec8-87a7-4e0e-805e-e8445992ad55", "indicator--b01c2fdb-4354-435f-b3e3-13e9940a084f", "indicator--ae6b6b20-5709-414e-9d30-58429fb222c8", "indicator--f90ba487-7c6d-42e6-99a2-cae07ec14644", "indicator--42573c93-e3e1-47af-9b5b-90d097da9de0", "indicator--0af439b3-e71d-4141-976a-02fbe6a0821c", "indicator--8cc5db6f-5e27-4b80-9035-082be6796b64", "indicator--0d310114-86ff-4433-af53-8090554f0623", "indicator--02c1382f-2501-4273-8f91-94e026f7d351", "indicator--5fad38d4-0aa1-4dd9-a426-efb4923ed358", "indicator--5acd3680-0d68-458c-8fe1-0a0a8eb70f00", "indicator--42128c82-0820-434e-b756-2adda72029d0", "indicator--aeaf3c39-7f61-45c7-8083-a7149f50b12c", "indicator--e0cff683-b09d-4b91-89ad-16870fc0379a", "indicator--65b6076a-4226-464e-92f9-ade36f764c97", "indicator--bdfb9fb4-65da-4017-8fc8-d0f87649ce92", "indicator--fc80dcc3-179f-4520-94b0-db939c81a950", "indicator--44505771-9586-43be-904f-64c87ee58464", "indicator--57239328-e3a5-41bb-bda9-f233f8b1b6ff", "indicator--00737a14-5509-4cc7-bc3e-3907e462ed2e", "indicator--2f486b19-cd21-4688-9749-eb1473e0f3f9", "indicator--0948268e-91fc-43ca-b691-a6a1b925ee38", "indicator--d845355d-fae2-458a-9f4a-b4cec25a49bc", "indicator--c85936f7-448b-4c3b-a31f-676e2a821e36", "indicator--a9a5ed47-1ddc-45f7-94c7-29274b2280f7", "indicator--0045fd45-77cc-4367-a57c-8a3cf0b2b6af", "indicator--c4bae58f-6e25-45c0-8e16-85c2e040bfd2", "indicator--8a5ffdd4-7266-4c2b-9ee0-6da278c1dc58", "indicator--916ddaff-6aff-4129-9980-c4e80950ee3a", "indicator--8272710d-354f-4012-b7fd-8a5bba679518", "indicator--7b8edc77-84c3-48c0-869f-39b8f362b5dd", "indicator--7dee1a46-2607-4d61-b282-f0d07d6bd56c", "indicator--e76bd182-f7a4-4535-a7c0-eb3a31edb577", "indicator--93ab9a5e-f397-4e7e-8110-6d4faaaf56b8", "indicator--83c42888-ad80-4284-8380-977b02d50aad", "indicator--65593d7d-86f1-4de8-8377-daf0fe02860a", "indicator--0d05438e-a065-4566-ac16-ef0f154bcd78", "indicator--95b0ef75-ebc9-4a2f-9124-42ae7c08fed9", "indicator--ffbbe5a6-115b-4399-9342-9a0df9f72918", "indicator--6009eca4-3f79-45d3-9285-ddf020cad34e", "indicator--18e8bc93-00ce-4b05-8ed5-a12b88ac57ea", "indicator--b8bc3a13-260b-46ff-b11a-a29b8afd64a8", "indicator--2a08b6e4-c9ba-4627-a973-9149b9e3c434", "indicator--3b22866f-bf15-4cb1-becc-42076c7012d1", "indicator--7529810e-fbb0-4b61-af2f-4d883afbb2bb", "indicator--f1b949f3-98ce-439b-8763-019202f54447", "indicator--0dd5ef4c-e85f-441d-b0cc-f4d1b6334b28", "indicator--cb6e5118-aed6-4be5-aa64-924395a6c2e1", "indicator--d95ba772-c149-40a7-97de-beac6c06f9ee", "indicator--abf9225b-86a8-42ce-9161-4d57de16fb0c", "indicator--d2c9ee29-e5a5-464a-85d7-a5970a3a35f9", "indicator--1837560a-42be-4815-af19-1b9d2eb4f4fd", "indicator--c16dc2c2-df8a-48af-85c0-0c7ec350e0da", "indicator--32a645d0-40a0-4c2b-be2d-02bd53e74c0a", "indicator--eccfd2da-8c01-4256-a5b4-ebb2d8b99d49", "indicator--564f4646-74e2-483a-be05-3b1bdde8a2bf", "indicator--553bab3c-107b-4240-a406-de0cf39e9b46", "indicator--317b58ab-87ae-4726-a900-0a15e36cc695", "indicator--47580d1e-d9c8-40c0-b7ec-7804a5dc066b", "indicator--f79d229b-5fb2-4a19-931a-4d7dd890e2a8", "indicator--952988ba-6d54-4c53-bfd1-44170ae1eaf2", "indicator--473b3b55-a8aa-49f9-84cd-0f84f16f3456", "indicator--17e1880a-ee04-446a-84ad-2db3b5aab485", "indicator--60b0a56f-83a7-4db1-9dac-2ce2867f1ccb", "indicator--cfd1b0cd-385c-450c-8b7b-a088ece73f34", "indicator--6ee5c274-7ecf-41af-a589-381ed65184f5", "indicator--9075be46-5d82-4f55-9041-ca5278e28e7a", "indicator--29f9d36e-284e-4b85-a0dd-568e777034ef", "indicator--1915f1c5-98fc-4202-8713-f783873500bc", "indicator--2c079a46-4f1c-4e7e-bf47-827dcfc9555e", "indicator--ee4a6afa-d887-40fd-b658-2ceb0c42266d", "indicator--d94f5073-5ded-471c-bfcf-f58bb966cf74", "indicator--77105295-e7db-4bac-8fae-f70e094cd214", "indicator--e257a601-9430-4adf-abf4-718c3d3b9962", "indicator--40faeaac-8f79-4946-ac31-53f4fabedd83", "indicator--6da070e7-9e3b-405c-a432-baf3627a3acf", "indicator--8ccfdd22-b1f8-45fb-9ec7-69bf8ba1e3c3", "indicator--5b48e6da-2512-4b5e-bb56-7a01ee0bd27a", "indicator--99e3d473-a0d6-4d1e-9a89-7f662cc004d3", "indicator--ff95ee29-186f-4beb-a71f-f43e0af6d5af", "indicator--b6447cb9-9063-4f50-820f-19089acd8e90", "indicator--2641d5e0-8584-49bf-a573-8443b85ecd6d", "indicator--f6ddeb37-2111-4f0b-95b6-0e1e5ef492d8", "indicator--62194e72-9fe3-47ee-8b6c-d3c9b9d9f708", "indicator--dd3f6d35-5217-481a-9458-055671d8a563", "indicator--0bf51c80-35b2-4b05-857e-bdbbfcb51006", "indicator--444b51bc-059f-459b-ac55-a3897377d2d0", "indicator--c5cc0ff8-6895-4d8f-80e9-afa4f87366f0", "indicator--7e5a6127-2687-483e-af2f-e98161378e6c", "indicator--d9066c8f-ad9e-475e-821d-b4abcd93ad28", "indicator--38c0cb62-196a-4c6a-9261-5c094d5e9fe3", "indicator--4f187f38-ea7c-442c-b8b6-08b026f1b8e5", "indicator--2c4f0f0c-2759-475a-b4b7-465bd5937017", "indicator--8ec096a0-3f17-4972-8607-3b83db8e8d89", "indicator--9634b13b-78ec-4c98-b84e-7a408c19696d", "indicator--2cae7ac6-0c5e-4568-9421-2ec6951bc39f", "indicator--07e02317-a0c3-495b-93bc-ba6ee2250692", "indicator--cf726aba-d089-43ca-bdee-a78a6dd67689", "indicator--6b4e5893-e262-49e9-9ede-aff21f2cb5d3", "indicator--01037430-5937-4431-bcd8-d28af6002e59", "indicator--cef6ad05-4505-4efd-8300-f00aed5e3b6d", "indicator--fe5a9f00-73b1-4c32-9eef-c363e63d7a58", "indicator--c57884c8-7957-4ff6-b6a4-0e84c873ec44", "indicator--72338538-bbb1-4973-af88-b72dc287ab56", "indicator--3a9e4012-8b39-44ab-8200-caefa81d038d", "indicator--0924a86f-31d3-46ee-a329-7d48fdb98c92", "indicator--98117a3f-6e0f-4981-95c6-f6ed5027cb97", "indicator--25ac72ad-717d-49a3-9e91-c0474774f28d", "indicator--10eb8279-2ae3-49d6-a0f9-9bbed6cf9dc6", "indicator--20b8580b-44ef-442c-bc40-7be1e50894f8", "indicator--a14906b4-f358-45db-aab5-2847d18a617d", "indicator--57fa8ab2-2ffd-43c9-87c1-fbed5ba86cf0", "indicator--68d548ed-bc70-46a9-8906-5dcf646bb037", "indicator--f064e983-64b2-4eb7-a555-4c5ccac7210e", "indicator--5cb22665-f3c3-49ae-8785-c933c4c1ceb7", "indicator--fa18d48d-0e8c-4383-b422-0381871595f0", "indicator--4c96b9fa-3177-4582-aec2-af9d011712ff", "indicator--495b1281-fbc1-4050-8ec0-f293ecbd216c", "indicator--1078a1e3-fbb4-434f-846f-5aeee32bae93", "indicator--85fa327d-99aa-486d-b7bd-da76e5745886", "indicator--06bc4c32-5ba7-4337-b09c-03a2ac3f5f0b", "indicator--4206a3ba-39d8-42be-83fd-f27f461c5da6", "indicator--0f98efe5-5698-4bb5-b443-6669405623db", "indicator--4d02b3aa-0783-4b5d-8cbc-8b3a4c0cb4cc", "indicator--c2882423-f6e2-472b-af1e-1abd3d13be4e", "indicator--0e17446e-7f0e-41eb-8a7c-d0cedb16330c", "indicator--7a0813b2-5a97-4bfb-8e92-ba390eeb7f0f", "indicator--9312f774-f506-4fdc-886f-1b0841e71619", "indicator--86857dc8-f268-4ad7-9cd2-17ba31c04c49", "indicator--1b880b0d-46e2-410a-830b-e1f1d2219269", "indicator--c2ff62f2-877f-431f-a9e7-967bf6bd9ef4", "indicator--8c85b715-f18d-4ad9-b80d-4df8a8c23b25", "indicator--5cd3e3ac-84e2-4288-a833-8539bfa534d2", "indicator--023e36ae-fc51-4725-b08a-fbc5c8c33951", "indicator--04679e48-4432-4ba3-b8a1-79b41cdaf2f6", "indicator--37a38810-8b58-41c8-a524-4055dd1ac2c3", "indicator--b7808de4-6a38-41cb-ae13-8274c2c53f7c", "indicator--b414c27a-04d6-458b-8995-9eb0e7858877", "indicator--4ca6de8c-9859-4d61-b166-d629b2fc27db", "indicator--951015de-3b14-4a90-a81f-237a28be46ac", "indicator--00fe6852-9f6d-424c-ab6e-028fc4c2089c", "indicator--5dd9eb4e-7ec9-4266-96c6-f667af261d8c", "indicator--edc20c92-7a43-4520-83ad-291f49cd3f49", "indicator--8e0f25a1-0f91-4ede-9c8a-4ce4658d8b56", "indicator--3fbe21ac-10cb-496b-9225-81933c61a304", "indicator--f29a77a9-18c8-4614-a1b4-ed374a47c44c", "indicator--b2ae6d62-53cb-4b62-9a63-ea400ef1a07e", "indicator--b12ede91-1f0a-447f-9715-41e7c208b7ea", "indicator--fa1d127e-b033-4c5d-b09e-42f7b17f8c68", "indicator--d4974a05-b586-4cf2-baf8-c8f6e84f5ecc", "indicator--b02cf143-c7d6-4d39-8910-6cc7e2f63973", "indicator--8f9a5da0-0ac8-4dc3-a117-06c153c5ecaa", "indicator--819bc7a4-6bae-47a9-a623-03a0ebdfaee1", "indicator--d643260f-1092-4cfc-9310-0fba11c7c8ed", "indicator--c3e58077-1bd1-4a3c-90e5-f01851bd319a", "indicator--1b857070-515b-4858-8989-999b1d663787", "indicator--4c3b0d03-dc97-43f7-8ca7-151657042a49", "indicator--1d840048-620f-4581-9b57-5b73ee82169e", "indicator--9095c1bf-bedd-4e0c-a954-f7c09855e58c", "indicator--0b1a2bad-b1ce-4e02-8b8b-36ab9374b25e", "indicator--52cf747e-66b6-4add-9c64-404cd0a2e9f9", "indicator--4f97705d-bb58-4840-8217-d6d8918e8782", "indicator--493af20b-0df1-4e7b-809c-45afa05d677b", "indicator--3ab416bb-037c-454d-b53d-f28180c41889", "indicator--d21631c6-f84e-4bba-8a79-b42596187be3", "indicator--1eba41f6-b0e4-4331-98b5-2c66fef20688", "indicator--19a71878-98fb-4e5f-9f75-6004d8d57ed5", "indicator--c4d92018-fec6-4f88-90ff-4a0738bba1d6", "indicator--9360d84e-4345-4339-9212-62de3e688d4d", "indicator--daed72ea-ff7f-450a-b882-26bb73abfaa1", "indicator--eb2295a1-7cfd-45bd-81f6-92260015f9e1", "indicator--ddf2946b-69a1-4adf-8f96-cc22b50b633f", "indicator--7c614ba0-e58e-492d-9749-95139af9e73e", "indicator--cd227ba6-b822-4ec0-be74-c04a9097a2e0", "indicator--e85ffdaf-b90b-491e-9ca1-65dc8e924521", "indicator--c575b6b9-ac9b-4b57-bc4f-5d120c94dddf", "indicator--42223346-bf8d-4e40-9b59-2b75a9b39d9b", "indicator--755f8c48-847c-4187-90bf-9e3b9f61e9b0", "indicator--1761edf6-406d-4500-88d0-01622e29a79b", "indicator--4a8a9968-9d89-485d-b352-874010c900d6", "indicator--932f514f-5960-4c59-bb50-9a91c4164540", "indicator--d95d62be-26d0-4466-8735-8517d1797358", "indicator--082a133a-3f66-4485-a548-f27197a9a31d", "indicator--fbf9d0f6-340e-4f34-95b9-5a0f02affa53", "indicator--7df24cbb-a6e2-4a25-9269-4a4ddb2e2f02", "indicator--938ba721-3770-43c9-b7ff-4cc27ebfa3dd", "indicator--6881626e-f151-4a9c-869c-cef82341bd33", "indicator--fd5cd8f6-f0e2-431c-b0dc-785c9d7f4c67", "indicator--5cdb717c-447e-4046-810d-a24f04cd5f30", "indicator--49abfdd9-0f33-407b-9035-ea98d5044d84", "indicator--3ff5804b-e711-456a-ba55-cf7418bb845e", "indicator--9fee8cf9-2e72-4117-9933-2a2f68fec0ff", "indicator--97fa30aa-c37e-4784-b014-442951c1cd73", "indicator--2045958c-8f0c-43c8-b940-ef45adc709f8", "indicator--4b1ceb9a-0fbf-45c1-9ece-4156822c3753", "indicator--1deaf613-c11e-412b-b985-e575ab178867", "indicator--c6573c80-a6c5-4f9a-8055-6523bb9150fa", "indicator--9f540025-cca2-4459-9223-0cd673bfc052", "indicator--d25c4038-ef23-4053-9746-e2e17e3b3146", "indicator--26beefc7-f34e-49cb-8241-5e39cff73cfc", "indicator--bb9bac64-00d4-4643-9ebd-07a1f32ff9da", "indicator--ff42955d-e278-49a3-8099-593a7496e774", "indicator--3e1d2f69-fe72-4d75-bcc1-19a604e95db9", "indicator--362b2377-d761-4486-8c0a-80200f4366fd", "indicator--868423e1-671d-4439-8ed4-04a9c4d44620", "indicator--2f114cb8-a640-4bf6-988e-d581ecb23a22", "indicator--e8462986-21e2-4a27-9850-8ddea1a2bf3c", "indicator--8de597d0-46ba-4198-be04-5ab91d66c8ec", "indicator--e6a66f16-477b-46fc-8051-21b451501e64", "indicator--d1e5dc91-72af-42df-b946-8c80a43b6600", "indicator--e7826b38-f536-48c1-becd-c203e7ef3b43", "indicator--05cecbb7-0ead-4e25-8fed-3a22279c588b", "indicator--4c92a554-6e1d-4df7-b3c8-1256ed69c921", "indicator--7363ca2d-faeb-4b7c-835f-3761af13f001", "indicator--ab77acf2-00a3-415c-820c-9d5c7af9aef2", "indicator--b3d56675-ba99-4eb5-a4f1-c735e85722ce", "indicator--25e804dd-a588-4628-96a9-0d4c37b39460", "indicator--651f4ea1-5526-45a6-bee0-39b179235f2b", "indicator--761f8775-4553-4db3-b33a-4a402f10292e", "indicator--ff85c08b-a2a8-4b3c-8fac-36aa60e1ed17", "indicator--08e72aa6-fa6e-43b4-923a-cc0ca92c408e", "indicator--d8c0b2f2-4096-49da-b03c-3a5a62750546", "indicator--5a9fec9e-1ab1-4ec5-8147-ac11acb47b84", "indicator--4c31ed9e-ce5e-4545-8125-d16474ce8462", "indicator--8f8ac3b3-53ad-46d3-a427-673081680ecb", "indicator--fbb6ab36-03c5-4aed-a9ed-bf82a84201be", "indicator--236fafd0-289c-4c27-a89a-a25787b44ca6", "indicator--22be0cba-2d4e-4e1b-b53a-bfd7a14ebcfd", "indicator--6f62ca8f-776c-4d73-9104-bf400004869f", "indicator--e6a6db46-5442-448b-804c-4a165d4be94f", "indicator--4d5182f9-4679-45f5-b0b7-91cac19157bd", "indicator--e6344330-47f7-41a6-8b5e-5173e246f86d", "indicator--bcb6bcaf-d349-46a2-aa2e-b2b9d45091f8", "indicator--6271e970-e0e9-4517-a5d6-ce6a496352b1", "indicator--3a55e5af-07b0-43fb-ab39-14af8ac78bf3", "indicator--6d80d0f0-099a-41a1-b218-206c0abbbc30", "indicator--0957db08-eb7e-411a-b487-126b2490bec0", "indicator--3c056b9a-ef60-47ea-832a-036aad9ca434", "indicator--7b2b164e-6ab8-4dcd-ab07-3557c650709f", "indicator--bf5a45c0-07d1-43ed-9fc5-4fbbbf5d639b", "indicator--28f94f15-facd-4af0-98be-e65fef04a490", "indicator--7b830c0e-04ac-4089-b7bb-fc6108b1c9db", "indicator--63494fc3-0087-467e-9b49-e2e845956248", "indicator--0a8f267f-291a-470c-9d1a-052646bc2e8a", "indicator--28f2ed47-e333-4393-b891-3a677dabcf75", "indicator--4d4a5b99-642c-45c2-8f57-1238a150b6d8", "indicator--47b81c8d-3eef-4c47-979a-60b1ac70596f", "indicator--49e14e99-44bd-4b85-a643-4dbd9e2a1df3", "indicator--9fc13690-6eee-4fbe-9747-e076d60f7b94", "indicator--5a7b7812-c3a3-4bce-a9a1-404ea7e4e294", "indicator--78cf86f6-7bc3-438d-9a4d-05996ac3e98e", "indicator--933fb68a-e033-4453-b4e0-cc56d20aa226", "indicator--13b9e3e3-deae-4425-8a1f-0f5233dbea4d", "indicator--1b7500c5-8b51-48a2-a40a-2df9118ba0e7", "indicator--54bc26a5-207d-4d82-aac4-3b825efa4e54", "indicator--c76c7f32-927e-4e09-89c8-d4da147ab769", "indicator--27219168-c3bb-443f-b6d2-24cbca6a163b", "indicator--33ca853f-3a31-410c-8893-c027449b8874", "indicator--8a45f3ef-695e-4b84-b250-fa87ada83cf4", "indicator--1f477912-1adf-4f95-b097-36af3d4341d1", "indicator--c5bb77bb-a545-47e0-b523-276648181977", "indicator--fe26ea29-4785-4edb-b226-591710ef136b", "indicator--f69be524-a6a9-416d-bbbc-a3a4014624d7", "indicator--8aec2fb8-2b08-46bc-a1ec-7430c638c966", "indicator--3fd51f53-4a64-4dbb-a21d-4df4ffd7abc0", "indicator--61f060e9-bac3-432b-ae43-516ffab7cc36", "indicator--2e1f5328-052f-4a55-bf9d-5876b103192c", "indicator--794b49d3-e46a-4b88-a4c9-e7ef2a2d6650", "indicator--de70f627-41ea-4b52-abe9-86a7d3573086", "indicator--c8353082-ca51-4abb-ade3-084535d4a502", "indicator--8b3d652c-0a69-4eaa-82d2-e30f64eb6496", "indicator--5eeaa277-99f5-40ce-9065-f97230880ee6", "indicator--4ee03a02-fb04-4579-b6c9-cb67d08ae3b1", "indicator--5b69d4e2-4ec9-46cb-97ae-95f3b6d1a0c8", "indicator--6661bb46-32d3-4440-93c9-3303071b19b3", "indicator--9ae5c758-9799-46b5-8b94-99882d0c854c", "indicator--09d8cc3f-9f43-4fd0-9950-140a6aa6e488", "indicator--d25a7342-6097-42b5-8c6f-579a7dd1973a", "indicator--721da829-4039-43ba-97b8-a258e4a60180", "indicator--6b432b54-3737-4282-8cf1-d1bbc62661c8", "indicator--d5fb9db8-1c6d-4d2e-9b57-57ababbee14b", "indicator--5cb069ad-60e0-4b8e-8594-83282ff192a9", "indicator--9e1ab1d4-c20c-401d-84cb-3c064d99108d", "indicator--a6268d2c-1c58-47fd-b43f-3c6008354dde", "indicator--55cfcab9-1172-4d36-8c02-996638bd005b", "indicator--b2a73278-3f1a-4554-95e6-b6e4c0393acf", "indicator--889d40df-340f-4ff4-8e18-2e7bcd96ce89", "indicator--d8794448-7b4b-47c1-8214-5fda34d53a53", "indicator--73768cff-373a-4507-a9bd-9405fc178089", "indicator--2d110281-ab70-46e3-8be9-07b8d8f59da5", "indicator--e0acb585-2fc5-4f53-b1fa-9855ed95c0a3", "indicator--7bdd16f0-2f42-446a-af7c-efd6e5c2dd9e", "indicator--0516893d-d940-4ee4-914c-d791327686e4", "indicator--5a7bf662-dca6-4833-b03a-e35af843d197", "indicator--905a9061-5111-4e15-8bb6-c99ff0ffd6eb", "indicator--86f3fabf-b75c-4c81-b2d3-8919c7714b05", "indicator--2cb294a6-1630-40d4-a374-36059ce5b8eb", "indicator--a1e6f70b-cb82-45a8-adb1-7015d6c2f118", "indicator--83b97879-61e4-4c6b-b5a9-b42403a921db", "indicator--aaa687cd-c66e-4ac8-a46d-21f2fa84590f", "indicator--84da6455-d1f1-487e-a59e-3283b121d293", "indicator--70aa97ad-8020-46a4-bee2-0cbcf7d1cba8", "indicator--a7e736b1-30ec-4401-bc5d-5a3576c68f19", "indicator--464aab08-1fd3-4c96-b366-6cb31e3e1d72", "indicator--82ff1931-e38e-40d4-9310-68e1c4cab0aa", "indicator--8c642256-9585-4120-ba9d-6a78ccce284a", "indicator--698b393f-88d7-404f-aba2-21f38ddd4f78", "indicator--f647cab8-1551-498a-9600-5f4691dc5194", "indicator--9b8fc794-16c4-4f4e-82d8-3dc2926a3d20", "indicator--a52193cd-ff9a-47c6-9633-a1dba8fe13d2", "indicator--5504ce91-c231-4b63-b8b5-06014f78eefc", "indicator--990b4f40-6237-47c1-8a9d-57f3fd9d3bb9", "indicator--429ee796-d3e4-4587-9a54-c3fc8c3d29c1", "indicator--5ebd7ede-03c4-4e2c-acf1-a7a3b0098992", "indicator--c0ea503e-3c02-4180-aa47-9b9b5f7597c2", "indicator--83312e2f-ae82-4dea-a375-ff89996b784f", "indicator--3113b6a2-871c-4aae-946d-bab2ba5511ec", "indicator--cf5c9846-6648-4f53-8677-916be4db241a", "indicator--5fa1706e-d540-4fc3-8755-1f9e2d172d4d", "indicator--eebf3a2d-178a-4b67-b7c2-69fad64869b4", "indicator--b64e0bde-435f-49e3-a56e-41789dd65f3b", "indicator--049b2747-89fa-4fec-aeac-ae6c20571936", "indicator--8a1967e3-3b8e-4758-ba82-e9f8679c57b3", "indicator--db0450ae-7c07-4bfe-987f-c64e392ff810", "indicator--51f9f30f-5eb8-4590-a246-e64fbf9f0007", "indicator--a0c29270-afc5-46e8-beca-c6b89b57ff8f", "indicator--582c0f2b-02d4-4756-ba9d-1d32e6a295a6", "indicator--299183fb-a262-48bf-a225-a06d3c8dcedb", "indicator--6c59ad21-33d1-4ec5-b536-0d74b5370d44", "indicator--eab3bdd0-b87a-41d1-9511-3af9bf26f03c", "indicator--3d36ebb3-9f69-4119-931c-0846e5c81f6f", "indicator--1875e69c-4e0f-43c7-9731-fbe9b2101001", "relationship--f2651012-0e1c-4503-b518-10c32a1e30d8", "indicator--6ee222e9-c21f-47b8-a7aa-24675272ca1f", "indicator--f33f0df7-41b1-43e4-9be7-e93a747cde4f", "indicator--6c792768-4e05-4602-bfec-e0f29e458b8b", "indicator--8c52750a-9596-401c-b966-cf3d7ba633bd", "indicator--a7c52570-4d1a-4ac1-bff6-2050dde83e01", "indicator--5099a068-46e6-4a99-bb26-7f1b88b5e924", "indicator--4fbe2854-6d79-4022-a848-392f984785e6", "indicator--b3fe3950-05ad-40b6-a6f1-a4f7db0cdff0", "indicator--3f29acc6-48e9-4d1c-b4a0-6ccac66f4263", "indicator--57dac45d-4ade-4c2b-af45-cc9a908eca6f", "indicator--fcfeaf6e-aca0-4c3b-b014-70241a008691", "indicator--ab9cc694-ce10-4cd6-a439-29143e3e97b6", "indicator--d1a5f31f-f00d-4ed4-aaba-20510b107c03", "indicator--ec40835f-1dd8-48f1-b93d-b62ea4aae98f", "indicator--e6b73828-e7d4-48d1-832c-236c12372f65", "indicator--7991da91-6443-463b-89e3-ba8724e4c1a0", "indicator--b4411946-1cb2-43b2-9fa6-2a2f9a0a954f", "indicator--65521046-74a3-4baf-8d86-e3b4c9a96558", "indicator--d9eba2c5-ba8c-4975-b8af-6f06ec89adfe", "indicator--95467228-481e-45b1-a1ca-8c173cb58016", "indicator--d0c43b69-1bcf-429f-8e5e-21f3be4752dd", "indicator--0dab7f70-4dd3-4901-9147-4b898721e0c6", "indicator--2221a1b4-037c-471f-b482-3338ff2c6611", "indicator--f1e41605-d422-4c5d-acc7-0b4b0eb9c6bd", "indicator--7f2de285-e763-4f24-9388-8e65a16b2ed3", "indicator--ebde03e0-289e-438b-9f54-c77b8a5e5289", "indicator--0b08b504-e88a-492d-87fe-6a3c358125c1", "indicator--9499ed35-29bd-4b61-8c9e-ff4a7b151073", "indicator--29f16bb6-aa35-49b7-b430-2d554a7e2d1c", "indicator--aed545f9-b6c2-46a1-939c-a8d5b1cf7870", "indicator--e978a324-9370-4327-b312-77ddee77765a", "indicator--5374d3a9-cf66-4916-86b1-c5f11933409d", "indicator--90532362-a488-4b84-9254-f62748a0ab70", "indicator--47ee802c-e7f6-4f08-9d18-2afad35d03fd", "indicator--1fd923d0-cb72-4321-8592-af5de73fa544", "indicator--9d12bcff-2db1-4e06-bc24-0c470d80c22b", "indicator--1454f7cd-3c87-4d4a-bbb3-5efc110d5104", "indicator--33858067-6424-40a0-a92a-ae61e2b0a15e", "indicator--d7a42476-edcd-4d75-9a53-de2d22606231", "indicator--6f5c2567-e416-426d-bfc1-4096ede0f000", "relationship--a5fd4e41-6ac2-49aa-b353-e507d0f2fd2a", "relationship--a4245158-8e39-4b5a-91b6-f93253899bc3", "indicator--a07d0314-8cb9-4727-952f-057841602914", "indicator--faf1cf11-127a-436d-b1bc-ee946f5f5ef8", "indicator--3a7e9496-4484-4b6f-838d-67644504d1e5", "indicator--58650893-0356-4812-aa00-b9f921d43173", "indicator--48015389-7e29-40ab-9b47-1364c6824712", "indicator--90c84ebb-337f-4acc-bf95-83b15430cf29", "indicator--8f106204-00ee-419a-a737-e7715dcc29d7", "indicator--b023dfe4-1df4-4efb-aac7-b92ed3f2fc9b", "indicator--99694ceb-3a7e-4990-93e0-db315ffcfb03", "indicator--ccf11c41-1256-4c0e-8c4e-da5f59377477", "indicator--c5a00d5f-e541-49e4-b09d-ab1e752fd3e2", "indicator--c135a436-4d9f-4ffd-8eb6-e45098ba45a9", "indicator--de5e0f0a-9275-4389-a28a-a9e5639dee85", "indicator--c8232603-7f0b-4b52-acbb-7b7b3e128f2e", "indicator--e9cb8fa2-b2c1-43a9-994f-5e75a3bf974a", "indicator--3e5ec817-3522-401b-a15f-2cc8516cfdd2", "indicator--efb7a9de-2f0b-4d82-975e-edb2001b5267", "indicator--0aa82859-bfab-46a7-a2ca-5dc0cbc3e60e", "indicator--9191d7ab-b0bb-4742-b770-ea8cde85edc4", "indicator--f3c056ea-802f-4bf1-8b86-cfcc8044f41f", "indicator--0598a1b3-681c-44c8-875a-472c2933fffa", "sighting--7c44d337-848a-4cda-88cc-a2a591d2193e", "sighting--0aa252e9-bb29-4423-97e1-fd81aacd7f9a", "sighting--5cece5e1-ca5a-4f9e-b24e-bc57f74c8aa4", "sighting--265383da-f90c-4761-ad91-c59c66bdc6cb", "sighting--98f3f50b-2ff0-42d9-8b38-b970cae79f8d", "sighting--9a6e19d7-59e8-4cb5-a919-67d7cb11425e", "sighting--73fe4b62-23ec-4484-9ff6-bbc8b5501f32", "sighting--ada4c37d-0fa8-4f44-9d51-cacada6fb80d", "sighting--f2c27f7f-dbbd-4316-82f8-ac142c000836", "sighting--e6155c05-c2fa-4ac5-bffd-c0cbd2377fd0", "sighting--842800d4-d7ca-4e7a-868f-d4bd58621ff8", "sighting--645526ba-5dbe-4aeb-9250-0c7297498946", "sighting--cfcd6c60-2515-4892-b68b-5c015e0c32c5", "sighting--334186c6-3fb5-4a26-899d-0d89cfee2486", "sighting--8c2e739b-b5eb-4ddc-93e1-23a79abab827", "sighting--7789ae5d-29db-42ac-8449-a292cb11bb80", "sighting--3db5d16a-c5d7-4975-a9da-f682ec19f19a", "sighting--25b4b8a5-a06b-4d4a-99cc-53313801df48", "sighting--8d8d49a4-4916-4a0c-9681-e68e8b9f29df", "sighting--b32dc3ef-7a55-4244-89ec-fdfb94f854f7", "sighting--94ac668c-3407-4509-b623-0e44fa071a93", "sighting--94bc3c9d-d5c1-4158-aa1d-a5085e7d80db", "sighting--b218ff5b-d8d1-466c-8f01-ca56a66f4b3a", "sighting--3eb897e1-ac14-4979-94a1-fa6a2330a515", "sighting--d0763b49-12cb-4ddf-832c-f385ead1f9ed", "sighting--01c1f9f3-0549-455f-bdc0-b12930933ec1", "sighting--646bcd44-5cec-4fe7-8fae-a56b6ccbfd2d", "sighting--bc5ac6bf-f610-4bbd-9712-a2c37ba74312", "sighting--533f8818-ddd5-4336-a1ab-83401d0f1dde", "sighting--9dc3f584-d6cd-412f-8f10-a682ae6c295a", "sighting--e9dcb281-a68a-4a47-84b4-4358bcf06154", "sighting--78cd01e9-2599-4b60-ab97-05da8c080c60", "sighting--8ef96873-af43-4f13-a319-2f2528132700", "sighting--325e5b5b-cc38-4edf-9f4a-57d89187e64b", "sighting--0dba28c6-fa10-48a6-8b4f-15854912e668", "sighting--8b2c3ddc-417e-45e8-930b-459f33b0bb35", "sighting--cb259080-f94b-4fc7-8b7d-2befc23ccfde", "sighting--8cc96751-ed43-45ef-a980-30a633b823ae", "sighting--00ef4a52-4db4-4742-a0a9-9d05cc87952d", "sighting--96cf8f40-35fb-4a62-a02a-48e1374a5489", "sighting--56cf6006-ec59-4556-be0a-e498114f31a5", "sighting--8c479298-00b3-438b-a279-a7a7193c129b", "sighting--8d179b68-ae1c-4935-a399-03bd9ba07dee", "sighting--8024e72c-9f08-424c-8687-2027ffdd0bb0", "sighting--d2352090-2228-40bd-bc2f-166210b5ee9f", "sighting--c992d56c-3001-4ddf-8512-eaba7f3b9f50", "sighting--2526fbf9-b573-4613-992c-c370cc5ec9aa", "sighting--35e64a02-9e14-4cc5-a8f4-75c5c86c083e", "sighting--3cba4bd6-1635-44da-8b33-09ce6149eae8", "sighting--cdacef97-19b4-43b7-bb19-391b88d14fa9", "sighting--eab0c228-025b-4948-90fe-048428a86ed1", "sighting--7e80c50e-bcb8-47b7-aebb-27fb12c3117b", "sighting--b477c75e-e1a1-4952-b99c-f7d83044c5ce", "sighting--74b70900-8eb3-4b7d-9f53-f09b68a89736", "sighting--2f4a59cc-66b6-40ce-8dab-1bc6383ea94f", "sighting--6f22eee9-1fd0-47ca-b62e-fbe2f9bd5e9e", "sighting--1f1cd50a-f1a3-49c5-a6ca-4285c3106284", "sighting--e121b8e1-d7e3-46b5-aabb-15543bfa97e4", "sighting--50aa3aaa-2145-44d9-88b6-0f407c3525e7", "sighting--92c33fa9-0b3e-41e7-b06f-8150696c5845", "sighting--f2dad62a-af65-4c7e-b20d-1714c76e82f5", "sighting--9e5cce41-7c2a-49ba-91d3-ea57c2e9e5c6", "sighting--1385573b-d6dc-4ac9-999d-c94811bd2617", "sighting--ad32caa1-68c2-434b-a0ef-c0e031eacf0c", "sighting--23497897-c41b-4072-a6cf-4e0a245cb9d8", "sighting--8f983f0e-aee6-4511-8d1f-739b55dfea68", "sighting--5661d3d7-3b1a-47db-901c-1dba58bc5bc8", "sighting--a26b1a89-03bc-40a7-91b4-e580cb624aec", "sighting--89a123c6-a2cf-4b42-9669-6cb63755ae6e", "sighting--b52f7988-c6a5-413f-8a24-efb3d524fcc3", "sighting--e14436a0-56bf-47f5-b18e-0f7948ce4404", "sighting--e27ba209-c43b-4723-b36c-59d7e6ea59e2", "sighting--a68ea3e5-65dd-40a8-b540-62805919821c", "sighting--8b19ffee-5477-4ae9-a682-2eb5a9a0e89d", "sighting--d3ad5d6b-d424-4ae8-92b3-4dd0b457ee32", "sighting--fe8e6acf-4858-48a9-ae3e-108353d55c2c", "sighting--23af020a-984f-4d6d-924e-c18f224077f9", "sighting--701cb5d6-b9e9-46cb-8512-5d975505ae31", "sighting--b922f451-d767-4289-87ac-530ecbd94d0d", "sighting--8ea933eb-c6af-41f4-9cf1-32c508f8f836", "sighting--efeeeaca-ab42-4885-bad3-a7d466ce1a07", "sighting--d74fb7a2-9907-4f18-911f-2dd9c80cf3e9", "sighting--76333ad9-22da-4c27-a15c-37fa47c0c6a1", "sighting--2b715d0b-1976-4559-94ce-6e01410d8cc0", "sighting--02e0c1ce-b6be-4188-80f2-d6f4ee76b3ff", "sighting--8b750563-7223-4c91-a00e-ff0b1ca74dc7", "sighting--b3a02034-6361-4721-ae2c-e33b132caf21", "sighting--44d68530-0957-4669-8cd9-8d88b68403be", "sighting--414428d1-5942-4a70-9c38-2933281d635e", "sighting--f553cd78-0746-4b31-b797-52ef07856e0b", "sighting--6e78f5cd-11fe-4890-b907-52866d4d5cbd", "sighting--2a29b18c-3868-49a9-875a-12afdfe31fab", "sighting--d12910c1-c3eb-43cd-8078-c8cf4b4281fc", "sighting--2028c154-4c71-4512-83dd-ba2521809642", "sighting--2de1faaa-9804-4290-b57a-eceb351618e3", "sighting--d08c9ba3-c3a4-49f4-a785-865d38f41e13", "sighting--d640f659-4678-4e71-a6f1-8c003c923d8e", "sighting--c5953c6e-529e-405f-aaff-c730935b2f66", "sighting--425e260f-0087-4c1a-a051-4ddf34284b04", "sighting--616a483e-271d-42d4-8192-ee4ae45cde58", "sighting--7c93e077-0d1c-4d9b-bea6-29fc68f25be7", "sighting--d63b0348-8036-40f5-800b-9a09663cee13", "sighting--57345058-8499-45c1-a3c4-49dacdf8a0a9", "sighting--a69de9a1-b72c-4bbc-bb56-e40951b9c566", "sighting--357ce93d-2185-44ac-989f-16dbf95d35cf", "sighting--be289084-0536-4b35-8bf4-1c3d8a8d39ef", "sighting--6413ba0e-4c58-4051-8f39-85e8bc873677", "sighting--6e07b697-534b-47a8-b98d-07ac977e1e20", "sighting--dfda6278-8008-466d-b1c6-91cd2b50f755", "sighting--0aae4448-4307-4295-aab0-bcb3b47dae56", "sighting--5b4da50c-f376-4606-9f7a-36b699ec9180", "sighting--81dacc3a-6fa0-458f-9458-8cf71de0bc3d", "sighting--f1dd197d-aa42-4a9a-9683-9041215ba7bf", "sighting--2d3af31a-0c8e-4a08-bc90-d868b4f9c16e", "sighting--0c684deb-2de1-420d-9df6-b37ba2391dd5", "sighting--6e8fc392-c971-4851-b28a-d6e1491e2869", "sighting--4c09c8cb-9a42-412b-a088-ba64e393af0f", "sighting--d62c089e-17e4-4316-b22c-2da83b85957d", "sighting--0a1a65f2-8b99-4137-af95-fdd1fc6291bf", "sighting--fc312b29-dd88-447b-b341-caddc4389b11", "sighting--d233b9c0-b92a-419a-924b-f2cf4ffa3e08", "sighting--f185e07b-0aef-42e4-b73a-e92e73c017e7", "sighting--16dac512-37e9-48ed-9e59-f1b3927d5b65", "sighting--623baab4-dbbf-4255-bf61-222662b603b4", "sighting--42db2b23-6b30-4027-b6aa-ab96413458bd", "sighting--69b111e3-78db-4438-8322-9050ee4f018f", "sighting--6be62182-05c9-474d-9362-b6ac9a864027", "sighting--48d59df1-e4b6-451a-80bd-4d1eab395065", "sighting--9566b72b-2b57-4cb0-ada4-552139a90ffd", "sighting--ad7323b2-daa5-4c30-a8e5-7c9c91b2627c", "sighting--85d9739c-636c-4fa6-94cf-1e288ee2ee5a", "sighting--04e3aaa1-3f91-404e-b6dd-0b359e131cf4", "sighting--2069d78d-069a-462a-9464-40b0e16b2425", "sighting--e8c954d1-3e13-4f90-8435-5c1ceefd269e", "sighting--75ed8245-0b27-40f1-a746-9427caf87093", "sighting--0d07aea6-c2a6-479b-b733-b6a446151d9c", "sighting--80f81d97-99a1-4e48-9f30-68209b8b5189", "sighting--02911e1f-a72c-40d3-860a-abdfaaed6778", "sighting--96a9c447-62c2-40b0-9762-6981ded79a52", "sighting--ab2e67ef-0556-4f5c-8cd3-ce06c53173be", "sighting--cd78214a-47ed-4895-aa64-e91303841031", "sighting--da2ed297-1aad-449d-86f7-17288ede4b4f", "sighting--c8e198d4-e1dd-497b-b49a-2620c411546b", "sighting--0fd68ba7-32bc-4b98-bad9-fb56c28ae426", "sighting--fe66d86c-579f-484a-973d-1f960cbf2071", "sighting--b0cee4b5-dd62-4572-b3bb-ae0d52d8b3dd", "sighting--21671979-ab6a-4538-a8a2-80d8d1a6e5b7", "sighting--98dfb5d6-98dc-488c-b83e-2268aa579ffd", "sighting--c7fcedea-119a-4e2b-983e-b983c2abe5ff", "sighting--e583976b-4225-4080-a24d-6d7422b45c10", "sighting--1a91370b-1360-4784-a1d4-b04be5be4dca", "sighting--b2800e47-f9f5-43bb-8f57-8f554211e831", "sighting--43536e04-7e35-453f-9da2-aa0b41707055", "sighting--19845ed8-4607-4b9a-b0f0-820bda62aae7", "sighting--ddf5af75-4e9e-40be-a197-bf762e07049c", "sighting--ae5f52c2-b910-46c6-90d8-0f38ffdbf15b", "sighting--afcab9be-2c8e-4343-bd91-8054f959981c", "sighting--4ce83e21-a50d-48ec-97b1-97dec861b229", "sighting--f0aef380-6bf6-4336-95fa-251b828804d2", "sighting--4debb540-4ef8-404a-930d-ac7c5e0d879a", "sighting--b14546ab-04b9-415c-94c5-eb909d9fa557", "sighting--8b5343a5-8f6d-4d0c-9a2c-71a082312e23", "sighting--b0fc01c9-5420-431d-961d-7de28305225d", "sighting--f2d4c1f9-ae55-4963-ad3e-ee84c6f77940", "sighting--0a883fa6-c147-45a1-a38b-9ece283727fa", "sighting--9d66a7d4-1efa-4069-870d-6235bb11e4e9", "sighting--e9f381d4-5386-4a42-bd70-00d008b371e4", "sighting--0bd2dc79-e901-4c46-bf52-1c10f47c9faa", "sighting--df08949d-bf87-4ec6-bff5-f8684465e5a0", "sighting--9a2a7f40-0931-430e-9a69-b16c79845c83", "sighting--c30cc947-7de3-4d33-b550-70ccf98cc73a", "sighting--88cd3e60-2f5e-4ebf-9175-23cfbab64d40", "sighting--7aab31cd-3b18-4ab1-99a4-5c2f144d5150", "sighting--53569fee-97f7-4423-9e5a-ab36f9850c5a", "sighting--5b386c1f-62cc-4fee-9864-021ca1923b6e", "sighting--a5f26f9b-38a7-493c-b8b8-4eb4cd4101f6", "sighting--780f08e0-35bc-4641-818b-1b93df476157", "sighting--b298e311-481d-45f8-88ca-7afacdf5d348", "sighting--162731e4-8595-4c4d-8c9c-25ae8c8b0866", "sighting--19381083-e51e-432c-9732-988c701e61cd", "sighting--9f4f0a90-d350-410e-87db-9f6306d86e25", "sighting--a54a6fb0-0a58-4a47-a942-7eedfe5cc2bb", "sighting--0fe4d9d6-75e9-46a8-9a7d-3ac721a77f11", "sighting--d22d993e-5f79-48b8-ac6c-d142f78a01ef", "sighting--b0184104-61ae-4ce6-a504-9825070fc945", "sighting--4a658559-20e6-4ffb-9de6-432959b28801", "sighting--a73045e5-3c82-4d15-9b7f-2c8fbf753c6d", "sighting--cdb2c827-bc7a-4fc4-97c4-a7c3c840b4cc", "sighting--47482735-8423-4f5b-a2e5-a0bc81ed1bff", "sighting--c79426c4-63c8-42c0-a286-33913f346a30", "sighting--6919ff58-4c20-4564-a55d-8e1f4cd8b6ae", "sighting--d1ddfc6b-0813-4806-9383-0d0afba73e40", "sighting--98179ced-9b3f-4768-9c61-8a7c3f857092", "sighting--5f365552-eaaf-4a25-902e-209dd8074334", "sighting--348b4bb0-001e-4e7a-9eb3-53247dd000d5", "sighting--e06f44ef-d028-486e-b647-345aba7cdec8", "sighting--dbb0462d-2b1e-4999-83f4-a68397be9c0a", "sighting--cc1a619d-dcfe-4d5b-b951-bd8bd2ead546", "sighting--c33e59a7-2d74-49f3-8f8b-21f6a60525a7", "sighting--9e6482d0-b23a-4261-89ac-912892ed99b2", "sighting--765d3090-86ba-4c58-bc32-2d2a96657e7e", "sighting--889038ad-3bf3-41ca-97ee-5faed5fe34b3", "sighting--e568f341-9719-4447-915b-1845efaf18a6", "sighting--139ea975-8e71-4abb-a6d3-9074b68da5f9", "sighting--6d15a4ef-0f36-42c5-94f6-3dfe2cc515cc", "sighting--91240dca-801a-45d9-901b-f8414bb84d4a", "sighting--4567e3aa-546b-415c-8225-e7e223434141", "sighting--1569e787-eb09-4294-8d70-f831963fb35e", "sighting--37d3ebf3-2c15-49e4-afff-c8f8a32bd616", "sighting--c547a601-6196-4251-bfbb-ed83caabe35b", "sighting--d5b62c54-749d-4ec7-8fc2-955559ef523b", "sighting--e271627b-e7e8-4ad9-a629-4d068b954c4e", "sighting--818c0631-5426-4789-bd12-249f5e28e088", "sighting--0df7f513-4429-4c87-9385-257c6263d90f", "sighting--0ba29c38-febe-4aa1-aa31-05816d93fc36", "sighting--1e0f4195-bf21-4552-8f7c-3a00402e1ea4", "sighting--fd21c595-f60e-49be-920e-330d470ab884", "sighting--b80f9d1a-1463-488c-bd9a-f2af6fde9bac", "sighting--070a0902-8e31-4baa-85e7-3bc13801c1ef", "sighting--cf2f177e-ee4a-479e-b32c-686069c5c45e", "sighting--fa244061-077c-4a54-8fc5-3de004b4b4b0", "sighting--7ef9b87d-1db7-4b84-a007-5993c593c7cc", "sighting--e161ee33-1097-4881-bd48-af2b328ba087", "sighting--d34c9160-0835-437e-9d96-7a895464d62e", "sighting--87ed21c9-333f-41b3-81c2-a670277bd0bc", "sighting--7c59f83e-e36e-4d9e-8fd7-c4d73b204fac", "sighting--1e691f21-68b3-41b5-88b7-317eac948dcf", "sighting--07f43a9a-eb7e-4f9e-9514-01337415b08c", "sighting--311760da-eea0-48bb-8180-fac2f58e712b", "sighting--0d25b503-c81a-4b96-9d8e-fa7377ebca8d", "sighting--4c8e0f92-e3ae-463d-a9e6-1c0b64301f7d", "sighting--a4c050ab-6193-4333-a281-aaa7232e952b", "sighting--450e65cb-c69a-4866-b6da-422b754fe4ce", "sighting--58ecb316-13ce-4a8b-b237-eacb5f77e7f8", "sighting--efb41a53-e110-4f0a-ba49-1267ca189ccf", "sighting--6b44f2af-5b07-4ef7-bd50-67f0334f642e", "sighting--aa6acda9-600b-4f63-9a80-952dfda36b86", "sighting--7d1827de-4e4c-4489-9fe2-57edef9f0286", "sighting--81a3be81-fa5e-4059-8546-488ae0b65cc4", "sighting--318e5aab-b595-4ffc-9803-f03026ead3f7", "sighting--609b9a47-0a10-401b-91a3-f095eb9448f7", "sighting--be22151e-9865-4138-91d2-dd578e0a58e5", "sighting--6b29d6d3-10b4-4364-af38-5980488eb09e", "sighting--07b8ad0f-3bfe-4095-8254-a8b77efa49cf", "sighting--de41d226-1fc0-4296-a8c3-a5254b6bb2b5", "sighting--855ff4b2-a5ae-452f-a231-c01f023029e0", "sighting--878f05e0-a024-4dee-be7f-ab09abda80f4", "sighting--d0bc48b0-3425-4991-865b-1f4c947d74bb", "sighting--9564e2ce-4033-4067-8499-5f3f20fa505d", "sighting--02aa9848-8035-42ec-aa46-54329f19f122", "sighting--c2c2af52-8195-4481-979a-036dd56fe4f3", "sighting--129faf13-7268-490e-b160-d7be81c7f145", "sighting--07258e8e-0a03-4518-8f89-eb5342488863", "sighting--85bc100c-9fc9-4d5b-a661-b37ae5421430", "sighting--dd39a942-47f1-46c6-b2aa-76268aedc805", "sighting--11ffa8f8-320b-4af0-b1c0-5b66c18f51b2", "sighting--f57efa26-5c1f-4b91-8211-a9e293099a12", "sighting--42555746-15ad-4196-8d86-1d1ccaac3939", "sighting--922cb91e-8292-42ac-a56c-32b3f06ca3d3", "sighting--e14482c6-af95-452b-850f-e0393281e775", "sighting--8ca84d70-4129-4eb5-b750-0769b84b5c75", "sighting--73fa557d-476a-47b8-864e-7ec29184963f", "sighting--ec7fb810-c24d-4303-8ba7-205e949379e5", "sighting--bbfd240f-e858-4b5c-9e24-af011cd77198", "sighting--5be72316-0385-4843-9b7e-571e10d8fbca", "sighting--1f9de554-d736-44e3-8fe3-4b03dce9b45d", "sighting--772873ec-22d4-4ec3-acfa-a384092cef43", "sighting--6796f428-e2e0-40bb-9053-ee33e2d87a8b", "sighting--2242a085-ab86-487c-9072-400780bb43ac", "sighting--5704d004-da66-43dd-b151-6548de626b21", "sighting--78794b3c-2d5f-4102-956b-0a7708a06e3e", "sighting--c24e7bad-3935-4643-ae7e-029e2c9087d2", "sighting--51b8a955-5a0f-4ba6-8cd4-37bec2676de8", "sighting--ff765640-80c0-4bf7-ad8e-574772e66384", "sighting--4bc2967f-7dfe-44b4-ae01-b85c931d0a7b", "sighting--b9eb66e4-340e-4e36-9a31-1eac209e9dc7", "sighting--ee3b2785-3446-4cc5-a768-dd2b851ac6bb", "sighting--25adb73f-b9c0-4190-935a-c64f82ec6332", "sighting--2cdc33ce-31a3-4f96-bfc8-e6b9c98fe4a6", "sighting--6ea032aa-cff7-4ce7-bb2a-98182cb0ed23", "sighting--0e2ac4b1-588d-4e39-8901-f7397db7d5bb", "sighting--d4cd806c-82c3-47b1-bf0c-654e630221e2", "sighting--85e5e7cb-a767-4453-ad51-fdc11bd1579c", "sighting--a7a188f3-902e-4cb2-8556-f5c93a69e992", "sighting--63c65290-6af9-4172-a64c-fe4ef9e5bc28", "sighting--237758c7-e2fc-4a6f-8141-e799beb7eddd", "sighting--64cf9576-41bc-4cf2-98b8-fd9017acd780", "sighting--39f1ea56-58a1-4cf2-a158-44850a4bf6e8", "sighting--e244c7f3-9a99-4968-999c-34c5062eab3d", "sighting--929e726c-83e5-480a-8ec1-a20381d5732c", "sighting--136b38fc-7c7c-414d-b27a-d948202f3008", "sighting--95754325-3c12-4718-989b-155016b3dfd1", "sighting--84b9aa41-1375-4446-9fc8-8aaa8736f6c0", "sighting--7b0c7983-47ad-42a7-b89b-52cd63c2f21b", "sighting--f84d153d-8340-438c-8ced-1f7f7a5c5463", "sighting--85795bcc-0704-420d-b3a1-7152a834bada", "sighting--938fee41-f8f2-4180-92d4-5b0e7182a925", "sighting--9d91ff92-41d2-485c-9dee-949fcba1bba0", "sighting--31511398-3590-4572-90a7-94bfc09e4aca", "sighting--d2b9d9b0-feea-416b-876d-2482e139271f", "sighting--85639bba-53f9-4da3-9da3-d5428e1e2525", "sighting--c91894c2-4b69-4ba3-a905-45d37e4f9447", "sighting--eee68281-8740-406e-b4b4-535ea1031a91", "sighting--5328eb51-1c91-4e7e-91d8-2e2524c0b81f", "sighting--89988731-bb44-4708-a8e6-6b02edc84e95", "sighting--db07cb12-e921-4254-ba38-e2397ef53d93", "sighting--b3538636-9435-43f2-8cd5-684018e70061", "sighting--6fc9f59d-6367-4eee-b280-1b99bcc57595", "sighting--28a69d96-f1e1-412e-9aa4-367ddb90865a", "sighting--6fe466d8-6293-47fa-9f4d-b6c4d8f141e7", "sighting--e5d8e711-6a95-4d32-811d-4f80fd888283", "sighting--68d3fceb-50dc-4e58-81a9-6695cac625cc", "sighting--4574081d-db5f-4be8-aa66-fd97c47e3781", "sighting--c1a1bc49-e519-46a6-9e03-ab82f18c788e", "sighting--a8193cc9-cbad-41d1-baf9-6f830bdfdfaa", "sighting--aa3fdfc4-9c16-4c27-be8e-9122e24bf7ff", "sighting--72f6f059-314b-4c7d-afa6-d5769da1f8a0", "sighting--ae305559-2aa4-45e7-abb6-2c5a86e57b73", "sighting--6bf9989b-0515-4dc3-9667-01b607c10569", "sighting--bfa695ae-3bef-4cfc-9ca6-bf0a448ebdd5", "sighting--66a956b4-f543-4c93-bcca-d1f369c65f7a", "sighting--c66b724a-69e3-4061-8bd0-33aa70925afc", "sighting--6f2f33c2-ca44-437f-9cdd-cc5ac32d51dc", "sighting--157d4579-f46c-4c5a-8e87-ebf93ba87616", "sighting--25c4717a-b39d-4599-ab86-0dacba0f88ee", "sighting--a892b1cb-c389-47b7-93cb-dfde4e37003e", "sighting--83e47311-7d7f-4fea-b4fe-76216aac5f96", "sighting--e590e9e6-c5e4-4f49-a54f-b16b419f6e55", "sighting--c72d3e7b-5ca4-42a5-8584-80713b3fb0af", "sighting--87e63c37-c45f-4d18-8f15-8ee82adaa1a8", "sighting--11963c7c-57e1-41ad-bbb0-5e1da25f7ff0", "sighting--efd54b6e-7dd6-4136-bdc7-6e8183474aeb", "sighting--cb7e3cb7-13ab-4ac1-b7f2-1d1667b2afb9", "sighting--f9c703c5-ec49-4c7e-84a2-30e9d329ff4a", "sighting--e70b9f8b-7e4e-4998-9ea0-288750051b35", "sighting--f97107f0-18e4-4382-a647-d36cef2797ef", "sighting--796ff1ea-25c5-48dc-a020-9251d8e101c1", "sighting--e996deb2-14ef-4c45-910a-9b1cff4713a7", "sighting--6f9d7928-8d70-43bc-aabd-9fe794076cfa", "sighting--942187ac-fb6b-4cec-859f-23f272509424", "sighting--fe6125a7-68e3-4183-822a-08ed170cc5f4", "sighting--41792f78-2c1d-496d-bc77-1dc73c288dfc", "sighting--f3bf59b2-9347-418b-b956-a355f7d6b191", "sighting--52eeab91-2fb8-4a77-b97c-7bd27a3a1042", "sighting--7c7172c1-6177-476b-b216-b3bf5ed2bb40", "sighting--3205e579-023e-4b03-9432-2a5a7e10bb65", "sighting--42571d6e-45af-4fd2-967b-fcef6d353437", "sighting--b4e016b7-4dc8-4b07-b009-0fe47fa34aad", "sighting--1eba1929-002b-4b5b-892e-3652ea6b43a4", "sighting--08edd312-d2e7-48b7-9dc8-8cd69685d093", "sighting--b88663ef-e5bd-4e97-b00b-de84b3c6b0c2", "sighting--981aff9e-9e1c-45a7-ab5a-dde0125d0ba9", "sighting--5097f9b6-01e6-447f-ab78-90dc43c51cbb", "sighting--61074252-57aa-4f9c-a57f-ddc15b31b427", "sighting--48d50567-c430-4c38-b8db-ed80c0f483e2", "sighting--a6c33996-6628-4625-bd25-3f40cb43fba0", "sighting--98ba9f0f-b15f-449b-9248-5b8ffe6b18f0", "sighting--11ec47ea-8572-4d9f-b25a-128bf3a59474", "sighting--4f6d29d0-664c-4318-bfdc-0a94a1682144", "sighting--ea128c4f-902a-4312-acd2-60b58908ba18", "sighting--154faa8b-f993-4a75-8d61-5b6e5adb912a", "sighting--0dddfe1e-9ba5-45cb-9085-b685a42647ec", "sighting--f5bcbf11-7e7d-4f25-8ad6-746b0d19356a", "sighting--0519fe4d-5520-460e-93a0-753caaf7f5d3", "sighting--9862a9ad-d02d-4d5f-87d2-e021c9b1541b", "sighting--2d4d74b8-bf5b-4e0f-80ca-cebb66d516b3", "sighting--7b8b1c6a-7cab-4360-9e21-bbea12a0b04f", "sighting--8db8d176-77e9-4601-aa05-acdb6ca80f1a", "sighting--6b999430-8923-498c-97b3-be869192c17f", "sighting--20ef66d7-3a9c-4110-98c7-577ad60040de", "sighting--b40f1ea8-a472-4d88-b77f-263fa01d8c4f", "sighting--d353aed8-a8d8-45e1-bcef-4a0d3bab7f7c", "sighting--fdb6e65d-101f-48fe-b00a-4fb83a6f34f9", "sighting--84f66676-cba0-465f-94be-cc51e6e302e8", "sighting--b96304d8-6896-43aa-8792-4a6c835cf534", "sighting--5ac7828f-4db9-47ff-aafd-75854e6497bf", "sighting--d445edfd-3540-416d-9db8-85b8a672922a", "sighting--e37b4555-3593-4f2b-befd-1bebf568368a", "sighting--51572c1f-6f21-458b-b607-5be72ba0093d", "sighting--19e6456c-1079-4358-addf-d5dfd2bf4a2a", "sighting--e57f6d6d-4694-4ad6-b4e5-524db8db8818", "sighting--40291bf2-720f-47fa-b905-6f9ab1d80224", "sighting--d7b1c0fa-78dd-46c6-82f6-ca7d26948826", "sighting--9ba673b5-a1db-43c0-bcd5-aa7510786826", "sighting--7adddb87-9aa7-49fe-89b8-e802c82ee530", "sighting--b7165f8d-848f-4e97-b4ff-e1f136b05443", "sighting--84739946-c0cd-4576-97f3-0df281129e38", "sighting--33fe7449-b68c-41d1-9c3d-f14e11ebbfb1", "sighting--09625242-f054-48de-ac32-23b7087d80d5", "sighting--596ba4d3-94b2-41c2-a3be-345a0358c939", "sighting--51e57b49-45a8-4d0a-ab68-859bb248ff48", "sighting--6ee23be1-9653-4bcb-8b41-2242edbd7c97", "sighting--1d6c06b6-8c96-47e6-b6ef-4eaab80ebcad", "sighting--b1c04b6d-e174-4e1b-bf05-fdc2d94bf1c0", "sighting--17c45a01-dfb1-49fb-af42-e71a1ed73fcd", "sighting--27074fb1-c6e7-4fd7-915f-600276440cad", "sighting--59ef3268-b715-475f-bf89-d25b422e061a", "sighting--6a987a53-6644-4350-9ee7-41cd160c4a7c", "sighting--3465d471-8939-4e62-9f32-d0237b1239df", "sighting--49cb54f1-5b08-4731-8d5f-10d57ea47152", "sighting--e4b40c21-f92e-44f4-916d-2ee11b9c45de", "sighting--641c9332-6441-44c0-a2af-ef27bd48b04c", "sighting--2a323ddf-3639-4cda-bebb-405e9a39539b", "sighting--970a4255-0fc5-40c1-bf54-ef305c0f32c3", "sighting--27db89b7-f2e1-4d6f-a071-784d18d65b50", "sighting--5f4e04a8-1b85-442d-bd7c-2dade0653d9b", "sighting--7da7be1f-9ef7-409e-b7be-5f9238a701ae", "sighting--a5928581-ef24-4b9b-88e3-d5def14d207d", "sighting--a1dcd78d-38d2-44fa-9262-1342a0a1fb5e", "sighting--85ee7123-08e1-45f4-8b59-ec212549ebc1", "sighting--2b89e73c-0cd5-4e40-a522-e75961a55cdc", "sighting--08778288-ace3-4a81-be80-0bac3d087f38", "sighting--f7289a2d-cb70-4240-9ca6-47c82664af41", "sighting--6dc469d6-ed69-4f2f-9a72-07d0efdaab57", "sighting--25e20741-680e-4eb3-bc5a-87ac975ee98b", "sighting--0ad2e5b2-6964-4c1a-bd4c-042e6c267a77", "sighting--130162f9-3111-411a-bf6f-03b0051b6606", "sighting--afd87fe6-bf9e-485d-b7cb-81191b599a3f", "sighting--ff6bea15-b80b-4290-9bb7-40930a1e6c4e", "sighting--88d55f86-fd57-4138-a2cd-87fcc695a06b", "sighting--fdcfd581-514e-41dd-9c2a-388add59b0a9", "sighting--6bbc27b2-7071-4277-a36c-1f57d775e720", "sighting--88df1b46-0960-484e-87e7-1235308059a2", "sighting--42a38e76-dd09-4cd5-a821-f6fe51a2976e", "sighting--0e9bb5d0-2e62-4678-b1a2-c102eaa2f8b9", "sighting--7754c1b6-7dcf-452b-aebc-be431f70977c", "sighting--15ce5e0c-7a33-48f7-9017-c695fe01e3a8", "sighting--c31b918e-9dbf-4a94-a8cb-b77a263b92db", "sighting--a7603367-c209-4e34-a1aa-9ad87e4ac50e", "sighting--6e3fcffd-fbb0-4de9-a3d7-14c40f57535c", "sighting--e50445cf-5e09-4926-9f4a-96267650133d", "sighting--07824a7a-3f03-4f2b-ba98-58d0b8a4c5b3", "sighting--50a04dd4-9a1d-4dbf-9a1b-653559201c40", "sighting--2e080b5b-bd97-49a3-b545-703af4189179", "sighting--056c6e84-be11-4f46-8669-01ffa568712a", "sighting--d69f3666-5a2d-4b23-b8cb-6f320c4c6eb4", "sighting--3228a41e-f634-4ddf-bd9c-d6262399c031", "sighting--cb88e262-15d3-4e1e-b29f-8de905db0f34", "sighting--df118c35-1ec5-46c3-8991-05a5995e3bea", "sighting--958de775-8ff9-42d0-b1d8-c6f749c260e9", "sighting--25b78320-4c5d-4a4e-8cef-24df7160e07a", "sighting--19bdb663-f005-46ba-84d0-5cb3d33007ef", "sighting--ff33290f-1837-44fe-be7a-335a50069fda", "sighting--f6149b6e-4263-46d7-871e-8f3898655443", "sighting--aa0f4016-4088-4341-b53e-fc09b2ccb290", "sighting--2ce8a0fa-56d1-4afa-906b-43583c3f0868", "sighting--faf11ba7-384b-4931-9a8d-289901b436d8", "sighting--dd701ff4-f5f8-421d-a1a9-f0953db30b30", "sighting--79d232ec-0b32-49d9-a0f7-9bb7fe254a2a", "sighting--56b294d3-6b36-4f13-b025-713935443afb", "sighting--347289e3-3f4f-477b-ada9-7a3258f44695", "sighting--ba742a66-6f06-47ed-8bd3-1243bf8a343e", "sighting--18bcc520-5e4c-4df6-998b-fb8cc77b0976", "sighting--fa44f321-9b8b-4e7e-b119-56c496e3976f", "sighting--1d8c6caa-7752-491a-ac95-951cc4fe6b55", "sighting--e0e837af-ccec-481b-a114-f12341b5badd", "sighting--8a379651-f70b-4410-bfe0-5564b84b30b5", "sighting--6592165e-d9cf-4dc9-ad01-8bf954eb1f43", "sighting--e735f9d1-072a-4469-9319-ccb5fc5b93ae", "sighting--7824d921-871b-4dc5-b847-998215acef24", "sighting--c9ed5188-8675-41da-b63a-e27434e7091a", "sighting--2740b651-459f-40e8-85bc-29dd80afa54b", "sighting--6377a8b9-c2ab-425d-88a5-c75b0f53163f", "sighting--35e72ea4-b5be-4b86-bcbb-3cb13852d5d0", "sighting--43dc618e-57d6-4cdc-9051-73125a329393", "sighting--0e5d687c-12fb-4ca4-b70d-48c1d9d055ce", "sighting--cfe63916-249e-46cf-83c4-fbca1281663d", "sighting--01f32b3b-f5cd-43e7-8980-ee6ede013623", "sighting--3382f8dd-4931-40f5-a067-55526c1c418c", "sighting--c98821bc-7c89-46a6-8985-d10bbf98f1cc", "sighting--96deb6fb-1ced-41a9-a142-a072a0cc26d3", "sighting--3bd924a8-adcd-416b-a9c1-95770e986ef6", "sighting--2aef59ab-a5fe-4a0b-a671-a54344318a32", "sighting--904e7f95-5b2d-4499-b6c1-155fafbf0253", "sighting--247e311c-7717-45c2-bb00-f4495680e0e7", "sighting--06186343-9a31-41c3-84fa-71dea38cbebe", "sighting--4ba9c97b-9973-4d87-b524-7a7097337987", "sighting--cd29ff16-cac7-4a81-9da1-285edd8f305c", "sighting--ebf1905d-a955-4a17-bf12-a3703e8987b9", "sighting--d263ac47-3c2d-43c0-9d37-a410d543b893", "sighting--16c3b89f-4ce4-4020-97e1-4849a06f2fbc", "sighting--3e0319ec-b935-4bfe-9639-a04ece069cb1", "sighting--8478e8c0-40f2-4f5b-89b7-8adc5b50f2d4", "sighting--9fa2ea70-92c0-4b4a-8ebf-33b82176c201", "sighting--4fa4df89-1435-46c4-8b58-50b84b1814b6", "sighting--e1d71f32-a10a-430b-bbc3-6366c404ce9f", "sighting--e9e24e22-608d-4562-bad1-88d834d264d8", "sighting--8508fd97-8834-4d2e-9e32-17650dea09bc", "sighting--4cf0b32e-66be-4016-969e-e5bc8a94a353", "sighting--c401055c-b5a0-4bbb-a449-b627b00ba613", "sighting--62246eb3-c998-4c64-99d0-921a56538dc0", "sighting--ca182aa0-f9a2-4e3f-b2c9-78dcbe6285ba", "sighting--dba767d3-fa5a-4cc7-ade3-827754f4af0c", "sighting--3794892c-33a4-4b84-a251-415aac1e2232", "sighting--b1d938b2-d788-417a-a8c2-8be80962ecb8", "sighting--8a73ec13-9d46-4785-b8ba-ec9460d126d5", "sighting--20f24113-4c54-4bf8-8e72-fe1d2e163e38", "sighting--2bd8a9e2-2857-4138-8836-51ae701f5c96", "sighting--007d2d03-398a-47d0-87e5-dd0c225495f1", "sighting--b6fc6731-66ca-42f7-b952-f130bc22a0fb", "sighting--8e8728c3-8040-418e-8533-82c7be79a06d", "sighting--e8bb4b33-b16d-4b4c-9e96-f48a5fe2fe40", "sighting--4783addc-6808-46ce-997e-49cb420de16b", "sighting--0571a8ab-3ae9-493f-882d-b9c25c6cbdd8", "sighting--f34ba3cb-6cd0-4d07-ad34-76665b7aef8a", "sighting--55fab762-9f68-437a-be8f-a9b896aa4043", "sighting--3897e8e3-4e30-45fd-96af-e3a3ae16f115", "sighting--d120dfd1-2c34-4dbf-929e-eb4062838938", "sighting--897cc714-b926-4661-87a4-37dc9baaa72d", "sighting--c05d2b2f-39ee-4932-a66e-9fe7c73e7daa", "sighting--a9dae2b0-8de3-4c00-b083-6b40053a66b3", "sighting--fddbeb75-0eef-4acb-9f7e-cb52a1f0efdd", "sighting--456a099a-fdf6-4e83-baef-c70b7fd7053b", "sighting--1e4e6697-2e5c-498e-80d4-dcf0aba73050", "sighting--249a5aee-fb74-4def-b92e-afcd9cfd35aa", "sighting--2f418d29-74f7-40b1-92b7-e2736c19ad77", "sighting--dd548c19-9917-443e-80b8-01d7380ee5c1", "sighting--b912a842-b4a5-4cb4-b51b-d262edd99500", "sighting--1b4820f9-84cd-4017-9a74-bd6428b52ee0", "sighting--ade0e6db-8a4a-459e-a55d-94cd97dff4b3", "sighting--d402ae0d-62b6-4b2e-9584-b5ace13e70c1", "sighting--5b778af1-0908-4bc3-a261-2050a6a595a1", "sighting--95d3c478-3aa0-43e9-96a8-9d2540b01363", "sighting--d5545121-029e-4233-9e2f-927fe8b487de", "sighting--9c497d6b-78a6-4890-b5ba-22308e5f5cf1", "sighting--fb956818-109f-4b65-bc8e-a2529f67902a", "sighting--c3dccf18-d7bc-4b72-ac93-2be8b06b9009", "sighting--88834315-8106-4a0d-8525-751e0a5f7945", "sighting--2be48585-1b67-40b4-b8ec-4e8a88442245", "sighting--911e6f7d-6754-41b1-b111-f6fd7e870ea6", "sighting--69fcdd09-70dd-4449-b92d-10b69ccd81c4", "sighting--fd1ef4bd-81b4-49e6-a69c-b19fa16a3d9e", "sighting--744399f2-1f2a-4e67-9f20-fe6a2852e113", "sighting--09b50a7e-4749-4e48-930e-b04a42630644", "sighting--d059613e-6c02-43d9-9948-d09901ff75ca", "sighting--b88ff419-6dbf-4dd4-a970-35ca1431267a", "sighting--75ea9db4-46b4-40dc-9052-0d741ffbaf34", "sighting--a17050f8-f186-4b6c-b19e-e821622e8e31", "sighting--4f290166-41d1-48b0-9867-cecb2797153b", "sighting--418c8ab1-5ee2-418c-9dea-322650b0d7b1", "sighting--01c3afc1-fc71-4f1a-8d18-a52ef943d09b", "sighting--4fc93025-3411-467a-8c3c-2196bd6f66e1", "sighting--0365d529-38b8-4689-a455-3ba6681c10c0", "sighting--650214bb-8c85-4073-af0d-b1cb7973efe8", "sighting--74e5877c-5f8d-4575-a1cb-443451ffc844", "sighting--744a6ec5-14ef-4f13-8e99-0b73989072c4", "sighting--690ca5a6-a07f-4f68-a1dd-b159dae2cc3c", "sighting--682ca252-9b04-4bae-809e-4e1972ba68a8", "sighting--c9b8c17e-393f-4288-811c-3bb64e5b4314", "sighting--02c47ba7-3711-43dd-89e9-347528c9de3a", "sighting--4a00ee19-c48f-45cc-8371-643c016eca7c", "sighting--9e2af365-d29d-4b57-a247-90f4c93feb6d", "sighting--8f2f951a-8afc-462d-b94b-a561a9388abc", "sighting--7d1255cd-7136-4040-90cb-ea8f57a91c7c", "sighting--07017ea6-61da-467e-b5d8-2e2e971d01ca", "sighting--fd4442a0-db55-45a6-965c-87848f9ee93f", "sighting--1b948279-a630-4db3-82bc-723d2149be3d", "sighting--7a358561-7760-4ff0-aa95-4c3af496129e", "sighting--c23cc4aa-f4bf-47d6-9a89-5bbe08e88c67", "sighting--a010e976-f0bd-4dad-8feb-faf739f1b425", "sighting--73fe8cf5-d662-4f8a-911f-b2c980908b3e", "sighting--0563aac9-f764-4460-8a78-9762dc634550", "sighting--84020fde-f9dd-42fe-adbb-480c2b544065", "sighting--c84abf1d-b66c-4fe4-bd06-1f4208a9dcc2", "sighting--afec580b-f306-486d-af80-c8cbc1b1c149", "sighting--c84fcc34-c823-4296-8b3a-b5f4860d9f97", "sighting--27087754-8770-4e7f-a88e-a20ea0be5b67", "sighting--a92850f8-d86c-4749-b2b4-c8eb1a3618ba", "sighting--f96081f4-1b16-406a-9210-2699e1588047", "sighting--e1a8efb5-7b4a-449d-9c05-571c90b5de51", "sighting--e9c9a06d-7ecf-445d-95ba-11b8e7b75e8f", "sighting--3b2b2dac-a3d5-48d5-bb18-260f72852259", "sighting--f3ad49f3-934d-4f8b-a486-76d9af90bd4b", "sighting--f8f0fa74-ec6b-4a7c-8ef9-149485979216", "sighting--796a1ed8-7ff4-4400-aedb-67b119958a90", "sighting--72841cee-46e9-4c55-a5ba-81b4dd089870", "sighting--61cff5bd-3db0-45d6-8337-9820f6cea06f", "sighting--76d36512-63f5-4549-b48a-488d65244f84", "sighting--b7e87f8a-55fa-4f02-b931-87cfe26dd988", "sighting--fa695550-b4d3-4d64-bca9-4a0abe39bb70", "sighting--92124c95-db4e-43f2-ad21-ebd19b62c86b", "sighting--6f57b62c-e718-4044-bb5f-a71cc726ea3f", "sighting--5ceadac1-d386-47f9-b422-bd5e197fe0cd", "sighting--6c7ad3ff-4c14-4831-9b18-ae21c3dc712c", "sighting--57abcf64-7a62-4e89-a206-32e4e94ecca3", "sighting--18231981-5644-4418-88fe-4784d89fa2d0", "sighting--c886a6be-9f75-4290-b75f-11996f0a7094", "sighting--e00f4850-ad59-4c1d-bc37-c7a0711afb69", "sighting--25683220-4111-440b-9ecb-d11cbf1a630d", "sighting--3494361c-7369-4921-b706-17f83d4e9713", "sighting--34bb042a-20be-4364-b073-8721fbd0346e", "sighting--303f2f50-6975-4e54-bc9e-688d5b484ae3", "sighting--8fc710ca-1369-48c1-b607-046f707338d3", "sighting--3b2a00dd-8291-45df-a083-17d25ee51469", "sighting--e0cdc2f4-48d0-45bd-988f-796e46fab7a9", "sighting--f041b0a1-062b-40af-95ed-1ec1f6bed3e5", "sighting--65451ce7-6fd2-4d38-8ba4-58b2993be866", "sighting--61e7078b-5741-4c65-8fb1-8877a705da86", "sighting--867637d2-98af-450a-aa5f-59f65fa54756", "sighting--2e449091-4347-4cfd-8da7-a1fd32616633", "sighting--90cb6e4f-1a68-4f42-b800-d1024ba9b8c4", "sighting--fd6bbd08-f580-4d9a-9eee-3760125422bd", "sighting--8379160c-d1e5-4912-936e-a84d800d40ed", "sighting--5e39ac13-0ce0-4670-8947-b4bed072e550", "sighting--c1a8fe5a-c592-4406-bda2-ba59fbb372ef", "sighting--2fbdcbc6-85ca-4db0-8d46-f749af8cb20e", "sighting--676df784-c6f4-414e-9752-1af26fc4e37a", "sighting--4ee7aeb3-8bfb-4f86-90e3-20fe9885f629", "sighting--2bc0ca5f-009c-4cbf-8938-53f8cf3e79c1", "sighting--0d8a5d01-8ce8-40d1-834c-7a86e6113bbd", "sighting--0f9c444c-52f9-4402-9ae3-846e6a85b498", "sighting--0a38a385-62e8-43cd-b5e1-a66606b969c9", "sighting--6d576287-d214-46d0-b58b-51fc03230b87", "sighting--301aa7ae-c060-4936-a462-3ed0d55c4ca3", "sighting--89c1ed22-42a4-4135-b6ce-423ee6cdb62f", "sighting--9f32aac2-6774-4fac-8cad-ce3aefc684c4", "sighting--e092b8a8-cb86-4741-aaf9-d1a9c31b564c", "sighting--d47ad91a-ecc4-44e9-b5b5-bf72801b9077", "sighting--80f60110-4f3b-41a6-b74d-3d69dc28656d", "sighting--fb821a56-a388-4509-8425-eb42d298c9b7", "sighting--8ce4660b-85c1-4eed-b07e-4bad36fc635e", "sighting--86406e86-dfd3-4216-a8b0-445e7a53bf08", "sighting--469b56d7-0297-4129-a336-e206ac686f81", "sighting--f34463fc-4297-4fe1-87d1-42413a5671d4", "sighting--bde11d94-9f0e-4149-a302-b425b5d59f2d", "sighting--f9628a2e-ea7f-4f18-8b63-df4ed694a6bc", "sighting--00172ce3-4c8f-421d-8096-7d0455af6e36", "sighting--13b3677a-3e58-4763-862f-884be6d8704a", "sighting--bd14e63c-e0c3-409c-9016-ec1dfd6ebbe5", "sighting--105b9444-fc96-43e1-b586-a3b9f256eb96", "sighting--58000efa-79cd-477e-8409-6f44b630ab6e", "sighting--bf66a4f9-3ccf-4afc-a96e-770e06a12ebe", "sighting--ed95d68a-4db0-4a27-9362-3122878404ec", "sighting--143342e3-e358-4c3b-a251-0aed84fa78a4", "sighting--bca5c035-92ac-467f-8948-8e53733fccaa", "sighting--d1f26888-3163-4aae-a6b4-f3ea4e945ce0", "sighting--94eefd0d-cd2c-4b61-8da2-6dd7ffb51113", "sighting--bff1de94-dd01-4042-a687-17918e7dbfe4", "sighting--9471e2ce-d491-47cd-a013-43520f6f17ff", "sighting--f1c26985-5302-40a5-9768-8d884a7a90dc", "sighting--2276d1b2-d7c2-4160-a0ae-d7fcb52bb361", "sighting--64b77856-916d-42bc-81b3-349978543ce6", "sighting--551f7039-912a-4ce5-81a0-03673dfeb63d", "sighting--c31a2679-027a-4985-b8f8-e791a27a2c27", "sighting--b2e8cdf7-196c-4885-8fac-07b2f81d5f8e", "sighting--d2441343-932f-4bab-8355-675845dc122b", "sighting--cdba320b-67bc-45f9-aceb-fb966ca57385", "sighting--d6eb021a-ab6d-4477-98ad-31753eca46cf", "sighting--36bb4a24-0b2c-4910-8aff-bcf50cc1bf64", "sighting--cc8fd515-df9f-4d8a-a99a-3ea2ab171753", "sighting--d762cc02-cb86-4737-9e32-96e7c66bed1b", "sighting--7076dcc0-d93b-40d4-b8f3-323699647295", "sighting--a8b2fb09-1d99-4262-965e-a1cbb267f29b", "sighting--3a38f5f7-ac52-49a9-8ee4-f733e1294db3", "sighting--3035ae48-f7a7-4b02-9841-83a12f8427fe", "sighting--160b5286-4c80-4da5-b293-cb5eeed66306", "sighting--61fc1145-4ff2-4a23-976b-c3b30bf9442d", "sighting--ee7e687e-9c67-4ade-9a66-4f3939a22e57", "sighting--814c5d74-d781-463b-be3a-c476faa5b36f", "sighting--6107d220-8791-4b71-8447-d2cf3a569244", "sighting--171df8f8-e18d-43e2-939e-c65de767c394", "sighting--94095b37-2bac-48da-8308-6fafa8e45b0d", "sighting--3994bc2b-378b-4e87-9027-ddd156fc594b", "sighting--18369c1b-1285-4345-9c83-18a184e44bbc", "sighting--ccf896f3-8889-4d52-8056-db22a35eb097", "sighting--1b1c1665-5c2c-4e40-8966-946b223477a7", "sighting--87e3cf34-6b1e-4bfb-8f80-0a8a6e9fff3f", "sighting--4ddcc323-33b2-4f60-aa6f-d053ca262411", "sighting--e6252f14-dfcb-433c-83e0-fe491b1a79ac", "sighting--0815e498-41bf-41ca-8776-0d367c551d73", "sighting--febac4a4-2a61-4662-8d58-ecb0b3de4b52", "sighting--c24babef-ff31-45fc-a255-6410b6042c5f", "sighting--af9617f0-c0e5-4b16-98ec-5989cf7491f3", "sighting--93d5f0b0-fa8e-4cc0-94ba-131dbf313c17", "sighting--e708105c-6b55-4271-b4e8-d850b1646fb5", "sighting--26e01118-64c2-4c9a-b04f-f2f001e0047c", "sighting--110bce39-5414-424e-981e-2a9624ac4436", "sighting--0ce752a9-a2ee-4c7a-a919-1d40dd49fee1", "sighting--c46d787c-6888-4735-b44c-e0a1e159b3d5", "sighting--d6423cf6-7d28-4c33-a447-33773388658e", "sighting--6380b835-ff38-4769-81c3-b41792671680", "sighting--742229bf-f491-4dfb-b984-7506ac5dc0d4", "sighting--f20ea2eb-0f17-4a3c-91f4-d2bd2ea878b4", "sighting--3f149b1a-fef6-4fd4-bd7f-7644039ee5d0", "sighting--b4cae3a6-f545-4d22-9529-8f32beeae39f", "sighting--29714c09-587b-4f6f-81d8-2ec8ae9aee28", "sighting--db23d1d9-71e5-473c-92f0-1f02c1a15499", "sighting--dab981bc-8de9-4473-b5f1-48c41b478245", "sighting--1f3d01dd-236d-43e3-bc4c-f3a0b851876b", "sighting--22f01436-7c14-4201-9c7e-2521da0d8cf8", "sighting--cbef4284-aeca-4e39-878f-fe4c2d8c8d20", "sighting--e7dde195-4514-43f2-8ef7-1c80915e87ea", "sighting--196d3f48-731f-4dac-95be-3800ca276be8", "sighting--af41d288-1f19-4ec9-8e39-3b51c955cea1", "sighting--ab9e95e1-7cc5-4666-9f2f-b9871c62aa42", "sighting--3167f5b1-7829-492c-a538-c677538ddcd9", "sighting--ba255fcc-b974-4177-8575-26dd0b8eb28f", "sighting--04a93e3a-4d36-409d-912e-bdf7ecec7fc4", "sighting--5ccd7701-2947-4f3c-b6e1-d1949ef1d877", "sighting--35d48b1d-9c3a-4dc9-adb5-8587638a0011", "sighting--df8d8f70-dc48-4d0c-926e-c4b89ddb8aea", "sighting--9b75a611-85d0-408d-a679-e00f0700009f", "sighting--0fbd07a6-4030-4794-9d99-12e036995bff", "sighting--af189dbb-56b3-4ce4-87e9-9af253711e92", "sighting--d2ceb2f9-98d8-44f4-91c8-1d6f207371a6", "sighting--e4b5700a-5c76-4e1b-bad2-81f4af68933c", "sighting--13be5836-5bc6-4b6e-9534-05b3cd458868", "sighting--52d95f70-f7c3-4ed8-9bcc-48614038a816", "sighting--92d57230-0bb1-46f8-9bc0-ec86dbd02cf1", "sighting--6cb0c0ca-857a-4cff-b89c-ad20c8c118c6", "sighting--7fd99f7d-e74d-4bbe-b3b7-409db9623659", "sighting--064d9110-bdb6-4b13-99f2-95a9bf710f54", "sighting--5f8967cd-b971-41bc-88cb-95089ea528c5", "sighting--a678212e-6f80-40a4-a862-6f33c4b6dece", "sighting--0f066428-0fd6-465f-b56f-106cdf7c8988", "sighting--d789ea51-dcfd-4151-81b4-7d69cbe6e72a", "sighting--c13e354e-05bf-4e3d-b464-12407e690d77", "sighting--81690075-2c0e-4e82-88db-a4e6772bb855", "sighting--104aa28b-7fe8-4596-a1a1-472a96fc9db9", "sighting--a9c0ac69-4e50-4de5-b5bb-80c99c7ea3b9", "sighting--a2df2f09-6288-4731-bdd2-62b675ea5599", "sighting--3955ba25-3d76-4217-87f5-a3fec2a759b2", "sighting--13d0e6b7-771d-4db7-a9fa-fdf1d399957c", "sighting--3b5c50a5-c867-435f-8acc-fdaca96178d5", "sighting--55636c65-a417-48d5-86c6-bc33954ba307", "sighting--7ac7f526-4b16-4e6c-a7a9-70c4d334a91d", "sighting--f5089745-f975-4115-a5e7-0e533b2e02c7", "sighting--e82dc801-39e9-4b08-8bfa-b59bd0092a6b", "sighting--13f283a9-c59b-4b50-afe9-934c0c223440", "sighting--54893ebb-61cc-4baf-8c1f-e8309fd4664a", "sighting--f50eacaf-29f3-42b9-a9c1-cb33cb261009", "sighting--bb3f3e60-ed48-470f-b6e4-8c61d94dec5a", "sighting--cea7a0e0-4979-40a3-ad18-88e0dd13c775", "sighting--8be723ad-93e4-49af-914d-77cb3de0d62d", "sighting--4c14b6d5-f609-468f-afcf-a6242103f537", "sighting--c4ec1431-80ea-42f4-a9a9-029d1378b036", "sighting--38b36142-40bc-4638-8958-614852534f9a", "sighting--2e049291-49a7-4283-a949-2c7942799064", "sighting--8fcade82-2ae8-470d-8155-63394a86d6e0", "sighting--ea16f02e-597d-4bfe-9ea3-4d6c66d05192", "sighting--c4d492e2-3b9b-423a-bdb3-f468ff6393e5", "sighting--8cf8f764-1330-4c3a-b812-2cca4e96ce71", "sighting--a44de23f-88f2-41b9-bb9e-23952a5a042d", "sighting--18b72f82-edcf-48e4-b69c-972d9df757a6", "sighting--b20b430f-db78-439c-9dd9-3b34868e2722", "sighting--9d436c67-bd8a-413d-9ea2-70914974ae2a", "sighting--5d206815-ebe8-44f8-b3f3-95d265bc173f", "sighting--4e3267b7-5d32-4140-a033-207ad1e30ae6", "sighting--9477fc1a-ed09-4bc5-b467-9b369a5898ae", "sighting--a56196a7-1b4f-4466-bea8-07eeeec481cf", "sighting--850c4eb9-3049-48f6-85a0-acd7d6b5d2db", "sighting--65741a5b-dbbe-47e7-983b-981f654d191d", "sighting--6c4b9d40-8403-4190-b52a-1db88c1d49d4", "sighting--816e14f4-31f5-490c-805d-d11426d803e4", "sighting--4d7f9e2c-0521-425f-b075-f637a6eda36e", "sighting--0925d89c-72e7-4c79-b336-0b475e16f219", "sighting--3d98c0f1-f728-4483-94b0-36aa3f1aab6c", "sighting--b671d9dc-7d45-4263-b52b-5282b577491a", "sighting--6e3369cd-fa1d-4df9-865f-65d714ff87a1", "sighting--52a4d5a2-b15b-4231-a9ea-f8c74755835d", "sighting--e38c9d97-8fd8-494e-b5a9-9aa08545c636", "sighting--7d19bb30-2aef-4867-81f8-92dcc63fc1d2", "sighting--97c2a514-7d44-448e-a3d4-84ca3e1fe2f7", "sighting--606589ea-a68c-4d7c-9ac2-8287416b0af8", "sighting--ca50d086-ea29-489a-925a-8b10c2306801", "sighting--8077df41-af3d-4bf0-a045-5f904f46d053", "sighting--49843f2f-2a9c-464e-bd6f-5b4d023ec34c", "sighting--cd62b9f8-2541-40f2-80f6-fc893d0be3f6", "sighting--1ec739f2-99b7-4b33-8019-4fe0197292cb", "sighting--edb27ca6-e148-4fa8-8ffc-1abf36b95d06", "sighting--d92335d6-d6b4-4b96-80d5-a6cf8a71ae78", "sighting--611d68ce-0692-42d5-9693-b1365ccfd4b2", "sighting--087dc608-a9df-442e-9b60-3fc2e1f55dde", "sighting--45959b84-80cd-4de0-a64c-22e5a0ed4dd2", "sighting--d29a553d-e73c-4640-884d-341d45b3ce67", "sighting--9ab69ae9-70a6-41c3-95e6-386b4092bf3c", "sighting--ecf51648-f8bf-4eff-8ee5-97f6f1e86df2", "sighting--08fc19de-f09b-4d5e-aa75-51bb2af7d7c1", "sighting--98d0b250-869d-4c1e-a368-07e7a1c28aa5", "sighting--691f9089-389f-4dd6-8c23-50c87ca89a13", "sighting--51c221e7-1ba8-4a6b-93d2-1ba735fcc75d", "sighting--7c5bfd6d-e964-4745-a8d9-f93b8d1e70a9", "sighting--27586735-bb07-4a6e-9966-28b0421978b7", "sighting--0d186647-8a9d-4293-b6f8-35cc4da7124f", "sighting--472e560c-9639-454b-814b-0363c2b8d5b3", "sighting--69e14e4d-0826-425f-b53b-2726bf5bfe18", "sighting--2b4a817a-0012-43d0-a963-f50bf7a66828", "sighting--371bddb2-6af6-4cb6-b188-c0075630660a", "sighting--f5ea10e5-5c1c-476f-b562-cad7eb7f73b7", "sighting--1fbb1967-bce7-4393-a30c-0fd623004921", "sighting--7c01f450-9901-4378-9cc0-cec747443e50", "sighting--7ee44289-280c-4f82-8f4f-fd3f100cceec", "sighting--c51365dd-987e-4c8d-b999-319bedac30eb", "sighting--f95f9b5e-bfe6-49cb-a7dc-66878c8eb82e", "sighting--07bd02fd-020d-4df8-9513-29ba640a6830", "sighting--3f10afde-93e3-40a4-96eb-0d75f79efa87", "sighting--b9a6fab8-2a0f-4272-b514-612b755ee105", "sighting--8e6b8263-9dd3-4447-b252-74544707158c", "sighting--541016f4-3b64-499a-8751-452bb7c64385", "sighting--b756b609-ca25-4045-b72b-6901d330cc7c", "sighting--81b6d851-55b7-4bf7-baa2-4dab34212a81", "sighting--a2408f77-b91a-4731-8c3f-73f90d1e8e87", "sighting--ab514c83-0beb-4b76-9310-70159fc31168", "sighting--2b812022-11cb-4a24-844b-574c01ee4b0d", "sighting--e9f5d03a-20ee-492d-bd5f-5ee4f8fdb29a", "sighting--645c39a8-9bb6-4669-8b6c-ab86ab0afd43", "sighting--0a1ba78b-ab23-4b3f-9083-6c700fb44664", "sighting--14f6c950-4571-4cdc-bf33-3e27877fc291", "sighting--c8088c8e-f288-4372-af3b-91c4ac339fc0", "sighting--3258cc1d-efe0-413b-a976-7b36a0e5778c", "sighting--31aba4a6-4032-4010-b148-aa7a79a4de8b", "sighting--3419b0aa-32f1-4130-bcbd-e3a790b419b2", "sighting--6da777d0-7e9d-44c5-8fa4-871a4f07c4bf", "sighting--62790c4b-0d2a-4ccc-b3e4-651eab8a0475", "sighting--fdf191a7-16c5-4929-bf2e-217274ad402d", "sighting--673165a8-ef9b-4f59-a380-aaa8840ba6b9", "sighting--024066c1-e5b4-4ed4-b791-88dedee2e281", "sighting--f3555cef-aa67-42bf-a0a8-e8b24c91e6c4", "sighting--02e9a80f-030d-467c-afbb-f1f543f283fe", "sighting--b7226c63-5e3d-4c80-abec-807b4a9eaccd", "sighting--febf7d25-7f61-4f37-b34d-a412190971ba", "sighting--f3b7a7c5-736d-434f-bf93-9ba951ad374c", "sighting--42016a79-50fc-47cc-8afd-e7bacfe63da8", "sighting--7cb4631f-ef71-475d-827e-5a7e3e43545f", "sighting--854a7482-7e73-4a08-959e-b83a953ca7a0", "sighting--a0aeea16-c4e5-4c05-ad3f-8fd57f1dc5de", "sighting--55339a6c-26bb-4ed2-a0ca-d74f7aceb674", "sighting--b40eae57-81fe-4d71-80bb-4177394f02a2", "sighting--576e8e32-7bc6-43f1-83bc-ab2f738b250e", "sighting--9a876c41-a844-4036-bf57-9a99b4cdc1f3", "sighting--6fb66c3e-1036-4c87-9148-0f5b274d4f76", "sighting--b9afb72b-f778-406f-86c1-14bfed09a022", "sighting--f602999c-f85f-4cdb-bbf9-476ee0a451f9", "sighting--7af03cbb-082f-43c9-9d09-4b473c24d2ca", "sighting--6a5f56b2-e9b8-4050-a6a0-a9ef19ea702a", "sighting--ce887b49-214f-413c-8928-84e7fa4ab670", "sighting--9812d97f-ab80-4ac8-9eee-a11f5547e5d4", "sighting--17a6442d-6705-42af-9a28-b89bbb7f1fa7", "sighting--71031249-c86c-4829-a36a-cd63073c2ebf", "sighting--d30f83c2-3180-449c-b570-db64a8c24c7f", "sighting--28b57e9e-22f3-4793-9d56-3397a0540d9b", "sighting--b6266b54-79a8-49ff-b77d-fe3754f0ac0f", "sighting--76a31d4b-afe4-49c0-989c-c390941364d9", "sighting--43b124b4-3ffa-40f6-bd37-8f75334821fc", "sighting--2d3f276e-1176-4b57-8a1b-c4245beda7a1", "sighting--a7bac5eb-d281-4628-9d95-fff2d23df6d2", "sighting--5bb8693a-17db-4e4a-a49c-421a3b53fadd", "sighting--a83f77e5-901e-4640-8c28-4e2f84814d2f", "sighting--14833345-b692-4e82-9f34-7389f901b0f4", "sighting--c03fbb45-3057-44ed-a125-566a06d933ac", "sighting--cd2bca10-1a22-40ba-bd0d-c56707116267", "sighting--77a2b7f4-4879-4d8c-aa72-5fe0de81c921", "sighting--f2c705aa-13f4-4dab-99bb-7a74ff2620ce", "sighting--8e096979-7aac-4fa6-b43e-3ed623ab93af", "sighting--1d07685a-1e91-4ff3-bf6f-e55394322cad", "sighting--b47146f3-9aa8-4035-842a-3aede05d96af", "sighting--d4ae91a6-64ac-45d2-bfe5-db6bbc1293d4", "sighting--33aa2525-fe87-4a06-8d00-bfe9d454c465", "sighting--8e415d28-1375-4c15-a4bc-fbd5458b5ee9", "sighting--3bd2a0c5-ed93-405c-8806-0a7efe09ec40", "sighting--6687810a-b759-4113-b172-7f8148d40c08", "sighting--f026b43f-1e7d-4ee7-9f13-44252557dbfe", "sighting--1e41386f-7ac9-4ee0-bc21-db924266eb6c", "sighting--b45b6e2d-d759-4643-8969-b48433fe0719", "sighting--99f9c661-3d26-40c3-8e05-98696478bfb0", "sighting--6f267947-3a47-44f7-8145-d7095add7593", "sighting--344c08b3-d2b4-4211-a9c1-394b783f7c28", "sighting--e6fa8c70-8a51-4457-aa5d-50aa1a483efb", "sighting--b0878b9f-e61a-423f-9c72-6d41dfcd6f24", "sighting--97fd8373-dbe0-4348-9734-42d8655eed89", "sighting--6a97ce2f-71b8-4dac-afc2-c719fbaa8703", "sighting--9948a388-0d74-4bec-bf25-d9853debfea6", "sighting--de4a2bd7-c8d7-41c2-bb81-736c4b58a9d6", "sighting--9366c1f1-005e-46ad-a580-d5d30403ef32", "sighting--eca595f2-2c54-403a-9c9a-a16dd0cc8db2", "sighting--83d731fc-f975-4dca-a4df-97559ac7d37e", "sighting--1af24a6a-0dc0-4ba9-9145-f0f1be3458e5", "sighting--338cc578-3922-4907-a1cc-0719432c17c5", "sighting--1e523c56-c45c-4f0a-9c75-468ce72b9500", "sighting--d14a4f2e-7f77-4cb5-9cb7-4d07369693d5", "sighting--f11f160c-a889-4aab-b68b-61af8268204d", "sighting--68fec353-10b5-4338-b936-8b7e3a6dad42", "sighting--96cb42dc-9dd3-4c1f-a81c-a06beb5778c3", "sighting--61c0dfea-44c4-4e05-8672-eaa5944c102c", "sighting--9bfc03b8-c4a7-4885-9718-51f4af9f1a29", "sighting--95bd6273-a9f2-42ee-9509-95c077388400", "sighting--da073a27-c70a-4081-bd78-8a98f7e16b23", "sighting--b53036c8-f119-4895-8cee-b1249a8ceef9", "sighting--93e83296-8ba8-4c49-ba37-69003a833858", "sighting--0d05ee40-5f6c-4cf5-9a1e-7c3c13b9fadf", "sighting--6b8891b9-92e1-4bec-94d2-69f56c3b5984", "sighting--e3b48a89-da54-434c-b4ef-7f92565cd72f", "sighting--5d9dc4f3-2ef4-404f-a01f-03a1d900c75d", "sighting--df584323-928a-433b-adc8-2436ece3c382", "sighting--c2c5649b-4f59-4101-9923-ecd1388997cf", "sighting--68037c37-17b4-4d64-bb83-abe3f20abd4b", "sighting--68ec0b14-e266-4e1d-9e7a-40206cd256f1", "sighting--5574b55c-a609-4aa3-8590-1a246e58ff0f", "sighting--cb3705f7-be17-4a21-a16d-47c1848ba9b2", "sighting--d2a04697-5fe3-4532-88a6-52d35a0dc5e6", "sighting--dc237d11-d30c-4541-8c83-24c28c3d2594", "sighting--5a6191a0-bcd8-47de-b761-58f81d4f62ba", "sighting--7a3d4cef-b27d-4696-8ee3-d034774b37b6", "sighting--6f73c31b-e5db-426d-b455-398ef07f65f5", "sighting--c2801153-d62e-431a-8f4f-9e3b4483374e", "sighting--e52446e1-6a57-4ec0-8cba-32dfc694f881", "sighting--6802710d-82d9-430e-acb9-b07dc9a9924f", "sighting--ec9d0e7f-902c-43a3-a82e-0aca5677e1b3", "sighting--76dedcf9-17d6-4c58-9df1-b2e2fc5308d2", "sighting--beeda6fe-a2c7-417f-acf7-0db2711708e4", "sighting--e9972f45-692d-4474-9128-056ee35654c0", "sighting--eed212e1-1aa8-41fa-8c21-a6a42a4358aa", "sighting--32ee845e-1ab4-44ec-bc97-9d07d8781f74", "sighting--0977cd4a-9100-4f34-a780-88496c61afdb", "sighting--44dd6fa0-f4f3-460c-8743-2b0557353f06", "sighting--d6e4163f-a998-43f2-bba6-47eb9e87e0e8", "sighting--9c6cbb63-c2cc-4ef9-857d-77fd991c4605", "sighting--c30b8762-a9da-4f04-a98f-77dbd1d52e0e", "sighting--432519d0-b9bf-4ab9-b981-fac053a53217", "sighting--00fd5c58-1571-44df-8ebd-7c7ff3a59da1", "sighting--cc50e05b-bf37-48b4-a809-73d17916ca9d", "sighting--c9b23d2c-0eac-446e-a5b2-0a404f096af0", "sighting--71d4a0b3-e27e-49b5-ae3f-1f52524b86f1", "sighting--1cbd15d7-e951-4538-876e-4764d5328bfa", "sighting--2f85d224-53eb-4504-a180-920ca77e1a8a", "sighting--40f8fb03-3105-4084-aaf6-4474514d9bf2", "sighting--e34cda68-f1ed-435e-8fc0-71f475ac384d", "sighting--17abc937-dbf5-44da-b147-fae007ae637b", "sighting--8aed8916-962b-4e35-b8c8-77e59762bd1e", "sighting--8c064fe7-8755-41b3-8a61-648e32bae93a", "sighting--ff49764b-43e2-4683-b8fb-35f9628247bd", "sighting--01da640b-1ec3-4fdf-8844-117b723f9ffd", "sighting--94bbf811-3b6b-469b-bdf1-198b86db3223", "sighting--287dd6d8-6660-457c-b176-dcddd1067809", "sighting--325f1f15-bb02-4126-aced-732e2339141f", "sighting--909cc7bf-7490-450e-bd50-bf5adb7dce70", "sighting--827b32f2-ddc7-4938-82d5-8597458bc39d", "sighting--0dfd91ad-5bdb-4efa-ac76-ef50264b0587", "sighting--06294470-e7bb-476d-bdfc-c56451284ff7", "sighting--937a8e77-ea3c-4ec6-8320-1b247475e487", "sighting--b6796874-6102-4b50-b161-466bb5a0f3af", "sighting--04829bdf-a41b-48bb-b3de-9f689d688991", "sighting--2fa0ed44-d299-408f-b911-8666a1ef8850", "sighting--361a2fc3-da96-43bc-ab94-2ed739531786", "sighting--250ab7b2-1708-4666-87eb-b6f0554a2722", "sighting--a4e6808a-0871-4c17-95e4-50ff8b44962e", "sighting--51c34e6a-e9bc-4e18-81a7-d21c301b3d72", "sighting--db04b795-b963-45ff-8a80-a8955bdb47e9", "sighting--f3b43770-465d-449f-bee1-4d6d5bfe2fa7", "sighting--2b54aa9f-926f-468b-bac1-69fa3a143542", "sighting--e60043ac-c1f8-46c1-a2cb-350ffb8b5e1d", "sighting--65002335-b281-43d3-b9a6-f6868d45c26b", "sighting--b5f5e512-792a-49d8-98c1-868540443eec", "sighting--4392baf4-ed0a-4a75-8c97-6f3f5d8a4437", "sighting--b2334a6f-80b3-40a3-b352-e6b7385f7be7", "sighting--7bf9d719-d137-4d19-bfaf-5eed9f8a387f", "sighting--285d9c2f-7581-40d4-95e0-28c72ad9990b", "sighting--9346c092-0917-41b1-a70e-5cecbf52090e", "sighting--7d105bdf-ebe0-480d-86e3-eacacd1f4066", "sighting--ab10d1f5-07a4-424e-a8a0-c8bcb4f06def", "sighting--1d270147-76c9-4c8b-9cf8-e2f6b554d9d2", "sighting--85910f46-b366-48d8-b501-445dc3811afd", "sighting--285a61d2-d23d-4f64-9fb5-eee19089fdcb", "sighting--04701610-ffda-4d76-ac23-9ce114893e5d", "sighting--55c77f52-a84f-49b0-9ce4-9df54a1ce03b", "sighting--7968d154-7535-4638-9297-08aa22a5f85a", "sighting--54d54e1c-6737-415a-9af3-43a08866caa0", "sighting--d1c83f3b-5b8b-41e0-8a3f-a827cfc38b5a", "sighting--04c95fa4-fdde-4c01-8a77-5c91b980f487", "sighting--4420f292-773c-45f2-be3c-ae77be3df1be", "sighting--384b15b6-b5ee-419e-9c1b-9a91c538c1de", "sighting--d0220a27-4ae4-4df4-b18a-8d6b448c066b", "sighting--9b828cc7-b461-4703-945f-d7f9ac798a7d", "sighting--7d0a4537-4d5f-400a-aff5-c9f3807c91ee", "sighting--229f0d3f-8da4-4186-b9df-74029eb5c8e4", "sighting--1b189d32-4353-42a3-a1fa-f8a7f175862b", "sighting--859570bc-6f15-4174-8fe2-2302027dd474", "sighting--bb8f339a-97a8-4a57-999c-00e5ce762418", "sighting--3bee549e-1f3e-4e3f-89ff-79e886ac3e4b", "sighting--e2b11df3-5170-4c1a-9b15-53b66b2e2a5a", "sighting--3959c064-8676-4dcb-a8eb-5a1bab67b244", "sighting--da6af682-74ea-430e-a753-ca432ccf1f51", "sighting--1bba9fcd-3eb5-4450-b917-3dded822aafd", "sighting--7b653f00-f8d9-41af-acbd-2e91ecd8887e", "sighting--b1f8903e-72ae-4f0a-95b0-1c20cad55dba", "sighting--1e6227ac-edb1-4f47-9b24-295630755419", "sighting--0d60ec4a-0f7a-4ff1-a9ff-e8100e368831", "sighting--c78c2619-bab1-4ad5-9c7e-86c19fc5a8bd", "sighting--637b6c66-b7c3-42f3-87ca-9450cae04860", "sighting--765ace1d-1c1e-47ef-87b9-7846d4739317", "sighting--6dffccef-f0e2-4254-a41e-522e8c997d1f", "sighting--d89be8fb-3ce1-4ece-8c56-d0bb013067de", "sighting--96fdc811-5c05-407b-9545-f613f7ea430c", "sighting--7fb44357-9176-4b89-b684-092f3066e5a6", "sighting--a7599d55-9aa3-4151-9f20-8fc7adcbcdb2", "sighting--647bc068-b619-4efd-ba4f-21f9a0d5c32c", "sighting--9d8387c9-c3f5-4ce9-bb78-d9822a41e3f6", "sighting--4683ae53-9587-41f4-bf55-b4fe2ef8ae5e", "sighting--bbfff43a-87d0-4150-a2c9-ea0337b39c91", "sighting--97f2571f-07db-41a7-ae77-9c6ca2326985", "sighting--2522c768-d4cb-4531-8401-fa734aa943ac", "sighting--85d2383a-4b17-4ba6-8a14-b8788426f551", "sighting--8c036a7c-fe2d-4de6-90fa-95253b0e2888", "sighting--57988361-657f-4daf-84f9-173f647ee9eb", "sighting--76b7ba61-dd09-409b-8905-1f192fb14114", "sighting--55fd9b81-bb3f-48c4-bf9a-d0128b23c9cd", "sighting--e289296e-294f-4a20-bdad-b5fb1c733512", "sighting--27fc6b1b-2223-41f9-81d9-1037090dd515", "sighting--40740ba0-34ff-4bef-8a3e-4b644b7854d6", "sighting--c41840c2-8ecf-4c31-bdf5-56d1e41f8b03", "sighting--ea3cb599-a575-4e48-bb35-6ae5aa28988f", "sighting--f7374270-14e9-4eab-8b73-8b23230736e4", "sighting--21cbb9f5-a3e5-4964-b46d-db1dc141ca88", "sighting--697b0784-4788-4aab-b1f3-3ec3ee18449e", "sighting--afb28f58-cb93-4702-8a30-fcf8afe57a98", "sighting--df80de2d-ea30-4447-b711-f7915e06ca7b", "sighting--b1da4b39-8098-48a4-a2a2-3ff08e3f7c58", "sighting--c3303e28-00e8-453d-b13c-04323596183b", "sighting--ecf17f32-6c52-4d64-9777-e2ef658337c4", "sighting--2760e6d4-31f8-4f0a-b2cc-9bc42ab590ae", "sighting--b481e418-31b1-47c3-b5c8-852dec415d66", "sighting--eb15bbc5-7e91-4e22-912b-abd317f41b63", "sighting--fe197374-1f63-4027-8908-5651e55bed85", "sighting--6ec5c20d-272c-4cfd-9075-124cdec257ca", "sighting--ad2a528f-b645-4c0e-95f8-65aafb7c0299", "sighting--39dccde4-23ac-48b1-af4c-8421eec54b86", "sighting--bf3a3666-2652-420c-ac3b-260269680c89", "sighting--b40fcad5-73a0-4aa4-8217-9e09a9068471", "sighting--50abfb26-c47e-4dec-a441-130c99b2bfbb", "sighting--c4677852-5dc6-4c84-820a-4d369a43afd5", "sighting--d8ea6376-9791-4ef5-97a8-034e0d11167d", "sighting--7f18f16d-6d4b-4ba8-a46a-fe01a58813ec", "sighting--9970d349-6bcf-49ec-ad76-719ac02020a2", "sighting--cb92d05e-f919-4aca-a44b-911055bad9f6", "sighting--742c3588-cae1-43d0-90ab-bd7b8f129df7", "sighting--ccf478c3-57a4-4566-b38b-3471b8cf1506", "sighting--37a99cd3-fd2f-47a2-af6a-c67227f57dd9", "sighting--9f8e98dc-5721-46cc-8db2-c373680e07c6", "sighting--06d02756-6c49-4fa1-ac5a-3bcfa0670cff", "sighting--c30e2394-9957-486c-9cfd-a551f8b6c3f8", "sighting--8ddd28bc-b7c4-4290-a645-802a8967e554", "sighting--fd16ac21-e95b-4a3b-b18a-9dc9ab63f5ad", "sighting--aade444a-f2ab-47f7-8ab7-18154d11b3f4", "sighting--acdfbb76-98a4-458a-90df-9d3b7ff9e755", "sighting--6fc61edf-5d02-410f-893d-b6aee0d02917", "sighting--5fe33220-12e0-4b8b-9bc5-6ca58bfbb6c1", "sighting--08c66b52-0f77-43fd-b658-54b8a0fdb5b4", "sighting--9284b898-c1b4-4847-8a1a-ad1ae4ffd8d2", "sighting--eff841e3-747d-426f-ad45-01438bed99f4", "sighting--17402269-8047-4b86-9ad5-b2014c319a70", "sighting--a83b012e-aee7-46cf-bfb5-89697b3852fa", "sighting--33e078c4-8d81-4774-b5f4-e72624760c19", "sighting--4c8d3437-5e0f-4d0f-9efe-133dd8d94053", "sighting--f8eda9bd-8ca2-46a0-9436-d430c55365d1", "sighting--71b8a2cf-3fb2-46c9-a4da-f9cc1529f379", "sighting--7ea4f8b0-d542-4a43-9416-86ab93e130b9", "sighting--831e05a2-6a2d-4534-bdf7-3d7012ef5cea", "sighting--eae3871c-d768-4e7b-8edd-87e5884ede91", "sighting--b0d922b3-dae9-46de-8330-4887494225c4", "sighting--b2705775-ed99-4c1f-8231-35c55c1ec06f", "sighting--81105e84-66f4-41e6-9b09-7f8b49616f88", "sighting--e81b683b-63aa-4dcb-89fa-461776bb20e7", "sighting--a02c522f-1318-4d3c-9951-4556d0b09c2c", "sighting--22fe3914-6032-4436-abc2-3e353a555a67", "sighting--e6c7787d-2eb7-4868-8efe-72af4426f431", "sighting--0c8a0355-3e3f-4840-8a9e-38d115d0a4ce", "sighting--8530ad98-19e7-4850-a434-d9abd92153d3", "sighting--b0134cae-674a-479e-a373-8407ba7da6d8", "sighting--11827c8f-3d77-4beb-b490-69dcecf6c4b6", "sighting--e784151e-654c-4ade-b592-9795b8a17dbb", "sighting--93bbf650-8cac-477a-a9e0-ba94450a20b6", "sighting--9da32dd5-5a11-4360-9024-f5f3303d6faf", "sighting--43147b8a-cb9a-4c4f-a49b-a80187c188a2", "sighting--77983b4b-fd8d-4ab7-81b4-29c8e2e1a57e", "sighting--6c8b0a1d-e0cc-4e17-9991-e0ffa88a90b2", "sighting--d762a49a-e46c-4983-887b-2c9269d8cfc8", "sighting--f61f65a5-19e7-44e5-9f91-9bc75565c9ff", "sighting--94d390aa-1c22-4cb6-8fcf-855b6fb51251", "sighting--be492e2d-b522-4c9e-9b23-84dce17ce4cc", "sighting--3a6bb1c6-26df-477e-b573-d4e3d8caab4c", "sighting--943b5b86-ab29-4ef2-a1ce-3fb8342f95e1", "sighting--75997992-fb60-4922-bbaf-85c7002c3300", "sighting--74accf89-fc17-4785-9b67-14473e4591b4", "sighting--8cbd9b78-57c5-4c03-bb18-da1f21505680", "sighting--acdf0f6d-fffe-46d3-b527-cba4d70e4abd", "sighting--d9fc1540-dcbc-419a-a298-5fd277dae200", "sighting--a3f30c45-8570-4e52-a2ad-634bfc6947bc", "sighting--a939f8eb-0f10-42a7-a8f8-fad85c4564a4", "sighting--eda8649d-dd6c-4a82-904b-05fc4a748a4d", "sighting--5a7614d9-b225-4a0d-82d8-435807721ccf", "sighting--c1bffc7f-a083-4143-910f-ce39ebfab53a", "sighting--212fb5dd-63e8-4122-a247-f99c3c9a0de0", "sighting--cd71226f-728b-49ad-b65a-6eef97e9159b", "sighting--3f22dea4-9f16-4575-9157-aeb2e55ff40d", "sighting--2da2f0c6-4f6a-4e3d-9137-ef25d79ee798", "sighting--0b302659-2683-476f-8976-b7f08a2b32ea", "sighting--9172bf04-b397-4bd5-b15b-729a1192ab4f", "sighting--05ae79a2-d2e9-4d7a-9531-8ee33fdcb3e0", "sighting--8da2d85d-f09b-475c-90c5-80857fb3940d", "sighting--54302983-4ac9-4900-a6d9-fa9787f4b409", "sighting--b6d24c1b-217c-414e-b872-2ff7061f2120", "sighting--a4bcd7be-c402-4c9e-93c0-36f72b7c492d", "sighting--edfac903-f0af-46c2-8fd5-95d27564efe8", "sighting--f81186a1-1187-4298-8305-57c009130ba5", "sighting--fb2ed4f8-5cd8-4a19-ac1c-8e2e3b7c8a74", "sighting--4e8f6614-9a57-4721-9f43-801867ff16f2", "sighting--d6749feb-3e7f-409e-ae27-df90bd8ad621", "sighting--795787c3-278e-4329-9fba-2a4f64e8044a", "sighting--ac197539-5cba-409e-b11f-7fc17e434675", "sighting--894b2a93-ce73-4ed1-9b0a-de93fbbdf7a0", "sighting--1a0ec0ee-500c-4b71-b698-912ce0db5899", "sighting--a9d0dfd7-4b48-4c85-82f7-bfecaff59a73", "sighting--d41583c5-9c98-4e64-89cf-e0c2b77d3925", "sighting--598aec56-cd38-4e8e-8cdf-efb695d27ad8", "sighting--eb7b7804-cdfe-4754-bd42-e1d902dc3565", "sighting--5579ba98-8961-4fe5-8bc0-1945f689bb18", "sighting--48955097-d822-42d8-b57b-7f3c9fd1be1b", "sighting--4e2e13a1-d46d-4947-9484-9219104ba23a", "sighting--9cac6a20-f305-4355-9b35-e0ec62f2a8a0", "sighting--666c2515-a090-4071-b53e-470b96c2c2d9", "sighting--02d4e875-0f50-4a90-ae59-c5fd20598807", "sighting--f934c1b8-a25f-4246-99be-5c2f7558b12f", "sighting--f946c2dd-6ba0-4479-beab-83eef8bf7b0d", "sighting--533c525c-abb8-4074-9633-c8a15aac4361", "sighting--e3254d2f-c358-4f23-9ec0-baa9d30c6813", "sighting--44944377-05c4-4c65-a20a-770191d0d5e6", "sighting--9d848a18-6dd1-4833-a066-bf7fe240f52e", "sighting--3736f217-0fa7-400b-9d88-0709ac5ced99", "sighting--b920d3fc-dc97-4105-af48-9ebaf6b49127", "sighting--954cf4bd-01c2-4159-a848-03c9a7c348c4", "sighting--c80814a7-647a-4fe7-b7c8-52e9bcb2bea1", "sighting--30df637c-dfa8-43c6-bcdb-1ed796eb415e", "sighting--080aa157-00ee-471a-89fc-5e2b946e1e2d", "sighting--7dea6232-2c16-41ae-9620-43e0de4ea127", "sighting--26690226-30c6-43c1-a756-24d2284212bf", "sighting--39c780f1-7578-470e-b216-f2d2fde9db4c", "sighting--c07c2e0e-134b-42d4-91d6-2e980e210da8", "sighting--dc1a714b-07af-4d60-8057-3444f3f7ad6e", "sighting--549463e4-cd9d-4dba-881c-588bb03f461b", "sighting--39d30bf8-c541-4377-be85-5cc8819e1ed8", "sighting--5b3f30b7-c1ba-434c-9dd0-429ce9efe02f", "sighting--6637c168-6868-427c-89ac-b6c4f2d90ef0", "sighting--20c18894-7a71-41fe-9d09-434fad37a9b2", "sighting--27e7fa0d-a411-42ce-bc74-65069238e307", "sighting--7f7cd368-12e5-4b10-adc1-e554cbcbe7b5", "sighting--cd670c70-21a4-42f2-97a9-274ad72f11ed", "sighting--4ad94888-6498-4163-a510-aa2f11e61d1c", "sighting--bd4c2978-ca5e-4acc-ad4d-4d442175a024", "sighting--8148ff4d-fc2b-4dc3-83f8-b1aa2a3e1b87", "sighting--315e653b-90c4-4b86-af93-7496f4797026", "sighting--752e947f-5efe-4ded-9095-d67757b3ba6b", "sighting--a7e194f1-fa94-46bd-809a-dc6498a83d1b", "sighting--97ebafe8-fcd4-43ab-a0f7-3e6110d4ec82", "sighting--8ed907e5-f692-4d2f-b9a4-3afb38bbfd9f", "sighting--2b7345d9-65dd-4484-b290-a4c73b5768aa", "sighting--457d7d6a-b720-4acb-a461-cc4358d11176", "sighting--f63a3b9f-7cb6-4df9-a337-4821869b8738", "sighting--85cac4cb-5303-4357-a9f4-492ff171bbfa", "sighting--5e4c309f-48a5-4480-b1e2-50c2ea938725", "sighting--d979945f-412d-406e-8474-3e18fcf5947c", "sighting--f2ed3904-5f20-4bbe-a3fd-6781482b08ad", "sighting--09974059-cfcf-4edd-91a4-cbbfc802aaca", "sighting--0d41c379-4ec3-4c2c-aba8-3a970f052365", "sighting--fcdaf226-45bb-4686-b6ae-bf3463e0f12d", "sighting--3820c3f3-7e2c-4fcb-aa77-135215caa1bf", "sighting--50e37fe5-8046-402f-b0a8-f9c3e3c9e3cc", "sighting--15c11f65-61fc-4a7d-9091-e3dd85ee0b09", "sighting--b5239354-d641-4731-a132-75277a980bcc", "sighting--86425b0a-a619-4c35-9e43-ea5be849f298", "sighting--088f0c39-925d-4739-b8d2-b3efbc5bdf23", "sighting--7063a707-2e72-496e-976b-ed01e16aa9a5", "sighting--1ad9df6e-535e-4d7b-bcf4-ec68ae4892e2", "sighting--5e04e422-a27c-4ba0-b114-c380defa0caa", "sighting--c474db21-8fa9-441b-aeff-4cf08dea571f", "sighting--e6b2981e-24ee-4a60-b563-60d55ed9cbe0", "sighting--6265de88-2d78-43f2-8e8a-24ad2e90296f", "sighting--a49e7d5f-5970-4d96-9218-cb4b65163bca", "sighting--02fb5df9-565b-4be6-bf67-ed201fce67df", "sighting--636964c4-0068-4231-acd5-e88b903d7bdb", "sighting--20488f14-be7f-41de-8fac-979de90724f2", "sighting--b82957ed-1031-4436-8a8e-33b0a5d88501", "sighting--b7dec9b5-7c72-48bf-b7d0-f080843436b2", "sighting--d66ce318-2dfa-4c1e-9412-cbf9400ed996", "sighting--9c3bcd73-1ab6-4feb-930b-6ad0cb9ead49", "sighting--ec95de53-ffa3-49f1-aeb1-811d22dd1448", "sighting--a276d541-dbc6-487b-bc12-7e79dc01ecce", "sighting--1a625e32-7ee2-40c0-ae25-7276a91dc47d", "sighting--306ba1c9-acbf-4c3c-84e6-b73c7b2e8a8d", "sighting--d8a351da-c49a-4aa4-aae2-119dde925e20", "sighting--864af577-5056-487a-bdc2-9d3438449704", "sighting--42c2d6eb-91c9-4516-8274-e17546257d99", "sighting--c3ead184-e143-4742-a675-078b0445bac6", "sighting--22aa15b8-3d01-41a1-96f9-e35a635084b3", "sighting--3f70f6ed-f750-4555-93cc-10720e8bc688", "sighting--d6b20858-4678-4582-87be-91c1ef8479c6", "sighting--03c0f6bc-df82-4f44-9c93-43fb859f4a23", "sighting--dc2f2308-755d-4e2f-988a-f8d564ae07b7", "sighting--b011da94-8695-4501-b947-693e672a272c", "sighting--191b1bd6-53bf-4b1a-9c69-d4795ea6cb84", "sighting--b8d33682-3771-4ded-aca8-e143771585c7", "sighting--5ce16ac5-f8e4-465e-91f2-3b7e03f08245", "sighting--42446254-5d57-4e1e-b061-89b50a1423d4", "sighting--f2f68956-b9df-4d2a-86e8-5e60ea423f04", "sighting--36fe03e8-b97b-4ac0-9915-3d7209769569", "sighting--c104c419-9556-4d88-92c5-d3a60b6f364c", "sighting--04036198-9cd8-4f3b-9bb6-2548e8825107", "sighting--45c645dc-496d-4e0b-8761-e11506e94038", "sighting--e808e256-0755-41f1-af9a-911c152acfca", "sighting--d75b7226-2676-4aad-ab15-a2dfa2a2cc3d", "sighting--d7546659-9e8e-41c6-a22b-bf3b14c5c36f", "sighting--e50bed57-b9ce-461f-a042-b0e5fa8d8348", "sighting--6d463b37-a36e-4cf7-9403-c352fbd21293", "sighting--c541415c-2cf8-4b55-8aed-470be72b8ce5", "sighting--d9ac9458-fbb2-4d8d-bae9-a0765154f403", "sighting--10d66b17-c3f4-4c00-9a61-5c5345300b8f", "sighting--37b1085c-acd1-4c43-953e-09375cd07375", "sighting--3ae0682e-bcc0-4c57-94d4-2b9e4c367877", "sighting--b7a0705a-b3c5-4f50-9f79-97432ebd431a", "sighting--393b719d-cc06-4d8c-9ac1-84a0cbded2fa", "sighting--b34b98ca-c82e-40ab-9c90-856607808cbf", "sighting--1dc08874-a14d-4894-baa3-32b9d3c85297", "sighting--e76c56c1-3401-4141-abcd-47e62498722e", "sighting--72e717b6-871f-4e1c-bcf1-5a13a3d9a9c8", "sighting--0dc54a74-dbc8-49bc-aa13-b33e0ae9159d", "sighting--84dd47b9-8e12-45de-8079-361131dae53e", "sighting--33681c61-501f-440d-9b29-f7ce7309be7e", "sighting--c1de3ce7-4fd7-4d59-856e-13961a23ad65", "sighting--1a4b20cc-0c15-4226-b67f-c6df6fcf4c88", "sighting--e8e3625f-3df5-45e2-9b7d-2e652b480c36", "sighting--543bda6c-52ee-448c-92ba-6c6e00d3c5ca", "sighting--a6def3e1-0e32-4a04-9c91-bb3d0dda38d7", "sighting--b7fda7ad-1bd8-486e-bf5c-0ccea38921a2", "sighting--bef3877d-9318-4953-b810-162e1b19b0b8", "sighting--e0e97b72-ca00-429e-89da-b28e0b8eaabd", "sighting--85d6e274-54af-42ae-9dd6-17da083b6f87", "sighting--f8dd546e-c25f-429f-91fe-8ff53b81e536", "sighting--d6ccae91-dca2-46fc-9423-b1f4dbcc7fb0", "sighting--388d288a-cdfe-46ef-a5f9-6685aab9fcb1", "sighting--267872a9-51d5-494b-91b0-34d5dc37c06b", "sighting--4a1e850a-9885-4cb5-8702-c2c9961fc415", "sighting--af0e8029-5bd8-4d52-a7cb-879141fc244e", "sighting--0922d9fe-df2b-4a0d-b3d2-2b9f9882bce7", "sighting--d842f966-21a0-4b5d-b98b-350a8f3e1124", "sighting--ea98ffb8-eab0-46f2-b5b7-8e768eea12e8", "sighting--7edf18ba-9c39-4803-a50c-e0077931f6d6", "sighting--fdeb873f-5ffa-44fb-acb5-a07d1a0daf90", "sighting--d4f9adc2-3c4b-4e94-8ced-c1746cad4a60", "sighting--bd54afab-adba-452b-b761-c21ebf0b6165", "sighting--0295279b-0ac4-45d9-a635-dc51f5e25e96", "sighting--60f5d2d5-665a-49dc-8146-ed4b580007f1", "sighting--55250bd6-1319-4ad9-9a1c-e2536b7cdb98", "sighting--06e0d93d-21b3-41d4-8645-88ff242364ad", "sighting--be1ede7c-c075-42de-abbb-ef8a4e580e6d", "sighting--61fc36ec-745a-4558-9775-b6faa478ca66", "sighting--91c0bb01-bba5-41fd-b69b-275b0cf12a70", "sighting--f8152473-2d7f-4a8c-af9b-79ebcb0c1151", "sighting--b937b2f9-a449-4416-b575-56ae3e50f288", "sighting--9c388b59-9868-4a03-a70d-ea7583e97554", "sighting--24846a91-6f42-4749-b181-d446f9d8789f", "sighting--9b4f90c1-52df-4351-b9b8-219a818695bd", "sighting--1bd6739d-5ae7-4f04-9c96-e324e0556bc5", "sighting--c0d23210-505f-47bd-9e20-d9c1d8fc5d02", "sighting--992071c8-e9a6-4c5f-85cd-c867f25a525d", "sighting--45bc84bb-68ca-4051-90b9-f5e830fe3803", "sighting--cbaae097-4cbf-4281-aeed-d39ff407a9ba", "sighting--c58d6b38-19c9-45e7-9ebd-5ffa4df9d091", "sighting--bae0567d-2843-487c-b0f4-ccdb18297975", "sighting--426f705b-deca-4f10-a6c9-b61d06994e9a", "sighting--6ba69215-0d60-47b5-b6dd-5e9b273e6325", "sighting--01849330-7fc4-4577-88c0-61da769504ef", "sighting--511b3106-aef3-48e4-947e-53415b21a947", "sighting--441bd95a-45be-4ed2-bb26-cdb85f0c128f", "sighting--434ab3e0-82ee-4f02-a3f4-f7f52d47f98e", "sighting--7ebf56d4-f5b9-4b9b-b5f2-13467d5f00a1", "sighting--9518f4f3-a300-4286-9fa8-c754fda6dae7", "sighting--e9fae506-f15a-42f4-8784-1f3d84153527", "sighting--58b1e41b-3634-4173-a005-bac3c47b4fb7", "sighting--a780474f-2f4c-4af6-a4fd-8ee1ababf8da", "sighting--52b362c4-a20a-4a62-b526-1307bed12680", "sighting--49dafe62-f97a-42e3-8855-a286d9d2c997", "sighting--7543ee8d-8d51-41c4-ba1e-dee1604e956c", "sighting--cad558b1-a130-49d2-9e9b-14332928a80b", "sighting--7b4dc343-2221-43ba-acf0-6af3cfd176c7", "sighting--3b7082fe-86a5-4055-8b51-8af709753be0", "sighting--cf792065-60ba-4696-9d76-b808cf1d1486", "sighting--5293ddd7-5139-421a-ad19-3564c363c7ee", "sighting--ee2c2872-de27-471e-8628-b27b7166560a", "sighting--221e6b1b-017f-4f14-b657-757ee4b9b92f", "sighting--920c03b3-cdd5-472d-8163-aa2d665e66f8", "sighting--008df03c-e95e-4c7a-b0c2-73952e1a4b21", "sighting--a21c3c7e-991c-48fa-8d2b-1fd57c87f88e", "sighting--e7abd9fb-323c-41d1-88c0-962306984576", "sighting--6b0b3033-c7f5-4474-baf9-5bd721a9f029", "sighting--26fae839-8944-4485-9c98-c49977a9e340", "sighting--82a96654-3bb6-401a-af36-a1cafc4b48c2", "sighting--6517bfd6-043d-405d-9e4f-950747a565cc", "sighting--4c92d4a0-9097-453d-9cf1-0d9603c06eac", "sighting--2ae5b824-cd5c-40db-a414-22de2b3b1b6a", "sighting--fd2302bf-4561-40bc-a5a4-3cb0ce9e442f", "sighting--63608aa5-3924-451b-90a4-5cfa233a0f4f", "sighting--c224fc9d-43ca-4e38-937c-f91f2372f17f", "sighting--e290b157-aec3-4fbb-a3ea-10086e806db4", "sighting--a5459855-4c44-491c-a02b-e998efe7948c", "sighting--c4a455cc-ca0b-4cb9-b7f7-c387e13a588b", "sighting--1864d14f-7a4e-4526-81b8-cc459150584c", "sighting--8aa8a7da-8b0e-4d9f-a58f-c0d2a398d491", "sighting--258f1afc-8c6e-42dc-a418-97929e10974e", "sighting--e9059c1d-8efd-4fe4-89ba-8a2185c22247", "sighting--917fff15-22ed-48ab-86e4-5b0beb5d2864", "sighting--b1512b8d-7351-4126-ac76-80247ceedcf0", "sighting--088de70a-dca3-416d-8096-6a661c3858c0", "sighting--ab316a71-14f6-41ac-8be9-c776f3574d4f", "sighting--8febc2bf-255e-4991-8a1b-f1697e1f75c1", "sighting--22731bef-3a8c-4e5f-b9f2-89f63ae35985", "sighting--11a3c31f-f022-43ae-a9e4-a9b517ee55ed", "sighting--3312fc87-e64d-4a76-923c-132b7ca47eb1", "sighting--ccaff34d-9dc6-4e2f-83b2-f7fda8ffdbec", "sighting--acda8768-7730-40a3-a379-592e882dcb5a", "sighting--1173e0d8-010f-4faa-8375-11103039ccb5", "sighting--ea6a8dc1-e483-4e3b-8b96-91f6aec23975", "sighting--fc90d1ad-0aa6-492f-99d1-a2614a81b6d1", "sighting--8bb01bf5-6e48-4163-b7e8-58140e80feca", "sighting--6d71de1b-b05c-4c09-98ec-147484bad6de", "sighting--d8273db3-c9d3-4ef7-a7f5-0cd33b9e1791", "sighting--2895f964-d312-4a5c-8d17-8f399306e0fa", "sighting--947809f9-d276-453c-9c26-8833546d174a", "sighting--042456d2-5ac2-4c5b-b274-6019f14e079a", "sighting--d4c1f651-44df-4ffa-929a-ea1270dab9fa", "sighting--7e92aa83-1c4c-4c51-978c-60851a85370f", "sighting--bf7b63db-7427-4488-8fb8-1c23482b610e", "sighting--4769ca3f-db97-4a58-b002-935a5aedadaa", "sighting--775a09bb-81da-47f8-a62d-c1f2aaea19e5", "sighting--32e7da49-df0b-4111-aeb2-c17d30378401", "sighting--4a1475b1-60f1-42ef-be81-3826cb42c044", "sighting--16171054-cea9-4a76-9f75-8120b62ba4d4", "sighting--60350f71-972e-4359-9fa6-80e98fc683f2", "sighting--c8fb2ebc-8ad1-4557-8eee-723ef0254bea", "sighting--e77e021e-e24a-4a97-8173-c8487b1aad94", "sighting--07ad71b2-7036-4903-8d03-1cc5e75b4c79", "sighting--95a6c96b-28ff-4ea3-89d1-58687711e724", "sighting--0d6180c3-7f41-4238-952f-8440403af812", "sighting--7c485751-3576-438d-90a4-23b5efd3f7ad", "sighting--a0ec6a27-ecd7-4ecc-be8d-a0ca6e24285b", "sighting--c35746e0-e10a-4227-ab79-1ec32e475d3d", "sighting--5fcca053-9a05-425f-837e-5b1ba5e0be2c", "sighting--98446be0-2569-4d95-bd0d-31b9cf5fa339", "sighting--ca7845a4-ea41-4564-81e0-2bd1a8efd593", "sighting--bebcfc83-aa8c-4367-80bb-b3d97c36f99f", "sighting--f9dac180-c0b1-4736-a6c8-375af5ac0ac5", "sighting--452ca02f-a0a8-413b-a001-0fd2026b877e", "sighting--3e33ae5f-011e-4440-a120-aa640a4ae327", "sighting--5a622223-f247-4f54-9c09-486ecd33bd7b", "sighting--b3ac242d-19a8-4394-89d7-49e5a4bec02e", "sighting--5f7f916d-5a8d-47d2-8cd6-a67138a07b62", "sighting--035eab83-d6f7-41de-90dc-1dae7f6935c6", "sighting--c876a3d7-2e43-48fd-91bb-2a46c39e63e3", "sighting--e0ed4ffc-5fe3-4364-a55d-2b5a72ba3e7c", "sighting--e1b2b012-c12f-4cec-bd17-d3fadaaafd7d", "sighting--c0a8c4ef-cec7-4c44-8204-ba4c6e69c66c", "sighting--cfccb183-e148-4848-a16b-c516a85f153d", "sighting--e9a307d9-f684-4f6d-a46c-1c4af07b4504", "sighting--d7fa1a31-9c66-4c81-b673-a1f36006baaa", "sighting--4371d914-5600-4ffc-a072-7be3c31daf99", "sighting--e5a63bc8-fdc2-40bd-b9d4-189ec15b6c9b", "sighting--b43ae5e6-2c6c-497b-b747-8041d76d838c", "sighting--a86b94f0-6648-4b38-bb23-900ed07ced09", "sighting--ed269fd2-6f03-4eaf-9b11-06e09dfc4148", "sighting--4ef6eb79-0d08-4306-a289-b4c82b682a66", "sighting--b4bca35f-62c3-432f-82d0-bcb9580bc20d", "sighting--c1123c40-e05c-4d17-b4c6-92a8f8da308f", "sighting--b14dab78-6fd4-4c7a-90ce-5a59b370a65d", "sighting--8c4fc600-21f4-4f07-9257-5511cc0e2322", "sighting--b9678e2a-3372-4c31-8eaa-fe1e65b20f71", "sighting--5e4f554c-280f-42d4-a851-759307ad9e98", "sighting--2e016ed5-8286-4db6-9a48-d8056d28b06e", "sighting--1ecbfd10-b20b-4f1a-9db7-cbd2a3c4bce4", "sighting--99cf5bf7-fbc0-4e6a-a22e-42caff775189", "sighting--821e6a4a-3220-4e1e-b242-74d724867e33", "sighting--af316ef9-3dcb-4d8d-9457-1988a5ece31f", "sighting--06040e76-35a9-4437-b119-e4d3e600eda1", "sighting--45c6e0af-279f-4734-9503-2a96af5ff171", "sighting--9195a150-9ff4-4251-8438-1cfb2646366b", "sighting--f4c3f535-80f8-4965-a118-bed62a5ad35e", "sighting--2cd18f09-b488-4c7f-b6b6-5455b9d56430", "sighting--d7046cd2-8582-4c5b-9531-00bc8ef90bab", "sighting--433cae3e-7be2-4554-a215-677b52ac8249", "sighting--aac8782a-672a-4d6a-8761-e7b266efcae6", "sighting--8f51aa93-9589-4fe9-8988-b2e8ea90cad2", "sighting--96ea35d3-1cc5-4d9b-a22e-8b11b76d6fdc", "sighting--88fe7326-b492-4c8a-bdc8-715e609b541e", "sighting--5194b80a-df55-4d0f-b5f5-28858fd31e9a", "sighting--9ae2d2d4-01c2-4054-8c1b-1f4ddc9962b3", "sighting--b934a4f6-7e86-4b37-a386-00a54ea3795d", "sighting--f7fd0c3e-3a90-43bf-89f1-f8a58c9050c5", "sighting--e10c0579-2ece-4b7f-bb3a-b3668ddf1b03", "sighting--e9773192-4e77-4bfd-98b2-33c09ef6e2f6", "sighting--93cbc37e-cd96-496b-b7f2-16d660215400", "sighting--74443f24-4463-4b48-9d2f-fea87f481d3e", "sighting--c5b7d837-3247-442a-8c7e-34781a4753fc", "sighting--b198a77b-db59-4329-b976-e48c248a0d87", "sighting--9fe4703f-3723-4c3a-82f0-5658e69ff769", "sighting--ec5f3104-6a7b-4e34-9698-89177c0cd62f", "sighting--b3f7eaed-17cf-45c3-b3e9-d20bd02c456d", "sighting--7f350cc2-6df6-4955-82a8-d9030b7e4da2", "sighting--6ced6f7d-1431-46d5-832f-73d3e48a1c60", "sighting--c0d3ff46-1951-46fa-bdb3-a4606cd39c73", "sighting--8d223087-890d-45e3-9dcd-b658529e20d7", "sighting--9d0884ed-a189-4828-8cc3-950bd87352d5", "sighting--9972ce6d-b27a-45b4-8bec-4b34f115ac67", "sighting--fd1274b7-6fee-440c-bcc0-ac6bd143b5a6", "sighting--bd6bd7f2-b96d-4dd3-af97-04ccbd612d38", "sighting--aadce168-e2ac-4f4c-a021-07c97436e2a7", "sighting--8d383b09-f077-4a36-8dc1-b2269b0ae2aa", "sighting--ecd982d1-9198-47e2-bd6a-ca32ecbe9707", "sighting--3b113644-ab8d-492d-822f-253a600498a6", "sighting--5199404f-340c-4b30-a904-4ae1bf04663e", "sighting--ba75fa84-a455-41a0-bbff-089dc1ca69ca", "sighting--d3b80b5d-6a60-492d-ae7e-e2d4b8205ced", "sighting--357f9f77-e422-4a06-aad4-46692a844817", "sighting--8fa8bf69-bd55-4ac3-bade-84506e2396e0", "sighting--7d436e4e-eb35-438f-83bb-369f193886a3", "sighting--236b4a8b-aa34-40fc-8c36-01009410ea06", "sighting--b85727e3-7e69-4f2f-837b-e5b034485365", "sighting--559a5042-fb73-4b8b-b9d6-66b7fa1ee095", "sighting--8c60f939-db1f-4b7c-bb26-7f267aeac829", "sighting--3bffafaa-4ce8-40ff-8ced-9cbdf5af0ea3", "sighting--41b1c036-30fd-480f-98b1-af5d553208aa", "sighting--54a111ce-9251-48d9-b100-3b785c1d4de8", "sighting--58580d28-ae38-4f62-a703-11506356a7f0", "sighting--475e9e99-6b6f-49fb-88bd-efd3140118e4", "sighting--7997c69d-2d6c-402c-b554-16f749eae256", "sighting--c80f5e82-de65-4977-a8ff-11503e6e0edd", "sighting--806c7a68-1924-4490-b92e-5335dce34028", "sighting--a92e0e83-6e88-4070-91d7-5d4fb80134f9", "sighting--906c0e15-fb78-4acc-b858-de82e4c643b6", "sighting--4077140b-0403-4dcc-8fa2-1f00c16ad6c4", "sighting--a7aa2dab-c8c7-4bf2-86ce-ca6aa427734e", "sighting--938efc8e-0c41-42ff-9e1c-4bee8aff121c", "sighting--6d8847ad-9d61-4737-8d60-d3117d6b6b28", "sighting--3066d28a-1875-4a56-8a67-66b5f2b2da7c", "sighting--3ba25709-9ee0-4335-87c3-5a3e0b864f17", "sighting--4d74faa3-aaf6-4c92-81a4-6aa81cc026a0", "sighting--ba970c1b-179e-47f1-8f34-58b305538cfc", "sighting--8104f866-0ba0-4b0f-b7e7-41b81f8e3787", "sighting--ac7e3c47-36c2-4e97-ad0c-8e915cd589a4", "sighting--48469e27-280e-40c2-8331-c5de525048fb", "sighting--af5ca102-fbb0-4810-964f-5c27e2fd6a0d", "sighting--b3f808c2-5f2b-4b86-914f-c56ee8d5c583", "sighting--f2121c72-3823-499d-b29c-d788bf118fe7", "sighting--1d3efb4f-d4f3-4a9b-bc37-d9d65b9f999f", "sighting--00059da0-9f0b-439f-8517-140fb757bfe1", "sighting--ab7e23eb-3801-4ba8-b081-44553d2364df", "sighting--d728ef78-7de0-40d2-8688-cf46fa5b7f45", "sighting--e494411a-dccc-461b-9409-ba2790a4ba95", "sighting--97c5557b-605c-4d23-88af-e7e789fb4f47", "sighting--0e9eb8fa-5d7d-4268-abd5-b3b3f893d4a3", "sighting--fd6cd412-72e2-46b7-9202-cfd7b9becd5c", "sighting--994604ed-6243-445d-9f00-1f23f74f29dc", "sighting--b0222fae-94f5-4d17-b819-94a5e84f7dcb", "sighting--d060b53a-ceac-437f-b0f6-55ff0f532b95", "sighting--1785f823-68fd-41f8-a77b-ec9383819d79", "sighting--b18e95fe-2720-478d-8d17-1c05699f598b", "sighting--d79c2aa1-7a79-4aa5-8acd-8e1075af3f05", "sighting--fba3fbf1-1db8-4f22-8f3d-5f97a5378e63", "sighting--e62281e3-5601-42c5-9f89-240fe161ad0f", "sighting--1918d39b-4ac7-46b9-89ef-5aaa14562ef1", "sighting--b8f6d3c8-1bfb-48d9-b6b8-7d45d9e981d2", "sighting--c84fb598-8ec3-4a33-94ef-13d69dcfeac1", "sighting--d94ea133-e816-4730-8240-c80221b1a883", "sighting--dbbdbcfe-58be-44ff-9fbf-4fb18c379ae5", "sighting--be825333-325f-4e21-a708-646b07fc03ef", "sighting--da66a28e-78e3-4b40-ad07-5cd3a93aeafb", "sighting--dee4592f-3065-4cce-a471-701f93ecc884", "sighting--441121db-0d38-4e11-8153-2503bc065e44", "sighting--60b8f22a-89aa-4b98-912d-a58e22b55922", "sighting--1737acc8-896d-41a8-9500-63934e79c2d5", "sighting--c6175ce8-e90f-4c5c-a8e4-3f8b552d04a8", "sighting--0affc6af-c299-4726-900e-ae25d61a2b22", "sighting--d8e2467b-2238-4d89-bbd0-fb45fc6bc5c1", "sighting--dd6527e6-100c-410d-aefe-5f334bfb726e", "sighting--df2baad1-3a81-4712-80cc-1b97983d0cf6", "sighting--34592fc1-a551-4251-bb2d-e8da0ae269df", "sighting--72e02e48-e6ab-4cc4-973a-4c41615f9b12", "sighting--753524ec-6b55-4f15-b8d3-42156f919b1d", "sighting--c0f3a5fb-dc59-44e5-af42-cf5527f71a6e", "sighting--cb02dfff-d739-4fd5-b159-2754869fd272", "sighting--5eb577ab-abe0-47d5-9afa-e90f008f6c73", "sighting--595b57b8-6ba5-4cd3-b48e-98e8a1742988", "sighting--4f9d3c35-605b-4be1-8314-2649541821be", "sighting--639ecd13-2401-4b5f-a5a3-639d91748c9c", "sighting--103fdc16-97ae-4610-805d-65cfd6408cf6", "sighting--235ee4dc-9f79-4c1e-90d2-b82a8f42c985", "sighting--665c72ad-7940-4280-9000-c3e907b287be", "sighting--03909fff-c623-4332-ba04-a4558c1414db", "sighting--9a2aae44-821b-4637-a910-cb21c96a30ca", "sighting--644d3100-edcd-451a-a997-07dc4f686396", "sighting--04d4f091-d4bc-4c9a-a097-760ec335fd59", "sighting--7a48d4cd-4e7a-40f4-a8df-c3ed9ae9e29d", "sighting--bb1a5b44-7aab-45f7-ae22-86c4af8996f3", "sighting--f203c235-a1c1-4924-bf3c-f37c69de878a", "sighting--a9176543-b7af-456b-98f5-b37ee3cde271", "sighting--fad361ca-077e-4dee-ada7-40bd070d093b", "sighting--1d6f703e-d863-4d97-b85d-585548282472", "sighting--ae0c3207-e3f7-4c2b-b260-05578f07c3b6", "sighting--77d7289a-6879-467d-ad7c-a7b707d1ee6c", "sighting--6787a58b-e161-4464-94f9-f55ff839378a", "sighting--041ce797-cdfd-4281-80c7-51379d9efa6c", "sighting--fd167616-da44-4802-9c96-df1c9dd102cf", "sighting--eb1ba442-28cb-4b81-8be0-409bb42a20c2", "sighting--d8df122e-6eb2-43b6-81db-c0f3f1001634", "sighting--34ab6fc0-4061-40b6-9ffe-decd70b6502f", "sighting--8815f7a7-7433-4717-9a46-dccfd7578753", "sighting--a024d168-e669-4694-a061-6658405ee87a", "sighting--c832d468-a8ee-4c95-abb4-99143ce4bb84", "sighting--58474288-602a-40cb-8937-1875b348b19b", "sighting--7785be2e-46c8-426f-b3ae-ce828a85e6b3", "sighting--b19aa3f7-87bf-4086-a001-7d2c777c136f", "sighting--83291525-3895-4ab5-a75d-3a0ef7d6e323", "sighting--5b100a0e-c699-4ab7-a795-bb0e997a10e3", "sighting--b0fbf9cc-f843-4f85-b423-a2ae8c2f59ea", "sighting--d22c08ea-0e52-4cda-922a-e9106868d0bc", "sighting--5278d20c-2790-4533-a226-6d9a426504e8", "sighting--4b78aa76-bc85-4b22-9f88-1bdbebdab90b", "sighting--95b2bccc-c522-41a0-a09a-f77cac7e4385", "sighting--be488920-8a74-43dc-8773-c96fbc0840ae", "sighting--b7d8bcd3-28c9-49ee-84ca-6c4ae435bf90", "sighting--86110ea3-eab3-4e80-b51f-826ee573da18", "sighting--54ccc93d-ab78-4963-9449-1b012e42ecfb", "sighting--44422aca-3ebe-4cc5-b71c-78778c0d05b9", "sighting--a9836a82-b980-480a-8d38-c43660111672", "sighting--c1bcaf0d-a12f-4f87-a16d-a246ac18a94b", "sighting--fab4576a-2f77-4d7a-aa73-c9d030791e27", "sighting--059f6dd7-645a-4869-8e92-3443c68ef8f4", "sighting--69140c37-45a7-489e-b0a5-907073efed12", "sighting--f41072a5-96eb-4292-86b0-55cd47a69718", "sighting--31f72212-e0e4-4d8b-8efd-98cb41d01220", "sighting--3e25dca7-1703-4aa8-94f3-2b0b505a559b", "sighting--585e556b-719d-418e-bc1d-c161def0d267", "sighting--93cd369e-72b4-4392-b939-ff031fb7a73f", "sighting--79b33601-4cf1-4e3a-afee-0e09267e3a61", "sighting--c214df2b-031f-4a90-86b6-54ffb8ea0c0d", "sighting--53f39247-ff62-488d-8146-d1698a46a8a7", "sighting--19de579e-98e4-407a-a40e-39f44a58c201", "sighting--58850114-a485-456d-b9ac-83a8379c9179", "sighting--b0160c75-4f4b-404e-9c5a-f8d326a0c122", "sighting--666fd61d-64bc-4549-be62-1a7a52f8e643", "sighting--3041a168-4188-4906-84ef-f88df27264c7", "sighting--64a2d305-dd6e-43e9-a721-edc76ec894f8", "sighting--6497f768-56d7-4758-8163-9517a5d9e488", "sighting--f4cefaaf-fbe9-4dc9-b1b3-0fff7238a3e6", "sighting--55e390f2-b2b4-4113-b6f6-077ae8622b76", "sighting--f25823d3-7743-48f1-b6e6-cbaed8297500", "sighting--7cee7268-3f85-4ad7-b573-74261f60f206", "sighting--df7b699b-b3cb-408e-94a7-f0ccfbd30a09", "sighting--43f542d6-d066-43fb-9b8f-8dc2f7dbb79e", "sighting--d04d8ce4-affb-4ded-a082-f8ca2259a591", "sighting--56825804-f436-43f8-8527-e481cd69d90a", "sighting--5b788bc1-2cd8-4915-b679-9d3f79492de7", "sighting--a0611d60-95b0-4ce6-8630-7108a2293e74", "sighting--425a74fe-a8bf-482c-b351-50b51605da5c", "sighting--de3aee70-b378-4dfb-b3ff-aa3e4cdf5fec", "sighting--e31ce019-f022-4b32-bd4a-1ec8d727a343", "sighting--514b9fac-95e0-46f4-99f2-55ca2c8dc3ce", "sighting--15279381-fbdb-47a8-8d29-eee311e60e67", "sighting--4f1043d5-b973-4785-8344-3b2971ea3e8d", "sighting--e07ccbaa-e055-4e8e-8b45-a7ac418119b2", "sighting--8b3c1561-36ea-467e-a76a-953ab0e9ebce", "sighting--1562f82e-b2f7-41c9-bab1-82176990ad88", "sighting--cbe61e8e-3a14-4dd3-a29e-72175354200e", "sighting--cc376a8c-d3e4-4056-9f07-43a1b4c3ae4c", "sighting--91b1cd0b-ab8a-4e75-a70b-f57c42b0aa33", "sighting--c4621204-6e28-4b43-8be8-02535e62e26e", "sighting--57ab4e14-e056-47c3-b109-8c96ace88fb4", "sighting--0c873c98-3464-46ed-af51-ea03b011cef4", "sighting--dc52a752-a546-4976-ada0-ce60e54610ed", "sighting--6593e3d8-9ec3-49b9-b13a-0d4414717f1d", "sighting--4cf4c0a3-380c-4779-b4c1-7584e970caa1", "sighting--12fc7f77-4318-4743-9855-828cd0161dda", "sighting--4f085b3a-58cd-4886-a3c1-95f9c3546a60", "sighting--38f79dc6-ebfc-4218-945b-1df1e99eed5d", "sighting--27165dd8-9972-4bd5-8db3-23bf86e40f6e", "sighting--4941bc87-be17-49b9-b245-17fa31d8988b", "sighting--5231c825-e7a0-493d-8da0-77247b53f2ae", "sighting--62b482fc-7c34-45f1-88f2-c7aa3b2d7ec0", "sighting--82095a3e-96d2-4c2a-b000-54663c85ee4a", "sighting--73a20a8c-18ab-4964-a85c-78a9c184891b", "sighting--b177c0b4-23ab-434b-877a-956f743f85bf", "sighting--8de2bee8-5e88-4ebe-a2fe-5d74734a1ab1", "sighting--1cec85a8-b167-42c3-8501-ff2869c8837c", "sighting--c6a23965-ce0f-4a11-bab1-a04fbbe89a84", "sighting--1db2bee5-13db-41fd-87b5-64947344e2db", "sighting--390fdad4-31e0-4503-9ae5-ad5cd87bb26a", "sighting--ddda640a-8ebd-40f0-80c7-844512331ca1", "sighting--4c950d7d-4ab0-4964-8159-7aa61b289017", "sighting--3bfcdf86-391b-466a-9927-6f81ce931fde", "sighting--8ce79e8e-2e28-4a3c-9e36-46c65873c1ea", "sighting--93707a1a-7768-4867-abcc-4edc95cb1498", "sighting--a47856c0-0308-4e99-a45c-d08928273b1a", "sighting--50f5c9a1-50ae-4377-854b-665d322dd3be", "sighting--4d75b214-d02c-4dfc-b572-9b546533964f", "sighting--a9bb4695-bfda-4f4d-9364-c99b7d1f8488", "sighting--6eb56c45-b1c9-4a95-9568-e4ebd990963e", "sighting--97a49235-bc52-4574-81fc-f9d938f17eb9", "sighting--808023db-069f-4e4d-b610-094b922d8b5b", "sighting--7ae8be76-45f5-4d4f-b965-a8f6193051e9", "sighting--a018b7a1-e6df-46ed-9f6e-04d055462352", "sighting--3665e5a5-199b-4f77-bc63-4ed12d0b1a50", "sighting--628e6339-3b47-4e18-8ce6-92eca70e1de7", "sighting--74c9025d-b3ea-4594-8d09-1b263c0ee832", "sighting--8d185efb-c2b6-4212-aae6-50cd419772a0", "sighting--5c53fb47-7f9f-4165-ad45-c9e1190faf20", "sighting--46998256-ef2b-484c-a0ca-35f168395b09", "sighting--03bc6e1e-eb5a-4cda-b353-79f4549e03f7", "sighting--1e3190bd-aab1-4680-9b4d-0d9a3a2675ec", "sighting--24484a88-7ea5-4479-9779-6ae8df310592", "sighting--78f6c0d1-65e8-484e-9ea6-004a05955eff", "sighting--902a7fa9-cbc6-44e5-bf93-a2648e542fac", "sighting--14e64d5f-2247-4094-abe6-03e5a433346b", "sighting--c6954f4d-53ba-4f90-86d3-1e300206a87c", "sighting--b6c2b391-832a-45dd-acc0-b79fb0c38432", "sighting--4c524527-3120-42c7-8456-22da9672c120", "sighting--4219c6d2-cf3d-4ace-9633-b42e4d0050ac", "sighting--cc4889c8-845b-48cc-9818-a6fac56f0288", "sighting--1c16048a-78f5-41e9-9288-a1b12cf4f31e", "sighting--8f1a9c9c-a88e-480c-91cf-4476654881b7", "sighting--6ae2e7df-780b-468c-8dbe-77f4ec3c6a7d", "sighting--3a25fc58-e6a0-4d13-80dc-8d025271dcf8", "sighting--b4e5be58-3e3b-46f1-b8ba-8e02e09d41ce", "sighting--24af691c-de06-49c5-b3b9-a5fd19d8d5e9", "sighting--d1601f8d-e331-4c5e-9a27-e44429e2892e", "sighting--1ca20ddc-0ec0-42d4-ad62-b5d4e63aef5e", "sighting--ee7eda72-a692-412f-8037-06b105ddff18", "sighting--337d05d9-ead7-4028-a7f2-20c68b86a31a", "sighting--7376673d-856c-4a89-a057-222a394f1dd9", "sighting--5b45ef1a-eaa2-4a96-81b7-549f7a96b5e8", "sighting--005ea2a9-c9a8-4a95-9944-4ebb4c9b6779", "sighting--e52b04f8-8557-41f7-92d8-4b0c61c334b9", "sighting--3422871f-5b57-44bf-a0f6-b7d1433fdcc2", "sighting--490d6878-315a-43bb-bc40-9de8f45f7cd9", "sighting--75d0bdd8-1f2f-4e4d-b4cb-3a3eb3597acc", "sighting--893a464b-5306-4009-b179-6d254e0e9499", "sighting--d68d75d1-30f5-4543-b17e-f399c0fc395c", "sighting--031a9582-84a3-4484-a414-e4a00905bfff", "sighting--51e835a9-b837-4837-9ca3-ecc5c89b62ef", "sighting--4af36552-c08c-41a1-9ea5-f0fd0fb6488b", "sighting--821653bd-4b66-4f15-bea1-2d557b3cb29e", "sighting--7ce5547b-a147-49ca-9eca-f055f288bf92", "sighting--4f60f795-1fca-4433-a573-56bdb96f2059", "sighting--3faaefc2-d25c-4086-a5b0-93df1fde6090", "sighting--f7d1fc7f-b87f-42f4-83a5-a4f26c3312ac", "sighting--68844a75-ec4c-400e-9c2b-ec83bdbb23cd", "sighting--a8ab25d5-5614-4173-ae8d-f9a09115d5b6", "sighting--dc3765d5-d743-4fd1-b23b-4371a9d559fb", "sighting--06724aab-afd0-42cf-a1f0-6c171d075d46", "sighting--80bda388-0698-4d2d-a637-ff6fe1601e34", "sighting--00526f79-f413-487f-86b7-68844a45eb2d", "sighting--bfe7e13e-699f-449f-acb3-8b7bdbda7357", "sighting--89a7e1f2-963a-4ff6-adf6-10dd66070079", "sighting--005515d3-8b63-4c71-a82f-9fb453253039", "sighting--770e60ed-da60-46c1-8aa1-188e56361424", "sighting--ad338745-4ab2-444d-9387-b8e9b11c1eed", "sighting--1cc0d082-c6e8-4644-a659-df3a6a1908ac", "sighting--e0ca5fa7-bfbc-4659-9810-01c6bfc471fc", "sighting--3beeb9ad-0228-4b32-bf0d-375c1ff990cb", "sighting--981bb365-30f4-4296-b38a-31626332edde", "sighting--7afc3838-1e7c-4e81-8809-4d4927eff6f9", "sighting--8627286a-86da-48e2-9e28-365cbd562ba7", "sighting--ba445841-c2d2-4fad-9ce5-ed200f4418d6", "sighting--405d709d-9c0f-4abf-b721-b905a9303a48", "sighting--7c89721b-0c7c-44a5-b701-5ca702606be8", "sighting--c2de5b14-e236-4aca-bbf5-245947792153", "sighting--51809325-f836-41da-9bf8-fe0bd648ac23", "sighting--06ff5c9f-5b61-4ef8-ae76-1d44bdfa065a", "sighting--3adfb8d1-c864-4c36-b15b-5129550eab06", "sighting--5f5c7199-5565-4303-89e8-a869a960a84d", "sighting--598a08c3-f611-428c-8cd1-c93a44f5e8b1", "sighting--ccd4f8cb-eece-486f-841f-0fc5266b7be2", "sighting--b801040b-7244-4af3-8176-9385394f57b8", "sighting--5c6aa701-0ccf-4d80-9927-5d8e492c45ed", "sighting--60320ef3-c469-40b9-b18f-d4b985229656", "sighting--b691ae34-05e3-4a2a-9b67-88dc9253868d", "sighting--6d333e8d-1fac-4c6d-ab80-f9c33b241985", "sighting--4e37e48e-a77b-49ce-9a96-808458f3ee7f", "sighting--7c694fc2-eb6e-42f2-99c1-ca0d9ccdf714", "sighting--dcd487e2-513a-4c37-8be3-3215f1ac674d", "sighting--3690c0c4-31b3-48a7-b913-47e533780603", "sighting--95f1a8d0-69b0-4e7d-a45a-d70da828b410", "sighting--a4c2effe-3f0b-4bf0-845d-c3b896c2ed93", "sighting--6c1c6949-95ab-48d1-86ba-ddd84d0165a0", "sighting--165ff432-2412-4d37-92dd-ebddd4752ed9", "sighting--fbb1b1c8-74a5-418f-9233-176b109033c2", "sighting--30679d67-1ff4-465b-b5be-cba6c37322e8", "sighting--43b4e604-ee5d-4bf5-87c8-87e601b6dc5a", "sighting--6ba55575-a41e-49e8-b6a6-0b8da3f4427b", "sighting--5c500ec4-eac6-4b42-b2ca-1f06d7b3473d", "sighting--cd75147f-2c7b-4bd5-9416-88a944cce7a4", "sighting--79bb6cd3-9589-495d-bc8e-b6e81bb0288e", "sighting--53a42c44-68d7-4fb0-986d-089214a939ba", "sighting--150d0118-080f-4f32-b974-da0011fa4efd", "sighting--451d3550-5235-4159-8e86-eaa07c96f8d3", "sighting--a5dd2488-085a-45d7-ac1c-492c47f61b46", "sighting--6c2fbc53-fe16-4fb2-a360-da70d4b14c79", "sighting--5938bc07-a3f3-43c2-93a6-eacd5054667c", "sighting--45ec874f-2d30-45c7-b6cd-11baec36e331", "sighting--acb8f2d2-c4b1-444d-b6f4-38aba88eda3f", "sighting--e86817ef-12c2-46d7-a061-40cbe02dfacd", "sighting--d31e79a1-d1ab-42ba-9fd0-d65fcc62befe", "sighting--43daa9e3-7f73-496b-9eb8-9c906d90ea1e", "sighting--29849afb-8e47-4457-bc88-31b123967020", "sighting--e16212b7-2060-4fc0-892d-3c233fe44621", "sighting--c1e58287-dd0b-4d87-98db-39f700643a5d", "sighting--1c54d492-2baf-4190-856a-05f6b7c5b955", "sighting--b485157c-4e0d-49db-bdb2-0241d1a18e89", "sighting--4987ef01-6089-4f2d-bdf0-6e3b5d97c4f1", "sighting--24bedc5e-8b61-41da-b609-cfd580b5ee39", "sighting--5f60ae95-a497-4603-8a16-1c38f0b9aad0", "sighting--cbd281f4-44fe-4e8b-9f50-0c16379f52a7", "sighting--5ec8689d-239e-4d50-bb6b-9549383490ad", "sighting--f039af2e-8a7d-4b9c-a3b8-fff82ac9f334", "sighting--06d274c8-3213-424e-8664-edde3723021a", "sighting--5a9dfd62-1b6c-4275-83bf-7d842c01b4dc", "sighting--b00b907b-88a4-4b50-b31a-cb2e68b965b5", "sighting--fa2f27e2-986e-4cb5-a67e-54cd9524980f", "sighting--431b7438-2bb5-4ba3-a7cb-61b6d4492d5e", "sighting--2cdc7a4d-cf4e-4c4c-b0f1-359f911c83cb", "sighting--3437d0bc-22af-4b85-a687-0210402d38dc", "sighting--7e2296f8-79fc-4b0e-ade6-f1358b15c77a", "sighting--f9eb2199-be38-45ae-9ccb-7facd5922b11", "sighting--d53a7bf2-a26d-4ae7-84a8-c506f14afdf8", "sighting--fd3a3b37-2687-4d39-9587-886264bf8f62", "sighting--f3fde103-f25a-4641-8565-703be9694e7f", "sighting--294f2878-93a8-47a1-b0cf-2f868a38a8a2", "sighting--e8c45b97-013f-4034-89fa-52d032837e80", "sighting--601e9e66-47e6-4d45-b275-8cd6b83cc2e8", "sighting--30c3e3e0-8f9e-41ab-b830-e69837f6a642", "sighting--3a762985-e1f6-4cbf-9cde-d57e9953b3df", "sighting--f8a768e1-f9bf-4484-a812-da4f85e980e7", "sighting--bd0dd47f-c5f8-42c1-b8de-662bd4f8a502", "sighting--be04e560-06e6-4bdb-8f95-9c55aa047d8e", "sighting--efff2ca0-1beb-45db-ae07-5501b094650c", "sighting--63033edd-7e67-4f8b-a61f-e3ac5634184e", "sighting--f15d6c52-869e-4253-9a18-74cc0886fc83", "sighting--29e5f649-fbb4-4ec4-8a79-588ac12a09c6", "sighting--6a5fd087-9348-49b5-b3e2-1b28cc20e300", "sighting--6433c669-80ad-4d08-a84f-4d6225af624a", "sighting--47d2b4bc-e0b2-4098-b39a-3d97dcdace11", "sighting--2a180f9e-30a7-4f3d-abe0-b8666dcf3457", "sighting--1132fc7a-eb5e-4252-8530-82de9dd03676", "sighting--e4d704a0-2dd3-4dbf-aaec-5fa74b855b38", "sighting--f7292a94-c501-4975-8f80-99f35eb52241", "sighting--6cec5810-c47a-4c84-84fe-1ef1d82dd5ec", "sighting--591bc267-1fc6-4fdd-8989-126b25b1f00b", "sighting--aba526f2-43fe-44b2-955d-2d5ae58bb24e", "sighting--b889c8d5-cf46-4948-8f3c-be7144b597c4", "sighting--bfa77961-3767-4638-9557-ec04a24c0652", "sighting--3abac3dd-bdca-4c95-b297-c4b490014cb0", "sighting--29bd3998-563f-4bd1-9ee1-f097321a06f8", "sighting--83717b4a-a758-4f1b-9c57-a4637b5e17d3", "sighting--5e520705-5df7-428c-8ed5-755eb17cf1dd", "sighting--9f65e8a0-4f4c-4d4a-84b6-681d23031f8a", "sighting--d8408acb-90df-4966-8448-a0eef27652f7", "sighting--dec2b4a0-e5c5-44c6-a88a-c5db521dd9e3", "sighting--a3cfd405-1b22-4c7a-aac5-ce1fc5567c9c", "sighting--e84366a7-8441-4e7e-90ab-3f3c4ed1040a", "sighting--c4f1b26e-afb6-4deb-97b9-a4d4393b6ac9", "sighting--f8ab6567-074b-4188-b783-af7ee2c0a8c3", "sighting--84589e5e-afaf-4179-97f7-2873ca6300c7", "sighting--b0cba193-1c57-451c-80fb-f4535d4c79c2", "sighting--bfbe20c4-1b08-466b-84bd-9348df25bb05", "sighting--38a4ac16-c8fb-45c5-866e-3e04bd9a0974", "sighting--5fdcc13d-7d4b-4162-8fa2-26d33d56aed0", "sighting--40ea9ba5-55ce-4fe9-ad39-39d0201f7620", "sighting--caf2554f-51be-4c99-839d-34e912748954", "sighting--6ee63385-e41b-4533-a3fa-5bdce52aef05", "sighting--1df6e963-4e52-457f-9bd6-fb2b4f6834d3", "sighting--9d4f06ef-6793-4ad1-bfbb-575f919d7c63", "sighting--463c312c-921f-4953-95cc-de9c3fea2beb", "sighting--4b835694-e1b8-417b-85b4-cd4854b7ad5f", "sighting--c31a7205-c1d6-4c37-90ae-f1b4a7023faf", "sighting--b4a2d67c-86e7-4566-a992-c2495fdf7a50", "sighting--91b6dd06-82e5-4453-a798-e2620174ed1d", "sighting--07f87066-9923-4107-a3be-5d207fd38dde", "sighting--fa4c7b47-9053-418f-8198-1d816057cdb3", "sighting--08f73bdb-f6bb-4a66-8f11-c0e4646ac504", "sighting--0d6be7a8-d110-4c19-95c7-a1fcd14aae9d", "sighting--e248d5d4-70c5-4e3b-9eea-84437f4cc406", "sighting--0df8e2f9-f37c-4fab-9b3d-d2051fb167ea", "sighting--4670ec54-e627-4cce-b33d-d2dbdf8ff4a0", "sighting--21da620d-647e-40ea-ad86-0205d1ded189", "sighting--99107285-5c9f-4ef1-9421-0db99ffbadc6", "sighting--3f064ad7-7b93-4031-9724-09d14e377808", "sighting--a9d800ef-2b47-4d79-88f6-83f6ff9572c5", "sighting--219b9b56-aa29-43c0-b79e-f548ad773929", "sighting--da563d4e-be83-4874-b824-9ecbbe15b570", "sighting--5e566ee9-73e7-4910-b669-2b0f34a336b9", "sighting--399809df-294a-4dfc-9085-13a48d72f2e0", "sighting--4b5d543e-e695-4b2c-b304-0630ba5b8e23", "sighting--eb4ee540-74dc-41de-85fd-ebbce2006d1f", "sighting--bc47c90c-5bd5-4c0c-9f6b-9408b5b0c97c", "sighting--1a614778-93dc-442a-aa6b-9c92d48ac18d", "sighting--8d2a6263-37b3-4a91-946a-c07221eb30cf", "sighting--9c927915-a01f-4ea0-8f44-3dc90bf7a643", "sighting--80a0bd91-6419-49db-96d5-99410d960abe", "sighting--c443b812-75a8-4a1b-90de-f88e7235a722", "sighting--80e01003-b37a-455c-a40b-1d6fea2b756c", "sighting--bbb5d288-e40c-43cf-a4b3-68cccc278277", "sighting--f50d30ff-b54e-4b35-8442-bbe21a12d523", "sighting--d867899f-a052-41a0-8bd2-3b07a400d66c", "sighting--7403782f-e5c0-4ba8-83ae-53cc40244a20", "sighting--d90f2576-46a8-4232-95ad-6e39c43c7c04", "sighting--9d43f4e5-9be3-416c-afc5-ac944b29758b", "sighting--eb7795b1-2c9a-4f38-a14e-efa921ac8702", "sighting--15c09272-6fe9-4087-86c9-1a8f36286178", "sighting--fb2364b5-7fdb-410e-833b-9cdaa7469a8a", "sighting--b637e8ce-2b1a-4660-bc58-73d53933f9bc", "sighting--62072400-d58f-4458-b751-666b283d2677", "sighting--d0d8ef6d-f796-42e0-8c93-0733ab2c18cf", "sighting--8558eb66-5644-4d13-810b-584debc3a6ea", "sighting--6ba13413-f379-4700-aae9-65cd594e99ed", "sighting--39de6d3b-29ea-4965-b510-7c751b9d8624", "sighting--ee5a2cc9-1349-4b24-a650-7b77aa903f14", "sighting--7a18c77a-9199-4a59-88fe-9d0db7e6356b", "sighting--1c7a8bbb-3386-4a91-9d12-3265c0321f3b", "sighting--48a43482-762a-4396-819f-4d69003a733d", "sighting--295f8786-5bd3-461d-bf1a-b93248da4719", "sighting--28d4e88e-3183-4438-ba3b-32ed956f2a3d", "sighting--c2142fae-9082-4cfa-9754-7c4b40fa48fb", "sighting--022b4f31-cdba-4f89-a9b9-7c782dd00ef2", "sighting--d39d1115-822d-40f7-9a6c-45cef309b775", "sighting--7dadad72-c8ad-45a2-9533-02ca3ee19b60", "sighting--d1594a29-687d-42e9-bc5b-0cdcb46fe3db", "sighting--ecfbb005-0133-4dac-ae8f-0365ecb1b261", "sighting--0ffa4d6a-d578-4a52-86f2-ec73d9544b42", "sighting--3fcd3c54-ec7e-4ef1-8b14-087d47b890c4", "sighting--5d75b146-9247-446c-befb-e4f582f5260c", "sighting--c30aefe3-656a-4f1e-a35d-c65d8977d2fd", "sighting--d6db440e-c2e3-4fe0-a041-4933967948a7", "sighting--2e27e2d0-3b23-4e1a-ab37-b2af1bb4aeb1", "sighting--264c966a-e638-4381-af72-098e08be65df", "sighting--79a3d99e-3cb5-4227-bce6-62b1c34a2614", "sighting--279ff37a-2678-46de-bbd8-5d635f386f1b", "sighting--b28419ae-752d-44a5-a5f7-3fcb7df18838", "sighting--8b866d61-6e54-41ce-b799-ef2b7c6f8b65", "sighting--930439a1-19ac-40a1-802f-dd31e45c118b", "sighting--2b1756ca-9d2e-4f5d-a485-e5bb3547c74c", "sighting--5f6b357e-cf8f-4d3a-be9f-6388abe3af14", "sighting--b7a378f4-e5d7-4244-86c4-961094fb4bde", "sighting--4575a1df-8a35-4fde-8ad6-04157e10b5b9", "sighting--d0f73c8f-cda6-4810-a53e-b5ac78e7704c", "sighting--feb5bb78-f93b-40c1-a784-9597b42da73c", "sighting--7eaadd22-49e5-4041-8646-038702479da0", "sighting--a0690c99-5489-4427-a8a2-33493a576ec2", "sighting--2918e632-87a1-4561-b1f0-3891ceb5c59d", "sighting--eb3bf338-9224-447a-b091-0df5212b095f", "sighting--f521446a-ac20-4cba-94c9-10a73cd10b1a", "sighting--8b41819c-6c99-4e70-ac51-76c6a15c91dd", "sighting--f90c0581-c8c8-4844-9904-e517f6c83525", "sighting--28f7669b-fecf-4681-ac44-3b37015b113d", "sighting--b479c461-b3a9-47f2-b70f-23b9db9a968c", "sighting--976c11b2-5dee-41d1-b5c5-9b5e23a4a03b", "sighting--831b89b2-6400-4bdc-b9d4-4b408a912c2c", "sighting--d0b13668-961d-445a-b710-68f35cb369c2", "sighting--8dd1a0a4-c2d7-4c61-a6cb-e6775813d30a", "sighting--7eb2ad1e-44dc-46a5-bf92-8091aeaf192e", "sighting--6e2c4b69-f178-4278-b644-40e656ff7dda", "sighting--61e543be-990c-4dce-80d3-c80d2aff33f5", "sighting--162184fe-277d-46ed-9844-51a1e4b876d2", "sighting--c38659e8-1f6d-4ca1-b7a2-28c19247001f", "sighting--0f0ec89d-82b7-468f-af2e-6d823ea153bf", "sighting--0af4959d-42a6-435c-a190-1cc0e3f26c28", "sighting--a6e4010d-1f77-42ea-b5e8-5a0d694a81e8", "sighting--7f990cf9-aabd-4720-b7de-fe48251b0544", "sighting--e99559bc-1347-4aa7-8309-88ff3394f6aa", "sighting--c60ac220-4d13-4e92-a012-0248a24754f7", "sighting--20657ec7-4b7b-4e06-9f84-b703d3d25fc3", "sighting--0de62cb2-163d-487e-bc55-54f24c3572d9", "sighting--81ea3358-3542-4d0f-986e-c30691b0df11", "sighting--d55cb9cd-0aac-4463-a507-98dba1a20f95", "sighting--ac9bfd57-d9c8-4a2f-ab03-f513e396c5aa", "sighting--e4e576d6-a2e9-4482-8e2c-b729c96d88e1", "sighting--9e316464-685c-4d69-9af2-dbfd72eb07df", "sighting--d319793a-f3f1-44fd-bab9-041d854ac50e", "sighting--154a8182-5d35-4211-9f3a-7b9d2059a655", "sighting--8d514dd9-5a44-401b-bd52-3f24d034c7f5", "sighting--8b69b64b-997f-41a2-86bd-6a9f51097a84", "sighting--16089578-66e2-4247-b093-37922f57bc23", "sighting--84babb8d-aef0-4e9c-a9b1-bc4ed25f54dd", "sighting--cd5eac33-3f39-4341-b375-5b3700eae6eb", "sighting--c9c95821-1090-4357-9f8a-4994f47a2fc3", "sighting--d7a523e7-c9c5-4262-b9e6-72086172cdeb", "sighting--be6218dd-0c63-488f-94c1-6b91ab20b412", "sighting--2be5792e-c285-4f10-8b70-edb58123d82d", "sighting--dbf444e5-aedd-41e9-84da-adcb1887e19e", "sighting--0914194c-8aee-474e-bc92-ad59445d6c8b", "sighting--331d9bc9-7a58-467e-8e89-2974d2f43d80", "sighting--6cfe4c97-3f42-4b52-bfc5-5fa919697923", "sighting--50c9a06a-e9dd-4e81-a01f-b48037057429", "sighting--ec4a25fe-e452-4498-95d3-b983dee50e1a", "sighting--2ab20260-ae3d-4472-aa26-35dc8cf0b7fa", "sighting--411122fe-a380-4853-9fa1-c8fae83333d9", "sighting--412107d9-9cf6-46e5-99d1-b46c66135bc6", "sighting--33b1cdc1-c24a-4e3a-b4e1-4f88b005c1d2", "sighting--f901f95c-0683-4bec-a6c6-a35c045804aa", "sighting--1537b4b7-347e-4cd4-ad5b-262c787f61df", "sighting--782fc096-3369-45f8-9001-1b906e09ad0d", "sighting--421b0b21-24e1-4cbf-a5de-8f7571e4ed87", "sighting--6e361b48-b004-4c23-af8f-fc5c59b18a87", "sighting--95295320-18af-412c-bc01-d28b4f35e2c4", "sighting--148f5a77-8c30-4633-b587-eb717fa9892f", "sighting--fc5518d4-f857-4212-ad67-33f7735b6e93", "sighting--57d3448c-f76f-4f29-ba0d-66d6a45c58be", "sighting--e6836fc4-90ed-42c8-a531-e318ece17f84", "sighting--3706dd43-e9ae-46c9-b8e7-b69f60e78ab2", "sighting--ae385cec-bac2-4bd1-9bfe-3dec6a5dbb68", "sighting--27ca0237-cfa2-4b68-920c-310310c57acf", "sighting--5f390bbd-d562-4acd-8109-1c12d5713a1a", "sighting--cfbe9887-f84e-4c14-b9a7-921e476f696b", "sighting--ca728c67-f035-4d5e-95ac-2cdda17811ee", "sighting--a921ebda-54af-47cb-838a-6e005cd35c23", "sighting--73641170-8c7c-4523-9055-1c71ca9e8ce5", "sighting--3d4dbf6b-a229-4f97-bdaa-6c3d8ef5b957", "sighting--86d480c9-e49f-4ac6-8171-a3f16f7ea8d7", "sighting--e309e2ce-d10e-4744-9373-f5a9e73fe015", "sighting--dfe889ac-05f9-4221-b5bf-2afe72977fdb", "sighting--eaeecced-ba0c-430b-9e0f-e1637aa7b3c3", "sighting--0f1f8d6e-27fe-457e-9bc6-723bf55e3cfe", "sighting--909cf7e0-cd2a-4a30-85e0-f5455a070cd7", "sighting--391534ae-ef27-46b4-b7bb-d02bff57b403", "sighting--85de16c7-c2bf-4f4e-8727-e8bcbeddcdb9", "sighting--e3f063e1-1011-46d3-8f06-7fcd8f45b1e2", "sighting--22a8ecf7-7665-4506-8cbd-fd1d9d3b1aa5", "sighting--8943e586-c5c8-4b57-8971-fd3be62acf02", "sighting--26d089ec-4080-4ee1-bcfc-41e1491a8d82", "sighting--ba6a1e34-1308-4c82-a719-916985bdcc12", "sighting--79368034-bcf1-4b0e-b780-729ab004206e", "sighting--d9714de4-d4a7-40fd-a255-fd294d866266", "sighting--652dd22d-d42c-4e7e-a659-52d4b11bd69b", "sighting--338d1aec-737f-4820-9803-b09d9245b4af", "sighting--021f83f5-7300-452f-aa8a-dce7700a5b22", "sighting--1cb1adeb-0a47-48ce-877a-0015eaf1ccba", "sighting--43cf854a-dcb3-4b67-bed8-c974338b176c", "sighting--1bd169d6-2189-4f4e-9d49-f376aa399e98", "sighting--4719ec92-529a-412e-a3ea-7a32564eb910", "sighting--618c8888-eea3-460b-8158-77817d01938b", "sighting--ee908b86-3999-4f83-aad7-8c33cc01efac", "sighting--23e94b8f-660c-4736-9063-656ca50744f9", "sighting--69883265-b02d-49d5-91f8-9b3bfb12e8eb", "sighting--36a91771-3ac4-4504-b047-cbb40b91260a", "sighting--e410068c-b317-43da-a593-b95da2eec668", "sighting--9dc8d253-1178-45ee-8513-060b561e878e", "sighting--02592161-08d5-4790-8686-18a886680b8b", "sighting--38e13453-6661-480e-97df-34d5d6b32e06", "sighting--c8247171-9016-4c1e-9323-8f125d67e962", "sighting--590bdf4f-32b1-49bf-ad2b-924a7746011b", "sighting--389ccee3-57be-4f2c-ab64-e6be0fadd680", "sighting--b83d507a-cc76-41f2-b296-257c6585daa2", "sighting--c460890f-fe93-490f-95f2-9d5e201949d5", "sighting--7dd8904e-2d00-471e-973f-efd2700d71aa", "sighting--4e62cc9e-1b29-4cbd-9685-45b49093fa72", "sighting--fca5de14-bfbf-4f98-aa13-e339febb45f4", "sighting--de90ca9d-76df-45a2-8fe4-443c06410bbd", "sighting--a63870e1-fdf6-451d-9ebd-5c6877592536", "sighting--b63cab31-9c36-430d-8936-a1befd707a3c", "sighting--d7a42639-6a45-44ac-9648-d89bae34ef50", "sighting--50cf5a1c-3d4e-4e55-beda-20c72d163ab1", "sighting--b0628d62-ef7f-4f07-aae6-9d2ec5f5951f", "sighting--8fd11fdb-5f07-47bd-8b8b-fae568210064", "sighting--3c266919-0f01-4057-af44-46da6b00ad21", "sighting--bd8da9a1-84c6-4f46-a556-119f7b424dd2", "sighting--974fc84a-3ae4-48d4-a9ad-c33150960780", "sighting--0b0c5e5e-bdee-46a5-9d29-7661f7b39575", "sighting--489e5b1c-57ae-462e-a490-55b323f516eb", "sighting--6a7ec076-fe66-466a-a499-1581d3e1dc6b", "sighting--19a6daad-9d5c-4d4f-9893-17bc36c25592", "sighting--4a07310b-adad-41e4-88d1-4e6a1bb2bf42", "sighting--e822d8b4-f62a-45e6-94ee-ae4899b73e91", "sighting--3513800a-51ac-4cf0-8669-90ebaebfa478", "sighting--bd7081ec-ab08-44b6-b7f2-8d0c1005c799", "sighting--2fa5a3b6-0687-4a84-bf48-64e01c9f99b5", "sighting--385682c9-21d7-4f50-97c9-a9921ad444eb", "sighting--0773ff9f-41b9-44c9-9856-73a1e401d874", "sighting--1692c5b6-f52d-4b66-b980-a721cff761ab", "sighting--d26b755e-3ee9-4098-b271-bc92b47b67e4", "sighting--219de668-c27b-4edb-92c6-d2cf18d36583", "sighting--4e04c6e3-9a6c-488d-b079-5aef33f2a764", "sighting--c8d8223c-4106-4c61-a95e-0c6e81db51c9", "sighting--6d5521e9-8343-4b54-a511-8195b6eecbeb", "sighting--e548a6d8-54e0-4e1c-9506-5e4da44fda7b", "sighting--6abde51d-1cda-43ac-bf4f-be21d44c19b0", "sighting--068d69b3-743c-4b8b-ae09-77e13309554d", "sighting--08026f3d-ae33-4284-9ccd-fbc8526d8cc7", "sighting--50e83447-3df8-403e-8a99-608c31823f0e", "sighting--c9f4423b-25e6-4729-a1d5-194c63f2b511", "sighting--f54b3be9-1ddc-40a8-9887-ba794385213a", "sighting--ede7e7b4-4b7b-439f-a5df-a6b6db40dcc9", "sighting--531344fe-ef65-4f82-abeb-b415e9f25d6c", "sighting--5bcbb5c2-a939-48d2-8bd8-48ab735bfca4", "sighting--8383489d-01e6-4d50-a6c4-4a6bdcad4bd2", "sighting--fe071742-cef2-49ea-970c-12f6731a1710", "sighting--a658833a-0f74-4690-b03b-999d052dc91d", "sighting--dfacf462-e4a4-420d-bcb7-693a932e1b3e", "sighting--45e15c82-7610-4802-875e-b99cc468b073", "sighting--b10546eb-51d1-461b-90cb-0353e1de0961", "sighting--4e369978-3bac-4c87-97e5-a114dcd3b69f", "sighting--0bfed530-a4f4-4569-a6e0-f37dc5151c6a", "sighting--aa0796b5-8dbf-4426-adf0-9e2585b7fb22", "sighting--a144b250-ba17-4b48-af23-8fd4cd7739f5", "sighting--8be83086-be97-489f-9be0-c833b0274972", "sighting--3ab9c1e9-8ac4-420b-b04b-ca279f485d12", "sighting--f7858bd7-5512-4043-aed5-a64a9d09d9e0", "sighting--29b9dab4-5875-4415-abf9-8f5a2aca4a2a", "sighting--6cc2f53a-a270-466e-ae85-61afed6c454a", "sighting--57b4a98b-470c-42c1-88bc-f34227b2ba8e", "sighting--cfe55973-3054-493a-ad59-b0c0539954d1", "sighting--89d4b6cf-2dfd-45a9-92eb-2ed7f4a46baa", "sighting--429c8e2e-2f1d-400f-9fc1-fe8e2916100e", "sighting--1c3e8682-0240-4804-b175-71e2c8034309", "sighting--dae289d7-c562-44d9-b6a0-694045c9e36c", "sighting--9913ecf8-78c5-4387-a71b-697edcebd4cf", "sighting--ec4187fd-f11f-4b30-b7eb-071f0189098a", "sighting--650d7a99-b6d7-419f-8652-473d4619c1dc", "sighting--a4b6389b-eeee-44bb-9f35-a220b35a85f6", "sighting--35d56f66-49e2-49fa-94b8-edc6a295d3d3", "sighting--d32b98d9-ccee-4189-b903-c3514d26cbdb", "sighting--6af22383-b288-4adb-a7a7-97567b1205f3", "sighting--57a814cf-a1dd-4f0f-9007-0da844ac60ec", "sighting--f6f7813b-4b4b-4dac-aed5-68037546f613", "sighting--61502f15-70c4-4584-8d27-a19933032ccf", "sighting--48593279-e3f8-405f-9f09-9a3c23390efe", "sighting--a41a2634-ee53-45c4-ba48-37af0a8c59b3", "sighting--fc760db6-3d12-464c-aa24-8836051fac8d", "sighting--c9af1aca-18d3-4d0e-9178-bc41bfd1df19", "sighting--f5b17d82-a839-4917-b61e-be75f6306781", "sighting--17924646-4a1c-40a2-b531-ec20af06ebd0", "sighting--088bf8f9-1430-4229-a6ad-2d6d77f3930f", "sighting--1b10fc6d-57e5-439d-ae95-5f1c4fdbee90", "sighting--32c94929-374e-48dc-a6a0-e79e5ed61dea", "sighting--d309731e-d181-40a4-a817-c8b17a57709f", "sighting--1467fe84-842f-4a6f-9a32-3db719b228c7", "sighting--58af54f8-fee4-4ea5-a157-dbedacdeccd6", "sighting--8d7a9c2f-5346-4afb-ad9e-f6f3df0b360b", "sighting--48cd76d9-4cd1-4f5c-b78b-f3a08046b958", "sighting--1b71f3ff-8416-4a57-83b3-87a6e9ddc65d", "sighting--02a0dce5-36f1-406a-97bd-1e3d8c3d6f27", "sighting--cf0aae6a-ece8-4f09-9e62-5ba19a1938d8", "sighting--e53a4c8e-29f9-48c0-acf4-4889061f370b", "sighting--5157f4ff-3370-4849-a4e4-6e1f5f756b01", "sighting--a63b3c22-79a7-4160-af5a-5b04b16c8172", "sighting--dcf03073-a77f-40d5-9415-3c98209ea0f1", "sighting--10807afc-f8eb-49a5-af67-cf9455d0247f", "sighting--3ecd2d65-cbb2-4ecd-91bf-0701414dbe34", "sighting--e8d23bac-5c33-4600-95d7-75452fefae43", "sighting--eba62259-3c14-45e4-a032-b75f8034d2ca", "sighting--b5be5e9e-930f-4db7-97f5-f5b18f52151a", "sighting--f2159e4a-974a-4fe3-895f-ca43117e72fb", "sighting--7a91e207-e029-4954-ad87-1a6c8bf004bc", "sighting--d19251c3-e29c-4dc1-84f0-87d3ed10da42", "sighting--5af17000-bc09-4fe8-ae0c-619a4d936f33", "sighting--9e00c678-0ad3-49a4-a3ee-19a07d23418e", "sighting--d3969adc-1178-470e-bf49-9e93943840ad", "sighting--67ddf734-1d50-4c1b-85d7-b88a101491b4", "sighting--ad8dde56-b248-4828-8040-bed6e5ea81d7", "sighting--88fbd7e1-30ed-4322-9fd7-bafd54e06a71", "sighting--0ff92e4d-5628-48e0-818f-d16eb3fa620e", "sighting--142a0b77-b067-446e-8f02-d01a12465ecd", "sighting--ad3e196e-210f-45b4-9ffe-640d8e323815", "sighting--824151b3-1cd5-44d0-9779-067e4a8a6e89", "sighting--b280c884-c659-41bd-b402-c6fea2721a5f", "sighting--2a50a6eb-0774-419f-a9c3-c37adb318125", "sighting--352d7505-5a02-4c53-8011-a06fcb760d34", "sighting--06feeaf8-9fbb-480c-afe7-8b32f4d2602b", "sighting--2c3857af-6369-4ce3-a548-ecf9ce0d926a", "sighting--94246ea7-50c7-412a-8a1b-15af1d4de252", "sighting--999a66ac-0a62-4733-9473-84f87d048641", "sighting--d40e922c-d3f8-40d0-92ce-ac8049d63e35", "sighting--9d07e12f-991b-4013-a5a2-33140a770131", "sighting--946f0632-13f0-46b9-8b35-fbf509a602a6", "sighting--e668ebc5-df16-4743-ae23-e47d7417a7d5", "sighting--93b8bfe3-b245-472d-b76f-5f6d110c543d", "sighting--2164f212-8680-4bc8-bb44-1652c17652ab", "sighting--2b56f35f-bc44-4ad9-a5b5-ab438b74af33", "sighting--c40a524e-7156-47e8-89e3-9e1995c82e3d", "sighting--5d66d13e-488f-4cfd-8f9c-7de4cb57f585", "sighting--f23d68c3-0514-46cc-b008-145867eaeb76", "sighting--2b9321f1-975a-4bb7-bd0f-f7359e55cd19", "sighting--f1bd10a4-130a-4cff-8418-9fbdfc82f270", "sighting--daeddc66-e5ea-43af-aba1-7932bce8f196", "sighting--4c3769b7-dfc8-4a31-9738-5615f874c0b9", "sighting--f95b3bcb-18fb-4794-a5b7-e90874971b12", "sighting--e4598aee-a9d1-4248-9f4d-ff5ff4adc4b6", "sighting--cdd1c53a-a23b-4ba3-a7e5-d7365817dbc5", "sighting--3acc9c11-500e-4242-8b58-02b92d7f6d52", "sighting--3d84a37f-8338-4bb5-a60b-20be55229ed6", "sighting--a10a4ffc-f23f-4d09-aee2-61fa922d0a0a", "sighting--87f64341-0499-4214-9fd2-2fcadeef3264", "sighting--fb9a3cac-7705-4dfb-9f76-5bd9e754bb57", "sighting--ce6b74c0-3f40-49cb-b478-1c39e38980d8", "sighting--b9565de3-9c1b-4f7d-a935-efa4771e993a", "sighting--5ccab638-decc-4b88-9c41-eaf86a0346a0", "sighting--e7af9a09-0474-495b-a176-d201714899c5", "sighting--ccc64cc3-1c3f-4c7f-bb1c-8564c1fc1eac", "sighting--3ba154be-1551-4f79-8d1c-7b5f0438867a", "sighting--1814fb6d-a888-447a-92ea-edf7b6878275", "sighting--3cd74c04-3a55-46d9-a2ab-d86efba3dabb", "sighting--bc38e1de-df5f-48a3-924a-e00c3b7b4482", "sighting--3c235120-afcb-42a5-85fb-5eb42ce30a2f", "sighting--fe66912a-092d-498b-bab4-f86ce67a7060", "sighting--d44b55df-0d06-4a49-a82a-b75c994166fa", "sighting--62900db9-b035-4bea-801d-e835917c45c6", "sighting--461a0332-298d-4693-9ceb-099056dbdae4", "sighting--d12787f9-d207-4bd2-963c-d2384ba3d0cf", "sighting--e40f2cba-9c11-41b5-9a57-04915c7a2b0a", "sighting--6c553a0f-e9cd-4eaf-a8df-a0c03556d952", "sighting--c4e954b2-4692-425e-ba76-646500190ddd", "sighting--67b62fef-469b-4295-9a7b-e9afac14727a", "sighting--ca4d6ce5-65cf-48ce-ace5-0b537cb323a6", "sighting--2133a572-519b-4ec5-a9c7-4e700831bd06", "sighting--dc9340f7-233f-4ed0-8d24-54240be84408", "sighting--a46d23b8-e524-49c2-bd0d-209532781fd6", "sighting--e10ed420-5349-466d-aacb-e7f295628bf7", "sighting--8fc35dcc-86ec-451b-b869-db4107af287e", "sighting--e4145a88-58c3-4339-8a8e-4a743c5c5472", "sighting--f90c789d-9e45-4776-9136-720c6a7a74fb", "sighting--44999919-e7ac-4d3e-ad1b-91bf5dc65dcd", "sighting--6b6885b4-f7d1-4ff9-bc0a-04a52179a0c0", "sighting--221197f7-e95b-4fc8-b478-d92d1d9c5fcc", "sighting--9d600325-4196-41d9-85e7-31275d598208", "sighting--7e51e40c-f6bc-422b-a441-a83c12c83bc3", "sighting--916754b1-3125-4ce9-bd6d-bd44068683ec", "sighting--24be83c1-80fb-444e-87e6-1edefea564ad", "sighting--eb7fcc41-fae4-4230-8681-b6fdd2bb818a", "sighting--60c224a3-80d6-4767-ab71-f07adb72c5c0", "sighting--32bfb86b-e94e-4086-ab4b-cb5573d94e90", "sighting--8ec63842-04ad-4fa6-8293-c2c4110b2249", "sighting--25cf7fed-ed95-45c4-9c7c-40bae683737a", "sighting--e90509fc-e46c-4f75-a7bf-d75279464eae", "sighting--3ef5e525-85eb-425e-b95a-549ad17d7744", "sighting--aa737a11-1656-444f-ab9c-c612d3b3f6f3", "sighting--fbdc0415-dbce-4a4d-b535-12a91e10a578", "sighting--171f0fb7-a674-4c67-894b-4c50653567ec", "sighting--54971faf-d943-4c1c-a89d-2511f431de2f", "sighting--2f2146a8-a1cd-448f-b41d-42ae52778873", "sighting--bc772cc1-93e0-4fed-9570-41b2f006056a", "sighting--2cf25b9f-ed92-4fa7-86e5-bd842ca47fb3", "sighting--32c66f13-f258-44f8-b8c4-e3fa614004db", "sighting--97db5a6d-c7ea-4132-a11c-30281b848c82", "sighting--c9bab804-e4c0-4331-accc-a9e35cbca97e", "sighting--f36c4f35-e93c-42e3-84a5-f44f9d88baec", "sighting--29e75098-17c2-4fd0-ac77-94d11e11a7af", "sighting--9ed1b972-1076-4fe1-a0ce-e728a2bac837", "sighting--8f04d4cf-b22a-4809-a521-ba89d57ae192", "sighting--24e85948-a2c3-4870-a2f5-830dea260c1e", "sighting--4e7c323f-b529-44cb-8c60-4bd2d76f1886", "sighting--94d642f6-ec92-4197-abd6-37e4e61a6a51", "sighting--5799e23b-4ad0-4fab-9162-b53654045e56", "sighting--23c16628-c9de-4bf1-a960-c310f8ce049c", "sighting--00e89dc9-8672-402a-815b-057e53d8d257", "sighting--62979cec-7059-429c-9a8e-05f8973be996", "sighting--23038770-30a4-410f-98cb-5818bf2a3b01", "sighting--f38f2c0b-bc70-4128-8adc-05192ade5a9a", "sighting--95eae3c8-8806-4649-bb9d-f05be47f55ec", "sighting--a19d28ac-6ff7-497b-90f8-351a04e4d0d9", "sighting--0b962296-acbb-46c2-b19e-b6ea088e0e4f", "sighting--cd0c6b5d-6335-4e8d-bdc2-7723894bf5ad", "sighting--4766c328-7874-430d-98df-880dc2c4cbc2", "sighting--ba2652ae-8a7b-4140-b534-01b9ac722ec8", "sighting--dc3970c4-073a-466e-92b8-9b7cbbbb7067", "sighting--fb1791ee-b085-426d-a418-e0e56c9119c4", "sighting--b6947e36-b527-4b87-9e38-7f3d20823840", "sighting--57bfcb10-a05f-461c-a787-29add94654d0", "sighting--e099821c-2596-4ed9-8590-1b3bafc11129", "sighting--11c1cf42-79af-46f1-b752-11e4a2542688", "sighting--fa7def32-bd01-4afe-b5e2-6f407d90e38c", "sighting--4d3fdc86-d97a-4e58-baff-7eac60a03073", "sighting--7bb7f307-d297-47d5-a174-ce34cc140a23", "sighting--ac40bbbf-864a-4965-817c-d2db398d2f84", "sighting--e34b6860-4ac2-4d57-8706-ebc273620d4b", "sighting--1681394e-f6b9-4103-98ff-0c15db135bad", "sighting--065e94c3-1592-4d37-9817-9ed9f8ddf58a", "sighting--a5723e88-fe72-4d3f-a8b3-859187481afb", "sighting--671d9f62-0bf9-4de3-9584-dd0f53b38bca", "sighting--81f8b012-29e3-4d9a-9df3-979022850ebb", "sighting--4e603052-ba36-4bb2-bffc-229cc4255e60", "sighting--34bb9319-8dde-422a-aa82-e6493d7ad174", "sighting--9185fc01-6ee2-40c2-9254-d6dce9932dd3", "sighting--2e2ca384-9aaf-48e2-9232-ba59b893bea6", "sighting--97472a46-726e-4ccc-8fb4-d69f57900ea3", "sighting--8f1139ad-01e9-40bc-aa67-52afd444fdab", "sighting--eaa4b57a-056b-4b0e-9253-330e067c2c6f", "sighting--61d1dfba-cafc-4e86-a1f9-a6b655e6a490", "sighting--1f8022a0-eca7-4fd0-beca-5968e8206d21", "sighting--013ec70d-4547-400f-ae86-e9fb2d39ad51", "sighting--cbb005df-4c54-4dd7-a341-1dc3e1da550d", "sighting--e8ce5218-caa3-49d2-846f-cca22891fe79", "sighting--a1cfc361-95bd-4e10-81c1-c43c180eefd1", "sighting--db9745f5-bc1b-4d17-b4f4-50a76106adf3", "sighting--f9e3aa18-d915-4e71-a8d9-3c4d21035031", "sighting--2b1a463d-59f4-4896-bbd9-014af3a0c68a", "sighting--00b65dc7-a789-4ef6-8de1-fc2fffd701d7", "sighting--fb66a725-faea-4f6e-a7aa-c4d780eabf1a", "sighting--63f54936-f1cd-44d0-a694-37e842fc95e7", "sighting--d8c77315-9f01-4ca7-a9c4-3733b9c45dcf", "sighting--e91787bf-0efd-479f-af6c-a9b5728ab85a", "sighting--439ee553-e0e4-4f9b-8b73-f0ffb9edfd8d", "sighting--0fb2660d-8956-466a-b960-02b5ac9d9906", "sighting--537e4b43-aa32-4a70-9451-3966bbea978c", "sighting--52506902-e3f3-4cc5-b610-0bd4e1b1a3ba", "sighting--42a4212e-d144-44df-8962-ef3f1ec9f1fa", "sighting--6a533baa-e391-4517-b51c-9fd878d9e347", "sighting--681805ae-7d42-40d5-a20b-0198a1b3c88e", "sighting--a43d8c95-c06b-45f3-be07-ec029166227a", "sighting--54b1dc76-0653-41e6-8b06-9e43b21d1483", "sighting--d2ad7020-4212-4237-9a4c-777f4be2ff64", "sighting--e6449acb-0b0d-49a1-8f4a-adc62476887f", "sighting--5377537b-231a-4fcc-a022-4ac035d13eb8", "sighting--d252557b-b40c-4fe9-a2d7-8a3718125e59", "sighting--7be81b5f-e8b0-4721-b28b-e453cf6988d3", "sighting--59ca9c7b-9338-4302-ba41-fe4b05ac9a07", "sighting--21d020cd-7c5f-4a78-8f46-1ff38e9fc0d9", "sighting--2e8166cb-c2f9-4028-a184-8c9a4c69ad49", "sighting--24eea9aa-17ac-4397-80a1-5bcd9108d827", "sighting--df9c7de2-dac4-4794-8ef2-67a7164370a3", "sighting--b0c24cc8-7c78-430a-9912-912cf8caa929", "sighting--f64dfdee-6c8c-4817-9084-ed06aeda07f1", "sighting--e616ded6-36bc-4b5b-8828-e9445d7fc604", "sighting--e23e8812-7d13-4278-999e-d70228b33021", "sighting--f65e1ccf-3132-45b2-a487-965381f60d4e", "sighting--825d727d-3c8b-4ba4-8c56-10c68de55a51", "sighting--8da6c24c-6c09-4b54-be7e-69c52e4e12fd", "sighting--eeeca7ef-6253-4f22-b07e-27ac5f904e70", "sighting--cccb8149-a11f-4c4a-92f7-a6d2369f1e72", "sighting--698b63a2-eb31-455e-8fae-cf76358972ba", "sighting--32599c0c-a58c-4748-8000-b659bc33e866", "sighting--9ee22c22-ad35-47bf-abee-dc54fee57215", "sighting--6023f2a0-14d4-440b-8428-8ad5d5d4a606", "sighting--f2815f15-fff1-43d1-a4a8-4c81c13d5e78", "sighting--697fa54c-eb92-46c1-a610-7e9cfcc5f534", "sighting--32433c15-a5a9-4b91-980b-3458f8e2bbe1", "sighting--332f406f-561d-493d-87f6-5dc17ac0374c", "sighting--d2ec8318-ab1c-4477-b7eb-823fbddd5b4b", "sighting--bfc35dd4-5ab7-400a-821d-a9232f803da6", "sighting--3b247b08-48da-4244-baff-2acd1683ba34", "sighting--21ecd03c-6e3a-4f60-b59f-c5afce18d4e3", "sighting--b3d70cdd-d803-472f-8839-1e223f5970fe", "sighting--65867f72-99e5-4484-8ffc-ec95d56049d3", "sighting--1aae8731-94f1-40a5-8e4c-2af6b8fe2c15", "sighting--a2886bab-9d2b-46c8-a042-a6a9ddd94850", "sighting--5e013743-2602-4f96-b90c-5ef6f01a61c8", "sighting--ddbe8386-1c03-4e4b-ba1f-71ba2161ff78", "sighting--2c3f00cd-77ba-4875-a121-1bcf8a99843a", "sighting--76c4c3c6-2780-44c9-a606-1f05e4d88799", "sighting--a47c72d1-6923-4ad7-95cf-846599c6e0c3", "sighting--c84c864c-33fb-465e-a3c5-b1d784128db8", "sighting--b65ffa64-b9ca-4057-a78f-299bf51d7962", "sighting--735a5d45-52e6-4adb-b58f-933d63b09e00", "sighting--b854cb61-7e49-467a-9f62-f287a0c1405a", "sighting--98ad113d-59c2-4dbb-af16-b3f7d5827194", "sighting--3bf40247-1933-4c3b-a6e1-4a11f9f76065", "sighting--a7f47e3f-9045-4702-9526-aac29ab7dc65", "sighting--f6e376af-d1de-4c2b-9e7f-79a27ac567c5", "sighting--1751d447-4285-4ec9-a810-d1080aca0eb4", "sighting--991e071e-aa80-4d2a-a239-d3c4204d7e63", "sighting--8d7ba66f-6627-4999-ae8a-15d090932e32", "sighting--17697e67-6dd3-4a84-a0e7-689463f41898", "sighting--45b3af5a-5586-4346-9067-d9d317982118", "sighting--0e61d057-d53b-4bbc-9cb4-6941df8ac666", "sighting--9325c297-515c-438a-ae79-eef7e16e3d54", "sighting--ba5370a2-b63e-48a4-b7a5-1253771e99e4", "sighting--c22c34ef-b9f8-4b8c-b274-82fe0d647190", "sighting--8894db55-3c09-448e-85c0-43119aaa415c", "sighting--7892ba80-1b18-4ec5-8012-d541d6914415", "sighting--48e8892c-409b-4a53-8aa8-7b49cdf6ee35", "sighting--fd53235b-c954-40a9-9453-0de22da80de6", "sighting--6cdb3cd4-bc8e-4143-8581-b5b997880161", "sighting--27c22bb6-bb19-482e-bc95-2025598fd79a", "sighting--9c5ca9dd-6a34-4197-b821-71fa03a145ed", "sighting--d20aea34-a7df-4ad1-a7b9-781fe117bb72", "sighting--f4ede29e-7bf3-436c-9c46-ecaece6cdb00", "sighting--a9f50c95-0235-448a-a62d-1614a52dc138", "sighting--7e2a5295-bd78-4e31-8dd9-e4442a4eb59a", "sighting--1c066d8a-c639-46c3-a984-79a7e5beea92", "sighting--33c77c49-684f-4ee2-9365-ee66b6aab8c6", "sighting--601e1812-99c0-4277-81e1-dff426c2e34b", "sighting--8bbbf153-5620-496a-bef7-0de849230e53", "sighting--60d7dd81-ec35-4ed2-b2a7-1635b44634a2", "sighting--43b04d2f-1741-494a-b546-eb579e1352f5", "sighting--e205e675-d107-4add-9098-7e69f2c038a2", "sighting--befeb1cf-f958-4f4c-84e4-f323fdd2463f", "sighting--8cb8c5a9-9b27-4bd4-a3bf-87200d34f339", "sighting--b00e849a-c28e-4a00-b275-81c10b443b7e", "sighting--12809edf-874e-4826-86f1-f02a4d3c522c", "sighting--b90ac128-1ca1-4619-a737-0e787412d404", "sighting--06906e35-aaad-448b-bf5c-895779fb6486", "sighting--feac5865-052e-4e66-bb3c-d9c48920d517", "sighting--9ce345a2-da2c-433b-bad2-79c91340217e", "sighting--e0845e32-5e0e-4ae5-9bde-db52af9c6392", "sighting--814b643d-7f69-474a-84cf-0d4453b404ad", "sighting--b97bb1b5-e84b-4faa-a863-66ddfd85f5a4", "sighting--d8c2e738-3b93-4c8b-bc21-e4fd631e24cb", "sighting--c3a4ec7d-433b-47f9-9b60-c058c9717822", "sighting--69377c65-fd65-4265-977f-3e1fbd3a8f39", "sighting--0ce8afd5-4901-412f-a0a5-71be27472fc8", "sighting--d7412da1-e5c8-4a46-b425-4aaaf56a2b47", "sighting--79e9e993-b372-4273-8343-848056d7f9f1", "sighting--9d1e5f0e-8ddc-446b-aa19-6af44bfacc29", "sighting--ee6d1780-921d-46c7-a0c9-5bfc00371ffd", "sighting--3cc25f9f-ec63-4e93-8379-fdf915147ea3", "sighting--11508b72-525e-4413-a8a5-c3da1f65751a", "sighting--f8a442fe-6ead-4b5c-aa3b-a35dbe1dc422", "sighting--9ab4e217-42f4-4757-b2fe-786326f1281a", "sighting--5fcf6650-b599-492d-b4d7-c3f7cc43be4d", "sighting--060e5834-1bf7-4074-9a12-a2a5161b4d8a", "sighting--2b291299-92b7-46c5-800b-86abfb4b31bf", "sighting--f5af8e84-31a8-4c2f-8a1a-1f7d55888139", "sighting--461d3b52-3185-416d-986a-9afb22576045", "sighting--b63de3c6-1311-4cbe-922d-322cff1f4384", "sighting--e0c4a46e-dbcc-46cd-9540-f85cc45fa696", "sighting--aa028631-b07a-4420-bf03-26cdf3b2d70c", "sighting--9628b9f3-17c3-4714-96c8-a70b8b14e8d4", "sighting--a32b7b2a-95ff-4a60-80c5-883b58970f0f", "sighting--ecf451b8-0df1-41d8-ae03-884a6604d832", "sighting--ac2d1774-947e-4404-a0b3-fd562544e7ff", "sighting--2a711e88-e80d-47b6-bd2e-217d441b9c9d", "sighting--6c5cac14-3613-4b2f-992b-c5231e2eb16d", "sighting--aa49f720-58b0-46ca-bf3b-14781020a046", "sighting--c23818a5-5a5c-47bd-a695-b1854c06ae3f", "sighting--b2692e03-eab0-41b8-9f2c-9f73f2889475", "sighting--70bb0f36-fe3f-47b5-bac4-889f883a23cf", "sighting--26c82c70-f5b8-460a-95b4-6fc5dd3bd1c3", "sighting--392402a9-af79-4408-9abb-86de63b5440d", "sighting--848ae971-c1dd-40c7-af01-35eeff05d428", "sighting--2e0b64d2-ab14-4d46-b97f-d9fde63df6ab", "sighting--ee4236ca-daf8-4118-b650-a97a2dc083ff", "sighting--e6866d66-4afd-4869-bd97-b2e39823ad8d", "sighting--1d284e27-6d54-4dbf-95f5-eda87363960c", "sighting--4202ce37-d903-4eb2-b9cd-710be95907fc", "sighting--e19b11a2-196e-4f01-8681-5db010941d18", "sighting--90e4081e-bdd2-4966-9cd0-b7c56f4fda1c", "sighting--7425bff9-d7cb-42de-9958-44d39b93cd04", "sighting--7daed3e1-7737-4af2-853f-05efab412c8c", "sighting--081f86f8-9483-4548-95bd-c391d065d692", "sighting--1779a575-4215-43ce-82a4-7213ef5cd26a", "sighting--9422f3d1-4061-4980-887b-ef773713363c", "sighting--7bb4bb4b-cbcc-4a06-be09-9fd09e4c301e", "sighting--91ba4710-66cc-48fe-83fc-70d8b3b3fadb", "sighting--cea94e10-935e-4e1e-aa55-35959cd458e1", "sighting--c223982d-e44b-46b5-ae26-387f2c249fa3", "sighting--79d1019f-25a6-4146-83b7-5b5faa32c037", "sighting--3c664dde-61a8-4cde-997f-5681df1e7abf", "sighting--65224423-fc9f-4fff-94e5-4f9937a097c3", "sighting--62e94dab-b042-4d9b-be25-500bd8f2ca5e", "sighting--87d44276-18b4-40d9-ad25-223a90811620", "sighting--a66666c2-c9d5-41de-8961-69b376a50f65", "sighting--6d0e053a-1a64-4632-8a94-26fd520e9e01", "sighting--a7bb2ae1-5c1b-4ba4-bac3-c2b086a968a9", "sighting--c2d278ad-90ba-46b3-8979-fcd6fda51db1", "sighting--86cd15ce-e37f-4973-ab4f-ef6fc4498fce", "sighting--5c346b9c-a396-4993-be02-d91447cf0d85", "sighting--7edad155-01aa-4a50-b0d4-8d8e56e3b7e3", "sighting--2afae088-08d8-46d2-bd69-f6750a4af377", "sighting--a312df1b-8371-47fa-8e47-f39e1c6a209b", "sighting--ebfcf573-81fc-44ad-8e16-965c7e382051", "sighting--4ed786fe-a323-421f-84db-ad61cc118b33", "sighting--1b004491-8a2b-4499-97e5-181019e16533", "sighting--8b7d390e-faaa-4d69-b71c-2b7c135746a2", "sighting--f6ca96fa-9e64-4602-9e9e-0d4d974f92bb", "sighting--e7040f01-0aad-45df-a553-8191a8a79f5e", "sighting--61b83d39-c3eb-4fb2-a3b5-9088e4db7305", "sighting--5b378dc3-f6e2-4f1b-bbfd-c127b0eaa896", "sighting--2369ccf8-e00c-4b45-ab3c-467f0d471b0e", "sighting--ccaa4af9-b35c-472e-bd4a-40875c64877d", "sighting--8c483551-628b-4a38-ae90-2bc70d8559cd", "sighting--bbb9074b-fb96-422e-a2de-7489e655a959", "sighting--b31c1b25-419d-4243-be8d-e603ead5a9d8", "sighting--072633e4-0462-4016-9fab-1b9c63043be3", "sighting--0ce2cc2a-6c93-4d30-aeda-a49fafb50fba", "sighting--031d3322-1b83-4ca4-a915-429188ff05f2", "sighting--459bafe7-fe59-4316-a5b9-f87531c892ae", "sighting--e109ff62-d2a5-4653-a5ff-ed27a94aa2c3", "sighting--3f47c806-2ef2-48ea-b039-7565a25b9455", "sighting--e4d17450-3f34-486c-859a-6873649d475b", "sighting--2a47cad0-8018-4e2d-9554-5fbdd90297cb", "sighting--df22dd7b-5930-4a49-b273-1f90d919bd62", "sighting--45d05f25-7086-4c42-b3f6-74af2a4463eb", "sighting--29fd1ab9-1cfd-4431-a26a-90384bbc10b1", "sighting--944a5477-3f5f-455a-b1cb-143b2a299148", "sighting--cd6591ee-4321-4454-85b7-2e9817328a86", "sighting--c02795da-76b4-49c3-b342-213a8093ec14", "sighting--630dc4c4-4c5e-4610-ac29-24f983aca526", "sighting--c93d7d43-5391-4b0a-8460-e9b4a2513025", "sighting--49de6bd8-df23-4713-8107-77e5c2eb93f6", "sighting--33bd331d-2eb8-47df-bde8-39f2509d8747", "sighting--88f05cce-3810-4e1a-81fa-e691619bbc71", "sighting--2c4502c7-120f-45fa-aeb5-73d200e7f573", "sighting--af7be601-e973-43de-8b18-c2f4f09c8271", "sighting--29925c95-006f-4225-97be-3a71e8c88a2a", "sighting--82375b34-73eb-4129-b176-73cde3d5c4c0", "sighting--ffed9e5b-4868-4eec-95b9-4eacdff9039c", "sighting--9bf2d5e7-37f9-45cb-b14a-595c8e143feb", "sighting--f1dcab0f-000b-4006-bf2f-e01daf531d7b", "sighting--9a21ab8d-ad8f-4099-a7ef-089d3c347158", "sighting--bdf32842-fea3-4998-8a69-beb8c8be2be8", "sighting--221a0352-fd72-4d8d-94ca-982c7ea8bf62", "sighting--a6ba11c7-1107-41ea-9328-cf1288597498", "sighting--d253475e-880a-48e0-9b5b-50531d52a9ff", "sighting--a4257564-e2a8-42af-be63-de4f1d48431e", "sighting--1470f50b-db30-4618-91a8-8526318aa89b", "sighting--3621282b-f068-4169-a9d2-e80dadc5fc63", "sighting--7f480bb1-bb0c-4d30-8034-04cd3447806b", "sighting--01eaa244-ebdf-4be1-98ba-d934a3065e2c", "sighting--6d927561-e452-4a13-8f32-30d4b0272eb0", "sighting--8f0ab3e1-457e-48bb-b79e-6cf4a1706108", "sighting--1154b950-d99c-4933-9de4-8000d88c65c4", "sighting--0ae261cf-a73f-40c4-8cfd-bf3eb4edfb1c", "sighting--d5b95476-6049-4e2f-b0ef-65c5e9cfff4d", "sighting--c23cffa8-06a2-403b-a4fb-a4b2aecc64aa", "sighting--cb49e3c4-dcf0-4faa-aba1-76651051bd8d", "sighting--4b506ac3-914a-4339-83db-199dfe8bff6b", "sighting--51ae26c4-413c-48d0-a4ef-23166686c6dc", "sighting--0bba759f-c70a-47e2-8898-59be3f37a2ef", "sighting--f3d06945-7c4a-4560-8b1e-709f023a8842", "sighting--6890a777-6023-4312-bed6-96e9f1219c1c", "sighting--6e016c10-1311-4306-91c1-a0d4205f381b", "sighting--1dd380c2-17af-422a-9ffb-6e49b0fd5511", "sighting--c1fd8e9a-94d3-4cba-9b2e-f1d04bce2e07", "sighting--e1417498-cb5b-4023-aa84-64b973b1eb06", "sighting--b859c4e7-3754-4486-b30b-f8fc83760bb8", "sighting--02f87d81-1527-4eef-a545-053ae11caf56", "sighting--9fcd5402-4b36-417e-bee1-772bc73810a0", "sighting--e377c7ae-c169-4335-bfe0-675b133396e3", "sighting--884b66fa-412a-4f17-8db4-39eeb53df0bb", "sighting--75e332f1-5192-4e8a-875d-855734d66fa6", "sighting--120f3798-b853-4c6c-a18e-1857673d1676", "sighting--12711960-e590-45e2-ba0e-9fce66c45ae9", "sighting--824e95ca-fcd6-4ef2-aa95-83caf176ee04", "sighting--8656be15-a9a5-4843-b668-01d48ea3b58a", "sighting--52f88b12-e18f-48c5-8ac1-40a491b5606a", "sighting--2d15af4a-baf5-4ae9-8bc3-61d9744b3594", "sighting--f27a6465-7e0b-434a-8d34-aa8d101366f7", "sighting--04ed8b6c-c81c-41e7-978f-3f1561508bfb", "sighting--b1200135-8eb1-46e0-86e5-0e7563c5f5b5", "sighting--b7737a64-8dcb-4073-adb1-8c5eeed22e9e", "sighting--f8a2fe81-a972-4241-832d-8b8267032690", "sighting--ab02df75-b0ce-45c6-8792-fdc447047c91", "sighting--0a83b77b-c442-4d7b-87f3-79a19c3f9292", "sighting--78c9556e-f8ca-4b7d-96e7-5ee5058bd288", "sighting--fc89af54-681a-4a22-8398-52de7ea8aa4c", "sighting--707eb945-08c6-4a4d-bcfa-e2a9feab1064", "sighting--20e01f3c-efdd-4dff-ae74-0f578ae331e1", "sighting--94dee6e8-c148-43d3-967b-26056f9891cc", "sighting--935ad068-1b4e-4042-bfec-17cb91e04d58", "sighting--abfe65c9-da51-4cdb-a10c-4b8205747259", "sighting--700b95e0-0100-4578-a5f8-ac7c336186bd", "sighting--7bea1003-1cc8-4a27-9d5b-4986f836b1b3", "sighting--e0b3a9c9-2d5b-4c0f-9cf8-8823eb7a1c9d", "sighting--0a8763b1-b68d-4f82-998c-802ecfebe196", "sighting--64845bd6-6dc3-4965-864a-fd8559ce9fe4", "sighting--68c3164d-5c5e-42c5-a24a-06054a75d51f", "sighting--0ddd1cb1-12e1-42f2-b95c-ecb508322d2d", "sighting--79623747-62d6-4ef7-bdf6-506505cbca75", "sighting--fc945188-070a-428d-914e-1b6307c67920", "sighting--7e09bd22-a63e-4d7b-bc41-79b2e79d4a01", "sighting--318a892f-c9f5-4c75-890e-aa8936eae0a9", "sighting--85cb9518-049a-4163-981a-fb5baeafb89e", "sighting--43ab2cfb-3f6d-4c3c-b006-6240d4885f63", "sighting--50b2a2ef-2b7d-4378-b6c1-9832ed05aa04", "sighting--b3225d47-7b7c-41ed-9753-2f18fa7992c0", "sighting--fb6b5cf9-2360-4116-b045-a272a35fe3c7", "sighting--5d197691-cd71-4d88-bd09-db5c0aa5b0c7", "sighting--4f2c5d0e-70e2-436b-97ce-049430a2af29", "sighting--e2034c0b-4e59-4c53-9bec-ca39ff52401d", "sighting--246c1aef-2992-4109-b80a-ecf0479676aa", "sighting--4111f7ff-2765-463a-94e8-bee92e3b9a2c", "sighting--24d27641-96ab-46ac-aac2-e24810e8cbc5", "sighting--448544f4-f7ec-426a-af65-09d95d66b8a0", "sighting--392faa3a-7488-453b-8727-e5a190514b73", "sighting--dab86fd7-46cd-4865-8b65-08cc298a28c4", "sighting--488ed0c8-b41e-4f99-84cd-20396c29272a", "sighting--9c8c79c8-adfc-4613-aeb2-11c06829d672", "sighting--4ae6f848-a626-426c-ad90-c191faa2bdf6", "sighting--9665af94-0fd3-4dce-a9e4-e7b04ac7d253", "sighting--035a7cc0-21af-4ef4-83ea-d9874af053bd", "sighting--fd356f72-039c-44af-a866-75cad3972477", "sighting--dc96c158-4915-4c4d-b439-874802f38d24", "sighting--600adfcc-f7d6-4bbf-ae7e-3aacdfa8eba8", "sighting--12c23226-58de-480d-bab3-3987476f510c", "sighting--f61c9b5c-81e1-47d3-9b58-7ed884fa308e", "sighting--6e6b391b-84e3-4f6a-b898-9c1bfc21e22d", "sighting--22fd079f-39c9-4aed-a3d4-3f18475fe90f", "sighting--fd177bfa-b464-4e24-b7c2-df95a3d65b52", "sighting--f9cef684-ef3d-4053-9d26-82cd64ea5453", "sighting--ab7dab5d-4d8d-4bd8-8907-aa2a495c016d", "sighting--3402fe12-0311-4658-aef6-f4cc94dba224", "sighting--3f7a0924-7f2b-4772-b74b-7b5c8168091f", "sighting--5fb6999a-6a39-41c1-8fa3-0da10cbc8d04", "sighting--6818c5b2-190b-4929-9752-a6084fdb4cf9", "sighting--73a5f81e-f5e3-4c89-814d-e7810cd1eeb8", "sighting--ff4b4fc8-c00f-4aa4-ab41-361b8c67d42f", "sighting--2d798b94-f665-4214-a806-4bc5d74dd57e", "sighting--cac63d4a-688b-4243-b57b-53729c686fce", "sighting--8560ae11-cd31-4686-a989-b93d2c4a0f9b", "sighting--23caeb5f-bf3f-4ac8-817d-0204966613d0", "sighting--c1b1e301-1e88-4c33-8d8d-e65e07026852", "sighting--246cee1d-af3d-446d-87b6-4292a84fc0e2", "sighting--bbc9a976-d213-409f-a871-8e4ca7f1b0cd", "sighting--4eca2afe-d4db-477d-806a-9e98aaa9af25", "sighting--ba43daf7-d94c-4e94-9664-160050dd4621", "sighting--8c202bb0-f2d7-4ad1-b920-4c0cba4d4c75", "sighting--0ca886ff-840a-40e5-ab3c-0fd29712487d", "sighting--6ee4352c-9108-45f2-8ed2-ceb2c2709766", "sighting--66612b28-6213-4ffc-ab08-436de68ebd1a", "sighting--97f17885-5509-4e7f-a0d7-9a9b541e1e2b", "sighting--ecd8c6be-6d49-4a17-a963-b011eba76fb4", "sighting--bebbdb6a-b3a6-4cb5-858d-34321d9c411f", "sighting--fe5ed8f9-504d-4e43-9bd0-f87adea9f322", "sighting--b5526089-235a-4e44-b8ad-f8fe8624f9a7", "sighting--093fbcaf-f1f1-4d7b-a296-0e4e1e760afd", "sighting--e37d7a47-4897-401f-ade2-88a2f42be8fb", "sighting--59c803de-82ed-4a91-a363-b7e743c972f8", "sighting--d433fda6-2eb0-4c46-9c34-6773f0ef966d", "sighting--7b9809ee-417c-498d-a4d4-d7d07d5becd6", "sighting--4d8311ce-6b72-4c1f-833d-85c55f926cf1", "sighting--6d6510aa-2c9c-49f4-b351-65c0cadcbcd5", "sighting--497ce973-1da7-48ad-87da-7ec42101cca4", "sighting--3673b4c1-9ff3-467c-bc85-5ee68ccf5415", "sighting--7397f6c4-f306-412c-9f6a-bb567f3d0d6f", "sighting--234850ca-80d1-4389-9b28-ba503c3a7747", "sighting--3e192c4e-2e53-467c-97f1-3f86a8312bd5", "sighting--d7f3369f-81a5-4811-98ae-691f60431ee6", "sighting--85d5f51a-b17e-4694-99f6-ff05642a1e33", "sighting--a09d02e5-a941-470f-b354-f59b2555bb98", "sighting--03344a52-cf47-44b3-b783-8aa597d26e3f", "sighting--06d5d527-6101-4a50-8ed2-c327fa131c32", "sighting--42e30a05-75cf-4981-9592-703e14bd7259", "sighting--bcf7a324-6613-4d6b-91c4-35d123751f38", "sighting--e016fd70-e30b-4037-93ed-b159adb4d626", "sighting--f5e1eeb3-7132-46d5-af23-623deffeb306", "sighting--2f785823-93c9-46a5-9b4d-9de3e04a3e29", "sighting--845dc646-50f2-4c2e-b1e2-59fb123d1dd2", "sighting--2f7627b5-85e2-4f00-91bb-976a10e56254", "sighting--8f9b8060-fba5-4c76-b820-e6131f20d9d6", "sighting--36071ac0-891b-4b4a-ae7b-8a6f4ea83b10", "sighting--18940d3b-1e17-4844-8c76-21aa5facda60", "sighting--8adebbfd-e61e-45e8-a3db-b0fa0e701e12", "sighting--33e74c83-8047-4c3b-8bee-cfc2d16cb9d9", "sighting--d42636a7-f954-44cc-9b2f-1133e53b7ca8", "sighting--c7f04f99-8311-4394-a11f-abb27201318a", "sighting--fada8a13-c453-4812-a4bb-d94d0b7f54b9", "sighting--a8e26097-6f31-48a8-9ac6-c80170bf5b77", "sighting--6bdcb920-e1f6-4538-b8b6-daf19e68719f", "sighting--39cb516d-7e54-418c-af23-6e5549f96e10", "sighting--309b9dfd-2d09-4ccf-994c-6aff631d3f2c", "sighting--777dc754-6322-4b4e-a4fd-127611072994", "sighting--b6fc3ced-38bf-4efd-a754-a6d797536935", "sighting--78a7264f-7676-4119-ad60-013ea9ca9890", "sighting--38048a46-d16b-4169-a838-5d933aef67fb", "sighting--1e107dc7-9b7d-473d-8714-140f401df0e4", "sighting--4bd54ca3-1e63-4818-9ae9-c93d40441829", "sighting--18e8e900-0cba-4d45-90e1-be4f763219d5", "sighting--35ce788b-45ac-46e7-88aa-c673e328c280", "sighting--dbc13945-c0eb-4328-b259-2404436f970c", "sighting--f16df958-a639-4b32-ab3a-5702cd3ba3c0", "sighting--71438fc1-7749-4b41-a9c4-168fe1ceec50", "sighting--4dad202b-81e3-4873-896e-ab9b89b78f16", "sighting--3381c0cb-aa47-43ec-9cf7-8db94ef1a3ba", "sighting--aa38369e-a07e-4f61-b957-373dd280693d", "sighting--4ce1e749-baf2-4d77-8bcd-7b4dc4fa5081", "sighting--27feb5b3-baea-4187-906c-943ff1cf8e6b", "sighting--2fa8ee4e-58f2-40f0-b403-c56aeea4a1d6", "sighting--b87d696a-dc93-4574-9ca1-2aa8ba148a68", "sighting--260d4e52-49d1-42dd-aa9c-9daea81add7b", "sighting--62b88b37-2d1f-4847-ac18-ef1265b1b7eb", "sighting--c5e3fee3-2ae3-4ad1-9c8b-addb611b67c7", "sighting--8fe794e2-36dd-4ee3-bc42-1ef26e2cab44", "sighting--d5988eca-a41b-4e6e-aced-5dff5fdcb93c", "sighting--71462989-9873-4f4e-b082-7d623aec7b43", "sighting--c92ddf61-b61d-4730-9ace-11de4818c6cc", "sighting--4e93c355-16b4-4e6d-b994-bd502e3a5abc", "sighting--d71ebf7a-1013-4f21-9ea9-39d8daecab24", "sighting--9e418039-11ff-4777-b8f1-e469c3d29928", "sighting--0bae5c59-0d97-42b4-b2cd-eac433ec3642", "sighting--fd586e0d-1065-40ce-bfc9-038434519007", "sighting--f56628c0-e210-4cf9-9e62-f4f34984b9a6", "sighting--ac9244f6-9230-4696-9b24-7dd6ab55f1ef", "sighting--7e51b49b-677f-4b3b-abff-e36d5c412e90", "sighting--31e4388e-7da9-4f6e-aebf-00082e1f9d2f", "sighting--2d084969-db49-4cd7-b961-03695de92735", "sighting--0273fa4d-21e0-45fd-b35e-932be61e644f", "sighting--ddbe2ce8-b101-405d-826c-3eac77043de9", "sighting--54775be8-28f5-4fc3-a5a7-a649245d78f1", "sighting--5a73f0f0-58a8-4283-9598-f611eab5877f", "sighting--3fec00a6-2e7c-4c10-a100-fde3a8ce212e", "sighting--89d56bd2-4677-498e-8b52-bd0fdd9c0af3", "sighting--d49c4e8a-41b5-47fd-939d-675414f9c582", "sighting--866cf9c4-3cd4-476f-9fef-5b311704c70b", "sighting--7dd5d7be-8b8e-47b2-982c-bfdeff488d88", "sighting--e4684338-0c87-49be-a7db-e208f14d7922", "sighting--a9497565-2479-4163-acfa-8e16092d52ef", "sighting--28cc8d44-e73b-4f74-9673-c97a66f30ce1", "sighting--3a655151-cdb3-43cd-9784-ea48725d72a2", "sighting--cbeef99a-0bfd-49d4-a6de-d3452027314c", "sighting--d027f1d0-6c42-4245-a0e3-20234ca72afc", "sighting--c285ac59-3eb9-44cf-9e46-153a33365fea", "sighting--12120be1-1313-4fd6-ab0b-050065ea1ecc", "sighting--cb8fa025-7797-4c72-a196-2b2c89748415", "sighting--76701b04-c597-46bf-bbda-32c8142318d0", "sighting--c91e55c7-6be9-4818-9d61-c6f5d3850209", "sighting--eeff8775-ab14-452c-9a5c-f41b439182b6", "sighting--070c60f2-f4b7-4688-965a-3ce0abca8435", "sighting--12f673ce-89a4-4e99-8db7-542ec37542b6", "sighting--57686744-37b5-4ad7-899f-289a027f22b6", "sighting--e077eb87-c7aa-4b57-abc8-b0372a80ad33", "sighting--6463a310-2e58-4571-8c13-54694724cc14", "sighting--434fc44f-a260-43b9-8a54-44afa0dc8afc", "sighting--85c459e8-93e3-455b-a641-56282e14bef4", "sighting--dce73c55-7351-4f67-a595-de49cf9af5d4", "sighting--9b684d13-3f60-410e-90b8-93e0b3948b8c", "sighting--6cefd57f-ea6e-4137-94e0-fbd1efb1c3f3", "sighting--d7861050-c057-4f07-a0f6-9c6985492067", "sighting--68ea67d1-1cc1-43c6-b7db-b3202e08dba1", "sighting--c5e27a22-40a8-4aaf-8b87-92191eb1f5b6", "sighting--1db0aa02-e56d-4ad0-99fe-350c0ddca6b7", "sighting--130d3cf1-bf21-46cf-8023-caaeefc2045c", "sighting--b03c38ed-d224-480f-b2e3-19b8bb26f715", "sighting--b137904f-4f06-40cb-bc29-74fdb0166c30", "sighting--7efbc346-079e-4727-be75-e0cd08dd7865", "sighting--95ace975-f4ba-414d-8800-0fd5a2dbaec1", "sighting--63f3e19c-b0c0-4be5-a4ad-216d5f44cc09", "sighting--9c2f1938-8a04-4e60-a375-966e31f506b0", "sighting--e74a9bb3-a5c3-4466-bc8c-fb23ac8a21b7", "sighting--fa327848-0d50-4e43-a5f4-dce770589386", "sighting--a61eb7a1-28ec-470f-af93-ae8ea91f483b", "sighting--45c780ac-c036-4e29-b725-aa74160bfc85", "sighting--62ffdbc7-cfe8-473c-a158-b3909167a5fb", "sighting--bf0bcd75-1433-4de5-81e3-135be458bdaa", "sighting--87967e8b-8396-4a86-89a3-6120c9217e00", "sighting--f8119637-0016-4f5e-8c1d-1adfc7b3f7ce", "sighting--f40b1612-f1e6-419a-83a8-54621d79cb1e", "sighting--8b6b085b-5ba8-4582-9653-ddb02b1b7b94", "sighting--a20247ee-04d3-4f74-9d7c-9911d3e37722", "sighting--0d2b05ec-c19a-4654-b013-79bf1da1f5a1", "sighting--b60aed38-9ee6-4870-9b7c-b50bec364790", "sighting--4cc3fd39-2a64-48e1-bbe8-a76d1ec6800e", "sighting--971d7c62-17b8-47ba-b3c9-37ea6a2eb76c", "sighting--ba79e7c8-823e-44bf-9656-8aa48f70c2e6", "sighting--af96a97d-abef-4339-9343-1f5beb373ea3", "sighting--e6a56722-73b9-4ac0-986a-0a9e901885ab", "sighting--e5545ac8-90fe-4af1-9c91-003affaa7ece", "sighting--1c3b2a67-c886-4700-a4b6-a2b7ec7fd0e5", "sighting--d7449ecf-bb67-46d8-aaa1-c1dfd13be395", "sighting--bba7d52c-62a5-490c-8221-f8086fb9bc3d", "sighting--4df08c2d-9f14-481b-a830-f52fa1f377d0", "sighting--77936b5e-2588-4e9f-afb3-2a201248f15f", "sighting--b560d287-529f-46e7-8771-5c7a707d6091", "sighting--1d98cac6-f9b2-4c91-a144-0e86bb5d3b98", "sighting--de2b15a3-92d6-4ab5-822b-b497fde6252b", "sighting--0c19a6f5-38e9-48b5-9805-6b60d186f3e3", "sighting--45ba847d-0332-4cbd-bb3b-0f13851b2f2b", "sighting--9af71e04-a1d5-42be-9bd6-7393c4c6d220", "sighting--f4574bce-2590-4bf2-b186-049f751fc1b4", "sighting--f62f1e6e-b6b4-4624-a0d7-e9d1732ae7d2", "sighting--11ac41cf-b438-4de1-95d7-b51e6b399579", "sighting--f321b95b-a972-44ee-bf66-29698871be1a", "sighting--0ec5b6a1-2ac4-4788-a30c-0469165e5e85", "sighting--1f06b899-fa60-4881-9855-47267ac1bfb4", "sighting--4194d4f7-2020-44b9-a699-71852125066a", "sighting--c96dea8b-ddbb-42d8-8507-d287e6069230", "sighting--a9b87753-3823-439c-bb59-1fe54e4935f9", "sighting--6eaa4c24-2052-4748-b8d0-2b64e580e75b", "sighting--97d33f41-3676-45e1-86cf-b8589af63982", "sighting--85a1a40c-6dfb-41a6-b7ac-8474a55dc674", "sighting--2c97b81a-b23a-4a69-8656-3384665a728b", "sighting--40b61c1f-abd8-4c1a-a82f-9dca3f950d7d", "sighting--41a69a9e-ebd7-453d-9f9d-796a2ba7f279", "sighting--647c9c1f-4db6-480f-a60f-44d168aad56a", "sighting--57173380-c508-453d-8a31-c500111a24ca", "sighting--6d532dff-b0c2-4fdf-9c9d-650ae0b08668", "sighting--29f728cf-68ef-4ded-a20d-a34394332837", "sighting--169a33fe-9e24-4c7a-96eb-8e3d3d0d2d03", "sighting--a6ff39e9-390e-4a57-be54-99e4449049b4", "sighting--66704b82-b762-476b-be73-c02eb4d41c73", "sighting--08cd5a38-8e2d-4158-ba5b-e43fe6ea517d", "sighting--0b6396d0-5f20-42bf-841e-db2f66320884", "sighting--97522c0e-079c-4e4b-87c4-3c774eacca4a", "sighting--bdcf9e80-081c-4d92-b5ef-daa1e193c769", "sighting--3363ff4c-902b-40b0-9ca9-035b59ac7f8e", "sighting--a4020ccf-ff66-4515-a4cf-70410d360799", "sighting--06624816-0dc1-4a98-95ad-47b0f5bf4dec", "sighting--3a7c19b9-196b-4d2f-81a1-f78ed1822d24", "sighting--b5eeeb36-1038-46d0-81d0-b3abbe34b0c3", "sighting--34c171a1-ff51-475b-910c-ba74520fd648", "sighting--f866cde4-af69-4f81-81ae-fc826c9fd840", "sighting--25faebca-ea1d-442e-a4aa-b4257a1b2091", "sighting--7b3ecf9c-4e15-42b8-9360-18425a846806", "sighting--c36e2081-ca81-4738-8513-006e0ef99d97", "sighting--de2d0f42-b0f3-46e9-a506-a791c5b4be66", "sighting--48f8e143-58e0-4752-9f6d-e0de0fba6094", "sighting--ae2a2586-6b72-43ca-afd4-d2d87683ca40", "sighting--8276024f-11fc-428d-b5b9-f14433c86634", "sighting--dac11c3e-e3a4-4f55-82f6-3cefe677f606", "sighting--08cb0c34-5a6b-4afa-afa5-47a972cdf13f", "sighting--f0fc8487-49a1-46fd-8b09-2c7ec6ee8c3f", "sighting--5a558102-059f-4f3f-8c9c-f9216dd7ddb1", "sighting--11329654-421b-41ed-9038-412261042bdc", "sighting--83b8ce42-a85b-4f69-bd64-afd2cffcd7b2", "sighting--6cf9c684-c045-4f89-8d48-7e034c570397", "sighting--d7b41050-620f-4392-b743-fdaa23c0d636", "sighting--363c8528-4c12-40a7-8d4e-acd09cf5c559", "sighting--da1630b6-f8b8-4a6f-9de5-f8b5201fdc12", "sighting--c3eb6fdf-5c14-4e94-8462-7483fe96d861", "sighting--16aa3550-f21f-4cbf-a920-c0e36b978d04", "sighting--171cb846-3884-4f69-8eb3-1ce687386ca9", "sighting--d8725a70-bae7-4694-9a9c-f89df12056a4", "sighting--4e3694e6-2970-4f2f-b003-61e19daae386", "sighting--582c4528-eef7-4066-87b5-68e544aec9a4", "sighting--a3488a5b-e25c-403e-8145-193facabfa9e", "sighting--dcb3455e-0642-4554-aa0d-a4bff587f398", "sighting--4f2d8386-ecca-4dd8-aa8e-b31889f09887", "sighting--da8a9d05-0dbb-4d44-b73d-b9cb04a81a56", "sighting--68e44fa2-e0f0-4825-90bc-de62f9100729", "sighting--284c0732-3c16-4370-a139-f0ff8a706c2d", "sighting--88d655f8-bbb7-4e9c-8d29-2399ca01df6f", "sighting--c01fee1f-aca1-4f4a-95d3-d6904de3e1c4", "sighting--91809e66-c4d6-42f4-a740-642432b90f01", "sighting--d05ce766-b0cc-41fa-b920-3802efdf4b56", "sighting--b96f8999-5a65-4459-ad58-a07913d1ff2c", "sighting--e5dc6fc8-4c97-4627-aab7-cf35ab355220", "sighting--fa99bd17-4897-46d1-b4e6-c142c5c4fbc9", "sighting--ade5955b-4a31-4a1e-9175-54b4bac14165", "sighting--1ebd0ad3-e097-4c39-ae2d-15729b8caeee", "sighting--9ca8514e-7de1-46b0-bfe5-1cae524e08b4", "sighting--258d0353-60e6-4a95-99c6-dd01454e099a", "sighting--d9a31639-0561-4d27-99fc-c0779aada373", "sighting--a05ba915-bb3a-4201-9933-d22b4e3198a4", "sighting--7e99f0e8-c2ae-465c-826c-3dbded0b270e", "sighting--9fbbd01b-d0b1-444e-b5b8-af4a35c3db89", "sighting--046229fb-ae7c-494e-ac92-30b1b14037ab", "sighting--c1f3d512-a3b0-4624-ac15-36d3beacba3c", "sighting--5176e70f-f925-4629-97da-19013abca5a3", "sighting--11e63192-e234-4f6e-a3d1-f4f5f67a358f", "sighting--39c1e7ff-38ac-4640-8d8f-20ef87b86cd8", "sighting--2e6ac299-18b4-4dd2-b034-de2f1657fa57", "sighting--cdb35143-2360-49d1-a508-508669ac77cc", "sighting--59f8da82-48ad-410a-a82b-d27b4076efaf", "sighting--fde6c098-6ac7-42df-b571-49b31979508d", "sighting--ff526563-f825-484f-bef4-226b76d30c0e", "sighting--24793d66-b259-40c1-941a-e5aa8e3f3d87", "sighting--7327b59f-3def-4824-b48a-0e7d6c258e32", "sighting--2d77aa21-5d22-420c-8367-6d17f9749c02", "sighting--cf7894ae-1573-443f-b114-e0f4534c8ac4", "sighting--476cfc76-bb51-4df7-94c9-eddaef758a30", "sighting--bc3b4633-3a6b-463f-a6fc-14a0fec77ad0", "sighting--3cfd681f-71ad-4280-9d1b-10352488162b", "sighting--01b11dd6-e799-41ea-82a7-ed70d1ec879b", "sighting--2958c6d4-f2dd-43bb-b728-2029b0537171", "sighting--4a6b4ebe-84a1-4983-9850-7455d15a1c5c", "sighting--309d27e4-7226-4a43-8a37-c2fdc2633574", "sighting--8a74348b-617e-4d1a-96fc-2c5b3a2f6c1b", "sighting--b60efba5-9bc1-468f-9b61-e5fa703ce6a3", "sighting--9b6b32db-8a1d-4300-ac0f-0c28814a6f21", "sighting--b2e51a60-c081-48bd-906f-57ebb490a749", "sighting--5784a01a-903d-4438-bc3b-f6b33f9034f6", "sighting--8e08f0a3-15e1-4809-8114-3e9af31b110d", "sighting--99125978-7a42-442e-90a1-c9cdd62420a6", "sighting--a5c49501-26e9-49a8-a632-4fa0c26e6eef", "sighting--79742b89-257e-4605-97cd-948562da6585", "sighting--437ad424-aead-48bd-899c-f7e26bcf8f7a", "sighting--1953e095-8cfb-4e56-8153-67780ed34c0d", "sighting--56d19a34-77a6-41b0-814e-cfe6343bcda6", "sighting--05767b82-5ad5-4203-975f-c42fd55170b2", "sighting--2091a784-3b83-454a-beb9-e76aba929202", "sighting--0d9496a1-bfb9-42c3-b57c-44ee5f6490ed", "sighting--18b1c0d7-8e11-4f4f-8530-e7292696f77a", "sighting--4b43e59a-26e2-4c78-acc5-c2c2beb42c2b", "sighting--10970e6f-605e-4025-9967-6297b453bb20", "sighting--f0c06741-efda-4de7-b63a-7391ba656d45", "sighting--350e4ab5-2c26-409d-b014-8a73eeb93240", "sighting--ef8adadc-53c4-44cf-bc54-89db0e2d5730", "sighting--e0280707-f638-4b4a-8079-9d84e556954c", "sighting--1331362f-0fa0-4bad-996c-e40457da1f50", "sighting--1a43ce7f-c117-4516-a65c-f0974e7714de", "sighting--8718ec01-1b3e-4753-bd1b-5005e7744e59", "sighting--f350ef53-e952-4bd0-a896-68f957247f0b", "sighting--806a66bc-e1bd-4d63-9ea0-4941848c496c", "sighting--a8503fb9-b28b-4d90-ae19-f2ed4a69a3c8", "sighting--70568ed2-13cc-47b6-b4c6-f1d3fe3a9bb0", "sighting--10af5b84-5a12-4bdb-8698-39e5f5037033", "sighting--ff0d31d0-0df5-43eb-b50b-106691faf91d", "sighting--e124aaa0-0808-418d-8e4a-7002b25500d4", "sighting--d8c9d10e-d6c3-433f-ab94-775a074bca5b", "sighting--7b113321-9024-4f43-8b48-6a37942aaee8", "sighting--5e5bda2e-9a7b-46b3-809f-bd2c70e6d141", "sighting--7aa4ced5-c7ab-44d2-8344-afc87c533b6d", "sighting--1b009c9d-bace-48bf-8058-af67ebbc68ab", "sighting--841ddb9f-6693-46b0-8741-0c41cb471200", "sighting--1677e312-f0cb-4e6f-9a60-b429d88141a4", "sighting--70e861f6-394a-4d3d-925b-7e9b480e7e17", "sighting--0df8adcf-d4d2-4292-9f96-6b3f87e73907", "sighting--fd080941-17fa-4c1f-aa15-405040203792", "sighting--b099dced-d9cb-4564-adb1-4a2476d5b1ad", "sighting--fed0ade1-900f-4b94-9f7c-6d3c33a4fb3f", "sighting--36eac407-1450-4aae-ba0a-1826ee0d4575", "sighting--4ddac975-f320-4eed-8298-7cc1aeee78b0", "sighting--3e4ade5b-1e5d-4c47-b20f-20d314a50ed5", "sighting--8750a540-4a74-4a9f-9784-00daf4526520", "sighting--b103ab74-ef80-49d3-b433-a29b44926002", "sighting--18fa6040-6040-4c73-a120-ae253630a5af", "sighting--f1464419-3f5c-4d4f-a87f-cddba8e1fb17", "sighting--90f7849d-8ee7-43e5-b004-1aae28099d59", "sighting--884d26a8-8bbd-435b-b7bc-2cf284c26be2", "sighting--bf00093e-9922-4e40-a575-eb10e768c220", "sighting--eae33d77-e2d1-4ef5-8bfe-03f2b49543ec", "sighting--418a5a58-2782-4d94-b341-5d364497b157", "sighting--88bd3db0-2fad-4526-b435-b19c2a4f5d73", "sighting--d488b875-45f5-4ee1-bb98-a47fa2db3d19", "sighting--93862e24-d2a2-48f2-a18c-f22e4bae86b5", "sighting--51d73a7a-5e73-48c6-8a9c-ba2188783dee", "sighting--05722929-dbee-4a4a-9395-0bbfcf761234", "sighting--af035fb6-a78f-4c6a-a154-57a8d22b7178", "sighting--6ea10760-c9de-45df-8357-c68f13f8aec6", "sighting--c79ce3a9-3ead-4908-be35-66e626c737de", "sighting--7bda8cca-a82a-48d6-bdd0-62606227c8be", "sighting--17279401-d283-4a09-a5ce-2ffde27ee111", "sighting--de61c160-9f82-4add-87d1-eb0aa0ef8f56", "sighting--88ccf318-cfce-43b8-873b-847bfaf75564", "sighting--1f841d44-5f88-45b0-a2c2-c6cc70706a59", "sighting--a5e7d9ba-e7c9-4445-b61f-1682f20b336a", "sighting--d048e225-e726-4de8-bc99-f5a9be832962", "sighting--bc756f60-05ec-49bc-b221-6555c79b417a", "sighting--a84ccca4-531a-466a-a61e-73d0d6038fb9", "sighting--c7ce0838-090d-4050-ba7a-7cb284b793ab", "sighting--424676b1-e84e-46b0-9151-179b5b0f279c", "sighting--5beeba33-81d1-4588-9771-71d909c34c8e", "sighting--0bb764d9-b414-4eeb-8ba2-df40252a816e", "sighting--9673f0a8-7308-4118-b417-dac5d6ff2251", "sighting--9b6d16fc-11df-4dce-845d-c495ef23e866", "sighting--7b36b1ba-d245-4d4b-862f-25be70a89185", "sighting--6ed2c9d1-b403-4a1d-a2c3-48ac24629d1a", "sighting--cbb234f9-0979-4520-b095-080433fa3b1b", "sighting--27c70333-a820-4c38-b734-bb5632f75099", "sighting--a7f9c78d-b059-45d8-ac0e-e575dac8ed16", "sighting--f95771f4-dbd8-450f-a6b6-0fe82b161627", "sighting--c962a551-bc9b-411b-9d25-3e136eda27e9", "sighting--e077b4b3-a99e-4bf3-8764-73aba75ca6a9", "sighting--00bfe731-0f07-469a-b8a2-3594c990f191", "sighting--020b5b1c-7479-47c2-aadd-2a12cfe7e6f6", "sighting--9320deab-522e-4636-b95f-e587120a1d85", "sighting--bc9b9299-8419-44aa-a6da-c34e3e6b9513", "sighting--0c6a1cd7-7501-486e-a313-3c48c10c0bdc", "sighting--717ae164-3f2f-4990-a902-ef9b565b50eb", "sighting--bf5b5cf7-9a87-4b94-bf95-fd2f3e484ec3", "sighting--0912089a-7dc7-4480-b45c-563155a230de", "sighting--18e2a05f-ba34-4b7a-b218-d79df739cda6", "sighting--eabab685-02c2-42c6-9418-854cc8c6e2cc", "sighting--ad09c651-8dd8-494e-ad3e-c3d9c64f02fe", "sighting--a0f250dc-a27a-48f2-b624-a0593dd75843", "sighting--9cbfac57-2b14-4248-a153-f32f69ebbf81", "sighting--f7b76281-e029-432c-bbc0-d3c42dfa800c", "sighting--400dc56d-041d-418d-81b9-383f4bda9e0c", "sighting--31b5b794-0228-4755-b510-49452b715c3a", "sighting--3945fb0c-2b3e-4b13-a07b-c8481d2ee10e", "sighting--031cd0e7-427d-4ba6-bdbe-e94391093dd9", "sighting--7eaddc81-79eb-4ec4-86e3-43b7a1ea62dd", "sighting--b0b78eb7-b2f0-42f1-b5ee-78b024d71d12", "sighting--06530bff-6660-4d72-9867-a77d6f65a296", "sighting--3bb02c43-d24f-4ec9-bc23-8ed6ab6b800a", "sighting--18a78e98-2128-4403-94f8-d61ed2e9c534", "sighting--af90d8f6-b173-4253-b87f-f7d9116fec95", "sighting--5f93f347-e2e7-4bce-8375-3debc61c645a", "sighting--eefa932d-bca8-42e0-a9ed-4ecb5e0da83e", "sighting--8ed36550-644b-471a-a4aa-67fa2d2a1509", "sighting--ff022995-19ed-49ef-890b-f437f382f3a3", "sighting--c25f408c-9062-4adc-ab43-3b991b365b18", "sighting--893c489b-3221-40a3-aeb8-5e5e96c2eb66", "sighting--18c0be15-2c65-4daf-8c3a-dd1da443e2d0", "sighting--9d77e3bd-7a8c-40c9-8d8c-ddc400f39957", "sighting--0c28bf71-06b5-49fe-aa54-e08cadd7ea1f", "sighting--98da12e3-00ba-4311-87c2-7e641105bd02", "sighting--75fc0a1f-7b4f-4359-aed1-067ad16dcb9f", "sighting--e565d963-f7fa-4bdb-b5fc-445a6ce72851", "sighting--1d590a55-e53f-406a-bc8a-863c04d4a514", "sighting--4b627c65-9583-4cc7-9435-8cec96ba2c3f", "sighting--ec5d8bc5-e109-4838-8432-4b15137d8afb", "sighting--b9871ccf-45bb-43c8-923b-bd04264dd4d3", "sighting--0082de76-21ee-4655-b314-4c739c2b15d9", "sighting--b4a33c25-45c6-46e2-b6ac-84898b8fdcc2", "sighting--e35ebc8c-ade0-4c71-add8-d5d2e1a5bbb5", "sighting--57a0a758-0bfd-4771-99f4-8ea8d9fb2281", "sighting--b255793b-a14e-43f0-bc51-977576a6ddde", "sighting--fa07bb2f-ffed-4394-aa75-032d4d82b7b6", "sighting--01cd8181-6ec9-44d7-8e7a-7acf55068d43", "sighting--9c2298e2-f954-4583-b2c5-b70d3648509f", "sighting--759d2224-c237-4df1-ad29-4bf5d8764d88", "sighting--9cf96f91-b4e1-4bb2-8e05-116840e39eaf", "sighting--f5b523d3-4dd7-4e47-bd6c-cae43ac47d35", "sighting--91202376-9a47-4b13-8359-04751de8d06b", "sighting--0d6bba41-601b-4c34-a731-f6b5bbdc7d78", "sighting--823000ff-d2f7-474c-a9e5-a531b50c166e", "sighting--1123e3ed-385f-4aea-9bd8-741345ad6690", "sighting--bd85b494-3d19-475a-a99b-1ca92caf95bc", "sighting--ee79a273-55c1-4244-a4db-73eb7ae2d72c", "sighting--d14522a1-1cc6-4e3c-b7a9-71a181dd7efe", "sighting--a3a44593-1445-4015-839f-f9de6c333514", "sighting--5fbd4f85-ba10-4334-86b2-468b489a080c", "sighting--6b159da3-c0f5-4f39-94b9-b56a8722cfb9", "sighting--0bee36a3-c88b-4be8-95a9-0862853dd22d", "sighting--d62fa11c-6c91-4aed-a3fa-855d386e0c1c", "sighting--c7995531-d6e9-4aaa-b4f8-dc1062b94870", "sighting--e077b867-47ac-4ad5-9b05-b2b6696968e7", "sighting--7c1fc785-10ef-4ec5-baef-b3cfc287b029", "sighting--315def4a-30ea-480c-bca1-cbb9e402042b", "sighting--acadd43b-45af-4bbc-a7c7-e50f1fe78870", "sighting--6a051dc1-9799-4583-97d6-d5d3b778ff92", "sighting--3b3293e4-69a4-4ed7-ba27-9c74ccb5dc76", "sighting--4decd396-b796-4634-95bb-a6eb9ed00130", "sighting--9dce61b6-7d57-4193-a184-fb73750a3614", "sighting--cc67abb0-7b64-471c-9300-9f852a808c2a", "sighting--06b24eec-34b5-4cb1-abaf-306f3ca7ff8c", "sighting--d8f97a57-8d46-4e9a-abd9-1dae147b0dd4", "sighting--30dbdda1-a420-4221-8e4b-0483181221c6", "sighting--0f2debe1-140a-4e91-aa78-697be7dec3cf", "sighting--068546fe-3cdb-4007-b018-ca12ffef65ed", "sighting--621c20eb-2c5f-44f1-89ad-90713c105a61", "sighting--080e657a-cb34-4392-b0e6-2c95a3065832", "sighting--65f6b8f5-d38b-431a-a6c3-6d1a4c0e2304", "sighting--3903a149-d5e2-4a1b-8144-497330474d45", "sighting--faf839e0-300c-4faa-a7fa-bdf539f2b32f", "sighting--31d7f4ee-221e-4b53-830c-b8b43ebeaffa", "sighting--24ed5c0a-f308-44eb-a727-140ded86354f", "sighting--94758a2f-7722-4056-8817-337b137c8a98", "sighting--59a64c14-4670-40cc-a8f9-90f08e848205", "sighting--a2c7113f-6d6f-404e-8867-07d3ad103df2", "sighting--667e19df-1b3b-4a5f-af32-346f2d261601", "sighting--49be9667-ce26-4f9d-a181-7337183a6374", "sighting--85b43094-d603-4bcc-9b1a-224b1cebd304", "sighting--cfba2780-8743-44de-93e6-4e18ca572ffb", "sighting--2d09f597-29f0-44cb-bca4-6c5ce99b1ea9", "sighting--772b6f25-024c-4c48-8a57-56e51afbff88", "sighting--7676349d-3b0b-495e-bf04-de5c8588fb54", "sighting--873b3d3f-5d46-4233-886f-da4c03f6ac32", "sighting--0bd77a93-716e-49c0-8235-4eece400b5c1", "sighting--5d514d48-d9bf-4dbc-8956-046085331c28", "sighting--87eed245-463c-4d63-9754-b6bcf467d9e0", "sighting--dd0bdae2-4c4b-4bf9-8a4c-0c6b8e84859a", "sighting--d49cccbf-46ce-4ead-b283-35852e81ae6f", "sighting--7678420b-e3a1-48e3-86ed-f4e55c18f005", "sighting--41084867-156a-42ca-921b-691b1bbb235a", "sighting--196cca47-c734-4e57-8de9-2a6a9ac9e9a9", "sighting--93287a18-cf13-4e66-aa6d-2fecf0896371", "sighting--b64ee2c8-1713-4aa0-88c5-bfe5b392b1a2", "sighting--c8166237-fb51-4326-8bcb-b506bc510ebf", "sighting--81b55ce0-abf7-4c47-84bf-3e60cda758eb", "sighting--0e537b1a-cd90-4f14-a874-5c0f6947de1c", "sighting--3cf27cc3-69cb-4650-bb0f-a476cbbc75aa", "sighting--3648a86b-acae-4831-b74b-68c4898b8db4", "sighting--6c8f8ea6-a1ed-4b2c-b8b9-1f2dba1b09e0", "sighting--4417b017-8b64-49fc-a915-d5a76678faa8", "sighting--a7483731-adf1-4389-aac7-1a67d5fcacbc", "sighting--b891bc4b-91f3-432d-8d4a-ff65dbc46ffd", "sighting--96626a9a-27fc-4753-aba4-1423d2ff90e7", "sighting--8f688ad1-5e38-4cd7-95ce-567778b5b57b", "sighting--23501a63-bf86-43ad-b754-8f16872164ea", "sighting--f090a1db-7082-45e4-808e-a1496d644ae4", "sighting--ef6f773f-cb11-4a56-8911-2b4b7a2ca437", "sighting--033906d3-4e11-4741-b645-c4f79734dbd3", "sighting--6d549dbf-09d5-4bfa-b668-cc2b0e1bc37f", "sighting--47f91887-1f70-4dd4-abb9-e4a44bfb1c69", "sighting--3e8aff70-2fad-4853-b1fd-27b057005253", "sighting--83eb4c83-92a1-4d92-a11c-bb3592637da5", "sighting--8518d55f-cf95-42a3-bef0-5d202b4edeb7", "sighting--48d5cd25-90d1-432c-9163-419baad67e22", "sighting--1a5960d9-9862-427f-b5d7-202963bb618a", "sighting--ace2ff90-1d06-453d-869c-9cf4681f409a", "sighting--357bc62a-8959-456e-a2fa-a48336eec631", "sighting--4e476994-b999-45dc-a3d7-2edc3a781543", "sighting--7e2e131b-60e4-4774-906e-80a230c42f70", "sighting--9e8b560e-d238-41ed-a914-8ef4ddcc0e7d", "sighting--2da14e9f-8ae7-4f2d-96da-486b468b162e", "sighting--c7361a1f-9b22-4702-a745-11a84875ea05", "sighting--46854ff0-1486-4ea5-9812-914754a3ce9e", "sighting--108681bc-9139-41c5-be4a-0bf778463f0d", "sighting--8f791dd9-5535-49b5-9c21-8fb1d1f5baa3", "sighting--fe8de346-4688-498c-8415-d8fa32d95bcf", "sighting--6489992c-18ba-4301-88d4-087f886c34da", "sighting--7287e1f5-97ec-4529-ab6c-8f9e517ac90f", "sighting--4aa1b4b2-7f4a-46e2-af90-04dfa4f42a64", "sighting--df1fc905-d45c-43fd-a3fe-60e9a46394ba", "sighting--1795ae88-943d-472c-bbdd-c7955559c213", "sighting--2febbbc8-d27d-44da-9a73-3682c9ba4720", "sighting--1bd64ff8-fe04-4be0-b236-a4117f9035f0", "sighting--c3abf572-7311-41ed-a8b6-973eb4cf8746", "sighting--80005c06-69ea-4270-96e0-1c39b5b244e1", "sighting--dc7f76ec-082b-4a22-b2c5-cba3a3b68762", "sighting--28b2baef-5319-4c82-9f7c-09445447bb8f", "sighting--d81cd049-adb0-4f5f-895b-b38c8cf4bb23", "sighting--bc29278e-4924-4a26-bb0e-104f63864220", "sighting--ce0cb188-e7b1-4938-81e2-234f0b7e4300", "sighting--8ab4dfba-d928-48ab-ae4d-c4bd5bc856f8", "sighting--6e0b1052-5476-46c5-9c34-a60a2792092f", "sighting--dc149c72-75c7-462d-b988-aadf4fdb6cc6", "sighting--15f82b99-26a5-494c-9130-0bc2de9b4744", "sighting--e3fb6ab3-2a6e-4fe2-9c40-da7e0def1f28", "sighting--d6c43e43-5345-4cb5-84d6-325508004938", "sighting--ee68d074-fa21-4964-8466-9b4e8051ac8d", "sighting--38a78138-2652-45b3-aa9a-0d5a72266f20", "sighting--1daba681-a45e-41be-8b44-d9abfd748778", "sighting--9294ff86-a1a7-42a7-822b-27aad4670ddd", "sighting--9f6dc1a2-36d5-462d-a009-4a0cdc4986c9", "sighting--d4e4b463-87bb-4cdc-894b-5e4e6298b636", "sighting--4635c27d-84dd-48ec-8163-be553012fcbe", "sighting--ae88e85d-b6c6-4e4f-8479-1dcddf83b2a9", "sighting--bb9dc483-8ba5-4198-bf62-02fd81631b3d", "sighting--6a7b39da-86c0-4f61-99d3-02186faed957", "sighting--4b8e284f-3685-4108-9c47-63ca3a25ec3d", "sighting--3900e481-5217-44b7-a9c5-140097e67cfc", "sighting--76821a3e-a618-430c-a0b1-4f143cbcb0b1", "sighting--86a827a9-9eac-41b4-9cf4-4c4596f3e690", "sighting--dfe717e6-9afc-4826-a250-2a849e3cd13c", "sighting--7ed728df-0e69-4b17-9efc-2f7706ac3839", "sighting--8a0505c6-f3e4-4e8c-81f4-4d2db667f626", "sighting--7d5a4d7a-01a5-44fe-834b-1f38d7afb859", "sighting--2ae60f09-2040-4333-af7f-cb87d6adafcb", "sighting--4fe67119-571d-471e-8e40-7bf0ab801934", "sighting--8e80931a-4791-4d59-bcab-14b7401cb788", "sighting--ef6af3d6-df5d-43e2-9082-bebc8e418f7b", "sighting--3bd2c654-3d39-45d4-96ee-1c5162cb41e6", "sighting--b6bf45ff-22e5-4b6d-be34-03bd6117189f", "sighting--46210b37-fb5f-4f2c-995c-dd131d8a1a65", "sighting--2a4fe94f-c05a-48e1-8e6b-4cee95614dea", "sighting--06db808d-d2cd-4a00-b70b-b57bb68196b6", "sighting--1797c65f-8d9a-45eb-ac2c-fbb51cccd5c6", "sighting--a854c1d3-564f-4ab5-866b-a0606a63f461", "sighting--e439854e-6cb5-4430-a658-0f5a3cfe9226", "sighting--8af9aed7-af64-4c23-80b4-4145c64a6def", "sighting--5dc5e138-52e3-42d8-9786-0b8f6799b4eb", "sighting--81584176-0fc7-483a-99c4-bf80708de5c9", "sighting--5b497329-b7af-4436-aa7a-e5fb8ecb1efa", "sighting--c391956b-ded9-49d9-b851-d899cfdbf1fa", "sighting--9b331ce8-34aa-4432-b120-e93234a87a22", "sighting--a15b3f69-91c8-4235-8a98-1970126044fc", "sighting--73aeebcc-9836-41e9-a08d-d2ba5a6ec57e", "sighting--442b5198-6afa-4ebc-8269-7dfce20b96da", "sighting--c5d10685-3f34-4023-80e8-6b553fa6993b", "sighting--57c0f189-0c63-4a8f-8fb7-34978c9a76ed", "sighting--47ef0f51-b316-465f-9222-9124a916b2db", "sighting--56e7712c-98da-49c3-93ff-56e54f83afc3", "sighting--eaa566b1-338b-4d47-a8ff-dd02b5fda29d", "sighting--4955c354-392e-4ad1-825b-3d36548989a8", "sighting--be678d1d-fc05-4152-994f-98f568d5e7d8", "sighting--0ae84d6c-9260-4dd3-99b0-c22690444f55", "sighting--5b1febb3-8bc3-4eb8-b959-889845251e50", "sighting--bee35936-7f10-43ab-9afa-c99d1695b0c1", "sighting--7c30b555-f88b-4030-88b3-744a9fdcc52e", "sighting--2ebd4f11-3124-4089-a6a1-db43283e3963", "sighting--d457f8a3-c4f7-4e1f-b760-63d944c83579", "sighting--802a8b3f-48c4-4442-a17b-f78e804d24e4", "sighting--cff0883a-8f0b-4fca-9329-de29c937759e", "sighting--bdac6e6d-2e40-4a3c-8e39-c3c4e12ec34d", "sighting--6b780e8f-4101-45b3-b3f1-156ee8e3a170", "sighting--28326579-84c0-45cb-b320-0c63ab2dccc4", "sighting--d1463aa5-6265-4304-ad3d-120f4729535c", "sighting--a963e3b4-d300-4fdc-8d84-04f30705447c", "sighting--c7898b99-54af-4bea-bf03-a98c73dfec9c", "sighting--c8cb23e7-5bc7-4d28-872a-b40566ac1064", "sighting--2023ef38-8233-4ed9-9a91-05fa1dac931b", "sighting--5d6a121e-1ae9-4a9f-88fa-232929bbad14", "sighting--ec9622bb-0a6a-4cbf-a40c-fa6ece8a4d4e", "sighting--76359e50-7eb8-4399-af60-ccd3b78ace32", "sighting--1cfdb4d0-8488-44b9-9f53-146d352a25a3", "sighting--5dc35284-ea5f-4075-9a81-8de49371a9d7", "sighting--fe6a8f89-26da-43a1-b812-37a30b614db7", "sighting--abe773b0-3722-4897-ad81-571d3dfb17c4", "sighting--ef772e77-b5d4-41ff-9334-75f1a768d864", "sighting--ab8cc7ec-035e-4b59-a2fa-51072099cbe9", "sighting--11f27841-a254-4882-aea1-f4c385822684", "sighting--ebc35e45-df4e-4c8d-9380-751c3af7efc9", "sighting--4751eb4e-7cb4-46e3-ab6c-65606e2b79df", "sighting--0824ba0f-47bd-44d6-9cb9-ab59ad133050", "sighting--5e4e5370-e603-4d56-a0ea-42c75ebfc447", "sighting--8e9796e4-d45c-4a8b-b009-0fd69e3d688a", "sighting--457fa1a7-e049-439a-a921-0e95519310b0", "sighting--056ebf8b-45c4-4537-ad77-a4fb4eacbf64", "sighting--3a47bbe5-526b-4c52-978e-53740e1e33ef", "sighting--93e790cd-54be-45d4-a4f4-d6d4207e0e01", "sighting--b90e14a8-f4f5-428b-ba9c-f200b656b2e4", "sighting--5e0a964e-39a0-452f-ae58-3e1d4be3e241", "sighting--e72f1f5c-1f1f-4fee-aabe-405f38d07805", "sighting--36603a41-7a19-4e1f-a1a8-4ff28f85b85a", "sighting--2ff35d68-61aa-49a3-9238-058e564c5f55", "sighting--0d7e62b9-2d69-40ae-aa81-e5375c073aa3", "sighting--90a8525a-38cb-4135-9783-1729b5467aba", "sighting--6c6a87fd-4088-45f9-a8ef-f555bdb17551", "sighting--dc444285-f840-489f-9c5d-cbef08c42d80", "sighting--92997314-46f4-43f0-98e7-2c5b850f95e4", "sighting--c09a1993-7987-4104-b08a-53867679c4b2", "sighting--0c43ecfc-8a15-4b15-a3fb-aae225175540", "sighting--b99be6d3-d6a9-459a-921c-2c9c6b5e7da9", "sighting--101382b1-f78a-47c4-85d5-3e4bc5db9bae", "sighting--4260b2ab-0117-42f2-b1c9-93fa9e9a2723", "sighting--6324bc0d-a80a-42fa-bd9b-8c8d8a073183", "sighting--86ed0691-2ca3-4ae9-85de-f0b63c6db14e", "sighting--3507505a-6a62-4f7d-ad3c-7703265fa914", "sighting--2fb65c00-8d31-4c6f-bacf-f4f39982d9c4", "sighting--f1e8e24b-ba1e-4eba-8323-d2581678520c", "sighting--087366f2-9880-47e9-8d98-ecb7186c1486", "sighting--dfa63f5a-73ec-49aa-b1df-0b7a09153e1a", "sighting--e02b32e4-4eeb-4826-8022-af4e96e91cdf", "sighting--7e3904fb-9476-48a0-8289-b5fb5dd875f9", "sighting--21bdacb7-f8e6-49f5-b129-adbdc1f76413", "sighting--82b3b6c4-c0b8-4d62-816a-8c33daf163d7", "sighting--99efe614-d20e-44e8-8924-a2d5d9bfb07d", "sighting--dda02016-e5c8-4ce8-b465-3f1f8c09c444", "sighting--4b3442a6-8ed2-4d28-9ad9-fd470b48d39f", "sighting--69856c5e-8447-47ee-a909-40ee1a93ad66", "sighting--79ba3e5d-09df-44fe-9e7e-51ea52c21695", "sighting--b657b9b7-ae5e-4639-a9fa-15b7770410c9", "sighting--0ce08aa9-45f6-46da-93dc-266e4a4e0075", "sighting--b3c8aa8c-3d42-44f5-8dab-26d6418895ce", "sighting--d63de7bd-6b1e-4874-a958-bedd3bfbf9a9", "sighting--ea033d80-0fba-41da-8e62-9f818e02a5d8", "sighting--fe5a7a8b-6bba-41b3-b94b-9c179db222be", "sighting--507715d0-627d-4067-8280-99247cc4d4bb", "sighting--2820f424-e3c0-458c-bc03-09dcb6dafc42", "sighting--8860a07a-38b2-418a-9a2d-189507a0d79b", "sighting--7ec1a4d7-0cf8-460f-b19b-4c5a445dc776", "sighting--77640934-6c93-43d9-9961-4c35af1fb1ac", "sighting--ae83c8d4-49f0-471f-ac87-daf253ec79c0", "sighting--701dff20-ac35-4d14-a17d-5e6f8e274bb6", "sighting--cdb62d4c-8df7-46fb-bda2-6ee3102a8dfc", "sighting--a0bd3e7a-06df-4d7b-962d-f21868ea7cbc", "sighting--7ce2a282-93da-4e81-a9d2-feb1227ae732", "sighting--ab3fe6ab-a488-4712-b5a5-97d8eaae8124", "sighting--cdd292c3-cb28-4884-a5fe-96ea9cfddb3c", "sighting--3c30cf94-1081-4e44-9e16-d73d855c1b02", "sighting--463dbc7f-a6a2-42ba-a6f5-d35ff9990baf", "sighting--43415d2a-18a5-498f-bbd2-034db1f2159c", "sighting--e5bc3035-0e40-4409-bb70-1e2e141d7fc7", "sighting--8661874d-03ed-49d6-90dd-12100b2dfbf8", "sighting--ff279a9b-46f7-4b3b-b53a-0da319957a30", "sighting--575691c6-1182-465e-b14d-1386dbff2ef0", "sighting--2db1925e-03f4-4080-bb13-35481cba400e", "sighting--60367c94-d0a9-4f44-9f27-50330328d682", "sighting--e57d49b6-a3bb-4e89-b59c-501aaa55f971", "sighting--aabe9a7c-1931-4dce-8ce4-d658cec5b491", "sighting--df2a4345-c76a-4e39-b15b-11f0ec294d83", "sighting--266b67f2-d74a-423a-990b-c82347b6dc7f", "sighting--7b30cda0-86bf-4b88-a0ff-4061a36fa1b2", "sighting--2bae36b3-d44e-4df3-877d-dcae978957ef", "sighting--b70a0a93-5f4a-43ab-9ea8-4c1611d8cb6f", "sighting--2f2c3de4-9f21-4ec6-9b5d-c44fb5148e05", "sighting--2327c4c0-d1b4-40fd-ad24-552f2e4e5142", "sighting--6327591c-162b-49d1-8821-56fcef42a02b", "sighting--f5c3de28-cbba-45ee-a365-07cdd5554b1e", "sighting--e5df9cdb-9deb-43e0-b77e-155d2434bec0", "sighting--73298f1f-9cce-4ed0-971c-a3d05f5782a7", "sighting--06f19118-6fb9-44f2-99f1-1f2fd0606132", "sighting--0807cdbe-a36d-46f4-94c9-44f4bb6d1fed", "sighting--3bca39b2-c88b-4b5b-a279-7664de89b1d8", "sighting--d3f4fec7-babe-4159-ab6a-1a2edaae0f46", "sighting--0ab24fef-4aac-48f0-88b9-4ebb37035b1c", "sighting--4ef06ffb-9756-4e04-b201-f3b1ce3b9c9d", "sighting--76d9a4a0-bf91-4ead-87dd-a7cd1be38bad", "sighting--6a5f0249-82f2-45b1-9284-489bb61165ed", "sighting--d2a45308-00b0-4f28-b489-a75057b9159d", "sighting--66d4dd90-a565-4abc-9445-486040e31e07", "sighting--1f7b2f21-c82e-418a-936a-2ce4475c2f17", "sighting--5f2f943a-d1ab-4b39-9a09-4c27abc62164", "sighting--2223ebcf-faea-4543-b8c0-6e7f3a3119a9", "sighting--ecb658e2-2dbb-4c64-8db7-e79a01888e65", "sighting--4c3c5aa8-84fd-471b-8f01-7bce5d4aa9d4", "sighting--d146886a-e72f-49c3-88c3-3e507e40b24f", "sighting--cd935ce1-9437-4235-b181-439e23948ce5", "sighting--665aabde-c8cc-465e-aea4-4551def23efb", "sighting--d1a473f2-1b34-4ed6-94d0-6083ca9e61ee", "sighting--0c6969a3-6a5b-4c41-9e20-296032143b2b", "sighting--efde1aeb-76cb-41df-abd9-4e6e025bb2c1", "sighting--e766696e-1b29-48c4-860c-ffd8d1236333", "sighting--77b91af9-e209-4832-a404-381a0dbd11de", "sighting--66df040f-6394-4667-895e-7b4a1bb82baa", "sighting--66bde0d4-a14b-4f67-85f9-b06a3e724cba", "sighting--39e89e35-bc8a-4715-9999-f492391141f3", "sighting--d5487145-efff-4103-8a90-760285816f74", "sighting--7cafc7af-3131-4c0d-8ac7-a6d6d48e3d4c", "sighting--9199b238-a806-4103-bc4b-b0135de60086", "sighting--b5fbed83-bfe7-49f4-9578-a717a8565f31", "sighting--dd46237c-4977-4fac-a185-9c88177d8546", "sighting--ac579088-2840-4a58-864b-df3799922fb4", "sighting--a259b1f1-accd-4dda-88c5-8f28976b25e8", "sighting--fc0d7142-f81a-4393-a664-1aba6acbac0a", "sighting--c21ab67b-c311-4118-8f29-cf9b8f5e5edc", "sighting--09b93192-5b63-4d88-9145-c48744318a91", "sighting--5ba758b4-321a-4fc4-ab89-4ec7516ac7db", "sighting--093985d1-ed88-4b5e-8e16-2393117794e7", "sighting--9782a0ca-808a-4667-acf9-0e13f3d7aad6", "sighting--8a05c71e-7cd3-4b89-a9cb-9aff4313246c", "sighting--4b622256-602b-4309-a341-3d86e9e78f31", "sighting--917902bb-d4fc-4cc9-945a-940c4ee82811", "sighting--d5731e63-3f4c-40fc-934d-0b0d85bdeb83", "sighting--bbace752-2d43-4416-ad47-8f2eed6036fa", "sighting--a41c10f5-9391-41c9-bd89-dee11af3fb74", "sighting--616e1b73-8dab-4538-b106-c30c8d06e7f0", "sighting--27b4295e-b695-4202-b029-655d9bdf6600", "sighting--56d40f86-acb7-476f-98ae-15177475b882", "sighting--0fc6b26f-f101-4c6f-82df-3ceba61e095c", "sighting--188ff817-1ccd-4b97-a1ae-c1df9e70b086", "sighting--fedab7a8-1ceb-4924-9a0a-29ead41885a4", "sighting--6a59f2fb-2056-48a9-b0b9-3a36f4504ffe", "sighting--5a88d928-755d-482d-953d-26774147d5e0", "sighting--3147377f-d432-48d6-8a75-1aab2eeaaf1d", "sighting--6bc32b0f-4f5d-42a0-8745-81a82282782b", "sighting--fd07a80f-be83-48f2-8596-51791c592b21", "sighting--6818d83e-3119-4bff-911c-7837027bb60a", "sighting--f4f345f3-ee60-4625-8d61-8a24b79354d6", "sighting--b49ec2b0-2639-48d8-b182-1f7ff8d83a93", "sighting--563266bf-f939-4804-bfd4-fa30ef0f77c7", "sighting--a649d42f-9b6e-43b0-bcc0-d423a5ed6832", "sighting--28970c58-7628-4659-92e0-d35fe75de0a7", "sighting--2e8baf6f-b791-4fea-bdb2-aead5cbe33b4", "sighting--384c2ee5-6f64-48c3-bff0-01d4c7c4ded7", "sighting--a1212885-ec83-42d1-bf18-850a136f0741", "sighting--f68e057b-eb7b-4ac7-95da-78dc1c24b686", "sighting--c9104163-c934-48d7-b8c7-136634673aa5", "sighting--2bfac76a-2262-468b-b578-358f79a94bb5", "sighting--cd7d912c-93cf-4f9e-8cd5-a893e1bd16b7", "sighting--22ccbb54-0287-4ede-9e18-dc0d2dfa47f9", "sighting--b7ca1f33-fd9b-4f1f-94ce-9d38c2c03514", "sighting--127685fd-db3a-49d5-8cfb-d5e67eaa9cdd", "sighting--2dbab2bf-af4c-4e67-a6e0-bf37e64fe92b", "sighting--74c4f423-dcb1-4b43-baf7-544fddd603a3", "sighting--b4e3918e-22f0-4c5e-b47b-bdbb6555f7e0", "sighting--28a9d2c3-8caf-4857-8865-a829767b0360", "sighting--0f2f7682-ed47-4421-ac8f-a15931e9727b", "sighting--30f03afd-163c-4c5b-9dc5-c01a11b9b9fb", "sighting--1378b7a4-3136-405b-8b38-5b5c5cd08ba6", "sighting--9a1d4734-7a43-4651-97dd-489d7097bf05", "sighting--113152c4-d9b6-451d-afc1-46509acc96c8", "sighting--2f4bd578-3ee7-4f6a-a255-8e6b20965d7d", "sighting--b0ba8556-cec1-45bb-9ca0-a761ddaf224c", "sighting--4a5c2fd0-e0c2-4ad9-b2d7-19d558058b1d", "sighting--255ebd74-6865-4882-915c-8bbcf7bcd3f7", "sighting--e961ee08-e9e4-4f83-9c65-7fbf964e137f", "sighting--5aea08b1-c067-402f-a006-9b5e8059aec3", "sighting--10888199-e333-465f-88e7-5fdaeb207f60", "sighting--823c3801-0a75-4979-bed5-e4cf61eba7f8", "sighting--435f830b-5be9-4b3d-80a7-b6ad9f852226", "sighting--31a93ba8-d320-4466-90f1-84c7cb6004c4", "sighting--6efc16f8-a832-47ab-bf30-50aa66714010", "sighting--4e2eecb8-7841-47f4-a395-94bf4a2086b0", "sighting--c3276b75-6895-415f-94f4-5174a898c4e1", "sighting--e85b3db5-7f38-4976-9fc3-2f907ad80ac3", "sighting--e6e59167-ad42-4dac-a313-14d025533c31", "sighting--36e4d588-1afb-4941-acd7-e0884081451b", "sighting--3d571da2-b41a-465c-bdf3-2735702e670f", "sighting--98b1a4f4-2f1b-480a-8d7f-4ce3fef3a439", "sighting--6e1c82f8-b0fc-4c83-982f-aec0c9985aaa", "sighting--28c17a2c-add4-418c-ab07-bfe6a68c47c3", "sighting--d10058e1-b838-4856-a2be-ebb849c4fbde", "sighting--f4e2e316-453e-4c4c-b918-1ba5a525b363", "sighting--6a8785c1-2b4e-4d24-a8b4-d1291f68ea6b", "sighting--35ae6d0a-619b-4f7c-9530-55d195e994cb", "sighting--3f191ae1-e388-4a9b-b8ed-3c6984ff41bf", "sighting--ba2cfa82-e6e1-4b6e-b067-4813b6a81f0a", "sighting--9ad41497-48df-4d5a-a536-7ca3d9b1733d", "sighting--2f4a68a8-5f31-42a9-b59a-0bc3f538f4da", "sighting--4c061b1f-44cd-45db-be36-5d1004141b7c", "sighting--9c3e8afc-4ee3-4329-8b2a-edc86f73ff65", "sighting--4dbf47fe-f5ba-4e1e-a3bb-79302942f86a", "sighting--439f9fc5-c1cf-44a0-84a5-8b418b615081", "sighting--83f2096f-d4a1-4323-a865-b9e733b47a5c", "sighting--ebf2f554-9dcf-4a04-84a0-1073f281d21c", "sighting--702b5d11-1c24-4839-9340-52848587cfce", "sighting--90b24e2b-e0f4-4ed5-a2fc-6f932a43320d", "sighting--fb81b04a-b547-4993-b2de-313636cac1b1", "sighting--ec080b84-30ee-4eee-9621-a4706d724549", "sighting--f743ba2b-419e-430a-b391-a152de31c493", "sighting--20602b4d-a24f-4b11-842e-88e70c83c5af", "sighting--67dd4860-fbb2-4ae5-b947-e0247c710353", "sighting--6ffb3efe-01b4-4dcc-9d32-b7211e4cebb3", "sighting--a3e3f2cc-7cbc-4b9d-8eec-2ab60d827e74", "sighting--e94f0d74-8a6b-43b5-98b7-eb9d6856feed", "sighting--5c14d385-74d3-487e-9487-2efd30111bc6", "sighting--c20cf09c-3e2a-49e1-9994-53d22bb1888a", "sighting--38662d42-28df-4bac-91f0-12a25b6b768d", "sighting--ba8f8e11-25ad-4d1d-aeeb-207b8a9c4491", "sighting--aedbfdff-d0a5-4958-9739-30870844174a", "sighting--58a222bd-6293-4154-b82b-54427cf62dad", "sighting--9b117d51-e340-4a46-b142-7640defc18bb", "sighting--5c4120e1-d344-4fbc-a642-a1459b856571", "sighting--931df49b-13d6-49b8-9a7e-21ac3cce352b", "sighting--424581eb-bb65-4d37-aa2c-65f19d9e4244", "sighting--c8863342-133f-4d00-ad1c-e7e916d7dcb4", "sighting--1c70f274-2efe-4bde-8433-85aed2847126", "sighting--80cf4adc-b68d-412f-aed9-419b22dddb03", "sighting--daf578dd-ee41-46b1-b624-8fe7df4c40c5", "sighting--2391128a-53a7-477d-91f6-2041e6d2eb3e", "sighting--91c8e9cf-2946-4905-977f-fcbb00d6df51", "sighting--3f5e5186-014e-4bb1-a575-896ff0f79bc8", "sighting--596c0047-f226-472c-bff0-6322320da6a4", "sighting--e920add8-0d8c-4fe4-b401-58d8396ac3b6", "sighting--5fbdf7bc-c7ba-4900-80a9-e061917f5747", "sighting--7dc21c3e-1dbf-4e99-a450-125a7e9fee3b", "sighting--8d66ef6f-0000-47b9-bc0b-d3a64cc8d0ff", "sighting--ed59e292-e741-4b2b-873e-573b8cfac45f", "sighting--76b42c90-69a7-4136-8a9a-82fb100cdb56", "sighting--e0b1fd24-b008-4f17-8a20-031b502d4654", "sighting--16642bde-faee-43ff-9504-db247025167b", "sighting--a12f58af-b8df-4c3d-9f23-6be3ebb153f0", "sighting--74a0112a-ff03-4dde-ac17-6e6b638d44cb", "sighting--d660284c-90cd-4f7f-b903-eaa5c28bd9c7", "sighting--62b37d85-2a80-4359-b376-725267e10270", "sighting--624f75d2-c071-4881-bdc4-cb16103b2714", "sighting--367a64dc-6bbe-4f1f-bd9a-1261b6484333", "sighting--666d76e7-665f-48f6-9bb9-094179686d73", "sighting--519d1ddc-677e-4c24-bdd7-c922aa8dd5b6", "sighting--d86fce12-74b0-436c-b075-ddc616c1b0f9", "sighting--cb0f5b44-ee74-4ad6-83f0-c9e469edf1a6", "sighting--60579e48-fa9e-4ce9-b05c-3a6131b3cef6", "sighting--3bd78841-a6d8-4e6b-9219-4e3ff8ad97ce", "sighting--4a004644-9a32-4b05-90f8-00d245708fc3", "sighting--68d60d90-0f29-444a-b2e4-13785e115e67", "sighting--77f07ebe-4e46-41d0-8046-ca6869bb3736", "sighting--2b76b94f-fd3f-4905-b7f9-bd3c1cc1b379", "sighting--7b6951be-bb3a-422a-9629-799f7da8969c", "sighting--79f1c6fe-a4a2-4302-97d7-75940b95d064", "sighting--fdc1f077-b02b-4bb9-87ed-498f2cd5ffbb", "sighting--71125ca0-bf69-4984-bc1f-c8e389f22a33", "sighting--461abf8d-8b0b-4ed1-8f49-8f9d8eb9ac9d", "sighting--88a912e4-8c5e-4852-a59d-163a6adeca86", "sighting--bbf2fdb9-b14f-4e10-b7d2-8a57b32292a9", "sighting--86d53cd3-e9c9-4be7-ba8d-569707444b96", "sighting--203c3876-6c67-4d71-afd6-6e9ae517ad3e", "sighting--b509b007-dd9f-4e48-b73f-5a4ca8f350a8", "sighting--80f3b3d4-d239-4050-8ddc-faea68fa8aac", "sighting--a28dd1c0-40a6-4355-b570-43e8c3b3be07", "sighting--8daa59c2-41f0-48c8-9a27-1f486c0aaf6f", "sighting--7d2155ac-8078-4feb-8788-5f4be7e405b3", "sighting--033d731f-aede-46f1-9dfb-84c85f6fcb15", "sighting--0a6f305c-c238-4694-8c4d-a2ab16a99d4c", "sighting--42a76e16-5859-4075-8e31-77aad59ea175", "sighting--e33ca4f2-7883-469a-9edf-18a81e974ee5", "sighting--2c37eb22-23dc-4e1f-948a-ccad08139272", "sighting--ff23f7cd-c8e7-415e-bf02-bb32103e28ce", "sighting--738d86cc-1547-4751-8b17-e1deb9b500ab", "sighting--80713af9-0ee0-4e16-8cc0-c37706b6db43", "sighting--ef45432a-c3df-4172-a6e9-ab983a433f36", "sighting--2842aa6f-3fad-408e-a49a-a703367bf99e", "sighting--99891dd7-5d8c-4298-b63d-de8792d265dc", "sighting--cb731d22-1467-462b-b1f4-3ceb023b72c5", "sighting--00f02843-b16b-4b1d-a7e7-5cec0023d397", "sighting--9f296be3-8ea4-478f-ac16-cc49f84e63a4", "sighting--9c312e1d-7a98-4ad6-b801-98760a023fdc", "sighting--86cbf2fc-6e22-420b-9554-324ad2925767", "sighting--6657726c-69c4-42ab-90bf-6b4cb3f4c7ee", "sighting--c59637c9-b968-4ef5-bb28-b13f5a7a3c03", "sighting--f40308a7-43ab-4806-be22-6fb04962fe49", "sighting--06afc8c3-ee4d-422f-b1dd-eff2c70c7845", "sighting--3f456b28-816d-411a-83e0-2152a76e1d87", "sighting--ad6f5033-80a4-41c0-a8a9-b83501a06ae1", "sighting--917e1f46-8c22-44d9-99d7-0992de0dad43", "sighting--34da1b4c-67db-429d-a08c-bf19e11837e9", "sighting--6d86cd06-b1c5-46a9-9646-9223b4cb8a93", "sighting--bd9c8696-1472-4d51-aee2-1c807a815edb", "sighting--d7df117e-d343-41f2-b4bd-4831894d2950", "sighting--1c1987d9-6626-41eb-893a-a658774a9efe", "sighting--95f5a425-ae06-4b4f-af28-a73597e287e7", "sighting--95886af6-9b6e-45fc-9eac-22c9deb2ef5e", "sighting--5a525d31-a30c-4079-88c6-f5873ab39edd", "sighting--e51066b4-8366-46e3-8016-cc5aa22888dd", "sighting--b97be946-a8f4-449e-b881-67a843d2922a", "sighting--e9961942-2517-478d-a6c5-d66df79d1592", "sighting--7f069a1d-f245-49c8-b494-095b6f35d8f0", "sighting--70009371-cab1-4b6c-9d1c-908db39cf117", "sighting--c42f9e5d-9961-43c4-a97b-99d20d3e09f5", "sighting--a27c3503-a2f1-4ca7-8bf2-a3ce4fa11c58", "sighting--3c46ce45-9a4c-4e78-ba88-5e2115a060ce", "sighting--686269d5-9e4b-45f9-83fa-141850aca86c", "sighting--e892365e-4198-473f-a47c-6223f1ff461e", "sighting--120b9e1b-cb9e-461e-a682-431abd6bbeb4", "sighting--b97f1ed9-4b70-49a8-b6c4-8b772c8e1dd7", "sighting--52dbb169-0881-4bc1-9cc5-542864dddab4", "sighting--102724be-abc9-4b76-9098-0439a53c6ea4", "sighting--5622bdae-ee50-4965-86a2-0a0695cd4503", "sighting--df7f86eb-c7cf-4920-bc7b-76228795edf2", "sighting--ba8adc7a-ab4a-4b31-baa4-a21e466f4d79", "sighting--dc9630f8-9fbd-4b96-b4dc-e8c18ffe583a", "sighting--b8332d06-c961-4f04-8b12-29290b407717", "sighting--dcded5fe-1025-49ba-8d3e-1606edb1e02a", "sighting--0d038c9a-7f31-463d-a9f6-814dbe1d2dd3", "sighting--b8130761-14b7-45d2-9b5a-1278e18d229c", "sighting--cca94692-cb58-43f2-9d47-9f9d14ebfe8f", "sighting--9e7ea459-386d-4609-8341-9210b6341f77", "sighting--4f7a7763-d491-4af1-ae9a-877a8b53fee8", "sighting--520e0248-a35a-492b-a700-d4c5afe240af", "sighting--54c8e822-30e2-481c-83d9-2a1bd1c8fcd7", "sighting--54531245-25c1-492b-8aa4-65ef9f8c66e0", "sighting--7c251611-6a00-4bb5-b4d9-82558ca54c7c", "sighting--a6d5cb86-b372-4053-bb31-99c48954a11a", "sighting--23d5e60e-0846-4086-a3bf-d2222c65b414", "sighting--96b81400-c919-4878-8a6f-d473ccccbe46", "sighting--4d2cd6c8-bdae-4e71-b923-45178336dc80", "sighting--16b675ec-12d7-47a1-ac06-0a768cd00657", "sighting--a25580f1-1f40-4daa-b289-9af28d167ec9", "sighting--7772f9cf-c853-4d49-925c-7751228d594c", "sighting--a400ef03-f1b7-4a61-b31f-cda635929e1f", "sighting--881e1d08-ae30-4c07-986f-939ad1d76f12", "sighting--5007c219-9eba-462d-b1da-f364dd23a732", "sighting--0703cb42-2d87-4604-a174-5e36e0e7cdbd", "sighting--15f62062-c883-41ca-b83f-184670d70775", "sighting--0d11e244-7da8-4379-bb0d-decaede2b2cd", "sighting--75f73c98-7a87-414b-b43e-6e08b40c1141", "sighting--48026719-9979-4dcb-bdb1-c94e1851f6d5", "sighting--f8d24d9f-d064-40c7-8525-af106678c6e5", "sighting--e0c968e8-1892-4033-bf11-4f7564605758", "sighting--77ff7a9c-2f3c-4ad1-b15f-c5f086c988e9", "sighting--81b139b7-a9e9-4c9e-b9db-9ba86f631fdb", "sighting--cee445a0-7850-41ed-849a-f15498519583", "sighting--e52acc57-3a53-4d63-a20f-dd25c0e0a1be", "sighting--ecd5ff61-93e3-40a6-a0ef-86e184c4777c", "sighting--2b332c70-c7e3-4126-a72f-e8ccb6936370", "sighting--e11ed11b-5b5d-4f3e-a627-fd273110782a", "sighting--80b2bb1b-7c87-4064-a2e3-1dc1da79f248", "sighting--920329df-181c-4c9d-8039-107af2492712", "sighting--2fd4def0-32f9-4bb6-bdd0-9f6b5e6f5f99", "sighting--0c14a05b-86af-4c46-9155-77d83c9e6b3f", "sighting--abab95cd-3897-4e4d-aff8-621dda18a31f", "sighting--563322b9-71f9-4174-8dc9-b7a76adc81cd", "sighting--9ece6d9b-c75f-4a54-9129-0d37666c4a45", "sighting--393a76fe-cba0-445d-9925-03256baf9cff", "sighting--80a9b30a-5c48-47b4-9761-6c08bdac91a3", "sighting--98d07a5d-7e71-4e4c-9b8f-a3e3d50da869", "sighting--3d9a0e51-bb90-4d6c-9a80-28b09126e303", "sighting--7d496625-eb7d-4c1e-9d87-49c753aec055", "sighting--e492355f-f503-43e1-8c09-f1e5f75c07b0", "sighting--9b938884-d1c3-4333-9b44-270310f617dd", "sighting--ab207e17-d919-4976-a0b3-f86c3b5a83b0", "sighting--025e1b6c-ce47-4f67-b230-eef77f7a7405", "sighting--6d6cb9da-53b7-4b91-b32a-a4dbd10ba769", "sighting--b44d8e10-60d4-4a1e-95e9-6badff300313", "sighting--06e37477-fa7a-42b9-bc1f-db85e92f1dd6", "sighting--326a2234-d87e-4953-807f-a59275350fa6", "sighting--87643444-61ba-4234-a0b8-79abe2add912", "sighting--4e2f6d1e-cef1-4e86-a7b1-f3bac4a836ca", "sighting--4bc9998c-7241-4308-b9dc-f328afcbfa17", "sighting--8abab67f-d685-4049-830f-b007d4cb1144", "sighting--f5ed4339-ab77-4b64-8a30-b4c1f3883672", "sighting--f5cc5988-768e-4dd0-8f44-dd6438069906", "sighting--08c8aa32-1955-4e2d-8ae5-b8a08c8222d2", "sighting--016012db-750e-4da9-bbb8-ad82130ac52c", "sighting--de3831b8-2f8c-4cc1-9764-5beb3c2eaf3d", "sighting--c81d207f-cb0c-4574-b285-abed80fc1652", "sighting--cea5cd9a-53bc-4517-a910-ae6407c29cae", "sighting--8922b757-111a-449a-99c9-8a7542fe65ca", "sighting--06cb1d83-aa4d-4c2f-9fe4-dde64733a6cd", "sighting--c3f275b7-7969-4739-99c9-dde4521e3ebc", "sighting--96cdae16-96d2-4ba3-823f-d430f664726b", "sighting--d35d8b7e-04f2-4fee-bce0-087b56bb1889", "sighting--ee51293e-3331-4042-b852-fd37ac98b412", "sighting--880bd234-a52c-487d-a322-e4ede69862fc", "sighting--a206daea-329c-48f6-846b-5c18e6568ebf", "sighting--fbbc2e77-b1f6-4d15-8996-f3b14eedc6f9", "sighting--a53602f5-258b-4f10-a520-c15e1ce8e8ef", "sighting--7d71b55a-8863-4061-a41a-fe6d4c0a582d", "sighting--82b96118-af33-4173-90ff-6c1a3c5d5257", "sighting--d039b0a3-56ac-4c74-ab8c-ab2087b20b80", "sighting--3b1404dc-e02b-47ec-8dce-452d24f3eccb", "sighting--8986e197-0372-4cdd-b408-b655638c7f8a", "sighting--efdcd19a-ebad-4409-beb9-fad98830d1a2", "sighting--3ddce25a-592c-4b50-88dd-198d7950e0d9", "sighting--88197ffa-790f-4b57-8471-aa901178d6bf", "sighting--bfdebb5c-5182-4e98-9924-882481777181", "sighting--d97f1243-d0a2-4272-bf7c-1ae87e854fea", "sighting--eeab9fc8-def1-41a1-8146-976400cd79cb", "sighting--96da055a-c3b1-4099-8f72-dc0efbed4563", "sighting--b4449095-ba23-4671-a377-dbb677dab22e", "sighting--b592b75b-ddbc-41cf-a044-caaaf88338a2", "sighting--168ef561-845d-4630-b05e-05ad8ae071fc", "sighting--80938161-537c-42c2-bea2-e5b9bc0e7f4f", "sighting--3ba0c608-efa7-4901-a66a-38b8b43b3092", "sighting--344360b7-94db-4c09-bd74-aee186436c5f", "sighting--b61ef27b-39e4-4bb2-8893-fb151566e221", "sighting--0f744646-35b3-4d0c-82bc-6d5cfa4c6cce", "sighting--168ca749-5ed4-4c22-a75b-433efaf18707", "sighting--2bad8653-af25-4895-8db1-90738054d52a", "sighting--9de7823b-b204-4671-a227-9a604d4e162d", "sighting--fde22782-193d-4fee-b8cb-aa6e42599d3e", "sighting--e30772bb-319b-42a0-aad3-563133a73df7", "sighting--d078d030-24df-4f4a-bd0e-f5c4b479b5b1", "sighting--436e1ad9-5fbb-42ec-b437-6b48684e560c", "sighting--f6425675-8707-423b-8575-10f5ff83a77c", "sighting--66de70c3-dbfc-40a6-88ae-118bcfaee869", "sighting--67f580fb-dceb-45c4-8a6a-e9f95c73d51f", "sighting--fabcc1a9-2131-4e9b-a31c-1021f10d4c2d", "sighting--bd83008a-db75-4838-ac7f-317d180a37dd", "sighting--9dcc90e8-2375-4d97-950b-bb7ac7518bf1", "sighting--5557dfb1-c271-42b5-b9c1-2f2c7da53148", "sighting--84e5293f-c270-40ab-bbe2-ccb7b97a49f4", "sighting--ee67cf46-60eb-4824-9a65-271bb91b22c3", "sighting--ca326fa0-4faa-4c46-ba44-43d0034f1301", "sighting--ded84408-df3c-4a7f-88bc-d5c36566c8c2", "sighting--28ad78a9-2857-4724-a521-69693a2edb42", "sighting--5232e3d9-1681-4436-b991-fb3b5f0465cb", "sighting--611f8380-291b-49bb-9653-cf4be9a4d7f0", "sighting--5f69ce53-de8e-4e52-9201-884e6f4f1bbc", "sighting--bef316a1-842b-4293-b57c-00624dc39122", "sighting--1a471ca6-228e-4267-880d-589d5bab4d0a", "sighting--276a78de-35ff-4c9a-a03d-8f4d90fd2f04", "sighting--01b5a1d3-bc10-4248-861f-2477a5d2112c", "sighting--4e22811c-24a1-4571-a44a-985525595ec3", "sighting--e8470f7f-7d14-43df-bbfd-ea43f3ba9370", "sighting--8afcf1c3-89c3-4d2f-824b-728d006d4be5", "sighting--21a5a170-1404-464f-995b-9863343bba1d", "sighting--c66d42e0-7798-496a-83e2-9bb859f2c69e", "sighting--6a7c2586-ccc1-42a9-95ec-ebed6e45c2fb", "sighting--b6175d63-30c5-498f-8c42-8fbe281aaa8a", "sighting--0c6882f2-40fd-448d-82f3-3884c5a70e94", "sighting--3602a98f-b7dd-4250-88c0-ea01d5cadb5e", "sighting--60c493f2-e9b1-4d5d-81ff-e2e2ce7ba24f", "sighting--9d931463-b9b7-4349-af8c-d69f196d3eb2", "sighting--ebafde79-c485-4f51-875f-0d238e8db94b", "sighting--54d0df2d-39d6-4475-b977-f1f056e9df18", "sighting--212bf7d8-71ca-4437-b1b1-5de0a9e0404b", "sighting--cf340c67-e8f7-4320-a0b3-592a67eb4b32", "sighting--28514e40-8775-491e-94fa-655ddd1286e8", "sighting--db70eb7e-43c2-4722-96c2-cc0d43aaeba1", "sighting--298ffb59-b2d1-4195-9bbe-4125efcf8c6c", "sighting--d7c76bd3-8dc7-4fa3-a1bc-2c15b781d2b6", "sighting--a20b8777-ec2a-47a1-8be0-79a9ef4194f8", "sighting--8396a04b-9df7-4c5f-8615-9ee17d84dd95", "sighting--4b2c0a0f-2b17-4c31-88c0-68550cb906a0", "sighting--54793eba-28e1-4df8-9181-4f85f9cb9a2d", "sighting--f246c93b-7238-4c33-97aa-30b6c9a69892", "sighting--dbf60c8b-635e-42fd-97b8-2512b7df46f4", "sighting--f1c2f0c5-4d7c-4663-a432-caed2149419f", "sighting--718c7df9-d926-4f17-9b9b-85115b905eab", "sighting--9a28e27b-c9a1-41c3-8e08-5e8ca2f92084", "sighting--f62323d7-284d-4d45-8b28-38ae52bd75a3", "sighting--7d98bc98-142a-404d-8b63-dc67c3792a04", "sighting--9bdf834f-2755-410e-8051-4e2c6165061b", "sighting--2f3a37c3-3179-4102-840b-364c69bf3d4f", "sighting--58ee1e99-2b6c-4a13-b5af-10dd87ab98d8", "sighting--e3088dcb-494d-4f23-810b-0355f7200451", "sighting--ef19edac-84df-4703-b621-643ec392810e", "sighting--29f031ab-b3e1-4c5c-892a-060d6f39364b", "sighting--946d8aa0-fb63-49fc-a279-1d3f2ab96c8e", "sighting--54d7301d-bdb6-44c5-afa9-04ff84b93845", "sighting--5792cc94-4329-462e-a34e-5d61cbcdd026", "sighting--37b4de21-c463-4a25-99dd-193fd84f596b", "sighting--bbdb6a37-0afd-40ef-a470-3042174656af", "sighting--159c9282-530d-4f27-8618-bff229d75912", "sighting--f2110d41-597a-4d3c-820f-ff18b98a790d", "sighting--4fd3dc4d-da6a-449f-be05-c2b43de67d32", "sighting--ba6e02dc-fef5-4868-b358-c56b8388cf7e", "sighting--201806a3-28d9-4371-b7b5-044a5e312027", "sighting--91e918bc-e069-4d53-b2bb-c4d2fecf8396", "sighting--5f3923cc-2e48-4214-bbaa-0b5cb15afe20", "sighting--24388add-c87d-4702-a4d9-d376e88728fd", "sighting--2bc4af02-c711-427a-b010-19523bc03cf0", "sighting--38c650b5-385a-4b6e-9475-dc639e3633bf", "sighting--e80988cd-55da-42f7-9d27-97ce23108eea", "sighting--754d0979-3d32-4e6e-b060-b5225d9e3844", "sighting--475048e8-fc66-45a9-9f9b-e45f9b765671", "sighting--57f69577-9d1d-4b39-8601-2ed8ae624fe9", "sighting--e66a2278-94e8-4b11-87c2-d2d98ca3b0d9", "sighting--ea91ab44-62bf-4758-a3bb-562d517d10d7", "sighting--0f568b12-4feb-4c7e-bde8-7b5a4deb8f1b", "sighting--6bcafa55-6ac8-4e95-865f-fdede6cafaaa", "sighting--db9c6207-3de1-448f-8dc8-2e8d8eba7d37", "sighting--900ac4e9-ae9e-48d3-b80f-70ac04dd68d4", "sighting--95d94ab0-fb97-4c94-9e66-bed5b4d598f3", "sighting--41bf56b0-0318-4d68-9216-58605e093584", "sighting--208de857-31e6-422c-b712-ccf7e0560737", "sighting--af95c239-97cb-4569-a330-207cb712c7f8", "sighting--0ad2025b-3a1a-431d-939a-7f28790ef6ed", "sighting--402745af-9bec-485e-b340-f46d90e73a5a", "sighting--11e8bd9d-b0af-45b8-8b26-e411717f1741", "sighting--f81226a4-edcb-48c7-83cf-ae4e3176ecc9", "sighting--7478945d-58a5-42ba-af18-be8d4cac17cd", "sighting--763b4639-4926-4fa1-a6a7-51ea1159945b", "sighting--9079bfc5-738f-493f-a58f-1b741f6bdd8c", "sighting--ced7fd7e-ee46-4a77-8216-35aacbe19fe8", "sighting--4680b05f-5ef9-4973-a8f0-b3a45027d6e4", "sighting--d8181fba-95a8-4ce7-8b72-b360ad7e1106", "sighting--d6d22f5e-5e3c-4754-92f3-7c1d82cb4c4b", "sighting--3576e2b7-4736-47e3-8a95-4c80484ba8dc", "sighting--7956b387-c498-463d-93a6-d32c301d1268", "sighting--c95a5b16-43b0-48b0-8a2f-dc77fec965a5", "sighting--53633f87-b03c-4d1e-bdb1-f13339016ced", "sighting--18d20a06-aeb8-40db-8393-cd1a93a9b86f", "sighting--ee714fbe-2a8a-4927-9db6-40b3556a7888", "sighting--fb2aa651-f18c-4c18-bf7f-a517a42868f7", "sighting--01a7d2f9-6743-4f1f-8813-6d83a1bf9b98", "sighting--e14d9e5c-bcb8-42ff-b49b-7ffcd8510437", "sighting--1e01f87b-6acf-4d10-83fe-d7030d769f01", "sighting--105aeaae-0155-4e7c-9bd9-661100ee63db", "sighting--8bbc99f5-a83d-4ec1-9843-9946036e0b8a", "sighting--4dd57333-dc5f-4707-964d-5fae85572ef7", "sighting--4e5cac5a-3fde-45fb-b009-b5bbc61c3def", "sighting--b3c7652c-44f7-4267-b3a8-866066316d23", "sighting--a62ec05a-db40-4fae-ab39-d1b55b15a36e", "sighting--150480cb-b07a-49e5-af20-c82871b7bbe3", "sighting--b2eb3ecc-462b-4063-a8ff-b756db07a9dd", "sighting--7d9e0ab6-64e6-4354-b58e-d8bb4d366be3", "sighting--325ca6b0-49f4-4102-902b-0bec56639438", "sighting--7d6a6c20-fadb-42cb-ade6-31f7fd524a1f", "sighting--821de6c6-25fd-4961-8564-3429daced93a", "sighting--ed99aa39-fe70-4fc6-bbe6-6c87b6311914", "sighting--4430596b-e2e2-4132-8d82-c36798e78e74", "sighting--877f8b28-db53-4245-ad44-d7e49e97f3f8", "sighting--62d12295-819b-4276-8a53-5e9729d5d0a5", "sighting--49a4b470-ef6d-44c7-a9b2-640d28406a5e", "sighting--ea0c0b4e-832c-45cd-83ad-f790bd610dc8", "sighting--c3614854-257c-447e-8402-b6be877c8c1f", "sighting--37c30af3-7a11-43ee-bae8-b9e52df6feaa", "sighting--9371b1d2-20b3-4304-92d9-af13cc250cdf", "sighting--b2367b4d-28e0-4355-aa69-afab05e22d6b", "sighting--bbb57a6e-3e29-4cb6-8689-3fd512da6f94", "sighting--55d7e0ba-c126-454d-abd8-67460fe78b0c", "sighting--7e6d4684-1b40-4306-a802-6eb8ec68fc37", "sighting--605aa92f-c446-4f88-988b-48ebc6023886", "sighting--f3b679c3-d3ca-4300-836b-4f5f5f23c2ca", "sighting--196913b9-3fa1-4acf-a78a-e8571b21c599", "sighting--c768b261-c355-4072-a1e8-02ea11b91ce8", "sighting--e9c994c6-3850-4c87-b345-c087b091b66c", "sighting--71908bef-27ef-4b47-8514-6268abc5de6a", "sighting--076619dc-0b88-4b8f-80c6-8c4f54f4043e", "sighting--fec0fff1-4587-4a34-8f17-11daf3fb60cd", "sighting--b41cf77c-bf2e-4483-b312-ae5bfe9baef8", "sighting--d4f113f1-30ac-486b-9bf8-8272d9725a45", "sighting--6a8b2b93-7032-4345-acad-3a196da66d95", "sighting--e507a45d-663a-442b-beec-171ad4060472", "sighting--541881ea-7666-4cb1-9201-eae3524c16da", "sighting--704a239b-1220-4a48-8a0f-f586dc383003", "sighting--a4cfb81c-29cb-4017-b7c5-08b90a62a1bd", "sighting--97c4718c-1439-4f73-a47f-e8e1a61e4044", "sighting--62ac9bcf-ab37-49ee-aad0-8d121fd14768", "sighting--5037a26f-cc92-45ba-a700-021faad7ab6f", "sighting--92b4562f-0275-4bd0-8637-7f396ae1b710", "sighting--de20a238-212c-43c7-a70b-c97541a8c09e", "sighting--27ad25aa-fd63-41e6-900b-876ce36556c9", "sighting--3926090e-f3dc-464d-9962-284b448e4768", "sighting--632e98f0-85c2-4de1-bc47-f87d44479402", "sighting--8e18d720-8881-4904-9de5-6032ebb061e5", "sighting--12031e3b-a8e7-46f5-890a-a0dea10e4967", "sighting--ebfa53b4-62f9-4450-9ba1-02dd20703e2e", "sighting--00b5fb24-ebaf-4670-9ce3-01fa45f343f7", "sighting--8ec812fa-1f47-4e03-8504-1e59103ebbb5", "sighting--7b7169b0-aba9-4d46-9262-7366d90b9438", "sighting--317df834-34a9-49e5-9cdc-c56dcd0b27ce", "sighting--a689fa86-1f68-432a-a844-3cdfdab0e8b4", "sighting--2fe048e1-6a5f-44eb-afe2-7020488d1bd8", "sighting--920c07c9-c035-44f8-83c2-3942fdacc30f", "sighting--8a8ad80c-fa0b-45df-9c5e-5fefeaa618c7", "sighting--88a17da2-1613-4794-bac1-d762eb208063", "sighting--e89d98ab-9d75-433e-ac1e-8b761486163a", "sighting--6a9fa331-2d66-45d8-b439-c0131a555397", "sighting--404019ab-de2d-4217-9492-c9c6bab80980", "sighting--211610cb-78c9-4bfb-898c-40bcbf56a821", "sighting--3ec639ea-02af-4d8f-a189-8740c9c15264", "sighting--949df8ff-c462-469b-aa12-3e9076dd1b5f", "sighting--b134e7fe-9bc9-4f41-a38a-7a93059b89f1", "sighting--a702b682-f1d3-4dca-92cd-6570b5ab6aa6", "sighting--8dc91c76-fb47-4bf7-8466-d0ce83c5c8ff", "sighting--b7ec6686-0ab9-43b4-bc6b-c9b574ba3eeb", "sighting--1cd2aac1-4663-4d2b-a478-cc86e952c8b6", "sighting--a11ec7b9-fc92-454c-8481-d25fda543c8d", "sighting--92f47f28-274e-4c47-9fc5-156f90f33cf7", "sighting--ff0c69d1-9187-4130-9b6a-39b80f96145f", "sighting--48669cf8-19f2-4d02-97bd-a138a0cfa8f2", "sighting--256c99c5-5d39-4f8b-8a9d-0e0404aa0b30", "sighting--0ea077de-3917-469c-848d-961955a17ce3", "sighting--eeae8549-2dad-4c66-9a8b-bb0ff73a137f", "sighting--6e7ad18c-3126-480b-b505-86a087eed714", "sighting--69357cd3-28ce-4196-984c-b37e53b86001", "sighting--f061d144-c80c-48ee-bf0d-5453aa840c50", "sighting--ebe247dd-df0c-4624-b3a5-a9cb85f6a3f8", "sighting--25311571-a9d1-4b4d-903b-9a631abd725f", "sighting--83724315-67d7-4299-a910-74e28b7ea339", "sighting--f1f411a7-a816-4bb3-9b25-6b571ef78af3", "sighting--c455262c-19ea-4b25-9e8b-1362000ca549", "sighting--3a9b06d2-d242-4739-b5e2-5c7d51972661", "sighting--ab070387-ff07-4be6-ab0e-45f7401ea580", "sighting--eb484801-9ca8-447a-8718-56bda729e20f", "sighting--03feb9fd-9aff-442e-b764-eb99dbcf3a12", "sighting--57f8a455-6fad-4079-920a-33d2e8a98781", "sighting--08ee3601-c375-4840-a7fc-1af44cce2d3d", "sighting--68587d34-8a2b-4fbf-8dd6-56b82a006d69", "sighting--6cc73887-1248-4a16-b6f1-b0970e79bfe5", "sighting--b174fac9-189c-476b-b93a-575e1e974e82", "sighting--0ee91375-2989-4e60-b28e-f1a22c4258b4", "sighting--b317a893-65f5-413e-85e3-e9842fa6cf51", "sighting--2ae70088-4eb7-48f6-943a-f49ea8e32658", "sighting--cb3462c7-8643-4b2f-b6d7-5263108fdd42", "sighting--605f6c29-c968-48d6-8977-0a362bf97099", "sighting--13e19394-7ec6-4750-91f0-44bb7624ed77", "sighting--d5e1c667-fb53-48ee-8323-6bb21b01f1ff", "sighting--03e64d10-dae2-4973-b49c-3b9611e62e1d", "sighting--2e50c608-a0ad-4123-bebb-ff24ea2fc0c6", "sighting--fe32fc12-7ad7-4857-9ce4-d16eb49a19f0", "sighting--f7cbd4b7-3774-47cf-bbb9-c6a24a4bfef2", "sighting--f037bb6d-8b49-4a2a-8e1a-586c23cfa9fc", "sighting--3ad59e0c-c94a-455f-bba7-14762b787687", "sighting--9d188f08-f9d1-46fa-afcf-511db1fd724e", "sighting--d243fe91-a007-43d7-ba97-5c67fc55b7fb", "sighting--5a04870f-a297-440b-a944-bc4cb2e99ed4", "sighting--d349f255-8e26-4bee-888f-ea758e28835c", "sighting--ee33f3ba-5c30-49ad-b1cc-cdf34fc3da0d", "sighting--8205b5bc-7df4-41f3-aa34-6f1423c07ee2", "sighting--30d1d534-da4c-44b7-91ba-33e74e1a7708", "sighting--de60fb22-715b-4a83-b25f-0cb894f8a6ab", "sighting--413e59d9-5f17-4102-98d4-62fdf3059ea1", "sighting--392639da-d882-4cb3-8af8-098b602db37a", "sighting--ad489f43-075a-4d53-baa2-de5abc55a962", "sighting--bb4552b8-2da4-40b6-9a42-3cbb626be3f4", "sighting--9bedb622-6949-4d01-81f2-2baaeaf9a0a8", "sighting--b9c60886-7f81-471b-b80a-77efd40430f0", "sighting--6bda0aee-d9f5-4b8a-a484-0e0fad560805", "sighting--feeb4552-0051-4d6f-83c2-82af53472632", "sighting--8d509013-4c18-4ab1-bd05-8ea18ac3a10e", "sighting--d67445f9-5e81-453f-b6a1-85b9dae41274", "sighting--418cd718-2761-4d68-ac5a-511ed059fb87", "sighting--d63157be-dc9e-435f-ac5f-f7519b4fc351", "sighting--55eb439e-710f-41e8-81ae-41949cbb518c", "sighting--ecf6649e-f2a9-4917-a393-c9be47265550", "sighting--96d24e03-c09e-406e-b46e-f521ee80d241", "sighting--34622e12-e44e-423a-bf2c-66f50991b338", "sighting--07583595-d94b-4b8b-a97c-0c610bcd8003", "sighting--29ed1be8-e685-42b7-a98e-8cf48e07c2ff", "sighting--d4706f61-04e5-4cdd-a9be-104d60c4e853", "sighting--e6535514-1f6b-427f-bd03-b7caa73c2b51", "sighting--fe6e9c35-1aea-40b3-adc9-bd0fb75bff9f", "sighting--f2e0976d-8ad6-40a2-9821-cf131c497e48", "sighting--a7b088fa-c922-4cfe-a59c-182fbe46d4c9", "sighting--5999d746-23ad-46e8-8acf-4a2caab6524c", "sighting--d7e9a9f3-0e29-4902-81c1-dba11a1d9a33", "sighting--ca2144fd-8545-49bf-b062-bf2da00b3736", "sighting--4ec81951-ad2c-4cf2-acff-b65aeb6104fe", "sighting--f8103605-0268-4abc-9e9c-b61eddcebe5f", "sighting--f433c312-b7ec-4b2e-a193-678a982f1832", "sighting--230af4a6-1055-4181-9518-eaeaaee35237", "sighting--2db5a557-6d74-411a-ad32-07d63b570f33", "sighting--c508ceb7-fca4-450e-ac65-5d567e65a62b", "sighting--c2f94359-2462-464b-aeb1-2259e83e54fb", "sighting--299ebdce-afc8-4d6c-a8d1-075b166fd709", "sighting--acd32934-759d-455d-b317-671ffab286ea", "sighting--531481d8-c15f-402e-bb86-f30d81dd5000", "sighting--43c673ad-bc9f-4949-9d7f-7be1adad89e3", "sighting--dd311bef-8d7f-4e23-95e2-de2bc66611c0", "sighting--ae9c07c0-8ed7-4ebf-b9e9-e2ee4fbfd098", "sighting--3027acff-7956-476b-94ef-80f938575490", "sighting--471c2b8b-8002-4a0e-945c-5f6018d36f6e", "sighting--f9d4bb00-11f7-4a79-ae6c-4042bbb472a0", "sighting--88db4f7b-c3a5-488f-9f84-62d83bcd101f", "sighting--a21ebd42-3e7b-4469-b864-4792a4fed0ca", "sighting--76386b53-f629-4bc5-bd7d-160b44a1ba73", "sighting--f9f64eb9-3474-4218-97f5-d771299a2606", "sighting--e596f1d2-ec03-419f-b346-7cae468914e2", "sighting--d15fbe35-d74e-4ffb-b5f4-3d5c5a80a199", "sighting--bf536353-a000-4081-a956-e5af89ba1003", "sighting--ee15c057-8600-4f73-bff7-b53c61cd6336", "sighting--84c1b5c1-24b7-4484-a684-15ddddf3a504", "sighting--a36c40b8-39ac-421b-8cf3-020301a42136", "sighting--f9077556-3f2e-4a5d-a975-ed738d1f5742", "sighting--61f27ff0-0de4-4bca-9573-9eca8fd67e68", "sighting--22a4f87b-9239-4ead-8347-250560cca787", "sighting--29d23580-09d6-4bd1-a383-4734e3d7bb49", "sighting--4dc914f3-950f-4ef4-88d7-d19e26a1af88", "sighting--88d8b5d0-c0f2-4476-acdf-c719a99c8904", "sighting--9cb52659-1f76-4dfa-a118-1178d1f0fd54", "sighting--b30db95f-bb03-4eab-b0c8-502a2355e8c6", "sighting--e9dab3f9-e275-46ef-b164-7569a5c27b69", "sighting--a4d84ba4-494f-4ead-b99b-bf423c4ce3a6", "sighting--07398c35-2f30-402f-b26a-389abf05df18", "sighting--e237f4bb-4e67-4893-99e8-bbe098d82d86", "sighting--052a6c69-c77f-4929-9d36-4c8146ba7888", "sighting--e28d9294-e613-418f-ab32-aee596c5f1d9", "sighting--9bbcf311-6112-4da6-b81f-9589b4f9eb27", "sighting--a41b6e70-7186-4d34-98bf-8b0626a27d91", "sighting--81ca1565-1aad-455f-a0a5-58e87bc79dea", "sighting--5aba9ff4-5454-4cc6-83b3-969c4959a5d2", "sighting--67fb81b2-8458-4b75-bda7-7c0458917201", "sighting--90956163-2543-4bfe-b4aa-0562418994d9", "sighting--5edf8d30-16ad-47d5-bd79-b113dd40b89e", "sighting--8b228459-046e-4162-b204-9438531f5b40", "sighting--f5515c3b-2970-4ad7-a138-dd8fa386508f", "sighting--ba0a3046-966a-4d7c-87e1-065409c89714", "sighting--9608c761-be7c-4064-91c2-2b7ab46ffbc4", "sighting--f285f462-af0e-45d5-b258-3d3a7c0306b8", "sighting--8af89bbb-4cf6-4705-82a4-fc4691ca1c1f", "sighting--bcc5e8f3-6bd3-454e-b5db-53c7726d13b7", "sighting--34041b3e-f8ec-450b-9833-f1d52d55c85b", "sighting--dd79b668-2b42-47fe-a866-f8982a145bbb", "sighting--50acb0a1-ae9a-4a81-8395-f51876e1fcff", "sighting--4a7b10be-8ee7-4d3b-b997-b32558b4bbc1", "sighting--77c6913d-c537-4e19-bba5-e645af5601ea", "sighting--91a1a130-775e-4236-9e63-5453faf9edaf", "sighting--c1c80165-7285-4460-a0a3-6c55c644c597", "sighting--28dea521-31c1-40a1-9a3b-fde6e8254e5a", "sighting--1f27cf4a-082e-4eb8-85a9-c12a72dfd004", "sighting--d8aa1f8e-6a65-41f3-ba26-470c880beeea", "sighting--666ee800-ee2e-4027-86e3-b2a87f1e740c", "sighting--2ea24432-c6ef-4583-8e25-ad6a923c69ab", "sighting--8211b655-46fb-46d8-b2ba-03a849d6dfbf", "sighting--8ed55db9-cb5a-4a6b-9f0e-32e5ba5c827c", "sighting--a0e25e95-ac3e-4db4-ae7e-120e7727e9e6", "sighting--72553ae4-6abc-4ddb-8834-f6ab89a2a83c", "sighting--ccca7e37-e8cc-4b4b-be94-4e6d8a070c41", "sighting--14fda7d0-73ef-4820-8273-dcacc81bba02", "sighting--7c1de8b0-d970-4705-b33d-2e18221224d0", "sighting--f52acd28-d462-4f2c-8360-3dff96bc019d", "sighting--f1ef0f19-3dac-462b-a702-31009ac8c13a", "sighting--7047eac1-69ab-4c4e-81f4-e61de1f4c73a", "sighting--2c6a869d-2e9d-47cb-bbcf-fa89c0e24d36", "sighting--f0dee198-8b32-4793-ba75-225e1c8b986c", "sighting--71a31660-9b17-4b96-8c93-6c8c10e66c7a", "sighting--77726158-77ed-4811-bbee-d2227b88db12", "sighting--be183688-6119-41d7-bdb6-e16f2a4cc188", "sighting--d049d6f3-8814-4e4c-8aa6-7c8b652ab6bd", "sighting--fc9714a3-5fa4-4740-87af-efb876ef07c8", "sighting--29b62635-1174-41df-93f6-1516074798da", "sighting--a748bfa8-cf3f-4d5a-aa8d-07ae04424304", "sighting--8132fb6d-3e59-40a3-bd50-0e85653f0330", "sighting--f5fdf487-b851-43b7-8455-74af20e75290", "sighting--79dd7a6b-1310-4434-9d05-31d1e41dec13", "sighting--026d0df0-7ecc-4cfc-81f0-e5e25acae99b", "sighting--82d1cfbc-cc3e-40cc-9c07-1eae425c07c5", "sighting--d8b19918-04d6-425a-9582-e896276bf9e3", "sighting--2a260d11-81fb-4fc5-84dc-b8b9cf2dc9e3", "sighting--265c0acb-71a2-4b00-bf37-9d51c1a5c084", "sighting--cf07544f-cf5c-47ad-9882-63ed9a89c51a", "sighting--62436f0a-156b-475b-9567-f6dbf8769b94", "sighting--71f87535-d2bb-416a-b4bd-cb1b9ec3063c", "sighting--3ab25522-fb3f-431b-a799-f7dd8015aa90", "sighting--48277f24-e726-46b2-a6fb-a554ae94e4c4", "sighting--dedf4ab8-f452-4f1c-8a5a-85cccaf2d893", "sighting--66f8970a-80ba-4053-9318-b208fc9d1071", "sighting--31c7e2d7-d834-4e3e-82e6-80349001a5d7", "sighting--6c36920a-5bbd-4aa5-98ac-a5327bfcd0f3", "sighting--41f2a67a-98c9-4b46-a42b-b14cd726bb36", "sighting--88f9286a-ca48-435d-9115-6cdb84d62a41", "sighting--27f18a56-5d1b-4545-b62f-92225315bc08", "sighting--d975781f-5d4d-445b-bf06-6b1da8bf597e", "sighting--684c15f4-1b83-4c84-b220-b946bdcff553", "sighting--3ed2501b-d7f9-46de-b13e-a88ed6fd40ec", "sighting--01e4a62f-fe61-4f5b-9a91-b93d4e3c750b", "sighting--90c03812-2a29-439a-a708-639397ce57c5", "sighting--1910f2f8-a1c1-4dfd-b97e-3e3f8b01863f", "sighting--1367170b-03c1-4c39-8c2a-827829f80cdc", "sighting--785b547a-adc9-4ab2-ac6c-7f4ba6dc35ce", "sighting--4ee6d65c-35d0-4ac3-b48d-77b93c0b332d", "sighting--9614d89b-cb32-430a-b615-76ca87534c1b", "sighting--760e28ac-dbdf-45b0-b91a-b5b0faf3efe1", "sighting--7fb9e712-3257-48bb-aa32-d5b6ff20db21", "sighting--b822ecf7-176a-4ded-aed5-0af8bbb9b6b4", "sighting--872a8cf1-326e-4bf9-abb3-e4e6994c2d17", "sighting--91004ae3-b276-441d-9ddd-adb806743a39", "sighting--c39112ce-25a7-4d35-abe5-02e216e0d481", "sighting--43ddc2d7-2abe-4199-a6c9-609f788227f3", "sighting--3993b0fd-996e-4232-95ed-d929bb32069c", "sighting--b8fdf606-9dd4-4992-b766-561951f7f101", "sighting--9f87ef02-82f7-45b1-acec-2c02c60c1347", "sighting--63081b5f-422e-4928-ad70-714b7d0e405f", "sighting--29eea0cf-e5dd-4421-88b2-d230012906e2", "sighting--a7c00cad-3188-4069-a6f9-6b1821ae0638", "sighting--71357ced-42c2-435e-80b0-fa669c7aec01", "sighting--4ebe26b8-e6f7-4ccf-8ff7-498d099c40db", "sighting--e0aed7a4-30fa-45b7-b907-236fb76d1013", "sighting--1dc6ed03-b502-48f1-a1c6-234aafdc3f5d", "sighting--9138c293-e33d-497e-b8aa-b0a3a24333db", "sighting--c4cbc6b8-f605-4572-86bd-0f55b28b66d4", "sighting--3684602f-0837-4553-8061-1a42b855312c", "sighting--7ad133d0-73f6-426b-b17f-aee3da071fae", "sighting--7b954f75-0ace-4bdf-88d6-988af02ed055", "sighting--8e6abcc9-2f79-40c3-a401-81c6501c462f", "sighting--fddf5928-ef34-494b-ba80-ff554366ff1c", "sighting--b1329910-8db6-484b-b169-0abe89d39642", "sighting--cdc35d36-9e80-4e26-8b8b-491fa31c8168", "sighting--e8893b84-7eb1-4097-a762-bbb270a0870f", "sighting--c55eaa23-8a51-4d21-8333-d745e871dab6", "sighting--7ba8aa76-89f1-4757-9ebc-868091bbe892", "sighting--b71c8d2d-c42a-4cdf-8c6e-cb3ac5bcd0f5", "sighting--1fd165dd-8841-4384-94c7-67727a04c90e", "sighting--28edc571-acc8-4879-97ec-17e7ee183b7b", "sighting--d2ced891-efb0-4a0e-9f17-1722be46e3dc", "sighting--b78bcf7a-e452-43eb-8be3-32023cb1b961", "sighting--f7a220bc-49fb-416b-a5e6-1193c89ddd71", "sighting--0575a87e-b520-4484-b0cd-d01c214afb85", "sighting--9870a438-f351-4824-b9fb-b9f0dcdd9bd9", "sighting--4dfdbb72-ea9b-42e7-936d-fd4fbfc07ae3", "sighting--d977745b-4b68-4f5e-ba09-430f217862eb", "sighting--4e1897ec-65f6-402a-a102-5c334aaeb8ab", "sighting--ce88f942-c834-4852-a474-6ad8c60832f8", "sighting--c4c57a19-a718-4685-9527-85c4e4183820", "sighting--231b5503-466b-45fe-bedd-fdd472647d2e", "sighting--a9dfd714-25c8-4cde-a677-9515290eb983", "sighting--cb08b234-56cc-4a44-b2dc-b7f26a08d1e2", "sighting--7cd8cdb7-9866-4e6d-86b3-f08b4d7af9c9", "sighting--1fa7bc0d-1f7b-49cc-8a4c-e4a47828671d", "sighting--f29af450-b9eb-49c0-8157-89921b938bd6", "sighting--a09a09ec-14e2-4f1c-8969-acf6c19ea5e8", "sighting--8d9fea85-3ddc-496d-b0f7-ebe3c3fd94e1", "sighting--615b88b4-361d-4e6e-9b8c-e0cca3dc34dd", "sighting--f49420fa-cc43-4017-b9cc-b3a2d222dd2d", "sighting--86300045-d74f-42e0-bf48-5a4ac7f0a0f9", "sighting--9beef08a-c2bf-46e0-acad-9bae3ba2af87", "sighting--dbe0ac3f-eeba-4b62-ac56-d5c919d9d7e9", "sighting--55b80860-ed97-4da2-9f8e-c0e9bec5cceb", "sighting--515eca99-964d-49a4-869b-fa8858eafa12", "sighting--99c6c44f-39f0-4b38-ae02-1314dba11e15", "sighting--61580790-46e5-4354-815d-419d19d658ce", "sighting--1aca6f59-ce6e-470f-bea8-167e496fe9f9", "sighting--34848b3a-8c9d-45eb-b1eb-26eeb75a4cc2", "sighting--bb6c54a5-ce69-404b-a623-b23f2865ea8d", "sighting--ac8ab962-0667-416c-937d-c49d00457e16", "sighting--e9b93af1-ddcc-4364-b0b4-01f11ae1556c", "sighting--e7bae987-dbe0-4926-88ab-2154c89c2b3e", "sighting--20bd15c6-3be2-48be-ab94-b85566b13013", "sighting--6e5ba1ab-d9ca-4a3d-904f-96588d29bffa", "sighting--a8be3fe5-6f8d-438e-92d9-ad246f765b00", "sighting--e5d7f2f6-735a-4f84-b160-348cf8219353", "sighting--c7cda58c-57b1-48be-943e-f3947a712cb6", "sighting--4e30c0a6-4a38-4a7d-86b3-567c86992f1e", "sighting--1664de9a-35e7-4872-ae82-a66e5dd809a8", "sighting--f84615c4-df27-4168-8e06-1d3eb8c927e9", "sighting--fb761d49-75cc-42c0-9f94-2c739e9bd526", "sighting--e5ca9f5d-a8d9-432f-a8e9-ef56b9bee200", "sighting--69819b14-adce-4d48-9e9f-e6df33ee7c91", "sighting--d18760b0-cf67-4d22-bf83-b7a6310ca7a1", "sighting--b91ee445-a2ac-4e7e-bb40-651925ddde25", "sighting--e234cbd3-7101-4a47-81ab-7c93b89a4e43", "sighting--51cf30c7-2c02-46cd-bdf9-07dfa89436d3", "sighting--dc7e3f12-e0f8-49e4-9006-67c303f3933f", "sighting--a964d804-ba5a-4ac8-852b-8bb7c69859e2", "sighting--dfea37bc-e54e-43fe-ab65-b1199b1c6d27", "sighting--2b3ebab1-a9c4-40b0-b3cb-5953be78319c", "sighting--fd2b3033-e5ab-4541-9fca-ff3db0032990", "sighting--bbc5a689-6707-492a-b735-d59163a75154", "sighting--a8d71d52-da6c-4335-b2c6-3f8a941b9742", "sighting--14d47569-4184-42fc-ae10-ad516f590c28", "sighting--31f64e5f-a832-402f-ac8f-a6970a6671a6", "sighting--1b2b35ec-9a41-4662-981d-76f46f31d3b4", "sighting--5b5755b4-ae85-4867-823d-a0c97e2c82d1", "sighting--01aae9e7-3850-4a52-bc62-8edfb96df4b6", "sighting--7d38eaf1-4db7-4714-a6f9-16c77d30d7d1", "sighting--8d8682b6-35d9-46f8-b141-b061781785f3", "sighting--8c94518c-49e8-4eff-9650-cbea5fd1e062", "sighting--1f3492bb-3a38-4e07-981f-6e23be1b1be7", "sighting--1cd0c582-b03b-4d26-a91e-25533367dd4d", "sighting--2994c549-fdc8-420b-976b-e4ede5c7bd29", "sighting--2b72eedf-5635-43f9-b7da-b0c6b862694f", "sighting--e00c572b-2d59-4e29-b98b-62d73eca1e50", "sighting--11ff19ea-935d-4765-861b-c6e58eedb9ec", "sighting--8f411f63-f17c-4c50-852d-6500d29ced3c", "sighting--b6c93dfd-7a8d-409a-a85e-7c6b38bf6bb5", "sighting--6c65d85a-fde1-4da7-8a31-e4f8caaa836f", "sighting--65689dfe-109b-4c8f-a32b-14c95ee7ef57", "sighting--0711d770-0b50-49ec-98bd-ed6d51d72593", "sighting--84b65472-3963-4ffc-9b26-37843844c6fe", "sighting--e9eb7e79-1ed8-4a46-a212-f827942344c7", "sighting--33663485-b21c-48dc-8be1-a7cc59853222", "sighting--755435c8-5e02-4def-a1b3-b19acfe0a0d5", "sighting--a4130b7b-d944-4f50-a5a1-cc19f77c56e0", "sighting--fb7d052c-3d24-4222-a0c9-045fb442d918", "sighting--a95beb11-a78a-4c25-a25c-7605de6c7a8a", "sighting--f45cdc2b-d342-4a18-a1cf-878701aefea4", "sighting--aa337bdd-10c6-4f05-a783-8c16fd710ceb", "sighting--552b2e51-cfea-493a-80ae-358d51d5e940", "sighting--5f88876d-fee6-4fb6-ac8f-043569df6f3f", "sighting--50ba7de2-376c-4dcd-928f-7395daed5dbf", "sighting--9eb6bca2-72c9-48e9-81da-9a241c534cbf", "sighting--ca915cf2-b32c-49a0-bdc4-226cbbaadc01", "sighting--2b03a353-1b26-41f6-b035-e585dc958ca3", "sighting--e69bbcc3-5eba-40e6-8eea-a40ab1146a57", "sighting--b6f39b4f-b421-4afe-b7eb-475abb424c7f", "sighting--5bab2b23-cc51-4178-9a76-02a2806c8d0b", "sighting--f9e6d0d0-cd17-4b52-ac46-233f36e054ff", "sighting--bf356ae7-09c9-4d6e-be9b-0d5f8ab2b3da", "sighting--9a8173d1-31df-4b29-9395-0fb12b8a75b8", "sighting--f5315967-4dbb-4b1a-ab8e-5d94485e09ca", "sighting--57b6670a-843e-4a07-a0ee-2ea900160aa1", "sighting--ce0309c4-95a1-45af-93bb-2f365f38986e", "sighting--01d2474b-3e93-4183-b4a7-e9ffcbd84500", "sighting--5fcdc189-cdc5-46f1-b1dd-51d9d29e3a08", "sighting--bbe882e5-8c07-4fc5-9fc8-1ede83672b70", "sighting--10502813-2ace-4cfa-8dad-b9f6cf0395d7", "sighting--4a329214-fcc8-4317-afd5-10638d1925b7", "sighting--9ff897ed-6b6e-4e59-a634-eff4ed55df83", "sighting--56d83242-ac03-434b-a4e5-b24a2baf621f", "sighting--83657845-f69f-4bef-b85e-237474634e58", "sighting--39f84d2a-ac1e-466d-963b-272df1993f06", "sighting--24abf943-1cf8-4937-abf2-c7452de2c680", "sighting--6df06112-b701-45da-9a94-fb17040e6ac1", "sighting--c863bc2c-4ad4-42bd-a117-836fb70d8a1b", "sighting--1d4e3a70-bd12-4bcd-a879-ce5c79864d36", "sighting--b4206506-bda7-41ff-bcd1-46494200f54f", "sighting--93a21823-3072-4f16-bad8-1a564b71a4c3", "sighting--c6b2bfe9-bae6-45ac-9cff-918ee06679dd", "sighting--6e5fc1a8-af4e-45fd-8cf9-f62cba32b713", "sighting--241227e8-8a47-49a8-9af4-482a732b8dc0", "sighting--63d21458-8b93-4d9e-8668-6d40d8e2a9b9", "sighting--2c85f3bb-3ce8-4441-b36e-620c6b3abd5d", "sighting--599940ed-f1f9-4c11-9569-3a050bb75e61", "sighting--247a9fc3-2e4b-4399-a979-147d77c806fd", "sighting--774172ee-9ac1-48a0-aed7-39c0ad2a0254", "sighting--6c1e3c03-ee3a-4286-b662-6544ce43aac5", "sighting--c48cadd9-d1a6-44b9-871a-0f74646c630f", "sighting--6860a60d-2932-4f98-a1df-887b26955ea4", "sighting--8f007a1b-7660-4c64-a617-bd65fcb50fb7", "sighting--7377b4d0-b9cf-4cd8-b315-a6dd13b4cf8d", "sighting--0e4f9c53-4433-4f06-bdc8-cce38e85cd78", "sighting--8c10a77b-def9-4fda-a760-1b992e335f7e", "sighting--a5596b66-89bf-4496-b8f1-a641713f92dd", "sighting--73a6a219-43ba-4bce-8916-cf40a6b023c3", "sighting--8cf1d0f9-9e9c-49c6-b5fd-d92c3357d3f0", "sighting--d3166495-429a-4913-bee6-09010a79d222", "sighting--68d60724-7101-4280-9eb0-284b4d9a267a", "sighting--c69d64e4-c4a6-4626-8a49-11140d5e91f3", "sighting--01e5095a-c9f1-4e22-8a4c-52f0696090a6", "sighting--8f081602-2103-4215-83a0-bd0435876d94", "sighting--3c639238-22db-4102-bc5a-2c2cee6ddeab", "sighting--3f892844-0a7a-40ee-945d-044f04adf8ad", "sighting--7237eb23-95dc-4e92-ae63-04d669c03047", "sighting--0a178b9a-0a00-4886-a328-72e72ecf425d", "sighting--97eb7876-94a3-4081-ac7e-810d0c9db280", "sighting--e903926b-7192-40ae-9cd1-fb63eb809926", "sighting--a5db8544-a081-4a44-a721-b6342a4b9332", "sighting--0511cd44-e85e-4040-b527-385bf33b94d9", "sighting--802d29e3-0f27-469e-a6da-c3aa3e3df6a7", "sighting--3c782298-2ce0-476d-bb5b-e41f912d74dd", "sighting--ba5d0d4e-5672-4a22-acad-323a326b4400", "sighting--b5a97ae1-a652-419d-b484-cf70daf456d7", "sighting--7c483be5-93d2-44dd-8597-9e4bab849f22", "sighting--93452a95-9509-4203-9c09-c2afb57a52d6", "sighting--02a4aed5-b3b7-4d74-bb56-c4f415b3bb13", "sighting--b65f75f9-2102-4601-9d78-49189a85391c", "sighting--8c11c214-74f5-4e0e-ba30-7f61f951abc5", "sighting--bfcfcd8c-f0dd-447a-9185-4b2281fa22e4", "sighting--91518f65-c462-4004-ab7d-1033ef39ad20", "sighting--79c76836-f594-4774-a994-6e77fac587d8", "sighting--fc4a9ff9-7c9b-451d-868e-def498bc0b34", "sighting--9f98dff5-1d43-477c-b962-596a1636b019", "sighting--3659479e-7ffb-4f45-83ba-95d00bea98eb", "sighting--5943d5f0-b6fe-4eda-b249-515252e63716", "sighting--32a198eb-74db-4d81-a9c9-55d73bc9bb15", "sighting--73a3fcf6-4ffc-4400-bb37-a41f07ee2bc7", "sighting--4fe30d7c-8688-4559-9acb-e6235e348703", "sighting--1f8b184f-f445-4109-b0a6-777990f5fbf2", "sighting--8925fb30-53f1-4706-a602-2f3e1d752892", "sighting--cafdd5ea-c8e5-4fd6-b3dd-55d5d9063a37", "sighting--89fba5fb-2592-4a7e-8047-ac6c50d00207", "sighting--63003e55-debb-4ec9-b576-c0626e6661dd", "sighting--c2f9b7e8-783e-42c7-bc4e-b312747ed5c5", "sighting--8e27bdad-7e4f-4070-b8da-366d9e04412c", "sighting--3fdaacb8-4416-477a-b0fe-eb0406755640", "sighting--3664c468-51da-41d6-9f60-1bf78c46c069", "sighting--e7264197-82a5-457a-8b1a-19ce0f298650", "sighting--8931aac3-f241-4de7-9b14-c8a618904060", "sighting--2c0b9845-6464-445f-a9c6-7872b997005f", "sighting--55fbda14-83c1-47ca-921b-2923dcfe3ecb", "sighting--c72af7f7-a4b1-478c-83ec-bb9e7b574c5e", "sighting--6bbe7255-26d1-4ee1-b6a7-b356b5f8b298", "sighting--08b50805-b071-4631-b724-1ee07b6776cc", "sighting--e9c056ef-a76e-4664-b6cb-2da854791593", "sighting--fe24b8b8-eb96-4700-ba2f-523c26fc14a1", "sighting--6534ac5f-c506-4dd5-966c-552c9b690413", "sighting--85bbbb86-88b0-417d-a3cc-7f853567a145", "sighting--e8db0b32-d551-4c7d-b49a-52f0506336ed", "sighting--5c3ca331-c5ed-4a0f-a122-8f80b20710b7", "sighting--f634f938-4a7d-47b5-901c-f15440309198", "sighting--f7fb90a7-2dc6-41af-b767-dcd0dfd0958f", "sighting--bf31016e-57d1-42f2-b085-e9770ba8e72f", "sighting--d960d720-3117-4ec3-ad3d-04ed313f38d2", "sighting--49d3baf8-e627-4d20-a774-922950c5db55", "sighting--335e120b-43d7-41de-9ff2-d7762b3aa8dc", "sighting--6fb9d234-2650-4c03-b408-6c0d7489c801", "sighting--35a7ef71-c442-4ddb-8f7a-1b9e40668f24", "sighting--d4b72a3d-777a-4aed-a7c5-c55a9bdc6a25", "sighting--500c1f94-592a-4d79-9744-0bed4bfc9fc5", "sighting--67f8d29c-e9c1-4304-961f-c5bc79166e4b", "sighting--1e31940a-70ca-4114-95f1-67bfd1259ca4", "sighting--bc1ca479-b582-4624-80a0-99f4d2415ab1", "sighting--2938987a-092e-4a21-a3c8-41b373ea570c", "sighting--dbb009f1-580a-44e9-9e2b-2e96801cb682", "sighting--6327541b-f571-4e6b-bc53-343c20428a32", "sighting--c7e3cd76-1ea0-4d43-9ff7-77e3cdce5551", "sighting--2f7ef06b-732f-46c6-8dd5-2f5c07e6b398", "sighting--a07c0ab2-6816-4349-b919-17e2a84cadab", "sighting--b2255d40-6f69-4c62-81b8-9e3dd494ea0b", "sighting--af2d8aaa-082f-4ad6-9519-da6aaf39826e", "sighting--b9a65847-5cd4-462d-bf8a-d43491a800ba", "sighting--6052d474-2479-44b7-afe2-eedf43a37344", "sighting--4beda7cd-c283-40cb-93ec-6a42d39ec05f", "sighting--e6ec2e5e-29f6-475c-8db5-4cc2585bedcb", "sighting--d1acb794-1d3a-406f-ae80-ba0db463c16b", "sighting--f256444c-053c-42d1-bb50-f1a5b0ea3897", "sighting--f1a91796-4421-4041-ab24-361c851baa39", "sighting--7ae77a5b-ceff-423b-8ad5-9c9b39f47559", "sighting--e145490a-75ca-4d20-b2ac-b92e31c1dbba", "sighting--4d74fa15-145a-442f-8720-86f7aa1a30bc", "sighting--8374440a-560d-484a-81ca-7337c7448e2a", "sighting--70c9dfa1-418a-4ca4-9b9c-0c9e9d1c1c72", "sighting--129d3503-7371-47bd-be9e-41392c2099ae", "sighting--c850627b-40fa-4414-b900-fa7cdc8e4975", "sighting--7aeb540a-6f73-4a96-85ce-5fea9b66a681", "sighting--6540ec10-14e8-4170-9505-46ac636e63c8", "sighting--1e7d1513-494b-4ff3-9f01-7744bc62b3af", "sighting--dfa20059-7406-4aab-905c-caf4ad8b6a25", "sighting--762cbb03-17e8-4e27-ab9b-44cd9aa824b1", "sighting--12540a76-17f6-4526-bfbb-59fb048afe85", "sighting--4545dd18-3900-4c2a-9162-32b8edd431c4", "sighting--028d20e1-5a84-4d24-8f1a-b5b82f0dd5da", "sighting--0a3adf1a-83d8-4d0c-90c2-901d20ffa31a", "sighting--f5a5b0b6-bc09-4375-b8d0-e1ec681196c7", "sighting--5b5b9a21-ceaf-46de-a36b-d6ac74a26ba2", "sighting--bebb0524-9035-4644-a500-54c1e96f3a94", "sighting--8db4d323-2e26-48e9-8e83-8a898fc56ee4", "sighting--05d13105-5c74-4541-b9cd-f9b4e9a55611", "sighting--21031e0f-0f25-4d74-8249-e3376f0ab291", "sighting--feb4b65c-f50a-400d-8872-3ac0ddfa96e0", "sighting--58ec3af7-bce2-4f3f-a1d7-969767415908", "sighting--4ca477d7-5711-4dca-b8c6-fe36d4248b21", "sighting--4f993beb-5ab0-48bf-99ec-00abe620468e", "sighting--adb8ea5c-2c73-4586-8ba6-7dc98f8dd969", "sighting--a5e993c4-14be-474f-82d4-109792535b15", "sighting--c8158d6f-2969-49d5-8abd-ab7a5300bc09", "sighting--2fff83a1-8700-4264-b19e-30a8d51aaf0c", "sighting--5cac1890-1ac5-4b30-952a-ec115ac3ff28", "sighting--2d4086d5-e819-4c35-9058-56497907116b", "sighting--cf0a2347-a07c-4d0b-afe0-9f30c2c52d1f", "sighting--a1541ee5-63d3-42c3-880f-c8235a3fac39", "sighting--18232a08-2b2a-480d-9a57-dd92c2cf5bed", "sighting--62ebbe3c-543c-45a0-b377-ab034801e229", "sighting--e2a62a22-5da6-4a40-b11f-b4f8c725f39c", "sighting--d9fea426-2867-4edf-aa26-a3f517e0abf2", "sighting--e95a30e8-e580-42cc-bc06-bef3bb7158b1", "sighting--ca83e597-d899-417e-b6a4-75a47443eb97", "sighting--50570052-87bf-469a-916d-3fc9a9873950", "sighting--c0d639d3-6242-496e-8805-913c23e7dfbe", "sighting--79cc41eb-a773-4498-a1f1-181fe0b0388d", "sighting--d0d60013-5a22-4882-a7f9-d8e384662415", "sighting--25d1e9d4-5502-4d36-af11-683fe2f96cd8", "sighting--ae84b051-7650-4794-9840-8d5c1ff4ef2f", "sighting--781223fe-23a7-4a93-a6e8-c20ebfae3621", "sighting--116adb0b-d45a-42e6-9e24-48c53cc1cb49", "sighting--b5494cca-7e99-44f4-a940-d99ce799281d", "sighting--0f36c2a1-578f-4394-b9bc-8aa1fb7f8a8a", "sighting--dbf621c2-8a4b-4b0f-b8ef-29a1a1f8db47", "sighting--6fe3e4f9-9cef-432d-bdaf-ad0939084677", "sighting--2fd7ac82-bdaa-45aa-be76-ea36bdeabe54", "sighting--a7dcdca9-9bf8-4a2f-85d4-a2f7999f7f31", "sighting--26294ad1-00e7-4bd6-8192-b97f558aecb6", "sighting--8ab60c08-b92d-4686-ae5e-2b5cb8a5b0d0", "sighting--df8b264a-5966-437d-be21-bd39d9a73704", "sighting--b3e051de-c8bb-436d-97a1-8d4c7004a0fe", "sighting--7ea27895-5fc8-486d-a7e9-dd5abba18c0f", "sighting--29b0f6fc-7bab-4e0b-80d7-87b0dd0bc841", "sighting--508c30ed-315a-4d60-a9cd-db5bd7ffa689", "sighting--ce7e28a2-befe-4c1b-8e14-511559dcb1c0", "sighting--cfa969c6-c7fe-452e-b07a-009de2ad1eac", "sighting--4766a23c-6ffc-4568-b2d6-5655e98e06e8", "sighting--5fba4a20-c6ac-4a3d-8387-a8ad63f1bf13", "sighting--8ddf547b-9f90-4554-8fa4-5f9593b64c7e", "sighting--37f21f1e-9a03-4acd-888f-4d5ca0af1eb3", "sighting--9666db1f-3ba8-47da-abc9-aa63e69c352a", "sighting--218c37aa-8d53-4e70-8ed1-0787625f87da", "sighting--c328bda1-886f-4386-bf21-36e999ef028b", "sighting--4114ce9c-76f9-4ef0-b2b5-6d906d8fa03e", "sighting--6ef51f06-a60f-41b8-bd3b-8f2d3712e8d6", "sighting--36316566-81ed-499c-adf7-10d4b8cb1193", "sighting--f76d8416-ed69-4684-858f-66fe53c99e9f", "sighting--8cbd86f6-f825-47d6-9e81-6b16ef5b0f88", "sighting--34effde8-4ce3-4a2f-bbe4-a4e7bad03329", "sighting--d7860a15-7fa5-4d81-b8fe-51887e213a4b", "sighting--3e468086-16d0-4e2e-bb9a-53508e96e0ac", "sighting--7e3f2e8f-c56f-481f-9ef4-43fec7f55f6b", "sighting--9820aba6-c48c-432e-9fce-cb275c51127d", "sighting--0a571055-ddd9-4c23-82a0-a595d31c9820", "sighting--ff80268b-2840-4a27-ab7a-7f2254c68e90", "sighting--232d2f2b-eff7-458a-9342-60d94f056823", "sighting--7956d2f5-0f19-447d-aae8-3b5b5d42caf4", "sighting--9ee883f6-5555-43eb-9881-dcaf86edf75f", "sighting--40b81186-fafc-494d-b217-84c46221902f", "sighting--592fc181-52fe-4ac6-9243-4517713a81c1", "sighting--a22d7e48-c14c-4b1d-a01e-a7b4567fda9c", "sighting--212519e6-5d0c-451f-b755-9bee53160861", "sighting--03c7850b-adea-47ad-82b5-00f4a57dac9f", "sighting--3f83ebd2-92a7-44d5-a684-21875777a09f", "sighting--1467575b-96b7-41ae-a710-09d2d2b5e80d", "sighting--3cf05785-f88a-4b0c-93da-ada95a68de03", "sighting--059a07f1-8056-402c-bb1d-d977c4527990", "sighting--c1a94c24-56b9-4c8a-97d2-43dbad7a4e16", "sighting--d9d6a51e-dd9a-4c96-b2c8-d49927a4935e", "sighting--00030f87-378d-4c71-b7da-55729386a0eb", "sighting--3480336c-7a3e-4487-a339-58124e299ca2", "sighting--7e7803f5-29e0-40fc-8395-d6eaebbee49f", "sighting--fda766ac-1a3b-4aae-b48c-9f45c0777ce3", "sighting--f13dfbe8-29e7-473a-88b5-cf7aa43414fa", "sighting--9556b209-3a9f-49f4-915d-e5c3de7b9fdd", "sighting--9d5e12a1-8fef-4df3-bb5d-a8b7f2013878", "sighting--56108abe-4b7f-427f-ad2c-d551f5b9309f", "sighting--2a20f025-7e41-47bc-b4b0-36b06780a162", "sighting--0d3d46c3-8ef3-4b0c-a686-929012d66c68", "sighting--bd7e0789-236d-4c67-b915-a57bb281d261", "sighting--1d137a21-94af-4438-aaed-6f02a612cd32", "sighting--e4d0f38c-5b63-40eb-93cf-42701cfce590", "sighting--722cd995-304a-484f-a303-644dd195c598", "sighting--dad62918-5af9-4315-9f5c-6cf74df16e9e", "sighting--0e43447b-ddf5-4e25-b1d2-673dab0bb285", "sighting--895ff5cc-6a43-478f-85ce-dddc1384090a", "sighting--5fc18968-b6d1-4dbe-ab45-07329a9fb27e", "sighting--7e41a449-1c5e-4744-91eb-1f2c5bf10bc0", "sighting--462a6930-f20e-47f2-a0dc-a12f0c571677", "sighting--7434760f-55fa-4018-8076-1cb1bc9b7eaa", "sighting--40e7d7d9-20b3-40f0-9751-7092b58164da", "sighting--2534d032-0baf-4a60-995b-134c4f4540e7", "sighting--cbd64eb8-321b-4f23-ac1b-eff288a65f0e", "sighting--76c7bd42-b0c8-4f29-b1df-5cf890b3c2ab", "sighting--ffae32f9-cfd9-48bd-8473-412e07ae86de", "sighting--fee1814d-7f59-42e0-87fe-ee9ef8a18cd9", "sighting--1013b539-1f14-4f1f-92d8-aceffd8966cb", "sighting--d79d808b-4571-4b18-a2bc-1088a8c162fd", "sighting--da68b23a-9fd1-4037-adeb-385462391cb2", "sighting--916d1f0c-cfc9-452f-a55f-88d74c659f8c", "sighting--047d0a6a-7c3e-45ba-884a-e721fec0cfb2", "sighting--02f41bc7-855b-4e11-bb79-c869381b8244", "sighting--ed946872-010f-49ed-a581-ee53ae03661c", "sighting--50f69430-c8c3-4850-9db8-7f27d2351c75", "sighting--679c979b-f04e-4f18-bb95-027b60230b24", "sighting--bed986d7-a3b5-4605-8981-77c1ae7b6807", "sighting--5a6af9f6-18fd-476b-a98c-fb06c0913355", "sighting--74d63ee0-538b-4729-bd2e-9c04c1bb63fb", "sighting--40605525-56f7-4f16-857e-a28d2d800948", "sighting--55ac27aa-8ca6-4126-b502-62b2c26e32bc", "sighting--5fbb989f-ffe1-4b6e-a467-3a974e57fcc3", "sighting--46e1a971-d73f-4e32-b9b6-7e586a47c6f7", "sighting--ed7ddd06-e59e-4c1b-b119-d54fdc8229e9", "sighting--9a9f640a-3903-41e6-a690-ab6beea8d77d", "sighting--8f12b84b-0042-4206-840a-bf14a4d8c960", "sighting--637c9fa8-a195-4014-8155-6036264b0d91", "sighting--a24fa88a-18f3-471c-a648-db113e88f99a", "sighting--0d8f88ce-59a6-43bf-95da-27114b04a5d7", "sighting--fd9c4054-98d3-4249-9920-3b42d4968737", "sighting--d3ca0d06-9d6d-4b1b-ba54-a8263501f8da", "sighting--07b0a1ca-124e-47d5-81b0-3990e87b8f62", "sighting--afb963c2-5769-4540-9722-7523d95b8477", "sighting--78c3191a-11b0-43fa-9427-749ea93efe15", "sighting--5f118f6a-bc85-47f7-be8a-2b1b95b09788", "sighting--b6ca8c6a-c642-47ac-976e-43217e996030", "sighting--e4a5d22a-29ad-4282-88d4-5d9a4b2837c6", "sighting--6358b129-256b-46ae-9e51-00ff260c4984", "sighting--ad728ef1-f546-4791-9511-130d17d31a9b", "sighting--0742f809-8691-45fe-b599-58427995da44", "sighting--0ed3607c-6714-402d-8e43-44865ed603dd", "sighting--4b8f0525-4898-4a87-a62f-c043f624392e", "sighting--b63f4a44-6a16-4da6-a30d-f55db6d0da47", "sighting--2c49b25b-865a-413b-80f6-5a7befa2c4f6", "sighting--d8b6ad85-664e-4542-a8ed-ef24f10b461d", "sighting--27fb569c-d2b6-4fed-a940-dfff5f2c21bb", "sighting--e83cfd6b-c812-4ed7-99dc-ee5577ca98d1", "sighting--63913db5-69cf-40c1-99be-19528c106f08", "sighting--ac2881f8-e0ea-4805-8897-3ccaa661d876", "sighting--4446690d-fac0-44c5-85a3-09805e6e635c", "sighting--d008634b-86ba-4c3d-b96f-1dbd7add49e7", "sighting--1f71181f-5f95-45d1-9e51-b570261f3140", "sighting--d2c03baf-32cb-4b69-bf76-445bc49c0db1", "sighting--ce40c2da-a83a-40fe-83e5-5b1926df2577", "sighting--9b5bc547-12ff-4410-b58e-4bc9850fe301", "sighting--1462e540-9eb1-49e7-8151-eb92d83cca1b", "sighting--003a1356-e0bc-4507-b117-49581ea68842", "sighting--13072dca-1f9e-42c3-ab3e-e0a166f5095d", "sighting--0f3366c5-acd5-484e-9372-3fc692410477", "sighting--40f4e48f-c82a-4db2-acf4-66d1874dc939", "sighting--04937a19-7171-49e2-a016-b4b3746cb871", "sighting--25f3a0c5-6705-4f92-b21b-73be07f82fda", "sighting--82912422-718a-4c23-86b6-1fcdcca2d9b1", "sighting--c4583612-64bf-44e6-93c8-325d332274f3", "sighting--5f28a948-cb04-4147-865a-08b2f8cb6251", "sighting--8ea4907f-8bbe-4f81-a414-3670ce23996c", "sighting--6753a804-b290-441e-a3f9-f4a9a5433a52", "sighting--ac6264c4-b189-433c-8609-5776256385a7", "sighting--ee8c643c-b095-4ceb-b825-370e104c2f2c", "sighting--05c59abf-e0f5-4b92-8db9-54d88aeae61f", "sighting--d1c733c1-4a7c-478e-8238-7eb22bddd811", "sighting--6a93462e-3d7d-496c-b264-9f62e6714680", "sighting--2855e30e-3767-40b1-913c-c96864bc145d", "sighting--f46e3b0c-b871-40d9-91dc-db015677e993", "sighting--27c51d2c-ff26-4fa1-802d-376abdba1436", "sighting--c38f5647-5530-4dc3-982b-9b29b50b05cb", "sighting--6adeafa3-4543-4db8-9f52-5ae313065e63", "sighting--39666631-5382-4ef4-84ee-72c79e1d95bc", "sighting--244f240d-b62a-4a86-8d7b-ed106ae4c506", "sighting--4ac77ec9-0a23-454e-97c8-75f4dbea8361", "sighting--1e7af9ed-532e-4136-831e-eb94e7f19859", "sighting--49de2623-2fcf-44c0-a3a7-f45231181240", "sighting--7f5d3430-4cc2-406b-ad8c-4309228b5b3f", "sighting--f47fd457-03b0-4556-85aa-284734cc13d8", "sighting--b18af691-8f05-4ab0-b4b3-d24c46887f12", "sighting--a14a8704-9e5a-4950-bf81-7b3d0c6d7e48", "sighting--5d871e0d-0c51-411b-83ee-685aa7eca5bb", "sighting--b6edbe72-f0d3-428e-8d5d-53c762419808", "sighting--f8233ff3-a7d3-4d28-9c49-c16dc37877c5", "sighting--55335b9e-9b8b-46cc-8ba2-fc34748b6cbb", "sighting--4df73f9e-34c6-424e-8605-df792cdd4b2a", "sighting--29fc1e5d-3e53-45d7-9807-60234fc4be40", "sighting--d49a0f2f-5411-4aaa-a932-0a44e59f14b8", "sighting--f27fa58c-79c3-420b-a554-51beae8959a8", "sighting--327f0f61-8dbe-4efc-b7a3-0f5469f6ef06", "sighting--c97c4be9-595d-4c87-b1de-341013b1032a", "sighting--74a68c10-b0eb-42bd-8a9f-f3ee1f212c37", "sighting--50225126-f50d-4560-90f9-94f3e183372e", "sighting--7f4e6710-dfb0-4929-a21d-c01ab8ffeff8", "sighting--7e624c28-1376-458b-8f74-bf0fefc96591", "sighting--32df1707-b3e8-4c6f-a2c1-f8e6f968f1db", "sighting--ac072ecf-6116-4352-8a73-9d197d3c00bb", "sighting--c424ed7c-43d1-4ac1-a816-4810ba38774f", "sighting--aa74e11f-275a-4ace-93fc-6bad14943519", "sighting--4110b7e3-f2c5-47eb-817b-dd1d934b878a", "sighting--02ed6db8-88c2-4976-bcc3-25a105e86682", "sighting--26b376a5-7644-488f-8bd1-6e10e000c1eb", "sighting--eea2f028-b8a4-448a-b915-e423c6cd486c", "sighting--981da437-3d76-41f9-a59a-6b746162c28f", "sighting--855f2c3e-214b-4dcf-9280-8a4de9760beb", "sighting--16c744ee-d431-4ccc-be2d-c943f8f8370f", "sighting--ef1ae455-a9d4-4ef2-bd83-7fe08b5fe380", "sighting--6cc6acd5-9c99-4c72-baa2-a46e2cadf2f1", "sighting--e431b7df-2a13-488b-9f97-54d243c827fe", "sighting--2abc287b-00bd-4422-bbc2-ea0b2b78ab96", "sighting--bc2b7540-f489-4683-b41b-6d76817a3034", "sighting--70bcea3c-580d-4ba9-a334-972d8781120f", "sighting--68160db8-be41-4d7a-b4e6-160fbe350c10", "sighting--083dca4d-3643-46ca-8aa1-721daa7f757b", "sighting--81738d36-2b94-4173-ba54-7c9c33f5e6a4", "sighting--4ce33618-0851-4dbe-86ce-c0c4f758e996", "sighting--13fd635b-c9c9-49fc-81a9-7409ee789935", "sighting--e6750000-7b39-4b87-a613-64830f2ce921", "sighting--d6888438-f71b-4461-95a7-2d1073bb16fa", "sighting--f9c2d6ff-997b-4775-8313-9305a96d4068", "sighting--d2342ae7-a695-4aa9-b3c5-e37815346cd5", "sighting--6eaaa55f-bac4-4b27-beb2-5556bd394248", "sighting--624c130b-d4da-4042-b2b8-b2a4711ee45b", "sighting--6ac6f89f-f369-4abc-ad42-9168d208b3ab", "sighting--1e6078bc-7caa-4f84-8649-f7ee59a0fbb7", "sighting--2b37e2f3-3f61-4e0f-9072-6df34ca55101", "sighting--9049a468-bd29-41bf-8873-6dc521bc5530", "sighting--63ce0418-c03c-4671-9be8-a8c57dd64621", "sighting--902d8cbd-efbf-41b7-a230-457f53ded974", "sighting--0fdaef68-4afa-405e-b385-556d57b43fed", "sighting--fe200961-a1ca-4813-9fb1-f3dbc2d580f6", "sighting--34837a25-b227-4084-87eb-88c7da77cb4e", "sighting--3c2857cd-97f2-4579-b7c2-70586d786908", "sighting--5f19011d-2dce-4cf0-af73-79c31342fa64", "sighting--39faace7-18ae-4f72-a707-86480c7cf224", "sighting--4a744922-b3db-46da-b16e-cababa528b8f", "sighting--fe8ac929-1cdc-465c-8d53-7a10a83702e0", "sighting--9f35ad95-0e92-4e78-b18e-bf0792e5c754", "sighting--3e7b6aa7-e404-437f-9971-28d2f137c71c", "sighting--cdaf781e-d574-4486-9169-d70b0fd0f193", "sighting--8139fd86-aac9-48c1-9e00-acd5564ac9ea", "sighting--60398cb1-ef40-4319-aa0f-7c3d12aca03e", "sighting--c5fdc687-69e4-4299-8ea5-02853f3e8da8", "sighting--88dbae5f-5187-431d-a060-db9b29c0b46a", "sighting--be168d33-2927-460f-a3cd-b1ead5281abd", "sighting--b2f06f39-d9b2-41e7-8a6e-e1930798e465", "sighting--942a9b8c-163e-48f0-a98e-8a06792c64fa", "sighting--fc0d2ed6-a0b0-4832-a648-00988d14ac2e", "sighting--d00664b7-2b26-456c-9f43-ef898bc8080e", "sighting--a5e879c4-2b37-468d-a62b-7cc420e31736", "sighting--979b50e9-65ec-479e-817c-678da3bc6dc7", "sighting--a6eba9d9-e12d-44b2-a855-42af5b079432", "sighting--1f53856e-8390-4163-9625-cf0737c608ed", "sighting--d0619ecd-ef88-4498-a49f-7ce1c7c3fb3b", "sighting--7200bcc9-206b-4654-b1f8-42475ed7d039", "sighting--1450b070-ec2c-42b4-8229-3c89662cd64f", "sighting--1718f247-e075-4b7f-9196-b485e57d369a", "sighting--0cba9a54-d1d7-4150-9c09-9f21a5ab900d", "sighting--bb28f57a-44ef-43eb-9f9a-89ee90f33eba", "sighting--5c27c57e-7050-49db-9310-4d11c86e3bb7", "sighting--6ebcb95f-1627-4270-879c-567e83bf2d60", "sighting--55535657-1c3c-4271-8a7c-17fdc720a15c", "sighting--670bcc26-44a8-4f3c-abe2-88ed216d4097", "sighting--70df8d90-ab0a-4b7b-b727-a8925cc331ae", "sighting--00c93050-cbf1-4060-8b22-d7f7a6cf2879", "sighting--b1b1321c-2392-4a09-83b6-53f2fecb3338", "sighting--f23ccc08-47aa-4c46-9621-6f44ccaecf0b", "sighting--18be4c12-ddba-4c89-980d-a4fa413a4e3a", "sighting--5f7fdbb1-a3c6-4074-81af-2953607a3144", "sighting--7a7e22e3-8c1a-4c99-a96a-48331a9e3914", "sighting--db09daa3-ed0a-435d-b23d-ea3caa166d25", "sighting--0388ed7f-2dd7-499f-85c0-eec4b5c08e1e", "sighting--f1b1a9ce-f95a-4c87-b6e2-d777d478c3a1", "sighting--7c6ef093-f5b6-4191-91ea-365004a63956", "sighting--09ebd052-d0c0-41fd-aa65-64e67b4bcd89", "sighting--a283e3ab-62f7-4365-845c-e025f4d1e5a7", "sighting--4a6ef81a-c2d1-40e4-be59-37c8222af1c2", "sighting--da98294a-d371-4436-8d22-392f6acf5235", "sighting--6cbf56c0-d98b-4c16-900b-3e6a3d52f9f6", "sighting--b93d4a22-7483-4816-ab2e-d3b97bcc393b", "sighting--94148a94-13c9-4f9a-9842-fde380c2f8cf", "sighting--37626813-e7bc-4f6e-b5e3-b011daf517a7", "sighting--809dd973-1487-424b-951c-a325c75152ed", "sighting--8f8df0eb-1e9e-4b82-bfcc-436c7b8558fa", "sighting--6df597d2-6f66-4397-bf71-c6df82668e6c", "sighting--d8fd2544-4b39-42fd-b237-84cf6f32bea2", "sighting--5be0d3a8-651e-4169-999d-bd896c3c2cd2", "sighting--cf4dfdfb-3272-4c98-a48a-4e8641b2fc3a", "sighting--d90025b9-c8d3-49f0-bd4c-0b82b7872a91", "sighting--a2e2225d-f1ba-456f-b9bd-4dbc5a95c47e", "sighting--485ab93f-5067-458e-8abb-322f81ce1764", "sighting--743e3b95-2245-451b-b576-9611ea395dbe", "sighting--18a6a61b-b135-46fa-9c6c-ef3accba9e61", "sighting--297c70c0-62aa-4bd2-a1f7-833e422f6a60", "sighting--77742da6-8b54-41ce-a986-22f1754128b2", "sighting--cac25bea-ea8a-464d-96ba-910595c082dd", "sighting--2731578b-a19f-47f4-8b60-1058dd188aaa", "sighting--253c5c97-fd5e-4fe2-b0ad-14778d34df09", "sighting--1d9a4ff6-c351-4907-bc04-b0da53790d3d", "sighting--52a3d660-a390-4445-b463-608bdd377fea", "sighting--c9284a9f-512c-493c-b01c-e244fcd9b3c5", "sighting--033a298c-c3b5-44c0-ab4a-c292ea4ea889", "sighting--b5d82ed6-ccab-471e-8dab-a998a3225fbd", "sighting--153a3991-c167-4b77-9e64-4d5f59e48f8e", "sighting--ce886017-ba7c-436d-a2ad-311319336f90", "sighting--77878519-bb54-4697-afa6-c863fd74e429", "sighting--199279c4-b2bb-485a-b3b7-c2e8532c430a", "sighting--69ef0925-e3a6-41c6-adcd-c1e2a9e49a70", "sighting--9ca8829f-8564-415e-9e55-4e0c23c07774", "sighting--4b65b45f-42e0-450f-ba5b-009aeb0fc342", "sighting--12c8d8dc-1c66-417c-8085-d6aa823abcfe", "sighting--8ce2f74e-106c-4470-a87a-943053f263a4", "sighting--02355971-c8fc-4b13-ac17-1ed192285729", "sighting--cca09400-3d10-4b14-89a0-235d14939537", "sighting--086c9989-d5b5-4e4c-b8dd-4db93e6cc2b4", "sighting--a1113d56-0f49-4355-b875-a90b9f574d00", "sighting--3e919136-9523-4fc8-9ae6-4391a5941a1b", "sighting--88a2ae61-8330-418b-b4bc-9545a746a702", "sighting--a8102644-dc53-42e2-aaf4-7eeae4e52b82", "sighting--4a6e445e-8b64-4020-a85a-fe77465c5879", "sighting--d6e01c7f-f5c5-4683-8574-af50e45c16ac", "sighting--96a74054-b242-4c2b-8149-9c0510e8d2f0", "sighting--a3a2b4d5-7bf4-4f83-9a8f-22d05b27ad7e", "sighting--9965d0e4-0641-4e7d-9557-659e5bf72cdc", "sighting--1b4587f8-acbe-4dca-ba95-6b94923932c0", "sighting--34ec7cff-5aad-45fa-bc49-964727c7a1ba", "sighting--7faf82ba-54ee-4745-97da-bf4ec379dc53", "sighting--1e6e21f5-3287-4a17-a33d-27c751da2097", "sighting--0ea61304-c350-46a3-936b-bbd8f68c0eb4", "sighting--1bbe2bc6-ee29-4b3b-b449-e2346bac7fcd", "sighting--31780ea3-a903-4e33-ae34-00821ed09427", "sighting--24881003-38e0-4177-b48c-337c3f5ef6d7", "sighting--6e9a9afc-e9c7-4eef-86bf-ca99e8685541", "sighting--96b34597-6fcf-4850-a1ed-3b399dbfc971", "sighting--ea60a9a2-ec17-49ea-baf5-4affbd34226d", "sighting--a4200d0d-20af-44b4-bdd5-da953c6987b4", "sighting--9400ac19-4f11-43ec-a652-e905a194f086", "sighting--a2d4e22f-a5e0-4c4e-a2a0-b843efb428db", "sighting--9b1830fa-94e7-4de3-8988-e7fe33391745", "sighting--1a8743be-d955-4f2b-ba2b-75ce28aa2698", "sighting--9cbee683-0022-475e-be4c-21ec6f54bb03", "sighting--73ede55a-6e92-48db-8896-0796e030f137", "sighting--2154ad78-1cf3-4d1e-8089-9fcd1f92499e", "sighting--0801d166-d939-40a4-bf2f-e32472e6f46c", "sighting--3339eba6-b9b6-4aa1-8dc3-bd75af0997ba", "sighting--ac809aa3-9317-45c3-847c-9d26e0eea8d6", "sighting--e553ba04-5a92-4bf0-8b5e-a256d1c607f9", "sighting--4a413e46-d735-428a-a924-947b70666ff6", "sighting--26c500c3-affd-4b6a-875b-69c129ab9b18", "sighting--7b4683dc-056a-4140-a4a5-7285e69bf7f3", "sighting--a321d61d-a518-4ff7-addc-5cec922b8dcb", "sighting--288443d6-7525-4d94-941e-cbb200a15d7d", "sighting--f7499def-7f78-44b2-832e-dcd4235bce29", "sighting--de96a09b-c1ad-4bea-a598-cb4aa59541a2", "sighting--fa687db3-e1f7-4b42-9ff5-b4417cac0304", "sighting--fa132b29-2e9b-49a7-9fbe-a6ce64e3e94e", "sighting--b066e281-28b3-4bff-87c6-082fd8e2a7d8", "sighting--17f99ea7-e7d0-4170-8aed-2e6b9b5897f0", "sighting--076ae53f-fd7d-492d-a767-df3abb3f64f1", "sighting--63485e32-0fd2-4bb0-b690-a20832178ea7", "sighting--5c38478c-957f-4f79-88ea-64615b880ce5", "sighting--47e2302d-1652-4dc0-876b-a97d1730dc5a", "sighting--55f1590c-c8d2-444a-bfac-bbc5d84e0dfc", "sighting--f6c14679-00e9-43c9-873b-c2cc85175229", "sighting--d8189e24-0ece-4c95-8ae6-af77550a6a8f", "sighting--c2d87ce3-bf53-48d5-9efb-8c8c7edc8a74", "sighting--b2def4ca-3267-4f5d-b65c-7366cd6b31f2", "sighting--7e9aad40-a5ea-4bf2-9b41-111df7c662eb", "sighting--9e106fc4-0fb9-455f-9e89-f437be024501", "sighting--27c225b0-0808-4158-9d88-46051b8397af", "sighting--96e22ca5-1144-44e8-9a78-91ee87c4d035", "sighting--24fe0684-022f-4e56-a3c8-aa4cdfc4f0b9", "sighting--c3fdc3ce-6c59-4d0d-92ea-fbc62e09a8ef", "sighting--276139ce-27c8-45a7-9b72-437d4b1f9062", "sighting--2604bbc0-c822-4341-9ce0-384a77422f17", "sighting--d91cfd9d-c724-4971-bc6f-7d43e25fcd46", "sighting--33e00f68-4ceb-406c-98f5-3c352cfd964a", "sighting--470cb5ca-851f-453f-95e8-7c255f312613", "sighting--c8b70048-d97e-42fd-a088-e52750d4b1e7", "sighting--28359bfc-e078-45b2-9899-2fea0cbabf8d", "sighting--914a365d-5e0e-40e9-8685-c5e55db1024f", "sighting--219166ed-37fa-4e8f-9c5c-200f5523051c", "sighting--edbc5a33-9dde-468a-9350-f8756af8a4dd", "sighting--b23ea0b0-5d1e-4bea-88f2-a8efb5309130", "sighting--0b3280ae-f608-4aaf-91bd-eedbe1ac40fb", "sighting--8c5fdb9f-84c6-44c4-8459-05601ae5f878", "sighting--225799e5-17a1-4a8f-a853-2bfed88b0c1a", "sighting--cb2510d3-af09-411e-bdfa-69f8290809b6", "sighting--578243bd-ea9d-4703-bd71-083bec516390", "sighting--719b544c-45cf-48ba-b500-4ec31a74cbd8", "sighting--c2924f6b-a098-4850-b5fd-018957b294a6", "sighting--c102d376-e51a-422a-86ba-f512872129ef", "sighting--ee067740-0c11-44c8-ae67-e1c628ae976e", "sighting--e5dcb81a-980a-4f6a-869a-e9c3390f5895", "sighting--6e62d735-5ff2-4b98-a11a-841b7c54432a", "sighting--5589976f-83a9-46d5-973c-fa1dfa14e78d", "sighting--b6f94c8c-0e58-458c-b433-9d40ccab838f", "sighting--35498451-ce66-4ed9-92a4-662ceda81d87", "sighting--5911539f-b70e-4f27-8f9d-300993303b29", "sighting--b11b3da3-d45b-4fd6-abd5-f58e1703c550", "sighting--f43c614c-2b3e-4474-b50b-07b13e600e8c", "sighting--9fbce7af-377a-4ff5-9cb8-0e5f4dbee51a", "sighting--967b1705-cdad-4819-a689-f21e4f6a9a0f", "sighting--1fac2a9e-3b6d-4585-9dfc-028d5d4d680a", "sighting--320084da-e78b-4e02-8f9e-a60fcf0eb5c7", "sighting--7effa48a-69c0-4d70-bd31-efc71e0c33cf", "sighting--c6315a37-8862-4355-b6d3-660292e02a98", "sighting--d5dccabb-464d-4265-8a2c-e493e0d40f3b", "sighting--63621452-09b5-464a-993c-c4c41878c57c", "sighting--b28ced26-5ddb-4c77-9d9c-0a9909d4b7b1", "sighting--7f0b2b52-003f-491d-b675-e9f186dacf7c", "sighting--41e913e4-3930-473c-a6a4-07c76674751f", "sighting--72b7eaec-41ae-4de8-8a70-a4bb283f88d0", "sighting--797d008a-9bb9-4cc4-a243-17b4b3916b10", "sighting--2a159a5b-01d2-4db8-ae9c-49aff5a83132", "sighting--f42f0d3d-d683-4cba-ac93-2c47deea1524", "sighting--74eea7c3-cdfb-47c7-8e1d-cda11e6e9d96", "sighting--8516f10d-75b3-4e40-8ce1-49d7988175af", "sighting--4f91bee3-bc0f-4975-a0dd-6ae8ab70e21d", "sighting--1baf2e73-76db-40b5-9dbc-27252ef01e2b", "sighting--57f20e39-d3b1-4366-b831-75a7566c4201", "sighting--7aa2e073-a957-478f-af01-091deb3d350b", "sighting--3a3038f4-dc81-49c6-92cb-cfbdc48da854", "sighting--b6f586a6-c326-4669-af09-9e76b9679970", "sighting--9c2d1174-6f87-40b2-ba5a-a69d2eb361ec", "sighting--312f0080-8b65-4fd6-8fba-2051e46b3d59", "sighting--e48696a8-5d98-4ec9-8b31-2a5c748a406d", "sighting--77fb87d8-85f4-4e08-89e2-6509dd2baab5", "sighting--887e119a-c316-440e-b7f9-720324a9682c", "sighting--19d26374-f159-4826-9e45-b2686f014985", "sighting--4bd68f7a-fe40-45fa-a696-c6adcfd7dfa1", "sighting--64a6532e-f681-4805-b9de-ce42222b08b4", "sighting--c4d9f7f3-e2d1-4f94-b6aa-70e9b8b8b689", "sighting--65e5839c-fc38-4ff3-8049-8b6e598454a5", "sighting--d99480ea-f402-41bf-9b94-326b4e348965", "sighting--9b789409-e46e-4547-ba0d-21932595c8cf", "sighting--62515d7d-2f56-4ace-b829-6e2686ce299b", "sighting--901543cd-b458-4b63-9974-4040c021bb32", "sighting--f748664b-060f-4e36-b36b-2c0a5f35d69d", "sighting--6e3f27ee-7c79-4029-a94e-7fa3cdf2f9f9", "sighting--a45f171e-390e-437e-9f79-fd8a4c2cbddc", "sighting--78dd4282-ba4c-457f-a07f-30002525a304", "sighting--13a3fc1c-fd34-4f5d-a0b4-268d8fdc85f0", "sighting--8409ef26-3995-47cc-9ce6-aff41a39d4eb", "sighting--dff180b8-d5bd-4048-b5c7-ceb7fbafc6a6", "sighting--893903c9-b00d-4897-8248-c374d28ee5f3", "sighting--30625d68-3c9a-45fd-92dc-c00fd86df0e3", "sighting--db96894e-7210-4648-8680-87a34cd30c1d", "sighting--7b1a1aa1-229d-4f36-9fb2-cd2f23936d09", "sighting--d8306c6a-bb31-47de-af3c-30b19bfdc665", "sighting--f667b860-470d-459c-b3ff-9d78b8f2afb2", "sighting--4de8dfe3-62b3-4db7-a3c3-7c4aaf2747b6", "sighting--787a9e64-0ec8-4e98-8bbd-92aefee6ed8f", "sighting--41d884c6-cd20-464b-9495-adc8a7ef09e9", "sighting--55996c2c-0c2c-409f-a31a-9f15b41f3d8a", "sighting--8376a8f0-6b1a-4578-aa3d-81b561817a48", "sighting--174435da-9129-4c5c-b3cc-9899d4333877", "sighting--9e2faa01-e384-472b-89e0-7ec5c5af1431", "sighting--71c2647c-9543-4a62-b1d9-5fdeda82e469", "sighting--9739b7ca-698d-4eb5-ab67-79f1b6541744", "sighting--44acf035-f96b-4359-9496-052506bc9ace", "sighting--690a0de3-37ea-4dcb-af5c-377af70ba695", "sighting--6c8d3abf-58e9-4356-bee1-250f1f46ce56", "sighting--dc560a0f-7116-4c4f-8728-446543c689d8", "sighting--0f211fd4-fd08-43e0-877b-281d13f8335f", "sighting--23ad93e0-ffc9-4dee-a72f-401db425c2a7", "sighting--8164af73-92d2-4404-89b7-761965a7007f", "sighting--a36c6766-31c1-4922-8092-d32343497385", "sighting--da029be9-81c3-4d67-81ec-752734641c49", "sighting--1bb2099c-ae9c-4939-a0ae-5cef7ee9a784", "sighting--bfcd0aa2-f3b4-4e24-8db3-22409e6b664c", "sighting--6a4a3513-e34d-4a9e-984e-749d30dc34e9", "sighting--debc6acf-956b-413c-932d-a8a66ab62e19", "sighting--d01a09fa-0fb7-4c0a-9c0e-cdd6f8a12dec", "sighting--d72667b1-3ce3-4f53-a88b-482b1615616b", "sighting--f0755d4a-af83-4a1b-b531-22ea04174b7e", "sighting--639dc68e-571c-4a4a-ab4a-2aaad9754e7b", "sighting--85ef2059-84f6-45b0-a8a2-4d2c6121d436", "sighting--02cafa4b-efdc-4fdc-bd61-ec8d8e873235", "sighting--b08a6dfd-8a1c-4f7d-a2d5-b93fad8dedd7", "sighting--0e1ed05e-cf1d-4274-9212-bdd2a69987a6", "sighting--055c8c0c-a097-4314-b7ef-da647a5eaa9c", "sighting--3452f7ee-611a-4867-8fdf-7aed0505fc9b", "sighting--20595bd4-f046-4808-b2d0-88fef87deee4", "sighting--52946041-b8a4-4ae2-96a1-894603d05535", "sighting--e30c24ae-175c-48d2-9667-4f39a5620f5a", "sighting--732400eb-5dfd-4e5e-a479-bee0247c8541", "sighting--e61de064-dc86-40b9-a562-c48020d9efc1", "sighting--404455fd-53ac-425e-b54c-5551270c6881", "sighting--badd63a0-4f6b-4ccc-8a88-56c5437f67d9", "sighting--2778483d-8c01-4056-b8e0-e33ffdaf3666", "sighting--fbbe824d-fefe-48dc-83fd-c5c9b38b198f", "sighting--66bee0a6-7032-48f3-834e-209e4b9d3a96", "sighting--6eba914c-c5b4-4851-a210-a8782d34bc01", "sighting--3ac7b4be-df08-4d1c-9e4b-4acf98cf1eab", "sighting--7da7cf0e-4622-4152-a774-f83b1890fc27", "sighting--6d86afbe-5834-4b11-9f36-c546f70796cb", "sighting--35db0ac2-26b3-4ae8-b00b-9f51abdf82fd", "sighting--88e66bbb-9578-450c-8d95-8fbd2c024530", "sighting--f6361248-eb3d-46c8-9677-4df0aaa3bd3a", "sighting--23bfdf7d-7e40-42be-86d6-99f911700ef1", "sighting--b33fa8c4-7393-4551-a9a0-188a11039225", "sighting--4b9786f4-e0fb-43fc-8f85-0ceea591fffa", "sighting--1a2e7e26-a407-40dd-9536-77ae6708a8b8", "sighting--5ed9a349-14ed-44eb-adcb-793b91850cb6", "sighting--3ce53c40-e3a7-4bba-b419-9f4606eeaa28", "sighting--7c5a251d-9538-4d41-99bc-ee980be720c7", "sighting--4c18ff90-7d4a-4862-94d4-83d1cd7a63f4", "sighting--f6c70a21-f393-47ef-bada-132d776901c7", "sighting--5b1d71e4-a127-45e4-af62-0490a382d906", "sighting--b4028a6f-711a-4caa-abe8-6667ac6fc68a", "sighting--68591da7-8d67-4c7a-bee1-d06dcc30ec10", "sighting--e310ceb1-ee2c-4cd1-916e-1e450b4201a0", "sighting--f4a19bc8-dcca-4ddc-9954-3d724eaabc4d", "sighting--7f71f574-4a5d-46e4-9cf0-ca466d92f19d", "sighting--1924b5b7-757e-4a91-acb1-673cd7709e2c", "sighting--72675695-438d-42b9-9122-218c4bb8add8", "sighting--1fbe3cc6-3c71-4637-83ee-7ffcad84b1b0", "sighting--39fe0d0f-29bd-421f-b2dd-090775d9b3c5", "sighting--e277843d-ede4-498f-a5ac-98d2d7333a94", "sighting--e0c5d701-7276-4d64-9a10-eba2701b8a9c", "sighting--e3a63851-23d2-4959-910b-6c11f7211bd9", "sighting--094bbd0f-4b62-421f-8bf4-3911c87e6abb", "sighting--c8fab471-5190-46d7-bb23-aa31f8a36dcf", "sighting--929694a4-b903-464d-af14-367ddd94dbb7", "sighting--3807936b-c6b7-4c7c-8030-f6a58941ed80", "sighting--22008b7a-8397-4cbd-af38-482618f3cc9e", "sighting--519c09b9-d982-483d-8dda-ba20872c111e", "sighting--5897d127-e422-449b-88cc-f8222be4158b", "sighting--3462ac9f-ae15-4b32-b3c9-03be690d3353", "sighting--ea4bb1ec-afce-4753-9f1d-123eeb51c440", "sighting--221cdf75-3b5a-4f1f-afc4-90d359529081", "sighting--e11da8b4-f896-439f-9b36-19b784119be9", "sighting--26cdee26-2e56-4a6c-8688-9eadc6dd1f9b", "sighting--773f69b2-0656-4321-9398-d2c04aed4544", "sighting--49082082-54b4-406a-a781-54471c69a690", "sighting--4ca9d698-b7ea-4cda-8448-a085a9f636d1", "sighting--7e12e425-102b-40e0-aaa9-e0558d454c7b", "sighting--b9795828-3e0e-407e-bf89-128e7a71b280", "sighting--d6eaa56b-0b4c-4085-b187-9d77446e4613", "sighting--9b1a33ef-7b94-4c9f-a593-1978187f271a", "sighting--5f9f7c43-e448-4532-ad0b-ca46c0c32866", "sighting--b7f3d36f-0cc8-4b49-af02-25811656f0fb", "sighting--73ca7289-d0fd-446c-81e5-69c626145712", "sighting--ed83e262-64b1-4369-95c5-3c1601b7a495", "sighting--14f86618-1383-4b8b-98e7-2748084d2bb1", "sighting--04a27d6c-2513-47e7-8fb0-e1c00a5db072", "sighting--c80d5bb1-3d15-4eb7-a8a0-b7e476f11d10", "sighting--c6536084-3ff6-48e2-b4f3-e6897e2729fd", "sighting--aff40503-6ea5-4ca9-b642-cc696df553b7", "sighting--4eb93549-f5bc-426f-a1e8-e41085c0075f", "sighting--8ed7a942-277f-45ec-86bc-fb1e82fa1da7", "sighting--3ebff187-0b91-459b-a4b3-5a4fac420534", "sighting--1ece7bab-4b74-4590-a56b-96c6c0ee5c66", "sighting--981ffe6c-8149-4629-a683-eabaa7d1c669", "sighting--403a62a9-f2ca-43db-9766-02079552a98e", "sighting--79405b08-b35f-4f17-9824-dd8e3891c7b6", "sighting--d40ad683-b4f3-4ddd-b473-1bfa26ec71f4", "sighting--77c6493b-5f53-47af-af6f-d82d8bdad5ad", "sighting--1ebf5ee6-0c5a-4d34-9517-a481b2f2a8d9", "sighting--551759c7-01c0-408d-8efb-1ddeeef8fa00", "sighting--6213ec63-2182-4c6e-9ef8-bdf745a56658", "sighting--5d4e8c44-32da-4ec8-b066-cd58f1f2946b", "sighting--6f7a3049-34d3-4ae6-a7e2-1993547c0be6", "sighting--d8762c9b-c9ef-4548-b135-c01728e8559b", "sighting--28ed5340-7d43-4683-af3a-f2139259cd12", "sighting--fc8ea47b-22ec-485d-bd08-2c97474c8e13", "sighting--5b465a06-89fd-4ab5-96c0-7e4e0b85d305", "sighting--d424524e-df3c-409f-8848-aeaac4856c5a", "sighting--964b9d91-dd7b-4349-ada1-7c952b0050b2", "sighting--2dab6278-706b-4e1f-8e0c-0c894a72c27b", "sighting--916014d4-e759-4365-8ce7-e577411ac9d2", "sighting--ca3739a3-ad69-42ce-9aef-3460f4b4af9f", "sighting--178441bc-f7b1-495d-aa9c-1f12489fcbd7", "sighting--5384184e-f258-41ed-b9e2-37ddebc9fa75", "sighting--b7d1f460-2549-4be3-8ed1-3d4888ff54c0", "sighting--b40e41f8-6db2-4942-a743-1030c906e130", "sighting--5722e315-aad6-407f-a144-42a85fcd1e8c", "sighting--310a3ed0-7204-494e-b192-ac426dceee8c", "sighting--a5bc8227-1002-4a7a-a709-02b271b2133d", "sighting--8927b445-14ad-46ab-8acf-644533f90b42", "sighting--86f2324d-0ba5-4fc3-8af9-fd7e017fc993", "sighting--58cad4b5-f3bb-4fb5-9ab0-520ec800559c", "sighting--39b5fa86-9eff-40d5-a919-8d0c50606766", "sighting--293a79cf-ace1-4933-8460-dae7213eeec6", "sighting--f300f15e-3f30-4d80-9a42-026b76912f63", "sighting--c67e5fcc-5df2-401a-9bf5-bc4b245e1f68", "sighting--079d86f6-6889-4a67-8e06-6eaa0dc94bd9", "sighting--513a0a89-e1df-4a00-bf64-6257ecc98d07", "sighting--5da0ba1b-6efc-4f4a-8194-de102a1f2b65", "sighting--57de1be1-de9b-452a-98b7-cfce5b6efc9c", "sighting--200858cc-8e1a-4d05-befe-f0f0b790506b", "sighting--917d96e2-7656-4b58-ac39-a49d4501d06d", "sighting--f25a7f33-ae96-4a8f-b971-148f808ceb32", "sighting--50fe843e-b087-4404-83b0-e2b9b1766744", "sighting--a75fa5c6-8481-49c1-9e18-ece7deda9475", "sighting--6f31ae47-c213-412f-bac5-c26dd7456d7c", "sighting--11b44825-7eee-4b58-8f87-476af47c4bad", "sighting--008a9f43-ac68-4520-a14d-cf12ef134dc0", "sighting--fef20758-be87-4c86-b8f4-47fe846098db", "sighting--562dcd62-ac82-4f0f-b5bf-89ac4d86ebbb", "sighting--46f52f9c-b7d0-4c2b-85ed-a2bc51aeebdb", "sighting--ee98c1ef-f79e-4802-aaf9-7c41180589f0", "sighting--ca88bc5e-73c5-46d7-8f52-f01e54861d8d", "sighting--d46bfdc2-f1b2-47d4-8c08-eda95804b936", "sighting--2bb8a186-ce9a-4df2-8ccf-0b20b340a700", "sighting--ec43a861-e145-41b3-9caa-e4d07fbe7109", "sighting--dc37d413-7427-40bb-9831-aa0fbc21180f", "sighting--c00bbe34-948b-4a0b-b997-74640217f011", "sighting--a2be79cb-bce7-4c44-88a0-81e1a9ae9e87", "sighting--be1de8be-b492-4d59-9b1f-17f79ad854a9", "sighting--52811a53-f3e1-4ff4-a807-ddae7393ee05", "sighting--0796ae98-53e8-42f0-b3d9-bbfb128f8ab1", "sighting--68254846-24f7-4328-b21e-314138383b69", "sighting--a0d17d08-4c5a-4d19-8de5-cc0b575d75b6", "sighting--80153a02-407d-467b-ada9-1e345cee5b9e", "sighting--f53416b1-ccd7-4f56-b0d0-d62e456b07e8", "sighting--68f089e5-8265-4062-8af1-278e87fb798e", "sighting--7e3edcc5-9738-4eef-92e7-7bece439988d", "sighting--bb8fc0d4-0929-4c2b-b9ac-9d80f9525ae7", "sighting--aa515d58-e0c3-491d-8665-79909353c376", "sighting--c6d248bc-ff1f-44bf-a416-a901a0b3e122", "sighting--d4d338e4-2fec-4b48-8eab-4864f494ece9", "sighting--73218f63-b4f8-4513-994a-a7ef12d64b73", "sighting--10b7544a-1249-4de3-b178-5fa967b78afd", "sighting--434d3a09-b3a6-4e2d-ba13-514843ca6974", "sighting--8b453019-b61d-4b96-97cb-e6d245c12bf1", "sighting--75928a56-9343-4e6f-af5f-b0eef20ca82e", "sighting--9d7aa2e8-c276-4286-957a-ea00c74d2174", "sighting--02f14289-113c-4fae-8b51-d501275f885a", "sighting--8ced91f5-0dfb-4cbc-93a8-faaedbfea15f", "sighting--842c593d-6576-4b12-ba53-2fca9c97d11e", "sighting--35cd4955-84aa-4a2f-bbf8-a53c6ca9db26", "sighting--cede650a-25d9-44b5-a2a8-af0e86112843", "sighting--d0addb30-1ff9-473b-999b-cf3e31c95a42", "sighting--b13a8d45-b715-4897-9064-f46c3b413542", "sighting--205c857b-e780-417d-857b-36c519675e52", "sighting--c50ef0b7-1326-4eb8-b5ec-68a35a495250", "sighting--6c6f617f-4a6f-448e-898c-d3c8dcd7eb87", "sighting--a54ff018-1798-4908-92d8-83133dde577d", "sighting--16f84c13-2623-4c10-8e2a-6ebd56dc8698", "sighting--78860273-41b9-4944-a3ec-28ba8d1b3f23", "sighting--e9c32bc2-b316-48ac-9520-a3225cf6869d", "sighting--60999134-81f7-4abd-9e67-ef0bdc592cad", "sighting--a2f16261-635e-49a1-b58a-145f5a78b134", "sighting--efd5a052-1c4a-4da0-b891-965cf3e8d154", "sighting--e505686c-11f6-4321-acc2-090bded008fa", "sighting--5a9df23d-1f5f-4a50-93ba-710016d97a00", "sighting--5f27a9db-4d08-43a4-9da1-5c60f609bdcf", "sighting--603ec4e9-ce55-4e5e-8781-5d8b1e0596cd", "sighting--b26872a5-d2c9-419e-9be7-d7db1a0b2300", "sighting--f99e20c0-5b17-470a-915a-8a2df41960e9", "sighting--8af1f1e4-1574-491d-b5ea-27a67770b7f2", "sighting--92526ad3-4538-4096-b710-29eade95e04f", "sighting--1d1012c8-4073-45bc-b61f-6b788f9b1926", "sighting--0dfe25cb-9396-4427-963e-21984b4ec0ce", "sighting--55fa91ab-48f9-497d-9f5c-f7c732f7900f", "sighting--96b883cb-6c5d-4a55-8099-88cc9b4a9b2b", "sighting--da1b9ff4-8e60-4f11-8aa9-3b1bd97f6875", "sighting--f838c12d-06d0-45c2-a220-0f3f503c88c1", "sighting--6c859d52-5cb8-4e5d-be02-e8f998a82cf4", "sighting--88b79aad-8d5e-4d93-a476-f0196fdd13d4", "sighting--70e9085a-5793-4307-81cd-9c37cc45ef41", "sighting--abc3815c-dbec-40be-a0df-daaa20243256", "sighting--035963a1-629e-4de8-a099-7af4431dcf7e", "sighting--c6784923-3dde-4b5d-bc0b-d50462590998", "sighting--54a42762-5cbb-4ecc-b925-61ec82994953", "sighting--9e0f68ea-c313-4524-b8ad-323eefe4acbe", "sighting--cc890986-bcad-4e52-a136-95aa8a63e743", "sighting--e613381f-5365-4cbe-91c0-a60354c518fb", "sighting--002ef106-a135-4972-b640-ee15e8861b1f", "sighting--f6426a49-5e59-4d5b-af83-a0d1b314d26f", "sighting--aab50290-3374-4d49-a0ec-2d4104886110", "sighting--113d10bd-ad99-426c-9fef-4c4827031c67", "sighting--ac1b7926-5249-4dc2-a12a-dbacf200dc20", "sighting--1d184405-a7ad-4397-94ee-bc4f9a63d767", "sighting--67e7e825-cf52-4c8c-b7db-5e8f19c746b5", "sighting--51955057-8097-43b3-af9a-15b44e581167", "sighting--e4c8bfd0-6057-4a6d-a4a3-a8011e433bd7", "sighting--49aabf98-014a-4c1f-9a90-50fe8faf5858", "sighting--bf20b6c7-e48a-4322-9a6c-9c9753b8510e", "sighting--f8917d65-1e79-4800-9cd3-1da3ee139e6e", "sighting--0ada7b9a-513a-4912-a9b5-e9d76ab23961", "sighting--484f4fae-f2a7-4f6b-bdcf-24e48ffc150c", "sighting--f6ab9890-cb54-4d5c-b2d5-35562040c127", "sighting--9d4de4a2-ff7d-4eba-acf7-02b9233999ee", "sighting--df3ba1a4-face-4f57-ab34-1f9f7d791112", "sighting--3133ca46-b59e-4308-9da7-dadaabede907", "sighting--312cde25-757b-461e-b1da-9b1bd16114be", "sighting--42d9d709-298b-459f-9a13-75eeb542fb68", "sighting--518669cf-fe5c-4714-ac38-4313763c8e16", "sighting--94793f99-6558-49c7-9927-559de4e2c161", "sighting--967982ef-dc7b-4429-ae89-d353feda4580", "sighting--9a9eb7f5-49f0-4eb4-a55c-e9dd9fa5e825", "sighting--0297831c-9024-4b04-9300-04349be1b1bd", "sighting--835a79d2-0ca6-4054-b264-909233bef026", "sighting--2c4b8834-b372-40c8-bb42-7be8b4f074e3", "sighting--b1faca47-3b81-4fbf-bda9-349ecfda172e", "sighting--a59ad500-ee12-434b-b5be-d3839049ad3e", "sighting--5b06f570-dfa6-42c4-99ae-47180089f5ed", "sighting--ead3a5a0-0448-41fe-b31a-058b1e6f471f", "sighting--e20fa723-1303-4553-affe-34745146b7f2", "sighting--49cffd5a-5a1b-4954-8b7f-d9955c7eb506", "sighting--aae317b0-1e2e-4b93-b901-e1c70d89c00d", "sighting--bc7bc3b0-13b7-4cdf-b8b1-7a080e037959", "sighting--86ce795d-193f-4d3f-ba30-ec5acfd83020", "sighting--a90a67da-ea71-4e6f-8cbc-ca88df968b13", "sighting--e0b37310-17fb-4767-bdb0-c15a0caf335e", "sighting--ad46b187-558d-4056-9833-69fffd29268a", "sighting--55c1f01e-c935-40eb-bffd-1a2add2954d8", "sighting--737bada0-31d2-4578-84c7-0f77a35e3137", "sighting--dbc03715-110b-49f3-ae6e-e91b0ae84138", "sighting--681b7983-b191-457f-87d3-5240c77091ea", "sighting--a82c6019-e7e0-4515-a7ab-07400730cc65", "sighting--d67abacd-bf97-4cb3-9e0b-faf9cc47f6a1", "sighting--e51c4440-342b-4f2c-8ab1-1e3bdddc484c", "sighting--e2658e95-6f4e-4dbf-becc-73d88068b6d3", "sighting--77de1d16-2a61-4304-a71f-a32c90bb2a9c", "sighting--76f5c391-9a37-446f-b70a-0adb70a0b376", "sighting--56385904-b97e-415b-895e-89ac174a7bbe", "sighting--e9be307d-668d-4de9-9222-dacf8803ea39", "sighting--b59412ef-4ea6-4296-9de6-ede546a4c8e9", "sighting--f77799a0-3416-461d-96cb-d8b00e4b4fb8", "sighting--8757586f-0b6f-4057-818a-64a0a2e685f1", "sighting--4b6d3a38-ee00-4a84-aa05-3453c207063f", "sighting--8c5dc5c9-45b1-4c93-87cb-1959282da357", "sighting--6e7ddc49-517d-4275-81ba-ad3cd29bf319", "sighting--af415327-6a4e-4774-88d7-27dc7cf8901e", "sighting--b99ed108-6544-48f9-b605-c07c3c1c0bd1", "sighting--96a0c33f-6170-4d23-bba9-9f58ceae75ae", "sighting--b0d75038-78d9-498f-95ae-fe22f7c9263e", "sighting--3854d3c6-208f-4fe4-9e58-49db12f59fe6", "sighting--584e7dd1-b1a9-4fe5-89c4-388a9ba655a9", "sighting--da7ed45c-3d81-4692-a23e-78d6c994c5c1", "sighting--b9798895-ba1d-46d9-82db-eb60601e9136", "sighting--ac27083a-3e5c-45ed-bdb3-e6aa10ab3786", "sighting--f6908615-9d1f-4514-9b2a-aa31b90ebbf1", "sighting--46c83af1-3725-49c5-a541-ccba18666c42", "sighting--8561648d-4d2c-45f9-bb3f-f8bf4ba53611", "sighting--83a88664-e915-47a8-8d7d-11d7c51abf35", "sighting--fdfe43c0-94f0-4fc3-b988-ca5ae31a9762", "sighting--b972c093-88da-45c3-8ed3-c494116590cf", "sighting--809c1f39-57e0-49cf-aae8-dee0f010812b", "sighting--feb55214-3453-4d5f-ab14-b44fe0764026", "sighting--3d46c245-9d2d-4377-a50d-45bb6d9cf64a", "sighting--0d127a9a-e9fb-4031-aaa8-e5bc8f791608", "sighting--92731485-e7ed-4e94-b182-c149c2cfa3a4", "sighting--5a4664a4-da04-48e9-891f-858a19181264", "sighting--4ae50ad1-ad41-491e-8154-3eb5c488e4a1", "sighting--47fb7a5f-dcd3-49e2-ae20-1432ea1568a1", "sighting--74fa3279-7f1d-4662-af8a-01a5479fd5f1", "sighting--2510c999-1177-4d95-8587-935e35752303", "sighting--afafcacf-5fe1-449f-8685-7bbe680d9a6d", "sighting--c750cea6-5cd7-4a2b-8ba6-bcda4895ad05", "sighting--b8c9f14b-2b9a-4d61-99e9-97a552e753e1", "sighting--5ff510c3-d932-4f69-b823-413ef6a13d1a", "sighting--2c932662-0ced-4cfb-89d5-24d8d3cb6ea9", "sighting--2718e8e3-564c-4a37-b847-576ef77215bf", "sighting--3d31c9d4-de35-4acc-8a19-728209caa86d", "sighting--023f8809-d950-44db-be11-ddb6657badcb", "sighting--cd44fa48-5bdd-4fed-aeb8-66919d2fe578", "sighting--2e904fa9-5053-443b-945d-8cb581b77cce", "sighting--cc3d9d9d-520d-4b17-8d3a-9609079a24a5", "sighting--861d0846-ea7a-42c3-9d77-df8678f93e12", "sighting--6f612b80-d521-49d8-8d0d-bd83ced08840", "sighting--08b0535a-604a-4f60-b351-cc0870030b44", "sighting--49f69872-b916-4792-a8bf-d86671d2cefa", "sighting--4c8b9736-a119-49ab-a3be-630adb3a5d41", "sighting--06328d7f-7534-4635-ba0a-7c85b677de42", "sighting--c57d512d-4e12-4da1-8585-036e53946885", "sighting--3374a055-a85d-47ab-aecc-9fa9ae6bce3c", "sighting--598ab80f-b29a-4972-9853-607837f4a061", "sighting--b14fd6d9-dfcf-4f00-9762-9f71f62fdc24", "sighting--198bc208-a7c8-4c04-9a96-4ad0bedddb06", "sighting--38c57e5a-44a8-464c-bdbf-ff1edd1eefa0", "sighting--056fc227-2f5c-4e74-8c2e-54b655cb5cbb", "sighting--4893170a-a75a-493b-88c1-6407c5c3df5f", "sighting--fd057840-11f1-43c2-bcc1-811b6ae25e04", "sighting--b56aead0-41dd-4ee0-aa68-42e99cac5306", "sighting--676f7ae1-b50a-45c4-887e-94ae6b0bc140", "sighting--32b0c381-5cf3-4390-b728-1b43e9cdbc88", "sighting--79fe29ad-7ea5-4f43-8f10-6419555f1293", "sighting--5d0ba052-e865-40ab-9b30-c6aae9c3d8ce", "sighting--22f5b5b4-b837-4ea9-bf81-a36ba59c5d05", "sighting--54225c99-5404-4d19-bd4e-95f9b797b262", "sighting--ce728e19-8b4a-4987-9c1d-ec099cf99841", "sighting--8e8f6d75-5ebe-4c65-a779-3456af21a3a3", "sighting--221b31a1-a743-45b6-97b1-1ba2683ffabc", "sighting--35311356-0122-4ab8-be1c-d4b82a37834e", "sighting--e0e900b5-bd22-4f8f-999b-d14c47cf5e81", "sighting--1e5ff220-fd14-4ada-8335-c6a46500aa92", "sighting--a3760c01-f504-4c8c-bd62-be65a6267ff8", "sighting--033316bb-9d7b-4a50-9a6b-70456277180a", "sighting--525da32f-0808-44e1-85ec-dedc233b0253", "sighting--68038a66-1cb9-4a50-84b5-b10911c2e1a6", "sighting--662d2cd8-91ce-4cc1-9841-0483c1a0bb79", "sighting--45326de4-942f-43bd-8e17-57b65cf9d7ec", "sighting--c450f04d-8cbc-4336-82bb-2ed9b886b2f3", "sighting--d611066e-b6c6-4320-bf68-fc984a443baa", "sighting--f5aafb53-38df-48e6-ad17-41b0e3b251d4", "sighting--29209449-fbb3-46e9-9921-1c23673f6c6f", "sighting--3eda901e-a1a5-4f78-ab47-b37c8259b488", "sighting--6aab12c5-d82b-43e4-9321-297bcff95f9f", "sighting--b3a7b5db-983e-430c-adf0-614ba5fb9d39", "sighting--4a857b46-9048-4bd8-88f7-d7db687bef85", "sighting--f4f997d3-e68c-4297-9ca3-1ebf1e438ae2", "sighting--719d88f9-eda9-4fb3-9724-afa90c9aabf0", "sighting--ffcc3a1f-7f54-48b2-b5d8-243a5fe4b079", "sighting--39273e2e-c309-4236-9064-0c8034e1999d", "sighting--f6907ff4-8ac2-4d62-9d69-a99b5e588763", "sighting--e688b8fb-bf28-49d3-9ef9-01461fc129fa", "sighting--0911ded9-753f-422a-b8df-4f876d4729fe", "sighting--3e576ac6-1a0f-43a2-8976-73882c7f4ceb", "sighting--c4457d4c-1f8a-46c2-934b-d9612fbbcf00", "sighting--351a687a-bb3d-4901-a6cb-05b0d3355f31", "sighting--1da565f2-84cd-4aa9-853c-0fc79855c083", "sighting--e6462ea9-2319-4e10-b4af-dc6dd984f060", "sighting--609094d6-1726-4ad7-894d-a30c340d0c60", "sighting--e24c2907-d0c8-49ce-8c6c-9138d1b22167", "sighting--b69307b8-6ed2-433a-a44b-8b61b3ebb781", "sighting--c665fe01-a950-410d-9b01-4833ac1487f3", "sighting--2a694373-9f86-4819-b933-fac54f709e60", "sighting--d0c5a871-c4a8-4679-a6ea-204679db4f04", "sighting--ad82daf6-258a-4366-9539-a82e2a372e7a", "sighting--86ec0d75-038d-4707-9129-3505b0bef0d0", "sighting--988ae450-11ae-4589-9be0-562315e3fa09", "sighting--8c795013-273f-48af-a10c-4d60cc921ae0", "sighting--d370fb9d-9812-45c3-8afc-91ec74e16e3e", "sighting--c7b77db4-e0a5-4243-baf5-ade05eda244b", "sighting--e53296d1-1e15-4094-9735-1d760db59d08", "sighting--e3d000d1-dff4-4ca6-adea-c4b15cfb667b", "sighting--8aa72f5b-9b9a-4e07-973d-bacbf1e2a76e", "sighting--637b66d2-e4f2-4912-a66e-cdaaa6229978", "sighting--5115b7fa-bd81-4d79-a08d-4010a4d9041a", "sighting--e301bb51-f293-4460-9d0b-a28c18280a25", "sighting--7eebfa5d-f647-444c-9f23-c406c4c51609", "sighting--8998f4f6-c39b-4f02-93df-ea8a392e7f73", "sighting--38701155-20c7-4b96-9eb9-9bc293c53bf3", "sighting--1f099aba-a063-40de-b9ce-550044f3db2d", "sighting--fe59b095-adcb-4681-8d5b-a1f0802259eb", "sighting--54c64933-2746-48fa-bd68-4dfeb8816e6a", "sighting--47a8bbd2-e3fb-40c0-acbd-1da3fa1971a0", "sighting--cdf63680-e6a0-42ec-9f84-fe49b67bd248", "sighting--805aa660-633e-43f3-a4f9-aa65cfe5d30c", "sighting--d568254f-6a13-4fde-8a96-67fcd5f6cff2", "sighting--d0844318-ec6b-4d52-a18a-6a379285cd66", "sighting--b00b590f-037d-456b-8096-9526c03d8a23", "sighting--cee4218c-e396-41b0-b765-d38ec0b88779", "sighting--0134561d-25cd-498f-bb49-925de3dcad95", "sighting--629535af-2bb2-497c-b664-c382417f41bf", "sighting--93519989-c964-4fcc-8a71-f420b83ec758", "sighting--22371126-dd97-4116-be35-3e65c25cc433", "sighting--b6b91359-f749-4081-b74f-4c516f5d4d35", "sighting--ffc8d8c5-04e6-47c3-956c-dea7862c7ee2", "sighting--8f70de01-e6f9-4850-b5ec-3cd3f007b3ce", "sighting--5a8f4910-1d60-4fae-81e0-d16facb2a06a", "sighting--0799c46a-38cb-446b-b668-67cf12b37d03", "sighting--f26db1a6-6481-4415-a590-baf430f23c07", "sighting--95a7e862-1566-40e0-a5a1-90b7ebbf11fa", "sighting--a077f5f9-2159-453f-8b43-4e34df652947", "sighting--1bd20d78-033b-4402-b7de-60f1f221113a", "sighting--ca4b8902-25b3-4545-b4ef-2de27d5918cb", "sighting--962ad73b-e3e6-45e6-8efe-6e9e9b3b061d", "sighting--efc4d9da-0c9d-421a-af60-bad357d27313", "sighting--826e262a-d372-4c07-a7ab-e48fa45c58d9", "sighting--1b5f24a9-a823-4d08-bcd6-ffcb49b443fa", "sighting--d6953150-bd82-42bb-9be1-67e7db88fcc4", "sighting--0543fe47-4f96-44df-a074-7b7421b52fdc", "sighting--e7492b99-8ab2-4f86-8efb-cf0f5eeefca9", "sighting--2a739d71-b9dc-4070-a585-34945df43e53", "sighting--3f5709e2-5bc5-4faf-b6ee-122b90272cd7", "sighting--666c8dec-ecca-4046-9ec6-3dcd449e3952", "sighting--c2565fde-27d1-4045-b7f9-95006f15be3a", "sighting--d58dbbc9-9ba1-4d83-9cb2-1db0590be787", "sighting--8c36d081-0a6d-4ff5-9f0f-6ede95d0b8b5", "sighting--f2deaa02-bdcf-47af-a293-87090cdf8126", "sighting--76d29b87-a006-47cb-b187-a6e1158ff90f", "sighting--c9dc734d-eb9c-44a5-a488-6159217ea3b5", "sighting--e32c371c-6675-40a6-ae3e-f8a029104dc1", "sighting--0c8b76cc-2abd-47b7-bdd7-ba6d1bf7fbe9", "sighting--5ef0a6eb-cc18-4f14-b64d-9aa9c0567262", "sighting--b01eaa92-ef30-4e99-add5-280ceb32e311", "sighting--590ae952-0939-4298-912c-d587c2f1ddc5", "sighting--890959a4-1eed-405c-9344-823bf0d61f73", "sighting--f6e3f085-c240-4625-88fb-f3bf076fc4b5", "sighting--f7b8b568-6b20-4560-b597-37aaf61e59e5", "sighting--b390ff71-ee15-4252-8e6a-c0f37c809073", "sighting--2c6c8d4f-ac44-499f-9525-b20e06ed1ca3", "sighting--49d95274-c403-4708-9920-b76ff208016e", "sighting--65c3c0b8-7aab-4eee-9c67-306ddc030ab9", "sighting--31cffca1-dfef-4974-abff-94c7c20309ab", "sighting--836dca4f-fab6-4729-80d4-b17676bde41c", "sighting--1be903eb-8b19-470a-9984-2f384112ecae", "sighting--6fd0f3e9-e586-402d-af9a-faba4665f589", "sighting--1602dbdd-05b5-4d17-9790-4556bbb8917d", "sighting--a255d43c-3a28-4bf1-af84-ce86899e067d", "sighting--60b0578b-1d78-4862-bf3c-92e5b6d078d2", "sighting--a3d6a1a7-eba2-4471-b5a1-f3dbccdf8679", "sighting--0e8aab07-7354-4e4e-af6d-69ef91a3f80c", "sighting--f8650d12-4920-4c62-9f47-29b893a2da5d", "sighting--ac47d922-9dd6-4071-9566-348066119772", "sighting--9c3c1939-9526-412a-b791-0182f33a41d3", "sighting--87105883-1ed4-433a-9948-e72cf90fbdec", "sighting--f3017cf4-614c-454f-88f8-4c1893f3da51", "sighting--88fa61aa-d7cd-42c7-b7d2-f7d461dca9e5", "sighting--a58d7a4d-b7a3-46cf-914b-7f6824f75a1d", "sighting--5adf84be-593f-4229-b9f6-44d1508e8017", "sighting--ee568c76-de92-435d-8567-dfbd0766f36b", "sighting--9b8c6410-fdab-47e3-b682-72d700d7b618", "sighting--7430140f-3ee5-4205-8fea-1003fadc06ae", "sighting--d50e120e-2d67-4875-a9e4-eafea9526328", "sighting--72161722-83eb-480c-a855-cff958320444", "sighting--ca5e2181-9b02-4e5d-80f9-2be87f8c60d1", "sighting--db59d9de-ef32-4c01-afd8-d4161f554706", "sighting--7a29537d-fcec-4cd1-a602-8143bd542d5c", "sighting--d1c8a3a4-8862-4d7f-b58b-e12966935a3d", "sighting--46954c1b-cc2c-45b3-a445-b24b90f273cc", "sighting--d340d029-b238-46fe-9bc2-9dbfeda9514a", "sighting--8b04e322-6aad-42da-9e49-94eedf0b77e4", "sighting--52c213e1-3004-41be-9ae9-efb10af8e8e8", "sighting--9f692e68-4148-4178-8559-3b4c94ad98ef", "sighting--cb4874c3-1419-4423-b962-08afecf39983", "sighting--e7c35314-21bd-4977-a4d4-0d27e42ec680", "sighting--a2747937-0c2c-4ff1-b655-021c3126c50e", "sighting--1c97c3af-a8bd-4870-8983-7cb4d9993bcf", "sighting--3892ff91-8b7a-4458-a2c2-697bf082bc55", "sighting--7551d206-a6f4-4dac-a7a0-0bd81a12cd48", "sighting--b878340e-c028-403b-bb0c-0f9d3c84c932", "sighting--5d7c8196-f1fa-48cf-b7d1-94d2e7a98d98", "sighting--fc91cd05-f00c-4a0e-9b90-1c08b4737ee5", "sighting--a373015a-4eaa-406f-9f11-2c2fb398d210", "sighting--e868bb55-3b70-44ce-803d-7958b59d3ecb", "sighting--8220d76e-b530-4528-9e12-8ca1578b908c", "sighting--03b98c58-3ce4-41f4-831e-d97827684f8a", "sighting--2eab09f2-5282-4d47-a49c-f1cfcfab153e", "sighting--994f49d1-f690-4713-ad1e-84953348aa4b", "sighting--9270513c-cd3d-424b-8858-4561d119fb57", "sighting--4c18984e-ab7c-4b55-b38e-bf1dac52bb9f", "sighting--bbd76920-e715-4da0-939d-91ffff5ebd85", "sighting--fcce5108-5e88-4d5d-a31a-b51ba547539c", "sighting--850ceb5b-f76e-456b-8def-3d9da249fb59", "sighting--82513b6e-f7a1-4691-9e93-e66d568f492b", "sighting--b547c9f0-ea9a-422c-829e-9bb6d36dca60", "sighting--f799ac60-d8e5-44ec-b900-ba3879eb9aaa", "sighting--4c2506c8-0519-4829-bd53-4f140153cad0", "sighting--c4801299-8b75-4d1d-8ff9-1af6c13b9adf", "sighting--0267960f-4f3b-4dea-827f-0d6183a60ccb", "sighting--1b0f9ea5-11af-4a32-b8c8-6251b47d97ab", "sighting--067af86f-525d-4110-8c44-81a493e87dd7", "sighting--ca982f97-252f-463b-9868-35ca31967f9d", "sighting--c781565c-52b5-4f61-9356-ae2c8ec6b226", "sighting--14c7e816-552e-45c3-be32-e6410c3a1a1f", "sighting--a77c22b0-f274-403a-a9db-38b7d941a406", "sighting--2e2d58eb-a168-4731-aeaf-c4278af0c030", "sighting--df6bd98e-1ec5-4523-8146-92faeebf7a33", "sighting--770bf7af-2110-48fa-ba66-84fb4abd2c5c", "sighting--ab205443-51b9-42ca-85b5-31bd67323f45", "sighting--ee3f9606-5e5d-4891-9a8d-00b155969202", "sighting--98dd5092-e591-42ce-ae0b-f75285c4c298", "sighting--2ec595ba-2d4c-4479-9fb4-76eb144d928b", "sighting--23f5a8df-103b-4b74-9c61-6e6e1ab405ee", "sighting--872bec7c-2d09-4217-8958-e8632dea096f", "sighting--ed3d9f8b-391d-43ff-8275-1e16824c70b5", "sighting--87fa0f6e-60bc-431a-8b6a-e8133dd1e0a1", "sighting--c4390c3f-9999-424c-a70c-4ecd506c3f04", "sighting--16e16bcb-9dc6-45dd-a3b6-60ef7591ef44", "sighting--cb938d3c-dd18-44bf-af21-8364a3e8195b", "sighting--597974d1-ac44-4959-97be-1eeea3047d5b", "sighting--886c4ed1-fbc1-40de-af77-4f7bb53ade46", "sighting--81704e4c-e76c-46e2-a89c-174f711acd08", "sighting--a7177b0f-9396-4278-a5c0-db5cdd373827", "sighting--db6d5876-c89c-4240-b157-7920d78897c8", "sighting--0543ba8d-9b13-4ca4-baaa-1b263c3a4568", "sighting--c95296ff-3456-4f99-a17f-17e823e67508", "sighting--1253dfb4-2d10-448c-92c8-930f49f5ffcd", "sighting--81c3d610-bf94-4da2-9455-90b87d993ffb", "sighting--11ddde2b-ed33-428f-90b7-75260e549877", "sighting--f2cbcd15-5ac0-4042-ae9b-212b455f75f7", "sighting--6e07f279-2e0a-4386-8f2c-bf596fe69d0b", "sighting--ca54f0d3-dc00-4e18-bd9b-6485eda58029", "sighting--0821698c-0c11-4ef7-b188-295cbbbcd05a", "sighting--62b785b5-31e0-4d18-9d9d-1c82d26f2923", "sighting--d682a738-bdb9-4c71-be5b-cfc2f7a5d640", "sighting--af8d63bb-3d82-4791-90cc-155b05227947", "sighting--7cd179fc-a0bf-4dcd-a77b-4a631c7edb02", "sighting--019c8707-56fb-4063-a52b-f69f7c1ff6e2", "sighting--a8c18398-4fbe-4da9-abf2-7476da804cc1", "sighting--f4fbd6c2-8b44-4418-8560-96b962d9947f", "sighting--1e275605-ca20-4450-a7b0-ab51b5fcefa4", "sighting--c086ee58-748b-473d-8c98-c985a79ddcfd", "sighting--5c9ea965-132d-4018-a1d0-1d79b5144325", "sighting--fea868ba-05fd-48f8-a9f0-a8cc22b5691f", "sighting--6cc3c7e7-d583-432d-b1c8-813cbb77ca49", "sighting--79fb7ee7-844f-4f81-903c-7225a73048fb", "sighting--1b43a500-6c5c-4b05-ba24-0900de431f9f", "sighting--37a92c89-412b-4a18-8c5f-92ac652cb84e", "sighting--e6f2b332-1c29-4500-a2c7-b8dc6fd4a8d4", "sighting--711b4d8c-4375-4b79-9cc3-d17005f21c67", "sighting--2f843462-c0a7-42d8-9487-7dd73036ad84", "sighting--c8f22eb5-36bd-4088-8bfc-57d7ded0c84d", "sighting--43a739af-b3d2-4c2d-97f0-c1489957c439", "sighting--643988a4-9f1d-436c-a240-253930e2f2ed", "sighting--e3a192da-4a05-42de-9137-c49cb0e2ff38", "sighting--87860556-f718-4def-b34e-4485e81c9359", "sighting--5cad4a1b-334e-40b0-872e-85e79563d69f", "sighting--b98ffa6e-68b7-41ef-a85d-663a2ca2ac04", "sighting--b147d00c-9dba-4e4d-be23-0b1d6ce41e2e", "sighting--b16e42fe-7b3d-47f1-92f8-a71831dc23d5", "sighting--e01afe5d-8b4a-4ff9-b07b-08c117c03f2e", "sighting--e6463e84-ef62-448b-aa9d-a6661a38385b", "sighting--fb068116-857b-4387-acdb-a910f950cefd", "sighting--975eff36-db1d-4d53-9152-898303b7b239", "sighting--def35ce5-2239-483d-b288-6e22fa388954", "sighting--8b26f640-7b67-4116-8cc4-f4174a5752ec", "sighting--fc026ad2-ccf6-41c2-8fd5-fc615a9a49d7", "sighting--882992d5-0d53-44d0-8b87-0f1a56d84bef", "sighting--d15f47d0-7307-442d-b88c-903b8d6a7b18", "sighting--73fe4f67-2637-4aca-b907-e7e639b6c1b6", "sighting--e93bd3a0-88c9-4bb2-99f1-0822699fdff8", "sighting--c9e0bfbf-59b7-4f08-b1a6-30d8d5c0cb78", "sighting--5d7c9691-7ea0-43a2-8e21-e4a8681eb977", "sighting--53520b07-b98a-4a6e-b214-587039eea613", "sighting--0e6531d2-fa1e-4d6e-b314-a743f2b7961b", "sighting--f7e1e7b9-f291-4103-ab11-b7c923fa8811", "sighting--4aec0782-893f-4a71-ac12-6dde9609e806", "sighting--323d1345-aedf-47f9-b70d-2b111671f344", "sighting--86f6edc3-94bf-4274-afc9-9b64a481047b", "sighting--0e789ea5-c7cb-4c15-8c78-f3f82e724dc0", "sighting--eece0302-5cde-41d3-9eb2-68f875bbc18d", "sighting--b2cd1fa3-3467-43a7-9dd3-a0015cd40fcb", "sighting--c28b023c-474a-4786-950e-f4b2be552a13", "sighting--bfd79c0b-ad74-48f6-8e66-2d150269f66a", "sighting--87ea5785-21d3-4f96-a114-cfb78daeb128", "sighting--46c88429-7a12-405c-9ef4-fd98a3a5178b", "sighting--a8745d7f-2eca-4510-854c-f06dff96c15b", "sighting--743c67f2-6943-4e09-bb43-dfd727f9d961", "sighting--381c114d-0715-4216-a5dc-5a770d852fbd", "sighting--5041a200-a17f-44e6-8e9b-de1b15c8c58a", "sighting--995d96db-e386-4dbd-8e91-56dde838cc77", "sighting--ea6217cc-6ca2-4c1e-a0ee-dd019e9e879b", "sighting--c183adad-02fd-48e0-81cb-ddb4e2a5680f", "sighting--45ec7f6d-e2c5-4e42-b336-0471066598a7", "sighting--2d567a96-08d2-47a9-a77d-bf83d5ece36c", "sighting--3d738159-e437-4646-b93e-7c64987a2ec7", "sighting--93eb0e5a-1a94-4fb8-b84f-32ec972571f9", "sighting--1f609836-8685-4136-bdc7-d6559a83fcb2", "sighting--2f17ad89-e1c6-48a2-8db2-de7487aa4614", "sighting--ec33f28a-b950-4bcc-bf87-deff6b392921", "sighting--928c6b91-18c6-4ff0-a83f-24958c32a6ec", "sighting--5ab0d59e-5ec2-40b6-9788-2c7c6d6e54e9", "sighting--e77e76ca-6520-48a3-abbb-24e3809e251c", "sighting--a790c9ff-d0da-4cb1-b885-d890fbaca7f6", "sighting--6f97c26d-2ab4-4538-b73d-4bca00826ebb", "sighting--44176170-4153-4b93-9a7c-fc09474dbcd2", "sighting--5f141c4d-4e04-49be-834b-5533bca2aabf", "sighting--c9118193-ec18-4de8-95fd-62f31ac82cbf", "sighting--5a4ca209-fa82-4324-b543-9ff166ffd940", "sighting--ccd4bf9e-7d06-403b-b03d-89bb4efce389", "sighting--5f6c288d-f061-4b76-b9e6-943d34d51b14", "sighting--12fce55d-935d-4473-a553-40effced35c8", "sighting--75d0384c-a1f8-428e-938a-316ed64d3cbc", "sighting--87ecbc46-59e7-489b-ace4-1276f324f9a8", "sighting--d0d7b755-7ad2-47b1-b2d2-7fb1cd89396e", "sighting--7cd780b7-28f4-4558-aee6-a3003539b031", "sighting--2989c245-9f38-43bf-94aa-fb121b96b155", "sighting--94029f74-00d0-4cf3-b62e-0a2ee69ff3ed", "sighting--7d356924-2912-4f10-b3ef-b3445ea46af8", "sighting--8ca3a372-9485-45cc-b30f-33a7d5196e3b", "sighting--9421e659-2a02-4af3-aa71-9381236321b2", "sighting--2a0d1f88-1a4e-4d61-88e1-8492f30d9f11", "sighting--b9dc59d1-5635-4b05-ac95-88f0889b99a1", "sighting--d86aa689-a9a1-4859-8d92-43bd2c6f044d", "sighting--537ced28-2ba9-4c75-99e4-36ad124da0d9", "sighting--c832796a-8fe3-48dd-8540-2d4ffc740bd5", "sighting--4e4289f1-d7a6-4e1b-9075-e3598a56ee5c", "sighting--4f20a66a-62fc-42cb-b088-306cde8ec58f", "sighting--ebb23af8-fba8-4ebe-9f6c-3d7928cb773f", "sighting--32771cc8-6fb1-4e2d-9251-3a3edf743b18", "sighting--64762c88-ca00-4402-9969-a924ac7f00b7", "sighting--f38bd122-7d54-4879-b329-564e477da457", "sighting--8c678800-50cc-4c46-9ce0-20f803ceda3c", "sighting--6946a143-9959-4605-a21d-ee31bae12e7e", "sighting--c678216a-6928-4749-9de3-de374e756cd5", "sighting--3153a556-8520-4f72-8cda-2e1a9d6b8a57", "sighting--150b12fa-617d-425b-905b-54fe3f792cc8", "sighting--75a302b9-9510-46a5-b8f9-38cdd9293457", "sighting--7268b926-945c-4375-8b19-301518b25fe6", "sighting--6ad6e6f0-e820-469d-9757-9cd507cd213b", "sighting--94fee910-ea3f-41dc-831f-cd234804692d", "sighting--74db6015-d165-4180-a847-f7ce38800126", "sighting--30e720fa-a790-4ed1-8bb6-db1465d66649", "sighting--c765d157-c785-4713-acf1-eb3790e076f9", "sighting--7cef1e4c-f32a-4b3e-9cec-3d619e0d4fdf", "sighting--a3683720-e638-4078-891b-cd9c72717f4e", "sighting--e1b7e200-23f6-4f53-9451-cdba91d87d18", "sighting--428459ce-54b7-445d-a9e4-9c4209098953", "sighting--e2c146f2-7b65-4abc-b5ef-4898f828c150", "sighting--bfc63d56-3cc9-4d06-89cd-328425f3b6e9", "sighting--95e8f093-ba96-4319-993f-5c89c7e4bd38", "sighting--10e5cddd-2bf6-4123-8281-da6e586872b8", "sighting--8d5d3011-7d53-4dca-a661-bf429198d332", "sighting--6a41b48f-1483-4b68-9cbd-f28247de397b", "sighting--292f78d6-de17-4d19-8713-0ffd6961be02", "sighting--8fd7620e-374e-408f-9a9e-e2bd718b257c", "sighting--5d56d817-05f7-4219-b02b-9f399dd67053", "sighting--6d43c100-86f0-45f4-ad6d-9391626181d5", "sighting--d71aa4b1-208b-401c-b851-5de4c21ff8f3", "sighting--94b73988-41be-470f-ab9b-539036f20493", "sighting--fde15ee3-95fb-4310-8f96-8f97eb9b7edb", "sighting--956def4d-1c1c-4adf-8ddc-b562964eb264", "sighting--7a62c567-234b-4001-aee0-65bee5b955a3", "sighting--f6c059a1-a9e4-4d9b-8c83-41cfa5c603fb", "sighting--ccb73cfd-fdbe-4833-9214-d81ec0c4529b", "sighting--c5090aa3-98b1-44ff-9248-bda65346fd20", "sighting--e37a4110-2d05-476f-a86f-10621aba7806", "sighting--1bdca205-8202-49db-9d76-9a6829f464d7", "sighting--ca38aace-c12d-418e-adb2-d1020835bab3", "sighting--94bd9617-6582-4c69-af32-57f7138576d1", "sighting--28359c88-a40e-443e-9f02-8d1737510410", "sighting--63d4211d-8033-4a35-b959-64b967dda8ea", "sighting--edb96219-e66f-4efd-b462-3902c3ab5c73", "sighting--04f90a94-7d8b-4913-8b30-7a6350d58127", "sighting--1754129f-ccd5-45a8-9cae-bc163872b24d", "sighting--760c3dbf-14d5-4eb4-a6a5-b5262517be11", "sighting--44a6ba95-964d-4b31-ab87-28011d7e35e3", "sighting--8fafa679-670a-49f1-80d7-5e85990ccac4", "sighting--50fc5f25-ce7c-4988-bc09-c3ab20a9af0d", "sighting--5ad985a4-fc19-4c5c-a198-869611d3a3fd", "sighting--b84e0fbc-8f7f-4936-9590-4e3dec42f1be", "sighting--d8d351d5-8473-4d7a-a401-9ac7d813fb6a", "sighting--6ba1edb8-70cb-4ce3-9900-2b44426c9db7", "sighting--191f0762-eebc-40e6-abde-a4de43fd822e", "sighting--98245066-f820-45a4-aefc-8500ab052f78", "sighting--def1a125-e22c-4128-b63e-e0e01dab4f6a", "sighting--5dc8ed25-522e-45c1-8d5a-a41bc9f21dc2", "sighting--49d120d0-c6a9-40cd-a6a5-ccc4a892364c", "sighting--e5382cf3-991b-4358-9f34-1c69d10a91cb", "sighting--141cfca0-2e63-43b2-afa2-5773e313887b", "sighting--0d693614-1307-46f0-99d4-b93b81d7c38a", "sighting--9a613e3a-89ce-43fd-949d-a4671ef55e78", "sighting--c154dd94-cc78-442c-b35f-b04bd8a2d53c", "sighting--d1f8e20e-cee0-4801-965b-602aeaca8407", "sighting--468bde81-3081-4a4b-8d8f-448f8502c7cb", "sighting--fca89c6a-30f5-4616-b9fe-f2e455273a85", "sighting--31270442-56fa-4bd8-bef5-8d591a8a8d5c", "sighting--fed80663-1c18-45d2-a18f-13e555559df4", "sighting--a764ffbc-8d5e-4e1d-b901-e49dd8078675", "sighting--39385f4b-d99e-42bf-97ab-934b9a811fc8", "sighting--9a27f56e-dd0e-4218-8248-995b0af0e01b", "sighting--8efe2364-cb4f-4bdc-94b8-45701b61b78a", "sighting--73fd5a7a-de31-4f4b-91aa-207dc1e96494", "sighting--4ee0b03c-7e45-4dac-881a-85e923e9932e", "sighting--4f974b78-404f-4d94-9501-2c5eb9f0b0bb", "sighting--37340fdc-1e64-4a48-9de6-9478fd6f2b0d", "sighting--27ed408e-58b7-4602-9917-56ce72d90d04", "sighting--3eb97c9d-efad-41ac-9c18-f075afd20b52", "sighting--5b560e64-dcd8-4215-bbc7-18ac3d16e25c", "sighting--90df0f18-6f8a-427b-8391-9e1beb7a88f9", "sighting--85f37202-f6ac-401b-9f88-a46562b16025", "sighting--3f850561-5003-4b17-bcb6-255751aa666a", "sighting--5a81932b-238c-41d6-b1b9-825383668151", "sighting--4711a9da-db53-4ad7-b051-6dd05adffba9", "sighting--fe712bab-c4ef-4da9-935b-1ac62998ba93", "sighting--7a535ea8-fd84-4967-ab5a-2dca41982054", "sighting--366949ac-8b54-4c17-8cb9-eeef28e09d8b", "sighting--370c99ac-651a-4c74-971f-a882e7d0c9a4", "sighting--015465c2-0e5b-483e-a483-02f8f021adb9", "sighting--ffd1511b-826d-4f5b-b0a0-38d3b4434886", "sighting--36e98d01-ce4a-41b2-8e0b-e7f97572c4f9", "sighting--fb97e472-38a6-4f11-9ab6-490d78e3504b", "sighting--48e196bd-79ed-4183-ac94-55d07f7a9044", "sighting--d76e0ff4-bf39-4f4b-be05-d11c02ad2263", "sighting--d57e14d4-95aa-45ef-8e00-7c0157ffb41d", "sighting--ee1582ce-78a6-4ee0-8fe1-93ae9295f8ac", "sighting--bb2f2a7f-8ffb-4453-af7c-7c519c8ad310", "sighting--f4954d1a-5ca9-4d39-9b31-b4fda7673426", "sighting--d5f889a2-dd9c-44d4-8699-7304038c3ed3", "sighting--fb2734f4-6d3e-40f7-8af2-078f76762f01", "sighting--3ed1d6d6-73ce-48ee-8f74-3d0772312f95", "sighting--82a1a52b-b33a-441d-804d-e9942ba5999d", "sighting--fd81631e-0ef9-4cb8-8bd0-6838d8521f61", "sighting--af1ab1f3-08f4-49f4-880f-30f6b5b79771", "sighting--f6455590-4f5b-4263-9555-fd1e37e038c4", "sighting--f0a496a6-6a10-4d5a-b7f2-c717d071d109", "sighting--7d0eeb37-c865-4949-876b-5897bbe2b6a4", "sighting--a023aa68-e718-41a9-9d15-345866465daf", "sighting--ef87ddde-2956-464e-8437-0b40b6af0eb1", "sighting--04c7fbb0-534b-46da-abb6-45680cf8a912", "sighting--c5a50aad-fd3c-4ae6-b2a8-b591ddf495e2", "sighting--a8f44506-0de3-4628-83e3-13d87402a7db", "sighting--f29f2ae3-a7b5-46a3-9687-a53d25d591be", "sighting--84c20676-2933-44a8-802d-0a67c8810061", "sighting--504cd8f1-9c81-4b6d-9fda-624f8157d996", "sighting--ef4d8fa9-a3a1-4d52-9c72-52df97657a03", "sighting--41057b9c-1e45-4e23-b620-4b52f5647f41", "sighting--25a6a8c8-d97b-495f-aed1-4c158b98a293", "sighting--796e647c-6b3c-4e22-bb91-09509c39e736", "sighting--681af2bf-7000-4634-bb39-c863ca81a575", "sighting--a289af4b-8345-4aa7-84a7-25c38e170198", "sighting--56940e95-d841-4487-a313-159fb48fb69c", "sighting--c5d85223-3fa2-425a-a038-3615232cb7b0", "sighting--71e52dff-c8b6-42e8-802c-5ceed224f4b2", "sighting--684a0b8d-1499-4e66-807a-1d7caa649da8", "sighting--a066dbaf-2680-4d31-b520-302685d37fee", "sighting--66f06207-c163-4ae7-a9fb-f16dac012e03", "sighting--257709a4-796b-45f4-8a76-34b9b0904ad8", "sighting--d14c27ca-9d3e-4ce0-b5bb-28e0bd0a30a4", "sighting--336a22b4-0ed7-4735-8173-07e1b763e4e1", "sighting--26ad525a-f110-4582-843f-42f968fe6cb6", "sighting--1c9d9b4b-aa8c-4b05-a519-62ab50a305dc", "sighting--e55a3989-e358-4292-9e8a-d88048ad754d", "sighting--e4c99789-e7d8-4226-9107-361d2f6fd0cf", "sighting--75d04f7d-17c9-400c-a41c-2a5777a88f85", "sighting--f280fd28-2e1c-480e-b08d-5e6b6ee6c9ec", "sighting--924eeb97-fe4a-48fe-a110-79760826bbad", "sighting--b10e79e3-df3a-49d5-a2a1-5d3c4aa2d6cc", "sighting--06412c72-34b4-4e7c-9c8c-947817a3fb9e", "sighting--1915cf14-1f39-410c-ac52-72369bd01ca3", "sighting--fca7ff37-6a9e-43d8-83e5-3e88700cf31b", "sighting--096d4514-1f0b-468f-a70e-e94bb759c82d", "sighting--89514361-c7cc-4c2a-aed3-e89fcedead17", "sighting--7950d62d-f62f-42ea-80e4-8a36babb7239", "sighting--e11c969b-1933-44d5-994c-6db39c4f4efc", "sighting--524b9d1a-e627-4c89-901d-f83eb4a43947", "sighting--5766f3f3-d4ef-436b-a6e3-b264289aae28", "sighting--4dda4613-6eab-4638-9cb0-151285e5d962", "sighting--fd729f50-9fb7-496c-8ff8-039c9d112fc9", "sighting--03721f06-85b0-4373-a146-8bc28a85cc1c", "sighting--8763c16e-dadb-453e-9517-a2d418bf07be", "sighting--e22ad004-b4ff-42a2-a962-9a2e839f9255", "sighting--27631acd-26d5-4342-8bab-cf9b959f79ea", "sighting--3a22d5d8-372d-48f9-a68d-a082c4c0be11", "sighting--7f7e5ba7-b29d-47fa-8930-cbefc413a48b", "sighting--ac6e81c0-fc74-41d2-8fed-3f60ab211a80", "sighting--b0ead021-2a8c-4668-8317-f53b193fa7cb", "sighting--2a233956-d152-4c59-a44b-f372f9762b38", "sighting--339a77d2-5fde-4b3f-87c6-cef76a344b03", "sighting--c745e8eb-e5f4-45a5-ba77-5e3d528bff9f", "sighting--a071b990-d30b-4cb9-9b87-1562cfd10107", "sighting--7a2fd5d4-4b13-45cd-9c28-8d415971a6b9", "sighting--e1be5637-831b-4761-ae1c-c0e0fd0c52b6", "sighting--6a449509-867c-462b-9eac-3b2b135b46bd", "sighting--82080a08-f613-4e87-acd0-5340de0dfea2", "sighting--9e0fa22d-ad76-4f57-b855-b30da7b19edf", "sighting--3d509d1a-a8cc-4237-a59d-80a27ebc96d3", "sighting--8a8c9c66-1b48-4ca5-be52-3b09d84d97a0", "sighting--21089de7-c9de-442c-88d3-b729144c2487", "sighting--9bed7f85-f4a6-4345-ae54-c8e06571d6a5", "sighting--817d988e-5c6d-48e8-87f3-364477c5a99f", "sighting--4f47f1af-7c84-4080-a860-fa5f3b8325ef", "sighting--a056b056-8ad2-4a40-a45c-0bb312209638", "sighting--c270fe9e-23dc-439f-9495-148da8c2a78e", "sighting--e2c66e2a-48f8-4b33-aec9-ab6f6b58ceb1", "sighting--f1b0322d-10e7-44eb-ace4-f37b1fa63d54", "sighting--50b4f01d-4e83-4377-ba27-dd2d80e28266", "sighting--494956d3-d457-4043-af45-3e5b4e9aa060", "sighting--8b1a6331-e4af-4a0c-9324-0c7c965bb77e", "sighting--60f70cdf-9357-488f-a8a8-5e6669f9fafb", "sighting--b71f299a-d5b6-4689-b991-72ef7c6b17c9", "sighting--9f7bcf9d-6dcf-47e7-a84e-ac03f20d2a10", "sighting--7ddb6f28-d83e-4b77-840b-5395a9bb9a1a", "sighting--d1f4d273-5c29-4182-8506-2a6dd6fcd476", "sighting--1f1cc9fa-55c9-4135-9df6-9ac594ca5c25", "sighting--3ee79ca6-4cca-4a05-9a60-6cf12cd83590", "sighting--85b5eda2-52ba-40c9-8eb0-1fbe8f442756", "sighting--1a191c0b-71d6-4b94-8fbc-6b00326b92d0", "sighting--7f6c2dd2-6a01-48d6-8681-5931bfc824a5", "sighting--d7e69a8a-cc21-482d-a3f5-c4662aa5da2f", "sighting--8e77063f-73d3-4a39-a7b9-14b6190b39dc", "sighting--146a20f5-e45e-46db-8cac-b00212910f22", "sighting--6bbefe61-2289-4045-83a9-379753bc8e78", "sighting--5ab66351-cded-4cea-9877-f35567d41a72", "sighting--d8ba9027-fb7f-43fd-a107-8b1660307501", "sighting--32656be0-8f2a-444e-b00f-e0f0dfd97de6", "sighting--1557f20a-aaed-4ff0-a441-52bf331806e5", "sighting--5133189f-8d60-4a98-af41-d76cc6439d3e", "sighting--a8389c2d-7d5d-454e-91ff-8862f62a123c", "sighting--431d8bea-8980-43d7-b516-6d0b14ec5c13", "sighting--dd6f0a04-4042-495a-94f9-b63fe5e4cf2e", "sighting--621aacad-7c26-4b82-b232-297692aa1b96", "sighting--a850f5ec-b6f2-41c1-a1f3-6e142dc3c257", "sighting--8086c87e-a244-4edc-ad8d-3a5fd14f8cae", "sighting--1fd079bd-d9b8-434a-90aa-d38be99bfe29", "sighting--3ec17397-d7d8-4060-b3e8-dfae60a6c5b6", "sighting--3fecdbe7-2641-4d2e-a4f1-87d39c8a78f9", "sighting--c23410f7-330e-4434-96ea-312c2e656cd3", "sighting--579fd329-b8a4-453b-a5b7-ee15a3043642", "sighting--0d223172-c2ab-4b5b-accf-6d2f4bfeeb6d", "sighting--67e88c5b-5c4a-437f-a654-15fe15a55956", "sighting--dbd4f111-fb88-4b3d-b84f-161313704fcb", "sighting--ab06bf2f-8ee6-4cf1-b7c3-a02dffa599da", "sighting--e4de237b-a7cf-43ca-9146-8439bcddee94", "sighting--9afd381a-5719-4e2c-b768-3577c23f186b", "sighting--3c77cc2b-f9a4-4dad-b962-2fe75311a3a2", "sighting--795cd41c-fd00-4944-8570-ea93f5ca105a", "sighting--ad64cb26-bbcf-48b1-9bbf-61ee87f7c0f0", "sighting--099185a2-0f04-45ed-8add-3560a35fe8ca", "sighting--74144a63-fe52-46c5-9f34-a917f4327265", "sighting--bf1ec624-ffcd-4da4-be4f-6b875155f998", "sighting--9c9ca81a-2b1c-46bd-84f1-026f76860ccc", "sighting--729337be-ae43-4034-8c24-2696ad0b28e0", "sighting--4b77ea7c-6799-4468-a097-ee2cf3994d71", "sighting--d43d6501-f5d9-4d7e-a523-d01538c232dc", "sighting--7593b047-9e88-4c72-8a48-776d03d99c3d", "sighting--69fa833f-4e6a-444f-9993-adc13aa69fc8", "sighting--0f710376-6a54-4774-be03-393cb740935f", "sighting--01dc99c9-d544-40c4-ae5f-ed616a86a312", "sighting--b59bfb98-1096-4b0d-9202-9e9f37cfb118", "sighting--1fb8aa68-b2f3-4327-afc2-3f6406e462f9", "sighting--b79de001-c767-4c1c-ba55-f81ae16d29ba", "sighting--aa0a69fe-4641-4234-8621-90fa1f309860", "sighting--d9c28bba-49a4-43c9-9b03-d1bf76aac296", "sighting--30732c11-41b1-4510-81a6-51279d3f4913", "sighting--a93055d9-60fb-4227-9a92-fcdda56781ff", "sighting--d059417a-38ce-4617-9b3b-9e466510627d", "sighting--c0895546-0508-4d58-b4a5-418850f08ce5", "sighting--574674ed-0327-4cc4-8d41-065dff6e92a9", "sighting--9f321ad5-449d-4800-941d-67eb0286c281", "sighting--9453ac63-fe90-4394-aba6-d5d114bacd93", "sighting--bbe17b56-8ffe-4801-af62-06057efb36cb", "sighting--cba19c12-d952-4d48-981d-ac236ea7e89b", "sighting--261a3b3b-3fe3-41f1-bc1d-675bb9a613b0", "sighting--beb33bb9-ce2f-4576-89d0-c63353afd8ea", "sighting--0215d81d-7875-4c11-b3b6-0fa6e2040a92", "sighting--70dca07e-b6d3-4f56-b877-e31d1b878129", "sighting--e630d26a-0248-4fad-b683-53307f02619e", "sighting--ed373f90-a3a7-49b7-a854-56ddc9ff3cef", "sighting--d9ce795b-19b4-4f73-939d-5d8504638989", "sighting--da7c01c5-de87-4afe-82fc-58162658d160", "sighting--c835bbd8-53c0-46da-a9de-14280eb766d4", "sighting--51de7845-008c-4d20-86c7-594d59517cba", "sighting--343e4d06-288e-4bd7-8322-92e02c69484c", "sighting--9a7fbe10-1aa0-452e-87e2-0d2810219f9d", "sighting--376614dc-1029-42a5-96ac-7e43203b80c5", "sighting--1e47d0a9-6adb-4957-81b5-64bf694ae5b2", "sighting--2118b63d-81f1-40aa-87e5-837b7e3830f8", "sighting--f44e0a62-4e74-46c5-8472-667e323ea9dc", "sighting--38c455fd-024d-4e88-ab91-7b5e9981069d", "sighting--8b5c927b-66bc-40fe-acb9-297e4abae619", "sighting--b6aa99c6-fbab-448b-a391-abbadbe9051a", "sighting--d8aab2e5-2510-4799-bd42-72145f634aab", "sighting--1c888359-91c8-42d4-900d-4970e48c64f8", "sighting--058efc26-ada8-4482-9f15-f3e2148fd9fb", "sighting--4b2414cb-eaf4-4a9d-98f5-4c784344e8ee", "sighting--ae4a45e5-9842-4351-bae4-dc43f2d49a16", "sighting--e6a057ce-4082-4a29-a5e8-016cfb5061e4", "sighting--fb0c2458-a5e7-449b-80fe-c285e67adf8a", "sighting--334f1294-3cb8-49c7-a440-0fcd564de60c", "sighting--008d43ad-4b5f-4c4b-9bbf-365d1c401852", "sighting--7b392ceb-7f24-4a2c-9292-90b5b53d8305", "sighting--3608b6c6-3858-4e69-9f1d-87d0edbb8b72", "sighting--eee84dcd-61df-455f-965d-4a9c63319772", "sighting--faa0d676-cde8-4976-83f0-acf848f56f74", "sighting--3bd5d894-8b13-4bc6-a549-913d4731ff9c", "sighting--c42fa3e1-fdc9-4bcc-9b1f-192f8097303a", "sighting--9b4b55f5-6ea6-4ac0-9196-f0bda06dfac8", "sighting--1b40b2e6-05e2-4d63-8019-1737c3ffbb72", "sighting--aa694cef-056a-4d15-bf27-b587534faa5a", "sighting--4f4409d2-4399-4c19-b718-6fa2e5a457e5", "sighting--18bc086f-4b67-4a4a-9ac7-be0d5d4a2e84", "sighting--7a1c7058-53aa-4ba6-9ec2-ea574f38b09f", "sighting--84b031ef-5c61-4a73-86ba-ce5fd07b020f", "sighting--55f3271d-8e36-49a2-807d-5a5f42236d3e", "sighting--fbe198d1-204c-4a35-9aac-8b04e20b1278", "sighting--18030ff8-42c8-40e0-91c4-5d0ade4f9018", "sighting--a5812f66-8a33-4051-8889-8df72bcd319a", "sighting--692851dc-7a06-4c57-a44f-0f0daf156820", "sighting--00f74e4e-0621-4b41-b680-c78cdb822c2a", "sighting--eefc1684-85fd-4c99-b299-0ec683b4b9d5", "sighting--2bf3fc7b-8c72-433c-ad7d-ba61332b38f1", "sighting--f983b01a-112a-47d0-babd-60e75305a5e0", "sighting--324a6098-53a8-4c4c-ad67-39dc73c75d94", "sighting--6482659c-1df7-4565-b74f-30fd77cd6c77", "sighting--e914c8cc-c836-4ec4-99b5-b57102f90825", "sighting--1440417c-519b-40c6-8168-72ba34a8cbcf", "sighting--50021953-aeaa-48f0-bc3c-bf55ccf774e7", "sighting--ec51b08b-1e57-4757-979e-603f395ac951", "sighting--1200ccdc-b6e1-4a2f-8ec0-3d6c37ec85f4", "sighting--97347400-cfce-4ccc-9f85-98614a6d98bb", "sighting--ef87f4f5-fd69-42f1-8b44-ddac683bffae", "sighting--b1ba6183-1111-474a-8506-40fa88e92e5a", "sighting--f2244ae4-1d57-4ac7-bb32-75797df2dfe0", "sighting--b1968bfa-e09c-4591-ba61-629122556f2e", "sighting--5e27f81a-ec7b-4409-b4a4-a8b9729a7cd7", "sighting--33233b48-2ffc-4fe5-b13e-aafd97c845c5", "sighting--711cb69d-2f84-4fa0-9986-3c15e48b54da", "sighting--bf7fb56e-b5d5-43ad-be32-8e93f9f8988f", "sighting--696823c9-6587-43ad-a9b2-51a7cfefb5bc", "sighting--78a05d34-602e-4fac-9f3b-0e62f8c977bc", "sighting--670f2e4b-e090-4a5b-954d-849e8346873a", "sighting--0d706265-d86c-4498-ad7f-e7ef4fd607b2", "sighting--54427f31-ca0d-4a9d-b137-a6c097a30eb9", "sighting--eef46ed3-3664-4309-96b8-9b7dc1fd0fd7", "sighting--c8324f9c-b909-4fc0-a0a8-7bb4ba977c00", "sighting--86311095-79c0-42b3-89c2-d432ba102261", "sighting--f709bc44-63b2-4347-b953-bbfa6ba44be2", "sighting--0d9f264a-13ae-4e0a-a107-4a0501f224d6", "sighting--47ebef43-f944-4a42-898c-a7bce0e6b125", "sighting--914a3303-d40a-4cd1-a457-30ecb8f2541a", "sighting--55d1b52c-9765-4bed-9e06-989e455331e8", "sighting--07a3c845-28aa-47f8-a772-08fb9dd2512a", "sighting--d423f030-89b0-46e2-9109-baae73f5e547", "sighting--7432cf9b-22a5-4e83-9df8-5f56a6c5ae26", "sighting--9e455408-8e3a-40a0-b2d4-543a67542226", "sighting--3837c2f8-7172-4337-8f22-84e8e4fdca4d", "sighting--34d87689-6722-4c6b-b7da-88edb016da52", "sighting--e0cd8e9e-acd8-4a57-b064-ac379dcd01f4", "sighting--6f660651-d82c-406c-8381-54f51d5d22b2", "sighting--82a6c628-0d7f-43df-a74b-183c7985c253", "sighting--83d64ad4-7afe-4ad8-8514-db939e14b6b8", "sighting--6bf2aa4b-f37e-426e-b7b8-0ba180adc4d7", "sighting--457dab80-e892-40ba-a4c4-6eb047c1d2e7", "sighting--8a35e11e-8972-425c-a773-5082aeb8cac3", "sighting--08bb691d-789f-4433-8f6a-149e24c68077", "sighting--f38bce93-b48c-4683-b1ef-0bad1dbdefa7", "sighting--63444fda-4a67-4086-93d0-e48eecdb53c0", "sighting--42e1c231-012f-42a2-913f-1f299d3c3214", "sighting--acaf4218-a078-47e1-8923-eb77254f7d74", "sighting--ce6ced7b-c4ed-4c21-bb3b-0fccddd3363a", "sighting--3021fcf7-5fa0-4002-b59a-a4439542503f", "sighting--f3299560-a0f6-4eeb-bcbd-4da4fd6b156d", "sighting--140da88f-4adb-4802-8d49-5bd4aa42d7b3", "sighting--cb0448cc-c945-42d3-b959-c3f206788109", "sighting--fbc1fb90-2c02-40cc-a12a-22bfa0d5c431", "sighting--e4bd6632-7346-4138-8138-a3c60e90bb18", "sighting--fb3c413a-34da-41d7-a2f7-3bc476c21749", "sighting--5c8fb588-2a69-40a6-8f51-a64f561fb759", "sighting--8711790a-52cc-4986-8408-be9a23a902f7", "sighting--b7677958-cda9-4a97-b8f8-cdc6a558721f", "sighting--82a72ad6-2994-427b-be7a-ec8eaf7134c0", "sighting--19dabc7c-23d9-4bf1-9481-dcaed9cb2c9d", "sighting--ed2a65b3-a535-4daa-ab32-407769419c97", "sighting--06ca8ec4-5eac-4622-8966-a5f9dd1d0ce3", "sighting--72135083-86e1-4f69-9c6d-2bb042d14400", "sighting--dc942cc2-9452-44b9-8959-e8165dc0223a", "sighting--0b714867-20ba-44a2-9a05-ad1f428fd417", "sighting--06237567-b314-4641-b52a-1f444dfb4f67", "sighting--62153a03-6892-4e9b-9969-0998a3d1a7e8", "sighting--1afab10d-fea8-43d1-8d94-8ef424c90764", "sighting--9b53de10-c2fb-41ad-9c27-d6f31dd5a841", "sighting--fb1573c4-76be-47c8-a74a-e855a7cca758", "sighting--6957c2b0-7382-4072-bdd4-0e6146ddda5f", "sighting--2a131f02-f014-4709-8d35-1c9d41ae6125", "sighting--3da3bf5c-513f-4f99-b0ac-68c3526d9769", "sighting--ed08a94d-7ae9-4cd8-aecb-2c8ec6e4066b", "sighting--b5ee073b-bd8b-483b-aab1-d4ec7d69181a", "sighting--d332b547-bad6-47f4-ada2-b0d4ce4511fb", "sighting--bd4bf4a3-f245-4de5-9735-fa2ed5898a75", "sighting--2e0ca5e7-e8f7-468f-8106-4c17941b65cd", "sighting--e2729674-0e2e-456c-bdd4-0982b27850ac", "sighting--172a1784-4966-4a9d-abc7-f36d42468154", "sighting--1be3e06c-0134-4212-800e-76d7d590654f", "sighting--3ff82f33-379e-4051-9e50-4dfde05692a8", "sighting--a3021066-e2a9-4b24-b89f-84c3fe811429", "sighting--8ef50309-6832-4d72-b462-17bcc86c3d3e", "sighting--baf5db5b-d010-4cdb-9a78-eebc196a7451", "sighting--89eee16d-1205-40f0-be9f-85e2f90b765e", "sighting--762518fd-241a-4d8d-a430-a766c9c847de", "sighting--d8ffcc0b-cfe3-4417-baa0-5bd2e9340f1a", "sighting--8e941767-b1fc-457e-929a-67541a00baad", "sighting--1210c76a-1e92-4702-9e75-be2ddc09d286", "sighting--9848b024-9b66-4427-8f51-342a42599157", "sighting--8d6989a9-6096-420f-a4aa-3d0c380d4a89", "sighting--51d60a27-fb6a-4d62-ba7e-3e866fff92a7", "sighting--22656aee-3b58-4f13-8725-4b7f2cc97733", "sighting--2691bc1d-f078-43e0-9b3e-d6ac11a27759", "sighting--d81a938b-3137-4950-9452-7abab88fb862", "sighting--cfb0d8da-1a5d-480e-9a9e-0cca95c107ef", "sighting--c7a49292-e1af-494e-8431-136e4291e15e", "sighting--28648b09-4d69-4295-adde-34c3a09f7fe5", "sighting--3008d98f-31d3-42d1-a708-e59c301cf5f9", "sighting--20009558-c7cb-472a-abe8-dadda04e9c4b", "sighting--f72fdb0d-88b6-489e-a1d7-3608f2aa9039", "sighting--9b7f05b0-818e-4f3a-8260-f97b42373ee2", "sighting--0a842a51-1495-4205-94ce-3a2671f337ca", "sighting--98aa19a5-e58a-473b-94d4-01b149c5b2ae", "sighting--7e65e8f0-e60c-45a7-982d-6cd4dd5e6d76", "sighting--c2608796-a7c1-4045-8815-48d5de895abb", "sighting--0c5dc5de-1670-4a69-854e-9c601f5a80b9", "sighting--d55182fa-8d9c-47bf-b1c1-5ebd2a1ba45f", "sighting--b7d145ec-8a3d-4d04-a2ed-a624903a780b", "sighting--f6d3a6b3-0c5e-445e-8b55-678c0050fbca", "sighting--9f3c75ea-8be0-40ba-aa65-a7236da88b49", "sighting--80578fb6-2d99-4d19-8fd7-c8ab40f236de", "sighting--b8809755-1ac8-4feb-9439-8d5b2247a31f", "sighting--0a449b06-4640-491c-9555-a42cecd5bf87", "sighting--853763a4-c58a-43c4-a3b7-1da048c40c69", "sighting--e9688060-7358-463c-9123-0a46d4d7ea3b", "sighting--fdf2063e-f41e-44be-9ae0-0256d74c6499", "sighting--dc894970-b487-4fb7-8b73-225f550d64bd", "sighting--e54c06ad-6049-475a-a809-cbcd4f73c78c", "sighting--ed0e2248-4c2e-448c-a140-038ca64a8531", "sighting--f0ec3f21-a0c6-4223-baab-07c396363c54", "sighting--5d71954c-9c67-4045-93cb-84a58c6bcea7", "sighting--e91eca29-10e0-485e-9bfe-8ac911efc2d4", "sighting--7562ec4c-1dfc-457b-8ed1-2d0882c79b97", "sighting--64a46421-ce50-42e1-ac8e-efadbd5b9d7b", "sighting--b873c788-da89-4004-8e85-9a195073a47f", "sighting--4930f719-8557-447f-9105-fe6fcc19a556", "sighting--1399dd75-0eb6-4cfa-b3b8-0585f9662ff4", "sighting--0e1b3f83-917d-4731-9b89-0bcae51ff869", "sighting--3dbc502a-7058-4fa1-8be5-eaaf0010dded", "sighting--a4f320f4-86ca-48a3-8a8b-73bb5edcf69b", "sighting--512e0701-d049-46d8-a57c-bec354653f1a", "sighting--f99db290-03cc-415e-9dbe-6d091c3838d5", "sighting--13ce976e-4253-41e7-b7ad-eef59fcc77b2", "sighting--f25981f5-390d-494a-9e5a-ccc75e60d92e", "sighting--fc17b1a1-9b22-49a2-a87d-c82376f85ca7", "sighting--f25a85e2-569d-40b7-91cb-fad101e7b526", "sighting--a591120a-3989-47a1-b4df-01062183b856", "sighting--42c5da47-3c70-4fa5-9c91-9188550d720f", "sighting--de9b327a-7157-4155-b29a-dc7a21a241bf", "sighting--cfbfb03b-8217-4106-97f9-00c96a5fd770", "sighting--452a2475-6602-42b8-a8c5-62ce5b32c9e5", "sighting--1f2af7f7-73f5-4075-ad4a-ee5dc2474acd", "sighting--53191f8d-ec9c-47e4-9b9e-d547765311e2", "sighting--59af56f3-c5aa-4e11-ae08-4b55bcf4ef3c", "sighting--25b84ece-b2af-4ac7-a4d5-607c9da61d79", "sighting--5add0ce4-b233-499e-8198-a826a8b94c40", "sighting--4029bb34-be0b-41dd-a93f-001ba1791720", "sighting--08039f8e-31ad-4fca-9bf4-836a98e0d56d", "sighting--6f716d9d-3b13-432f-b3f6-adba662d3f85", "sighting--7065fc09-e9d8-4167-9dd0-cd0a3843b48e", "sighting--34dac0bc-5199-4ae8-83de-5707931e8beb", "sighting--7a0357a6-3c96-4ee7-af8a-5cfe607c4fed", "sighting--73fbaeec-9ce2-4179-8a9b-07755793f0e6", "sighting--668e8136-4a98-4eed-a648-13504aba2c91", "sighting--c41465c7-ae4d-4257-9605-57f7999254c9", "sighting--74d9fb31-6e43-4611-b58d-5472dc1f76d9", "sighting--1e5e8091-bc7f-4448-8bcf-35b44c4e51d2", "sighting--80616f24-ebcf-4810-9c39-1d1a5109d921", "sighting--43da36a2-bbae-46ca-8d36-438b3b7db7a7", "sighting--834ebe0f-8f33-4390-b503-350611f7004f", "sighting--e753c9d1-fc50-421e-a6b4-5673dd06f6a1", "sighting--7b0e4c5f-56e1-4481-a1ee-f61f29a4db7a", "sighting--b68aab0a-bd88-4cbe-9835-a461350ae410", "sighting--ae221307-69ed-4931-8c71-55417d8b5145", "sighting--5375ec40-f3bd-4c73-bea3-a92894bc9914", "sighting--824a9582-0621-4913-9057-983158a742ee", "sighting--0794d72f-7fcb-4076-991a-349d9636a4e0", "sighting--62c8fc6b-2563-4aae-a18d-b1e2e155c84b", "sighting--f0d727c7-707a-4016-8b07-0f64f96233dc", "sighting--f3b8868a-a685-49e0-ad4c-de795d28c08f", "sighting--28ff9d0d-6cdc-49d4-a89a-bc9ab06f576c", "sighting--731d6308-dbc9-4cf8-bd08-eb1ea5f53f54", "sighting--0b885392-52ea-41d4-b0fc-a2ae01fd8de4", "sighting--92d9f78d-c884-45b1-8c79-cbbd987507d7", "sighting--15bbb2dd-2db1-43c9-87e8-63766b592baf", "sighting--55d07efc-568d-45e4-97fa-7aece0267643", "sighting--67b4025d-a3bd-4ec9-bac9-d401c92b62af", "sighting--56dc44bd-a5ae-4242-8fd6-c08764079433", "sighting--6f24960f-1370-4d2b-8573-795e229e3af8", "sighting--300333e8-78de-4064-ad6f-36627b1f16f9", "sighting--2b3d9566-b3a3-41f3-b47a-a95eb21a51bc", "sighting--da68f6a9-f46e-4908-ad00-7fcd43641468", "sighting--7014d044-a2a0-4e32-bd3a-0847dfe31f62", "sighting--a551d95e-e381-4e0a-b702-4c1ed547d667", "sighting--d6be2b5d-6a44-4923-ba88-f4065ef1a765", "sighting--bf5b6db5-5bbf-4661-b2c9-b942be745fc4", "sighting--a192c874-2b3e-44a5-a6f9-5db851cff11b", "sighting--4384b139-340a-45cf-9db7-61e46157f76c", "sighting--9884f445-d296-438e-95e8-44420d8ee144", "sighting--ed8e6b0f-b80f-4d47-92fa-753a4185f025", "sighting--756d6f5f-36ec-49a7-8759-2e262013a96f", "sighting--1cdb7663-c693-408c-bc00-3e2b26a926b0", "sighting--1b5a3682-140f-4207-a053-79c06b824908", "sighting--14859a07-1a45-488c-9c8a-514e5018aa9e", "sighting--cb220a2d-c64e-4d1d-928d-989284b5021e", "sighting--5703f114-99dd-43bc-b9ab-d5fb4f7df296", "sighting--12f720c6-3562-4ff1-b1c3-9b1986cc9598", "sighting--8d999311-3c64-41b7-875f-d39793421dc4", "sighting--df901724-bc2f-49b3-bb10-673a6cb0215b", "sighting--d82956a9-1f69-4fbb-ac44-fc074b7b270e", "sighting--74b72bc1-01a2-4612-a7c3-ee9e5bd33e3e", "sighting--7bc2f01d-beb9-4605-9a78-b682a619d96c", "sighting--e42575ac-85d8-4d0d-9a1b-d7eb0ab335bb", "sighting--c2c87294-14a0-4d98-8508-296ad0c4fb38", "sighting--9993301b-f666-417a-9cb9-1c9d8320f67f", "sighting--dfb9c83e-b257-436a-ad1b-49fb4b06eeea", "sighting--f899ed24-fed7-4fc9-98cc-8a4da93cb928", "sighting--6ef1ba60-ae69-4e94-84c8-1a32c3c63d8b", "sighting--9147c7e0-f302-4729-934f-aec5bca9b549", "sighting--86972163-f19f-4b6b-9d59-c2634a1e31ff", "sighting--2640e582-ece5-42b3-aeb9-8c48eca4f041", "sighting--71940ad2-19ab-4404-b602-4a03412977c3", "sighting--c7a9d16d-b994-4213-8bc7-ed1c493eea7d", "sighting--c21bb5fb-6ce7-4ea3-b875-9386c2f7c410", "sighting--5fd117ae-f029-4c27-91de-e16341a8af1a", "sighting--717c748a-56b7-4b92-a030-640675f52f73", "sighting--548a9f4d-e5fd-497a-ac97-8e77214d01dc", "sighting--dd4ca920-aaa8-42b9-a2e4-2edf6cc9b6b1", "sighting--941cbdee-a93d-4a17-85fb-d6ed4460f557", "sighting--a977a1aa-5fd0-45bd-8092-d158cff3c925", "sighting--a1a9e184-7ad8-4488-be28-e3fe4f28f20d", "sighting--5acdd1ba-b0ad-4d1b-b70c-4ad3198f9583", "sighting--77524653-d679-41f1-b7be-10ec1ad3c440", "sighting--4730a773-e9b0-4094-9ec0-0b6ff25c9890", "sighting--241c66ab-93e2-4a0a-b541-940e5edbee8a", "sighting--18cffad8-c841-4c7a-9f41-ba6db45ff36a", "sighting--64ec41fa-5976-4218-88c4-503b56501728", "sighting--a3f6681d-0642-40ed-a817-e6686ddb020f", "sighting--d3bb57fe-7ccd-461a-8891-1d762d3b4498", "sighting--ef184bd4-4ecd-4660-94f1-48bf415b7608", "sighting--f911e35b-d9d8-45ac-9cac-f5fc3e8aa663", "sighting--b6829e45-252a-4fcb-b399-47f4279c1484", "sighting--ce79b1f4-f1a4-462a-bc00-9037b3f8bc4f", "sighting--b7f5a62f-59cd-49b8-b60f-04cb3f99fb09", "sighting--4d446af0-dbad-4ece-99a4-fe68cae66368", "sighting--5e3f987e-aee3-45bd-8aa8-83d0d4177b3c", "sighting--1f34cf33-3da3-49e2-90aa-0eff98d9a387", "sighting--56f912a6-95cc-408a-869d-ce30a920087e", "sighting--db47c2bc-1cd5-4f45-acf7-19b23a5b0a2d", "sighting--ecb66b72-1c9a-4313-8c81-63ccf6dfdd0d", "sighting--0fde9bdb-0c5d-4af8-afdb-9e5e5dcb9a52", "sighting--33db2fa6-5890-40a5-88f7-a539a992c8f5", "sighting--5b4fd6e7-ca17-40ee-921d-49680b81b5d9", "sighting--6128f4b5-cf8f-4bb9-80c9-8aacec7ffcb8", "sighting--98fe553e-5502-4b19-85ba-13d637bcb0be", "sighting--06aafeaf-f32d-4ddd-a8ff-e2baa1ee207b", "sighting--78c51f20-579d-45b3-87d5-cf6b9bfc9b18", "sighting--126cdf2d-9781-41e9-a5a4-92dd22f98d27", "sighting--24edb802-d58c-4ce5-9ef4-a186c2001596", "sighting--ac44423c-ce29-4652-95f5-2cabd0cd308b", "sighting--f8177813-85d2-4a3c-9084-e67d6ccbcd9d", "sighting--effdc620-6f29-426c-8701-2bb362d87b23", "sighting--d7ea8b23-ba18-4040-a93d-a15edfedf166", "sighting--7d56a489-39e3-49c8-a057-9938e13afc8e", "sighting--e7cb923d-2aba-4574-9b48-828593895c4f", "sighting--f9f27b6a-82fd-49cf-9ded-f965d9163fc2", "sighting--e40341ae-f5fe-4355-b07c-a6a9354c3d25", "sighting--acf2f721-1951-4b82-a3e8-40cc59234710", "sighting--d621048b-ab8c-409d-8632-7b8eb53b0dca", "sighting--1884175e-476f-4543-8345-42e81008e035", "sighting--4c2f592f-81bf-4b37-a890-ff4086990326", "sighting--bc50a1b8-8100-468d-86ad-ea4e011f73a2", "sighting--b73b7ac3-6c6b-4964-b611-40dc76ad274b", "sighting--9703ca5c-8949-4e18-8c7a-9694637e4622", "sighting--6884bf61-b93d-4967-a167-a57620593350", "sighting--153a3c1b-a9c6-41f5-85a0-44045165020d", "sighting--7793c2d6-a432-4648-ac05-25c83e25a378", "sighting--ab27a431-c310-4729-8eec-c5efd76778eb", "sighting--35e3d90e-e1ef-4c82-9c2b-6e119da98ba1", "sighting--ec23b79c-db99-4302-9f45-4799e03a87d3", "sighting--b4e5d062-aeaf-459b-a5ec-ff1f35801377", "sighting--da006a0f-adf7-491e-88d8-370fe608768c", "sighting--6416c690-1f7c-40e9-8eb0-fe69e7397617", "sighting--01d6f759-270f-4cd6-bbda-cfc765c0ce99", "sighting--e8a89842-1fb6-4b3c-8149-a20400119116", "sighting--e8a112a2-d0e4-4761-8481-ad277fad7252", "sighting--c852de0b-67ba-43c9-86b0-65c487dd87e1", "sighting--55fb0428-6d4d-44b2-afe1-ab1ad106a589", "sighting--cf926b95-2630-4c6e-8989-05bf271ee29b", "sighting--51576e9f-3894-4cd6-8a2d-3dbdc6cb7bf4", "sighting--72b0bc7b-77ff-4a6d-aa25-160ea5413453", "sighting--f817d949-6252-4569-b74b-471d71017203", "sighting--31bf5d90-44f2-4d4e-9b75-ce044b5a1ff7", "sighting--a99cc889-72c8-4cf6-a391-cfb42aa22991", "sighting--f5e952c3-3c75-4b12-bf77-b404a6a09051", "sighting--0b15bd75-3413-4727-93b3-1a9e20c63fd8", "sighting--97f29733-9d07-4f00-80f8-cb5a4e83d618", "sighting--9fc7cb79-f098-45d6-ade5-9d05f472c2ef", "sighting--34797ddf-1955-4f6e-9394-5b58464f4032", "sighting--d89da738-05a6-4e0f-b34c-09f6239d9696", "sighting--3395d37d-d889-491d-a5d4-d6a0e94436e7", "sighting--9af123d4-52ce-4cc7-b6b9-30260c66e303", "sighting--ab003110-9982-45cc-8f92-9a23bf7e6850", "sighting--f79a2b2c-a406-4ddd-a814-bff5dd5385d2", "sighting--63c2aaaa-890d-4607-bc3f-afa33def205b", "sighting--fe6fd4ad-c402-4817-aacd-db3b87bcb4ed", "sighting--4d1d9dff-38e6-43e0-bcf5-fc46b53fc5e6", "sighting--b845fec7-2583-4425-9514-a2407f8b9827", "sighting--057136db-4fa2-4882-8ac1-d23278968d65", "sighting--8ab126e5-db7e-4bfa-9aa1-a61ded555993", "sighting--e1a77046-24c5-45b5-94a9-5bf832d22fe9", "sighting--0700254f-86f6-412f-86e3-27729ec6d159", "sighting--5a19485b-9f72-451f-af19-4cf9dfcb07d6", "sighting--a0031c67-022c-432b-9356-a06ceb42047b", "sighting--5881097a-4ece-4300-b107-036bbb5794f1", "sighting--b632e91e-86c5-43ce-9798-3c5482d1fcb3", "sighting--24dfa1d3-01e1-4242-875b-fd7ebc8fb485", "sighting--83c7d7bb-8fd3-415b-9cac-a9ee6589a6df", "sighting--35a986d9-dcce-46ff-8784-9eeec2cd2249", "sighting--ac8ea97b-7c36-415b-8e69-8500111f1b9b", "sighting--3a107949-1372-48ac-9d3e-efcaf40a0941", "sighting--98aa2351-1e1f-4da4-a689-428b0c340586", "sighting--2e1ed57e-df3e-4b3a-9eb2-899b7e1554e5", "sighting--851db35e-af52-4a15-b8a2-ed36943f7efb", "sighting--ad991e24-379f-4b98-b217-32b17d4cbb53", "sighting--8f9086bc-8b33-4df5-bf1f-6c4528c7c2a7", "sighting--77b40045-5eac-4ec5-bc9e-9f2ceb56a4af", "sighting--7af80c4a-6460-4c68-830a-ea6bb5c180d0", "sighting--2e94d97f-28ef-43da-8991-261a7cf6c604", "sighting--c8801385-1be6-43df-b986-4b5b6f4cce7a", "sighting--0349d589-a89c-4502-9f67-8e60671655eb", "sighting--c412600e-f25e-4013-a917-3be795a3632d", "sighting--50d75cda-4e78-499a-997e-736903af8880", "sighting--26de2caa-2c18-4fac-b195-da767a72d8cb", "sighting--75c021dd-4940-47cf-91ba-42ff4a56aa29", "sighting--e134c64f-bf7a-4607-86e9-e8b16389c05f", "sighting--788da98e-ddd8-4230-9c94-1ac3058c2b21", "sighting--52fce13c-0448-4d2f-86cf-e3738a015288", "sighting--59dcc8c1-7c93-4d57-9efe-73a14412ffce", "sighting--4a3956f4-477c-457b-a9d6-a2e087e30888", "sighting--6da27ab9-38a2-4804-b223-f509e49f7d64", "sighting--3f2ffd0d-45ba-49db-a9a6-0d6ead4db783", "sighting--20bb5f67-0f39-434e-b3d9-41d388c5ea6a", "sighting--7726d43a-ea32-402a-a63f-66ad25c51c03", "sighting--f3e2a6dd-f65c-43ad-abfe-8f055ab5bb3e", "sighting--af94690a-c0c6-42c0-94dc-c852ec44f720", "sighting--fe68f6e2-2a5b-4916-8dee-c19b308427fd", "sighting--f82a50b5-9a71-44c0-a05d-1ad0b9275d1f", "sighting--f0f5b400-ba63-4729-9815-43ac352088bc", "sighting--0413d51b-5792-4d3f-9d85-8b2e2a04838c", "sighting--a53dae5a-5239-4e97-8f62-1529ab4c0d03", "sighting--6bf6d129-68ea-4abe-8503-30a0901ea99d", "sighting--433d9f3a-6551-4851-a518-7343cd7da548", "sighting--0abe4d53-f241-4615-a228-1f5fe11c376e", "sighting--cd601185-8401-4906-8d82-1f4b11237814", "sighting--3b3bf59d-4a0c-42c6-a55d-665650182d3a", "sighting--5237130b-a665-46ee-bcdb-82c4b35ae037", "sighting--35168948-27cf-47b7-8eab-8d9f5c1441b8", "sighting--f10cb6fd-f40b-4034-ad1f-3a671d5ee291", "sighting--94062b2d-a715-4e6b-a598-ce8c74d7df44", "sighting--fda52c02-f1ad-480d-be94-7406ea2f6fd2", "sighting--f819d2fd-7141-4c07-838c-ce38b125cf59", "sighting--44e910f0-37cc-4475-869b-6b45b621561c", "sighting--ee5ebfcd-d699-4998-888d-c519faa52ac3", "sighting--d6ebba4f-f12a-430d-be39-12a83bd137b6", "sighting--00ef0003-e160-495b-bada-78c6b0148f1a", "sighting--49b22822-38a1-432c-885c-82d015085db2", "sighting--640e339f-2c7b-4a25-ac51-858033f70d81", "sighting--3c6d573b-071c-4ce9-84d9-da46709f8360", "sighting--0d4eef9e-4765-4df9-a430-15b1fccb0076", "sighting--563d44d8-6e69-4799-bd8d-137db66772d9", "sighting--1199d680-ed7d-4301-af1c-647f1ef358e7", "sighting--ed18340f-d255-423a-bdd9-b93113fbcdcc", "sighting--ba68f4fc-5d0d-4f9e-b7f3-290377e96186", "sighting--9d391515-4256-4ff4-875c-be0bdcece34b", "sighting--35674bf0-fe66-4dd7-9da6-b94683988cc0", "sighting--1b5c642b-59df-4784-b3c4-f5c2e6caad0c", "sighting--cf2fb5fe-3386-4a77-a0fa-db92a2fdbfab", "sighting--df8bbb08-85be-425a-ac42-212b43995a9c", "sighting--0c3fb518-27d2-4032-b540-c54a0db72e17", "sighting--d1d670a6-3bc3-40f1-bbec-e82378a69762", "sighting--0fdc2ef8-b41e-4efd-b34a-97502fd1b448", "sighting--caec5cd0-7c46-4a90-93d0-ca2addadcc82", "sighting--e821018e-88df-4261-9ec1-23f1b94683b3", "sighting--55c93200-5256-4091-b24b-8a97970db8e4", "sighting--2ba54aab-a9b1-4088-8fcc-c7fa236d8dd0", "sighting--e580d3e8-444a-4d4b-a855-f5c7c504fa06", "sighting--da64b6a2-39dd-4ada-9af4-2a481a744d3a", "sighting--8e989621-98f8-4b1c-b5a0-23459b106ae1", "sighting--435090d7-a286-4916-bc10-568e5a527c97", "sighting--345fbdd0-2958-4b3b-9537-2e0082ededf7", "sighting--dff4a582-9fe5-4a93-9249-cfe06a302e58", "sighting--4cfb906f-7845-4bfa-b3d2-a388bb624e50", "sighting--57f1eed6-d811-4019-92e6-1c9c8dcc488e", "sighting--550b418e-2d76-4af7-9d91-9b3d737e7e60", "sighting--12a89792-bd41-49e3-b69e-311c65e8062e", "sighting--fb087f2a-27ff-4c1d-a84b-2317aa40371b", "sighting--3e99f3fa-e4e8-47f5-b6e8-d0b55b328753", "sighting--8df2a599-da90-44ec-ab9d-35745fb43c61", "sighting--3f48e04d-afa3-4e7c-8b30-654f86c75c53", "sighting--aa321b65-cd93-4157-8bbc-277a8eb44faf", "sighting--338e5adb-a5b9-4a3f-9476-1f7dd6fe183f", "sighting--23ace2b2-802c-4d82-968e-8637f019eefa", "sighting--f24f5504-8116-4f51-b785-b00aae0bf899", "sighting--42290983-4c0d-474e-9bf2-cd381bd91a2d", "sighting--fe970371-37d9-4b80-bc64-a4f9a783b5f5", "sighting--017d5ea0-4afb-4a27-86be-36a695e37ac9", "sighting--d3ebcc30-644e-4f72-8d1f-981f95d0f0fd", "sighting--c5c87a23-414c-411c-827c-a0216c474bfc", "sighting--00d3df96-fd8f-4889-9a4e-c9b43a692dfb", "sighting--c0be852a-2c47-41d4-b178-fe71319939ea", "sighting--cda4762f-9583-47ce-ac0e-546101189277", "sighting--54e36da0-96f3-4d41-aaad-e00c72707e16", "sighting--3422b2e0-e56f-4cd9-86f5-bb72cbdfd0f7", "sighting--714ddab3-fda5-465d-8298-05b4aefd4c80", "sighting--6b642fbb-8be0-4815-a9e1-8a901b50e6fb", "sighting--917bfb74-4b6d-43c5-b24f-e93d9c83a80e", "sighting--f9b7d41d-ace0-4a57-8364-4a4915cd1f12", "sighting--9da9d474-6027-481e-ab0c-dc474aa10d79", "sighting--cdd82436-80c1-4929-8aa1-78a95f6aef18", "sighting--bbd213ff-72fb-43f0-a27b-8fa64a147f4b", "sighting--c97eefad-bc6c-4eb2-9b56-b9eb4cf63921", "sighting--7047ef5f-e994-4348-ad0f-70ec5b147baa", "sighting--8876260b-bc49-4737-83c7-6fd544af9944", "sighting--31358805-9a7a-4884-8708-b9d39cd878c3", "sighting--fb16fb48-e442-4c50-b3c7-3ba24847ab56", "sighting--87901244-3c84-4e6e-9870-45a3e97d07ae", "sighting--e7b60fb0-773d-4894-bdb1-7e3f44f0be7e", "sighting--2bd52514-bae7-48ba-8e7b-7ef4f8cfdda0", "sighting--8a4a11c9-68c9-47cf-9b5b-3aff42ed248d", "sighting--43842bc2-ee62-42b9-8fdd-8b68fb3b23ff", "sighting--59f1c1e7-e12b-45fa-9efa-446706f7566b", "sighting--3f1ac8d4-b3e1-4461-bc28-052889d2b1c1", "sighting--b5e62daa-d2d4-4be8-80f0-59a17eed4675", "sighting--7eb55775-e1ba-4f12-acf9-005c7a3cf693", "sighting--7bca5018-4fab-4179-b154-58b7de5e64e1", "sighting--1325964d-d824-4f70-a14f-76becdfb33c0", "sighting--1211c3b3-83bf-40d9-85cc-a9e109a36af3", "sighting--f8632093-81d5-4513-aa87-16a75dc10046", "sighting--ca17a45f-b372-4481-af52-83a6a97f29d3", "sighting--1fff28e0-9ea4-45b0-9b34-775a148c6a39", "sighting--dc75091d-6eb7-4784-b52e-ccb8561d3839", "sighting--1eb7e1b5-3648-4a89-bcfd-fc1662e586a7", "sighting--932b4134-62c2-45e5-b6e4-dde80a153eec", "sighting--bfb2de56-7809-4660-bf1d-6a3d91d2936a", "sighting--718a382a-1aa1-44fe-8e73-556da029f30e", "sighting--fa2d785b-b4ef-4af5-b6f8-a7c37b64f816", "sighting--e9db6aa6-e5f1-4ba1-a148-af89c932b967", "sighting--84132d96-5571-4dcb-8005-8817a706a4ee", "sighting--13ea0f77-b324-4a35-af52-8bcbd0a8f1e1", "sighting--dbc0fe9c-50fd-45ba-9f44-7334013ee8fa", "sighting--e4142366-bbc9-4cc2-b53a-f076f708c6c3", "sighting--91114bcf-d85d-4eb1-add1-2df919d8949d", "sighting--0655fb3c-75b1-4b1d-a09e-34eb477a972b", "sighting--24923254-8d9a-4b72-8f2b-3728441d73b5", "sighting--ba926e5a-35ba-4d1b-abac-cfa022756829", "sighting--d25e376c-11a8-494d-952a-7e74409b6a4b", "sighting--8916999d-d18b-4b78-bc53-51fdd1961b9c", "sighting--d19091db-7537-45b0-bd75-7990e9b96fed", "sighting--9ceca251-b8d4-4f5c-97c3-1623303c7769", "sighting--2e9077f2-1500-4459-9e95-3061094d739b", "sighting--b8183294-4fd2-466e-8780-884977a56212", "sighting--6dd7f50f-7fc4-44cd-b0f5-91d80c0a1739", "sighting--23a44ecc-1b20-47c0-986f-99c483f5d742", "sighting--1ca81d80-4093-48e8-9593-581c8a98029e", "sighting--3676c2fb-5bee-403f-a87a-63a752b68522", "sighting--86dc06aa-221d-45e6-ae20-d9cebf7d4050", "sighting--306bb8cc-d4ea-4f9c-aee3-07d4a06a5364", "sighting--a9ad840d-65b2-46bd-95f4-ac4c7d9ea67d", "sighting--079f8544-5bfb-4ae9-8e4f-95169c7acfae", "sighting--57627302-a952-4b08-a313-e61c5c27fb6f", "sighting--aa76ee7d-c252-4ba2-b4ea-1f680f0e00af", "sighting--be6d26e8-afe6-497c-92d0-50d812fe3f04", "sighting--3e5128ab-b815-4dfb-b186-17474865d97e", "sighting--0427a550-2c2d-4453-878d-5acf42396883", "sighting--bd32995c-9059-42dd-a6cf-77fd1860cd6a", "sighting--65fea9bd-af11-471e-bf89-c3715584a055", "sighting--c6bb76ff-99e5-441b-9177-34d0a9349975", "sighting--de680b56-f836-4dd1-a8ac-28e1211cf29f", "sighting--83a5ea5a-4279-4485-9577-f96e576d5175", "sighting--b524d57a-4428-4211-a322-ed61cc77aa5c", "sighting--10500b90-613f-483d-bf1f-0d8a5c3d8bdb", "sighting--60e1bf5a-c1b1-4d44-bf70-b6f83eabcfab", "sighting--ccafa5f9-e45f-4e85-8efe-3d5dcdca87b4", "sighting--72eb2c39-df9c-4332-9097-bcd011f3ec8e", "sighting--42d159dd-4b31-4aae-85a7-9286fe7bd185", "sighting--ede798e3-44b2-4c3e-99b6-91d75b727c49", "sighting--ec8814e3-5901-4006-a4d2-369a752a7f40", "sighting--02835ab2-00b7-43e0-8dfb-77bd219c9e1e", "sighting--296f5490-37fb-436e-b5ca-76a8046335b3", "sighting--5df47011-a353-4aaf-b975-17d187134175", "sighting--db1fd9f5-3ed5-4bbe-ad60-6868fa5f00ea", "sighting--9b9ebfbd-7ac6-4a96-b28d-6fffa8b5fb5e", "sighting--80b1f1ca-405a-48f0-9148-8babb1c76478", "sighting--39617b5f-1785-4d9e-a8e6-8aab36bdff38", "sighting--036b513d-6a9b-4f50-86b6-97a4544c5095", "sighting--83fba25d-1e5b-4b57-9515-ed086ea911cc", "sighting--e06feab9-6b63-4d1a-a8cf-78cfe591ffea", "sighting--6b4cd1c2-155d-49f2-a444-958676b48d2c", "sighting--8588eb6d-a6a9-4c93-864e-0b4f3f38f84c", "sighting--e71618c2-d14e-44b9-89ce-6009d256442a", "sighting--e2db76ff-8c94-4caa-9210-433086e5a4c0", "sighting--b2269e24-1213-4351-8e18-d6d28ee05401", "sighting--cec87958-ab49-481c-82cd-b6e655ef027a", "sighting--c10cc77f-9bb3-4747-9b56-33e927ca5c4a", "sighting--9d3a229c-0cd1-4a9f-a2b7-c13cd0cb1684", "sighting--422d83d4-9678-4b83-8881-f27cc66d31d5", "sighting--99b3adb1-74a3-42f8-8a74-6d45ae91d764", "sighting--4a4b07cf-dca6-46d0-92e7-96a5407c2ff0", "sighting--dba5418a-1e13-436b-a46f-82a685709f27", "sighting--2f2548c8-eb30-4f83-a858-cf5c56389bf3", "sighting--02fe7fb8-93dd-42fc-83e1-2dc11be1ba88", "sighting--e5e2be47-96e0-42a9-8ac9-3d10fa1ce50e", "sighting--0cf3af75-6800-4797-ac3c-81264f9c443b", "sighting--87c6ddc1-949d-4de0-b00f-4e885c5f8914", "sighting--1f320f9b-c8a6-4300-9484-c11f962758c4", "sighting--0d84a7eb-b951-42b7-b1f4-01ba19747ce2", "sighting--ae00de40-260f-4af0-8ed8-81b233c6e046", "sighting--c16eb9f0-83b1-4978-9147-632a1d921eb8", "sighting--3f85ec75-baff-4432-8bea-ae4cb4ee6d79", "sighting--0ea0194b-184a-422f-adc3-3efbf33d3f64", "sighting--d2d9c8e0-4408-43fb-9e57-1684c2725b20", "sighting--5f13f55d-1338-4a74-aef8-aebbf5aab4f6", "sighting--0419e902-224b-4ce6-91f8-a69b90350d57", "sighting--61b60d7f-44fb-4f8f-bd96-789618f4040e", "sighting--2ddc0bda-8d93-4422-b071-5419ee0634ff", "sighting--ac31583d-e0d8-41ac-a2ec-9a8c9a56d837", "sighting--ce3bbd0c-3719-40ab-80bb-67e610c60f1d", "sighting--681e6c48-60cf-4cb6-a4ab-b169c35de293", "sighting--e8c31191-8552-4ef0-a16d-af210bbad187", "sighting--dc9b057e-9f6f-45e0-ba46-4d26a62a1b4c", "sighting--8427b083-ce20-480d-8c92-76e18f38430b", "sighting--0da24f99-e960-4049-8f52-d72259069337", "sighting--432313a0-7ecc-47e3-a03a-34a899a82292", "sighting--647bb176-ce92-402d-a268-9f679a759524", "sighting--b68d53d0-147a-42ce-9ef1-9e9312f15078", "sighting--34b358a8-7b87-40e1-a8ff-3ca4f0d02a2f", "sighting--ec8bfeda-e4d6-4b2b-bcd6-71ccee0df0b2", "sighting--e217ea71-69d2-4102-86fe-2eaad966d3c9", "sighting--6aa96e72-662f-4afb-a989-565f494c6bda", "sighting--90d71f36-8a0b-4b1a-a598-50accec7e834", "sighting--244185a3-4dc0-4d82-9a5c-5714356f2e43", "sighting--18df58a3-7373-4eae-a0b8-339d05c057c9", "sighting--a1516bc2-8a8d-4d70-88a9-fab3b3bedecc", "sighting--55641c04-9360-4eaf-9126-58a17abb9f18", "sighting--baad2ea2-8a6b-4f92-a05e-36207eba1167", "sighting--66b88600-2822-463a-9c33-9f6138e541c6", "sighting--68fbd87d-e0d0-40e9-89b7-48850a3a4e43", "sighting--547a993a-0e56-4701-b1c2-0c1c14ec9ac3", "sighting--459111f7-7498-471c-bad2-06cfa6d9593f", "sighting--a782546a-f98f-4e85-a44d-a91ac21f177a", "sighting--1aafc642-a2cc-483a-a990-8841a319fc8c", "sighting--b956cfa2-9c65-448a-bef0-4684199439be", "sighting--bd7efebd-05d1-4281-82e0-aa239fda7829", "sighting--3a34e2d3-a603-4056-a772-a10325f69b6d", "sighting--9efa6067-b2f7-470b-9fe3-1be4841557be", "sighting--818e3f3b-9bfe-4f29-a4a7-c0c8f7b354ea", "sighting--b0f2aabb-ced8-4712-800e-30be3efb70a8", "sighting--f7ea9262-07cf-438d-bbdf-23fa96e25e9a", "sighting--1a6b3f70-1160-4a3e-980f-f8921243081c", "sighting--8bf49ac9-6eab-45e6-9593-f7ccf3f6f918", "sighting--90199259-15f7-4f3e-ba95-bb56b8e3b47a", "sighting--9efff633-5f07-4a98-bdfc-9f87ffd0853a", "sighting--799d8528-55c6-49e8-a7ab-bb0c10eebe1f", "sighting--39af19af-bca8-4ec5-a354-1de3956ef68c", "sighting--51c3ea32-2a15-488d-bc96-32653fea165b", "sighting--58d2d907-a382-4496-90ba-bba572a500b1", "sighting--76376682-c07c-473c-ab5a-d4b4bf9400af", "sighting--c1259db3-6118-4341-9015-ca3f3f56df59", "sighting--9e6eb7a0-fcb1-4521-a501-dcd8adfeb76b", "sighting--2f8b9f75-77ef-48b6-8e82-f2a38b11e14e", "sighting--61924c12-d487-4250-b05f-d31363f2a440", "sighting--932d54bb-2929-4c93-890b-7a29b27ee6a2", "sighting--9ab94262-ef24-46d2-a0af-13cd574e484a", "sighting--5f2dd6fc-a94a-4427-a93a-8d312bed7712", "sighting--9f48903d-7ed9-49e4-bc3d-f675449c78e1", "sighting--9b4c3fec-1d6b-4c65-844b-5f8d8876f215", "sighting--c28d655e-d4cf-45d7-9fb9-280cd891f824", "sighting--327f8490-df4e-4dbb-aae7-85ac5ff00f36", "sighting--71995bfd-1b09-4f91-81c6-627d5df23c2a", "sighting--cb4678e9-6bd0-446d-970f-94b062df8641", "sighting--e55c8e4e-11b5-43fb-a97e-73c34c213811", "sighting--00d13427-3136-4425-a4d6-8fe212dc0a1a", "sighting--8cc01e74-de6c-468c-8dc9-8c957713f7ff", "sighting--ec16c96c-d062-47b7-bf3c-97e230a5478a", "sighting--5d21871f-3cc3-4bbc-bd6b-afa58f431af4", "sighting--189d7ede-a2bd-4656-bb29-9716f81c1bc7", "sighting--f60f8b24-06c4-4452-9bcf-9e493a55a990", "sighting--bbab1e09-b8df-4264-8af7-364894012d76", "sighting--8644b9a4-4acb-4593-9f07-fc4fc705f056", "sighting--011b00ce-7af5-4c00-b3df-3bf05be794be", "sighting--e79b2a11-6319-48f5-af8e-3ed95f349d0f", "sighting--8bd0bdaf-75d7-4b79-bfef-2a9f8302efdb", "sighting--16a7212b-b0bc-4f5d-8c7d-23d706b6fc2c", "sighting--ab8e0c09-3518-4742-80fc-172aa51316f0", "sighting--4d23e3b8-cc0a-4408-b574-b8fdab643cd7", "sighting--026cf5c7-868b-4905-a474-0195e30889b2", "sighting--9f98b0d2-13f5-44a9-8006-6a034a4cef96", "sighting--83f60922-c371-4980-8e4f-41fa0a4921a9", "sighting--eec21986-f6b9-49c5-83b4-ce0c1398fbcd", "sighting--79d1be60-369b-478b-bb6d-41bf05226de2", "sighting--07b1fbb5-c626-43da-90bf-f58646d528b9", "sighting--2fe3735c-80c9-4c97-af9a-0c5927bb164b", "sighting--1ede25ab-c1c8-4834-8f52-e9fda2ce2f20", "sighting--f2431077-484e-4dfa-96d8-688b54bf82b5", "sighting--deea4802-b1ef-4620-8dad-f06d601b8a41", "sighting--c1c8cc72-3b26-4f92-8c9c-77ba67e362a1", "sighting--c14bd115-9c62-43cb-bf04-23ea90648cea", "sighting--dadbc6f2-8921-4293-a841-6c9230e0ad29", "sighting--5b5ca093-ed9a-4e99-8a2c-d86b3ac923be", "sighting--28abd7ca-6d77-49d5-9419-4eecf6e62838", "sighting--f76085b4-0323-4a0d-9755-9e3817ff751d", "sighting--45999422-3109-4eb9-ad3b-1a194a99825c", "sighting--800834b9-895f-4591-8742-f5f856ec3c19", "sighting--ac2e8b1f-964d-491d-9ad0-8503e56539bc", "sighting--b25e00b6-b070-4510-8e00-03907709e77f", "sighting--0478d291-afc2-4e38-b0cc-e4f03ee9245e", "sighting--cbf62091-a3cb-4cbd-b312-e56a33068797", "sighting--a6720f4f-fcf3-4593-8287-5bc5e48ec338", "sighting--11fbc4ac-7281-466d-a83e-35d3c81a4627", "sighting--40d2dfca-d9f2-4eac-b248-56ff47047fea", "sighting--7d89a7d3-9dca-40c2-b955-1ca65cd3695f", "sighting--0a9cfc49-cbb3-4534-afda-4af13fc3d65d", "sighting--cef0f5ca-f1ea-465b-b061-aa09e21d098f", "sighting--e3ee22cd-8d76-4c7a-a279-f7306d4a18da", "sighting--e13fa55e-8abe-45be-88a9-566ebf40e062", "sighting--02e36a9c-06a7-431b-ad3f-467d5b505159", "sighting--ce0ddb87-beca-4980-a76a-e4036e15be6f", "sighting--d857ed71-e591-490e-96a5-80635a0d340c", "sighting--a8daf71d-f6c6-4f0e-abce-252852bc56d3", "sighting--2bbefd85-3902-4c83-89b2-33dd2e98c29d", "sighting--84f1b50f-263e-49e8-a67b-b2c90bd5b645", "sighting--603ac64c-02df-4ce0-b5e1-c1b68d19a4a6", "sighting--6bead93b-9b7b-434d-9c46-0a89f0b446f0", "sighting--8341622d-597d-41f1-85b1-d69b7962cfe5", "sighting--81b314db-587a-4d93-8bbf-4d26e8e2a81e", "sighting--853f4cad-7f60-499d-8e19-96516aa38105", "sighting--746f0b76-676b-44b1-ae24-58acfd32248e", "sighting--8586a483-74b5-4724-8c05-a76e639ff446", "sighting--c0b2acd8-6a10-4b25-9a03-634cbec11882", "sighting--6e43a1de-a501-4660-bdc1-3a3f28d072aa", "sighting--156cb8a6-11bf-46b9-b86b-793c7eb62c18", "sighting--513425c2-2600-4f51-bcd6-289c2b81a471", "sighting--bb5f9cba-1b82-4863-b68e-8664f256b70b", "sighting--9cd8c44b-09a1-4752-94f9-0976be83f116", "sighting--6de2c4da-3bd7-4ee1-ac4c-01d41c9981c6", "sighting--b47222b3-6a86-4364-9583-03ad9fb80eb1", "sighting--9f7a8c5f-ce14-41ff-972e-d4adebe1c7fc", "sighting--431821bf-b225-47a9-8fc0-c8bf4d8d908f", "sighting--fff13ae7-d177-4089-8e33-4ed5c512f876", "sighting--ee6bc77f-58a6-488c-812a-a0ccf2940819", "sighting--6dc95239-8da6-45ae-a062-52da1e2b0db9", "sighting--c10c592b-b540-4f65-81ea-ada60b779807", "sighting--55465ed1-e50b-4bdc-bd50-943837443823", "sighting--a725a92c-706a-42a6-a5bc-eb20f8295aa4", "sighting--6728e3c8-384f-4324-994d-6643da8c8214", "sighting--72937588-e638-429b-bb1f-9703c4570109", "sighting--f920b13b-b242-4e79-b4c1-316f998f1160", "sighting--050ad5bf-5905-4ab7-ad57-2c3c253f6b0e", "sighting--a9df438e-2a38-43e2-8609-150aa21a1ca6", "sighting--57173239-bf2c-43d0-a55a-72399ea30173", "sighting--dd84925c-f55c-4ef0-8638-033a2a187ff1", "sighting--fa7ce130-5610-4447-89e5-f6b1b8fb6b7b", "sighting--b7cd95f1-f8f8-4dfa-a6fb-1bf58fca1f3d", "sighting--1dee1d1c-3ce5-46e7-bb6f-77d883ebeeeb", "sighting--7f573384-99f6-4331-8925-4d7f06f0fab2", "sighting--204037a3-d3bb-4614-95e3-38adf1610309", "sighting--46208eac-25b9-4e3c-8a5e-59cf5e6dd3f8", "sighting--c9f2045e-ab86-4d8e-a1dd-a4eccffce4c8", "sighting--f380f4d3-bc57-41a3-916c-08988cd6fb47", "sighting--ad226a03-3167-465a-8471-dfc7db4b0ae6", "sighting--ac380ad0-b9d0-49ca-932d-b378ba51b9a9", "sighting--97be94f6-92d2-47eb-a4c0-65fbb7ae003d", "sighting--3973deec-dfa0-4b6a-b8a9-caf997bc1902", "sighting--bdf51eb7-cecc-4a75-8f4e-718b6fb8046e", "sighting--02515afe-cc9b-4d38-a501-2dde69046e83", "sighting--5fe81105-a2b1-4cf3-bf66-61f48821e13f", "sighting--f1d4ff9c-393b-4908-bc77-1b4755908030", "sighting--df245f2a-6b09-4163-84ea-79cb86e8f293", "sighting--89be718c-31e6-40da-8630-4de20dc3dcb4", "sighting--bc014d64-884d-45d7-bd02-c6a2565f9b5d", "sighting--08a904b5-02c8-4b99-8304-55413f7eb5f6", "sighting--7a175808-9da8-423a-a6c3-4b0f6020bcf7", "sighting--ed68840c-dfce-4c98-9349-6ba8e6f59976", "sighting--9419cf0b-d32a-4f18-945c-56fa9947dc92", "sighting--81339f30-95a7-4d0d-a93c-c62327ebc340", "sighting--bfba7dca-e07e-4c77-ae1b-eabdf9266ccc", "sighting--235b750b-feae-45a0-9b78-88500c650f70", "sighting--0b308fb7-941a-4cfa-88b7-61483ac70171", "sighting--f4582cd1-c364-47c3-a9c8-ba669a8ad4d4", "sighting--4ae8df08-9de4-48ba-81aa-3713ef9de5bb", "sighting--f38e7a25-cf9d-41ef-be57-f0b1ccac3a1f", "sighting--8f654e3c-be72-4a02-8642-bb1eb6ff5058", "sighting--b5144343-5ff2-49b8-ad39-b08afdce8352", "sighting--8a5cdbc9-f419-400b-9c03-ff48f2c68acb", "sighting--7a747c4e-3a98-4d81-9905-eb173a700733", "sighting--dafea331-4969-4a53-bfd5-2606c859729a", "sighting--377856f7-7ff0-4ac6-bb63-49bba56f0275", "sighting--bcbb37e8-e3d9-421b-853e-dbaafc94027c", "sighting--8d86eedb-8705-446f-8d98-a7e762b4dc70", "sighting--9106a4df-f9b0-41ab-91bf-a205cb8b05e3", "sighting--ae7dc49c-87ca-4285-ba45-30e69eb01f12", "sighting--621114d6-8a49-4477-bf84-96200efdfa53", "sighting--78807257-ab32-4d06-bed5-6f99e7bfe125", "sighting--bef6bf57-a29c-4134-83b6-0b0c08395654", "sighting--d0a646d8-e83e-44cc-b0a5-2176747e749f", "sighting--66416eea-9807-4fed-a5a1-1ea628140079", "sighting--46ca8548-53cc-4f5b-9583-0b4547f288a7", "sighting--0c0fb131-cf33-4ff4-ba3c-79b3f2f27de1", "sighting--39811600-9798-4c73-a822-46d21bdd0b9d", "sighting--860ba8fc-5038-4f00-902e-cc6107415135", "sighting--4b7a2eeb-7af8-4b7f-a023-d6f0fee5df94", "sighting--c2168afe-a109-4fbd-b098-0161a22679ed", "sighting--7b09b0db-af2c-4c19-b192-abb90edf3735", "sighting--fef69d30-acf9-491f-a103-521844670703", "sighting--67a2866b-47d9-4255-943d-e40929a7445a", "sighting--8631b9d8-7e5d-4e2d-b021-c4987893207d", "sighting--6b75df9b-42f0-4402-9c54-e2ecc9285a1c", "sighting--07500ef9-6081-462c-a68a-6c723c2758a7", "sighting--d12953d4-7fc8-4540-b32b-94423e3d6493", "sighting--f628b736-35fb-4c8e-8e74-5366588dd236", "sighting--87b2a4d4-9912-4dcf-abb1-e957e59707d1", "sighting--1a3859a0-3150-4e04-8f67-84178ebd4652", "sighting--cb3a7454-1b54-4c61-9e27-433b0ee3d9f7", "sighting--e36a467b-5e57-4b65-ab9d-9c86e275846a", "sighting--2409e044-a707-4db4-945c-d64d761abdae", "sighting--37df9706-745c-459c-b97c-52cbb553b1eb", "sighting--68e89815-487b-4901-a2a8-0c3610cc0a3f", "sighting--f7ad1bf6-cf13-4185-b539-f159174163da", "sighting--2842b87d-0480-4dce-be02-dc01091bdb8a", "sighting--be5cfb39-dd09-4592-80c7-c1757fa25883", "sighting--55ef4b2e-47de-4b0f-a147-9dbe262aa371", "sighting--1a1886ad-1f7a-457c-882f-e9b74cd7856e", "sighting--2637c4bf-d320-434b-83a3-fff67d38b0dd", "sighting--25b3dab5-2b93-4f5e-8c9b-c3b840121d76", "sighting--ad30184d-0a12-4f3c-8875-56cb2601de59", "sighting--ddd68871-cc4a-42da-93a5-e5865e53a8a7", "sighting--159610cb-dade-455b-9d95-1cc1acac93be", "sighting--b4313f50-c2eb-4403-8ac7-761c4858ab5f", "sighting--3586cdfe-afcf-463c-a815-015241e10ab8", "sighting--90b3073c-736a-4747-8426-a911a4632719", "sighting--46320f4c-d847-4951-b026-bf4130437481", "sighting--1bf76756-9350-4e0b-a5e0-5935ec5bbe2a", "sighting--4df6ebf1-02d9-45b6-9297-a380a878891b", "sighting--60ec6afa-c14e-4b53-9996-53b78bb1755a", "sighting--4bc018c4-a899-4832-b0e1-df3472962e2d", "sighting--355437c7-964a-444e-9a99-e4d8f510c999", "sighting--1c1bf4a5-b50e-4baf-972b-bd352449bcc9", "sighting--f49c5bc1-3bf1-4525-bd68-d109a7d0e4d3", "sighting--d232e7bf-2305-4c91-ab6e-f7445e14d829", "sighting--7050e9c7-6bdd-4970-a721-93e011c78ef0", "sighting--c713728b-d2a4-4be2-a84e-4f093b47bcdd", "sighting--a3aa152d-6d48-45b5-bdf6-2d3014b2af62", "sighting--a5e5923d-3f0c-44fb-8b54-16e0422565e3", "sighting--27b0941a-c6eb-4b41-b374-9b69ea198fcd", "sighting--01bb3c7e-3e18-4110-8fc8-d3e4e8f258a5", "sighting--75b63a67-5a92-4e4c-870c-969a1e25ad2c", "sighting--88eec1e2-d91e-4b70-82c2-7b74740e1eed", "sighting--b4e8fe5e-25f9-42ff-bdae-b186712d00c2", "sighting--45b12d91-3a63-443f-9190-86b6d14ec36b", "sighting--d7ae3922-2220-431c-9313-f1bec99ecacc", "sighting--55fe1e88-095e-40ad-8726-903757d9430c", "sighting--7c070048-7103-4aa1-8464-1b4a800536c7", "sighting--2a22f481-a8c1-4821-8356-aa83cca9e572", "sighting--575ee48d-1bb2-4f9a-88c8-a1a44ccc5534", "sighting--8784633f-82f8-4e50-ae09-9713905a4b4c", "sighting--92527d20-b6ea-4ecd-bb76-613058e8a0ee", "sighting--6c3756b2-3157-44e7-8b8f-a145ebd793a5", "sighting--49dec24b-6d7b-44d4-ad53-871c5667fe00", "sighting--af9116eb-529b-46cd-a089-12bc7575d691", "sighting--b6a5528a-6ca3-4d01-b5a7-a2124af3c58a", "sighting--0bedac6e-aee9-449f-9101-37f43a8eb1d4", "sighting--78da5a3d-6224-4ee0-9ac9-695803c0c41d", "sighting--68c55d80-6eef-4b62-81e6-e38a3bb593ac", "sighting--ff92c645-0833-45f5-af39-ec8140707c2e", "sighting--7b8ddc1e-3e89-4e1c-9e1e-3f9f4ad46ae7", "sighting--6b20f16f-07ac-4d0e-9004-410e399298e1", "sighting--9810894b-25cd-4a5c-a0a9-3dc84434bc0f", "sighting--dd36c001-788d-4641-9702-0ce7c5461d25", "sighting--261636cd-cf62-4f6d-a731-fd2e62fa901e", "sighting--a0ce9c9e-662b-4580-902a-0710f2d1b966", "sighting--ecedfdf6-f4b3-443c-baf8-7e4bfc9e164c", "sighting--a2ad4772-264d-4422-962b-21b04bab23b2", "sighting--09f8dc57-cdd7-401a-98f2-9c62269ca4cf", "sighting--a004ac7a-91ea-4402-87b8-9ae80b68dc21", "sighting--fd25a9bb-05c0-4234-a70a-4be38c939697", "sighting--e332223f-0182-4ec0-b41d-ed9811deab44", "sighting--a955cc47-d6c9-4a26-8477-084d97e38f54", "sighting--24b37a31-1bd8-4a4d-8780-0dfef613fa4b", "sighting--76eb1f89-a2ce-4b3d-aa68-73b91a03007c", "sighting--9a9104ce-2795-48f8-ac48-fd57817c1b0d", "sighting--775f5157-509c-4e77-9752-d904b8dd1684", "sighting--4c6ef311-83f4-4cc4-8ede-17640b649629", "sighting--75e1b874-126c-482d-9969-a01d28984cfc", "sighting--9c836765-65f0-492c-95ae-6d79f9a21d8f", "sighting--3ac924a5-05e3-41c8-b04c-18310df7f16e", "sighting--f03fcb55-7310-4f28-8de6-db5cfc41a7d4", "sighting--d28c3f0c-489b-4d02-b36d-ed6ec5b59ce9", "sighting--d21f2eda-ba9b-49a1-a5d8-c0197338e0c1", "sighting--33f2737a-af0a-4944-8bdd-ea9fb0d58629", "sighting--d01ad366-2203-44e8-a46a-82d020b51b32", "sighting--6e27f7c2-c6be-4dc9-b21e-2020aa5a6f1e", "sighting--18626fc7-ec9c-4ec0-a5ae-e7718931a39c", "sighting--9a8994fd-84cd-4691-955b-369fe6d3bfbe", "sighting--fe2ef358-7260-4271-b8b9-3806da3fb230", "sighting--6c4f0833-421d-46db-8168-c41f4c886df8", "sighting--db311963-7231-4e3b-beaf-907f4da04e99", "sighting--b1e9b7e5-c2f0-4e57-be0b-670ff47fc9e2", "sighting--4e73d1de-41cb-4977-91e2-9b9e573cf800", "sighting--df142a9d-d4b3-4c48-ade5-00dbfd2074ea", "sighting--1de504ad-4aed-409d-be75-83aa503531f2", "sighting--03a26a1e-2065-4225-9fa6-048793778777", "sighting--4abff72e-d7ed-4626-902d-ddf41542f954", "sighting--5c430ff3-6e3e-4dd6-94ea-a41301a5b51c", "sighting--890f61d2-f879-4836-9077-6c8d2145c4ae", "sighting--f849a0e2-bfce-48ba-9413-74d2e7c42354", "sighting--3cf9dd0b-f5ce-4357-bff4-a46d8f3132cc", "sighting--cf405889-a2b6-43cf-98e5-6c111fac6b13", "sighting--65f4fb05-dc70-46fa-a293-e98193f24d31", "sighting--869d7d8f-4fda-481d-a2fc-e9841ac486b6", "sighting--406d645a-a28b-46fa-b0ee-c1cc94695089", "sighting--cafac5e3-2be5-404d-acd3-547229f8f7d1", "sighting--c7c273c0-e5a4-4d0e-a5ed-ffbd5f770b3e", "sighting--057901b1-e750-417b-8b36-58ea6ede1b8c", "sighting--0c87d790-7a15-4f48-9aef-78385a7bba64", "sighting--6a9abae9-8586-477b-bf8f-2f2ce30bae7e", "sighting--e262c503-a9f8-4428-a4dc-3ab8561d709c", "sighting--958e042f-4916-4e72-9e3f-2ec03c77b708", "sighting--ab3f31a1-0af5-45f0-a187-4ff366a31af8", "sighting--c2707a94-85ce-43c1-9b98-f92bb2f81507", "sighting--d6a497b7-db87-4cf0-9424-2430e55f911c", "sighting--8bb1ad05-1ecc-49e5-a031-6a3c47dd7c43", "sighting--7371ceb2-1445-4acb-82b6-59b2e9effec7", "sighting--da2e3a7b-8dd6-47ad-8cfd-3d8e6b1b3f55", "sighting--d9cf24f4-9be0-479d-9df1-ffced8ef6c07", "sighting--4bb4066a-0578-494a-88c8-3919091419f8", "sighting--f66be86d-6ff9-4b0c-9639-6ef8d4916950", "sighting--829b6d0e-bd7f-4076-b263-02a79a9cfe58", "sighting--862863b6-b50d-49ed-9b7e-4dc8283f4822", "sighting--78123879-a874-43d1-834c-b7a1785590b1", "sighting--74aaeff6-76cc-4e70-b421-a41e6ed0ecbf", "sighting--6cdc44e9-f3ab-426e-8510-f657ca8d95d5", "sighting--4192a7a3-20e4-4d89-8456-b1402a0890cd", "sighting--3f4c448c-0f1a-4251-9383-43de978aef35", "sighting--5cdc08c0-8282-4025-a66b-ec9143f63dfb", "sighting--47caf34c-e7e1-4351-b7d6-4473ae463da3", "sighting--7746cb76-b460-491d-9210-17a06f041bdc", "sighting--fd68ff93-b178-42a1-89a6-aa8ddc7e8d15", "sighting--fad9741e-cd32-48e7-b09f-6205842605d7", "sighting--45312f15-62cc-4eee-b0d8-b82768893d93", "sighting--3d5e790f-a4ac-4500-854c-2e992b17fc0a", "sighting--effa6f52-322b-4ece-9d2c-89a9c5187579", "sighting--a3b1c417-bdc2-4ddf-a8a9-a4735195d082", "sighting--e89ca9fa-1ba8-458d-9ea1-67ef44a75f6c", "sighting--785feae7-9b5c-48ed-86e9-20825132d4a3", "sighting--6378f4c3-328c-43bb-bbc1-b6cd0cad7a80", "sighting--197d268d-9116-453f-aa96-8bcc3b7c43d9", "sighting--5229b28f-3c32-4aa7-819d-db31a602d829", "sighting--60877270-f7ae-444d-81af-5601848df979", "sighting--eef2ffc6-40df-45cf-928a-ae2003327a92", "sighting--5b805592-b311-47bf-806c-0d0798b0d205", "sighting--6750f869-68f2-443d-bf9b-103d8d07f41d", "sighting--ca1ff3bd-ec1b-4153-9738-332c3c9def69", "sighting--74621c38-ffd0-4736-b1e5-f94dd8a958c7", "sighting--1cd28b8e-7778-4b14-817d-71e230a8098d", "sighting--1da0f1c8-6a8e-4b65-a586-63a0b3090a93", "sighting--2e1492f6-ba3f-4e2b-9590-41efed2b4951", "sighting--a661b9df-a2b3-42bd-9b4e-d73e7cba4b90", "sighting--20afd47b-2976-4bb4-bca3-08c831319872", "sighting--8048f6bd-bc1f-4802-ad0e-5efbfc4a098f", "sighting--7b4498af-bb3a-45ad-94ff-4e923568be23", "sighting--134d5cb7-6544-4d4f-8ce6-d821120683de", "sighting--a6453181-2476-47bf-91fe-0b7047b1522f", "sighting--88fae163-bde3-4282-9448-e16bccb3e7ec", "sighting--1180ead1-bc8b-461b-b556-4d45035f26ec", "sighting--0d12ac58-d8b3-44d4-9a14-58d5cbfdd88c", "sighting--1b69fbc2-e413-4f33-89ee-af55c32be9a5", "sighting--17822024-ca17-42bc-a7fb-64ff8980c21e", "sighting--102e2d19-98d1-46f2-882a-3c4e73d402a1", "sighting--a1e24e93-28e9-429b-8d0d-9861c4c9ff75", "sighting--63b9ea46-899a-4d0e-b42a-11569bc6b00e", "sighting--adb6ad3a-5151-43f6-9724-8e9315d85d4e", "sighting--829c91c9-1fce-4b6f-a24a-998b275394f4", "sighting--35068bcd-d9ac-4815-8229-6ac533c63d8d", "sighting--f1845bc3-bc35-4ac1-a3ae-1c4a02582a57", "sighting--b8ac57bd-819d-4c00-b878-152bbe4c34a3", "sighting--7c437bc2-c002-4ddc-a8d8-372033adbc96", "sighting--fe0ae10f-0c59-4706-b728-e3d6c99c4d92", "sighting--86846538-f13c-482d-94a9-d97eab645012", "sighting--75680b57-0a16-4438-86ee-5f354b4417de", "sighting--b10f4ca8-7c6a-461e-9d10-a4f7b356f84c", "sighting--4f1c1745-1a9e-4564-98f3-8b9bdf4c86b6", "sighting--069ec906-7d0e-43b9-8b5d-f7a568abb2e5", "sighting--144de5df-5ddd-4790-a2a8-ae395e02ab53", "sighting--cdd50c03-2b36-4052-a514-3f42a353074e", "sighting--8094cdb3-d71f-41f1-b3be-5fba672a4625", "sighting--b62305fe-a65b-41ab-a2fa-d86d16ff79f9", "sighting--676ca77e-d06b-4b99-8f59-30b74e7df066", "sighting--795c1d6d-50b5-41f6-b350-091746a7eddf", "sighting--95be7d7d-ec1c-4821-9b89-c9a657bdf4be", "sighting--9ca2f391-4fb6-417f-a4c3-6fe8a377a481", "sighting--dd97acb8-60d4-45d6-9137-d4e053afb6a6", "sighting--d0c2286b-d164-4090-b49e-bce1ca9f70f8", "sighting--294da850-f4ae-4e4e-8b89-1be8c011a59a", "sighting--d2c0b951-d42e-4aef-9a70-96ca9bb4b630", "sighting--117ff616-3e65-43c5-a165-a686acad4bed", "sighting--66b79cb0-4505-4ee9-bc26-244eeed16284", "sighting--0c69c522-30f9-4532-b922-c17269b09a0a", "sighting--5fb314b8-de82-4f30-bf5e-17f51dcf730b", "sighting--47d44bc4-10eb-4077-aef0-eb0e66908173", "sighting--fcc2874d-1f67-4715-8807-f9651532a244", "sighting--70d9520f-7ad7-4008-8ba8-855e13893f17", "sighting--6b99790e-41bb-4894-92d0-9154bb1e5862", "sighting--b5eb5904-e799-4887-a1ab-4803e2782729", "sighting--dcb78813-cec8-487f-b88b-edf0b4609235", "sighting--b4d83dbf-5902-453b-9470-e80ecb2ed102", "sighting--573f97b2-18e5-4f93-8fac-7e962bdc5325", "sighting--0ccbd920-0426-4427-87aa-d796b9ba932b", "sighting--277d8606-83b0-4198-8c62-42b61b57ce45", "sighting--87da087d-fe09-4ba2-afac-7d5e0d5538d7", "sighting--9a4f121c-e79a-4914-889a-f8721001b098", "sighting--65ba0f5a-fd8c-41f3-acc8-1daf8b11a900", "sighting--17f5f031-52d9-4f2c-83d6-69f55af54b48", "sighting--e7f58ba4-cabc-4222-9f24-11bc2499b0b5", "sighting--faadd9e5-1238-40c8-8c7c-720d3025293d", "sighting--e8a76173-00b8-4bf8-984b-b4957f07c6de", "sighting--1e4e0b78-df4b-4e3d-80e2-c27a1765e0b6", "sighting--5986f7af-6f56-4a94-98e1-aa931fc48870", "sighting--c8709544-4351-4f75-b59a-aafd46d779fa", "sighting--c59c1381-87ef-4316-8ee3-a4ee0cd95f10", "sighting--049fb7c4-f476-4cee-8045-78afb98d0dc6", "sighting--406776ac-254a-42c4-abb2-51b1322cbb91", "sighting--3d11eba1-4b7d-46a3-b0bb-ae6214506516", "sighting--a024a35a-fb70-47a9-842e-bf30529446f5", "sighting--f56fdfc3-3165-4b1d-a7d9-9fcbfdf612fd", "sighting--5d1ddcbb-3033-4316-9f4f-bcf288fb5979", "sighting--d7a45ebe-6b49-4179-b19a-399c7533f758", "sighting--c7e39659-a9bb-4495-9e55-61a52e2528c6", "sighting--7b0de818-1b65-4351-9f12-9ea74cff2113", "sighting--d4178310-dc9e-4180-9dc4-a0f1939ec473", "sighting--6e060396-dca0-435a-a338-4b925ccb1b3a", "sighting--7a56f059-cbd6-4c77-b977-33fe9349323d", "sighting--5e5cfa96-9a19-4e26-8da4-1b5297a1e166", "sighting--9202fad2-55f1-49d0-ab11-77d27d205af7", "sighting--7a77773c-a100-41ef-9bf3-653d921af5b3", "sighting--4d0ad15b-c123-47e7-8c35-a124f8f44032", "sighting--56bfe9c8-8ee0-4a6b-b140-c6b2709dac97", "sighting--1fa0f2ac-8923-445e-a72c-1dd4ec46cec7", "sighting--eb18fd34-0d46-4073-b7e8-78ea443c1174", "sighting--0a35467a-1e18-4db9-aa7d-3712f8ae1065", "sighting--07dfa2b9-0b5a-4c44-ad64-12dc0821dea4", "sighting--ef7fb94d-c62f-4906-a8ce-d937bc41264b", "sighting--98feba1d-0ed9-4a9a-b019-32bd580cf8b2", "sighting--9ca51f02-6792-42f8-9d75-c00d3fd806fe", "sighting--475f6012-eaa2-40e7-95bf-a6d8ca7dfcc8", "sighting--18615420-391f-4026-86b2-0e2c7fc990c1", "sighting--39eb95c3-7696-4d55-a25b-19cfd4c9a065", "sighting--7ac388e9-a161-42f5-a831-cb301224b59b", "sighting--578a8752-2066-4e5a-b608-ffd836f895ce", "sighting--9eeea9a9-33b4-4bb3-8bdb-12a9e53c393b", "sighting--bde6cc76-1e34-49b8-bacf-4f8c45e422e9", "sighting--9e21bc7e-872d-4f96-99fd-a5970b19a4b9", "sighting--33bf713d-4d6b-4457-bedc-11381c8d1e23", "sighting--f0c0af98-e8d2-4ad8-a767-718d02ae5beb", "sighting--203396a2-33d1-4d2c-a6cf-3eea4099ae77", "sighting--edda78b1-bb88-4a8b-9992-47ee61e43d49", "sighting--24b5f42d-b0e5-4309-88d1-7a8b313e1cd7", "sighting--823937f0-f016-40ab-a1e1-414e09dd66a9", "sighting--ea26255c-f905-4252-b699-d47630ab7b65", "sighting--22ce2bdd-7e1f-4cff-91af-cee65a1c94b3", "sighting--6f40e8a5-d0cc-42a1-91f1-31d50a0453c1", "sighting--0bce5128-8ffe-49f9-bb5e-2645e3b7a18a", "sighting--acbe113f-6ce9-48c0-bf92-ae59078f6ecd", "sighting--c0dced9d-2385-43be-b6c3-e165cf1e18c5", "sighting--c661b980-dfa5-4855-8449-a0e07a13fccb", "sighting--31295de5-bc49-4632-a239-81dc9f0a7400", "sighting--b25d0358-adec-4217-aeed-ef06a101b8b5", "sighting--38112f0c-a10e-4d30-9ca4-c0dde2a6ccb1", "sighting--1ef91b2f-6e88-4e5c-a4a3-6825ff02e0a9", "sighting--c07ca6eb-6984-4411-8752-645217e74f46", "sighting--9a49fc48-415a-4910-b8d6-ecb23d2feeb2", "sighting--ea3e8744-3fd4-48f9-a8d4-8f8f63eb9d41", "sighting--4f4db009-0b6b-41fc-9491-3e2b52aab270", "sighting--f26dcbc7-bdab-477b-a57a-c37b2118fc64", "sighting--8fdd1529-7c80-4584-990b-136fbba132ee", "sighting--9f1081a5-40a3-432f-a164-90b0c65944ac", "sighting--7d8cceb8-1585-48bc-b149-19787b8441e0", "sighting--994194ac-6cc2-418d-9dbe-0e421b64b3b3", "sighting--049ff160-210b-4c4e-89e9-8a6b1f75aba2", "sighting--d2961873-6ad6-4ddf-9236-beae153f5ac3", "sighting--345f3d29-94e3-401b-a664-d57c2aaa5fe5", "sighting--b904ebad-6d44-43f9-b5f6-a338e05c64cd", "sighting--e0ea0981-0b5d-4cd1-9261-dae795b03992", "sighting--92b97e5d-81db-4eb7-9d08-5a398d27d8f1", "sighting--d71bbaa4-d3bd-4dc4-a775-5821473e7cad", "sighting--60524e47-eee3-4e8f-b9fd-36cdbe646e23", "sighting--42f0f393-47bd-4843-b493-3cf668b73828", "sighting--95b61189-b6be-41cb-8a8a-41fcf2bbe51c", "sighting--7d028162-91f2-40e5-ba82-ab11627f5fff", "sighting--bf6756ea-492f-4186-9b71-21a6c1b44648", "sighting--3eb0a34a-22e2-4362-adaf-7abbcf008cb2", "sighting--ce2371aa-dfb1-4ac0-bab0-b37411919c25", "sighting--cb4bb9c0-3cbd-4477-8af2-1098121ecafd", "sighting--94c04a7c-18e0-4ade-bafb-de5b6e5d69a1", "sighting--a8eacfc6-1f38-480d-af98-828a882a6bf9", "sighting--ce1dff4e-429f-404d-ad12-97877a55e2c8", "sighting--a18cd536-ea79-4fa0-b20a-dfb64222a236", "sighting--ee180918-8f84-4df5-ade4-c40e3ddb97d5", "sighting--0dbbe83f-a74b-4514-95ab-74b03ba7f4ae", "sighting--cbd7c560-fb91-45f4-9241-56c35c92ba29", "sighting--847c44a5-3466-44d5-ab25-a565ce7c14d8", "sighting--942a2df9-9386-4a54-b1fc-394fd45d3ddc", "sighting--11054dbb-8250-4c0d-b67b-d6b07cabcca8", "sighting--4c726ea9-547d-4ad7-ac62-45527ea3f914", "sighting--89383b67-649f-457e-8acf-6af19fcb51cc", "sighting--c9a15818-5294-4835-8da3-c708bd34441e", "sighting--aecc57ac-f864-4d3b-9931-f565670a9ed5", "sighting--a6fcd645-9d5f-4172-b764-559c1138bf62", "sighting--3f332b6e-b996-4521-a691-115f0121efa3", "sighting--ca6234a5-1a88-4941-ac50-c5a29ed5f8a4", "sighting--8a75f66b-16d5-4b27-a558-df97b0cea01c", "sighting--67a07866-ae4e-4bec-9245-d4098e63af10", "sighting--02dc118f-3c39-46ed-be7d-6b7b2e380804", "sighting--438029fa-2dfd-4a72-911a-19eb4f5d6fc1", "sighting--92c56cbc-25af-49fe-9550-ea5d99423281", "sighting--942c4314-6662-41bb-bb99-44d8573f6b7c", "sighting--77402f72-8b99-4c11-a4da-ecdbed51ae91", "sighting--479d29e0-450d-470e-8e93-2cdbf40794a8", "sighting--6c3af496-62ec-4ae6-9b7e-d3640c790a5e", "sighting--1a4f404a-348b-4661-9024-1f96c1de1305", "sighting--d8570b7f-93fa-48fc-afa8-d37eee35f14c", "sighting--beace214-698c-4484-b3c8-7d5700f8dd5d", "sighting--2a31a2ff-1574-4050-9031-f24f943454ed", "sighting--a4a5f45d-0530-476e-97c3-a931c108ad9b", "sighting--b7b50e04-601b-4829-860e-a30892fba7d5", "sighting--93abb667-e02c-4e54-bbde-23e01dace942", "sighting--d989c591-32b3-4755-8117-d08de618fb3b", "sighting--4d345b11-c2f0-4c75-9199-94553cd749b9", "sighting--3bbc1fd9-06c0-497e-b8d0-1576657648ca", "sighting--88abf4c5-0825-4d37-81da-38b689b11975", "sighting--e80c12a8-3a1d-4cdb-bfd8-cd6e37231057", "sighting--9f55bb43-b18e-4161-94cc-e7721ca585ce", "sighting--b673a629-be4c-4857-8328-f2ce84445a70", "sighting--0eb81b3a-bb68-4ece-a23f-84e051b31f91", "sighting--24386cc2-d540-4d1b-9ccf-00241bcbdb96", "sighting--f2728afb-cbb7-4402-8778-cbe9c177481e", "sighting--ed739900-fa31-46ab-bc70-fec802e7e738", "sighting--8e6959f2-64de-433a-9e0b-5ef5fae65ca8", "sighting--9f08c945-c8d1-459a-8ccc-d131d1d76d4a", "sighting--25d21c24-b08e-40f0-a2ce-684d2943b615", "sighting--f1f34ce2-9bf4-4ba9-b3a8-045034ff0071", "sighting--fc3ffcee-be1d-47fb-be03-f4a74c9f1025", "sighting--4a0a3b14-a00e-4b5a-845c-0ddc75f52ffa", "sighting--4291b97e-0115-40e7-a43e-adecabf2de7b", "sighting--547c8471-bd1e-44ff-aa8e-cdc187f14aab", "sighting--27d252c0-c093-4b8c-929a-11633e95f90b", "sighting--06eee588-2f23-476e-b42b-8931bd506a0a", "sighting--42afa270-b5d1-4254-b5b7-333bb30b76a1", "sighting--7411d405-4788-4f50-81af-3e84f17639d9", "sighting--b449a2ff-ec8b-4aaf-a2fc-d78428baf75e", "sighting--02232a37-27b1-4970-b407-df2e6b640d27", "sighting--0792549d-bae4-42ed-bec0-b300890e4c53", "sighting--40db87d9-42ab-4a1e-a0bb-fd73d4386a11", "sighting--9f6ab9eb-b1af-4f50-b8e3-86e725792530", "sighting--22315764-bb0b-453a-bc0b-ed44fae9176f", "sighting--c2472727-a3eb-42a9-8b03-b99f95504a28", "sighting--6be8d866-dd05-4233-ad0e-8a94a3da4c57", "sighting--e8f87282-bfa8-4b83-b853-f9205795f86b", "sighting--000d4f0a-1f97-4416-9c75-550e9a544470", "sighting--bc6e21bd-c369-4efa-a6ee-3c57a761956a", "sighting--a18383b9-68c1-491c-bced-ad8e7c4486c7", "sighting--13b98365-3629-4ee4-986f-39a2ced2e2cd", "sighting--6f0d77ea-3bbd-4941-a2a2-f3e26a8a4bda", "sighting--6ea6866e-374d-458b-819c-37074139943a", "sighting--44184753-9649-4d9b-8ba1-291cd43c98df", "sighting--1d903d65-34c2-4665-8cdb-a762993a8bec", "sighting--751b4ca1-5c31-4003-9685-cc670e97c61d", "sighting--1f0e0172-a3fb-42ca-8b1c-96c9558e14c4", "sighting--ba3607f9-7977-4590-beb2-31b89ed1b47b", "sighting--139d3465-a5f4-4c77-af9f-671202714d15", "sighting--482ab69c-f9ac-4a73-a2e0-eefae9c41bcd", "sighting--7ac5abf1-1478-4898-a1ce-497c5c2bcad0", "sighting--f61fee48-c86d-418e-a8a8-60a6708dfbe8", "sighting--e5faf63b-bc39-4d83-be82-7da76246644b", "sighting--48f3fbdd-4438-4bba-82d2-f1aec52c6229", "sighting--eaa53b61-e920-431e-bffe-6d8b762ab638", "sighting--bac42260-0d69-4467-a586-6fdae9b8ccac", "sighting--1ac938b0-5b2d-44f4-8777-6d93450e7f67", "sighting--2538189d-dc7d-4efd-ad5c-7eb66384fd73", "sighting--5a9ada35-51c2-4081-943a-d41511b972f3", "sighting--3f1689d5-766a-4e92-8c54-e4a2afa75d41", "sighting--20c20b2c-6234-4748-9c06-26dbf730bb7b", "sighting--4b7dacc7-590b-4b71-bff9-f2a048f5a467", "sighting--10eb1eb2-9b70-47a4-82a5-4091f7af74f0", "sighting--0e21452f-f37c-4205-b44d-096f025e88dc", "sighting--670d46df-039c-4ce7-8c77-0f8578e05ef0", "sighting--4241b837-ed3a-45d2-9253-ff76366d83bf", "sighting--3a03724c-b483-4b8e-8652-e275d64ffd34", "sighting--af1d8914-d584-432b-84ee-43851990f2ad", "sighting--f168e199-b711-414b-a390-2b2d18a27148", "sighting--2baa0a32-4e5d-4c8a-abe5-342ca56199aa", "sighting--8f9e1554-7c45-4c86-aca4-bead12770629", "sighting--ee663dff-e362-4dd8-ac19-d908e36b357f", "sighting--c7fb522a-f558-4fea-8c1a-3567004af53e", "sighting--1be5c333-86c4-4eed-ba81-edb8fde1c956", "sighting--c03d06b8-b741-44ca-9752-a82ff3ce9cec", "sighting--1ebe5baa-b709-4ae7-bd11-b20156217021", "sighting--98b101c6-f25c-475d-9ebb-61c4b14da74f", "sighting--1b73ce23-835d-4b24-90b1-a8b8d478fdc0", "sighting--3ca21253-e816-4613-a56d-19a5c76f3c4a", "sighting--c73fe87c-1482-4c65-a312-97c8940e25c0", "sighting--defa5ab5-7e06-4e1a-b061-c8d9753b8f4e", "sighting--cd709d92-ceb3-450e-a9b0-e414280455b3", "sighting--bc389f03-969a-4137-9a0a-94e7799937cd", "sighting--78f6704e-cbf9-42a7-88de-784f99e5fd55", "sighting--a80c30b5-c0db-42ef-a424-8ee9d1105aeb", "sighting--c7727fe0-4557-49b6-962d-034350aad7eb", "sighting--9182a92b-9d91-46c2-92ec-a46d79c9007f", "sighting--1712a660-7f1c-49ff-a212-d95553fa01a5", "sighting--d6e56229-5b58-4b9c-98b8-941ff81064b6", "sighting--cc8e4bad-6480-4c6b-9cb9-edd8ec2837c9", "sighting--f0c89504-5f0d-4379-9136-f767339e8232", "sighting--49a01c02-061f-40e6-92b7-7c6c9353f0e7", "sighting--4ab2eb84-49e4-4566-bb87-8a5126b75f45", "sighting--19d91bd9-dd33-4e30-9d33-e94d1ecdfa8c", "sighting--bbc45069-c72a-46b6-8bb6-7b308e0c9201", "sighting--d5cc3c27-7c22-496a-ae3b-f6fbcd13df36", "sighting--1c4cf82a-6480-42ae-967a-597d7d4a3360", "sighting--a2d0b13b-4e9b-4fdc-a540-273b121abdc0", "sighting--a2b81f3a-2184-4dac-9da3-91e5525f9e7c", "sighting--cecfe502-975e-4430-ae22-56c163fa7ca5", "sighting--51fc4ae0-666e-46b9-ab6e-d7d50a69d44a", "sighting--c5a83522-e7ef-4a0f-b330-a5d8f59ba712", "sighting--71315808-cafc-4832-a4aa-8e49019e844e", "sighting--35cb92ff-2e6f-4edc-a71b-01a4351e954f", "sighting--fdac296b-931f-4a06-9f44-d7ed80c8d6d1", "sighting--5898f1c2-0be1-4f0b-9aa6-ea68c5f4c41d", "sighting--4bad1c36-cf26-47ff-8c9c-dead873f6356", "sighting--d01da24e-e942-4e2a-a119-f71abdfab692", "sighting--86a9f91a-561f-4d80-8138-be68af38384b", "sighting--fe11083f-7b18-4ab8-b5e9-94ca9c5a59dd", "sighting--c8b247f9-d83c-4a3d-a6c4-ad1c9d77e60c", "sighting--6469d882-30fa-4e8b-a814-5ae8985beee2", "sighting--e695c888-027d-444a-af06-9e18d205d5e0", "sighting--cd51023b-4a73-46a2-9d08-b4719f006f2f", "sighting--6f1faf3f-02a7-45d6-b9f1-4705bad5e72b", "sighting--1610e537-0b69-4dd2-8321-0b138e6b8190", "sighting--4e308837-1b71-4aca-a410-17f3e1a6c839", "sighting--df8a28ca-c932-4f4d-ad83-4ab7e4328f21", "sighting--be26de30-eee0-4b9b-99eb-b73eadfeeb4a", "sighting--76e9402f-dec0-4604-a6f1-75636a44ad5b", "sighting--5da91da2-6400-4bf1-a7d0-4f7c4d93a11e", "sighting--f3072022-968c-4812-90e2-4e41fc267db7", "sighting--f5b002cd-1c32-48b4-b2de-b19eb7da3f80", "sighting--da1fa31a-25a6-4491-8c30-9fe413dd47e1", "sighting--1d7e0390-b534-4bea-93b5-c377d5a69db3", "sighting--90b37499-deee-424a-ae51-701e85b79383", "sighting--75e40d58-b782-4371-bd98-cb18fd89c455", "sighting--d0647936-49bc-4b30-ae6c-3a86a3a8e5cf", "sighting--f30215a9-86a8-4a93-979d-a137ba3ab4fe", "sighting--6aed4b41-1723-4e90-9feb-a205207ef856", "sighting--37dad07d-7e29-4b39-849a-c8f0a3f0cd81", "sighting--e51b4b63-8517-4747-a716-c3a135fc8c99", "sighting--01c50a43-3d46-4ec6-90f4-53fe5994a48e", "sighting--c6679df2-f4e1-4d45-81ba-f53889073b8d", "sighting--744c5646-ae0b-4753-a053-152150c09d6a", "sighting--0b589eb7-2a36-43f9-b93f-fb231550db67", "sighting--2e2458fc-4144-431d-b9e5-f4ccd9132b60", "sighting--e894d5f9-b8dc-409d-9ea0-0f9abaeb5632", "sighting--9a4f74dc-c534-4fd3-8e05-090b1c31700f", "sighting--51ed9b15-40c4-46d4-8a54-47dfb45cf9d8", "sighting--015b6dcf-d5e3-43e6-b541-90928068ce17", "sighting--34602548-c892-4089-9190-86dece523e38", "sighting--f9406a62-21c8-4b0c-ab6e-b4e41dc5ebec", "sighting--0a5463f0-e607-4ba6-abbc-1f34af65e2b1", "sighting--a94ec340-d78f-4d56-a6e3-8539222c8aa5", "sighting--79a597a8-7258-4ed1-a484-56e7625d41f0", "sighting--a863ac50-74b0-44de-98a9-1fad2cebd32e", "sighting--6d408fd4-2502-4435-8f94-5506a033e7ed", "sighting--ca497b43-4955-4dab-9c53-8cddeced5b18", "sighting--30a23b24-166f-49c3-8a61-9a22a31169c2", "sighting--69a68ad6-c423-4d34-b57e-7d4cce4423a9", "sighting--298d3204-c320-4304-9dda-ecc5cc1f4421", "sighting--82e9113f-e951-4454-aaaf-99bd7ed2d9d1", "sighting--20a8a5d0-8fd8-4218-bc8e-14ab730fd3f6", "sighting--31635c03-191f-4fbc-9ec9-eafadf8edcd1", "sighting--f18fe308-2d7a-4302-a0d9-38ff970f754c", "sighting--2c4c8b43-cc03-4f3e-9f68-0f38cd5a12f2", "sighting--3df2a584-053e-4510-8d06-a5050026b63b", "sighting--1b9f254d-d609-42d7-a7c9-fdf8e03f317b", "sighting--7ba6cf32-4c07-4ea8-9ba5-4a452dd3f1ae", "sighting--5a6e5890-cff6-42b5-b98d-c517373df3f3", "sighting--470c8276-17cf-45d6-9d0a-1ec345256cba", "sighting--c24d9c2d-5bca-4ce9-90db-edad92927a31", "sighting--50786809-9967-4f97-861a-541c5c9696cb", "sighting--331debf0-4f6f-4a5a-a9e9-c7219d5186d0", "sighting--4e7bf987-5ede-4987-a175-32659df83253", "sighting--8de8df7e-4080-43f7-a64e-718d24049fc8", "sighting--c1e34fd9-99a5-4035-bb9c-d0e0d4d8fe0a", "sighting--5270c186-dae2-49df-81dd-3819c49814b3", "sighting--35f2b0e8-3483-4ad7-bc99-983d58918e8f", "sighting--bff94a7b-3e22-4e2c-863e-019a0ef759c5", "sighting--a2e8570a-43e5-4acc-bca7-33d3413a3294", "sighting--5d0ab72d-df4c-4484-b822-ffdeb7501721", "sighting--4210175b-1dde-4cde-b8fc-7a4863b45ad2", "sighting--bf583541-baa0-4be6-a675-146e09c2227f", "sighting--cbbce20c-7f0d-4732-9cd8-2ea38375534e", "sighting--4aecdc56-e438-4679-8c62-65340115987b", "sighting--8f782619-3a7d-4b3d-b3c4-11eb6270ccbe", "sighting--a59ec112-e02e-40b7-8ff2-2c297e0e7b47", "sighting--44c2f80c-d325-424c-8f74-a8a03536678b", "sighting--56fdfe0d-e63d-4c28-8e82-9d8b9c2f4f80", "sighting--c6a5a074-a6a6-4109-a489-98320aa069ba", "sighting--f05d346d-e978-4347-8630-da651ad7e264", "sighting--74351b77-1935-458e-b73b-bb1b91f3ba75", "sighting--9a281872-b74a-4b4a-a319-705e0804a9fc", "sighting--2a169236-4799-4e26-98ef-b4abf9ae9b65", "sighting--74a68381-fb08-4248-84a2-9fe5ffe9d011", "sighting--720e1353-5362-4970-aa2f-66aed652004b", "sighting--b7cdcf39-2c16-463b-853f-763069624a12", "sighting--3b3a30a7-cf49-4058-8ecb-e37406d6cec0", "sighting--dde23071-2c05-4fc3-b7c0-5da14a539a0e", "sighting--bbc20b2e-ceb4-4c11-8f14-8065960986f5", "sighting--da93dd67-6d0f-43e8-8bc4-7f96d8b5c95a", "sighting--f02447f4-e76c-412c-921c-c36703724596", "sighting--68888e69-c1a8-474c-b0bb-bcf534501f7d", "sighting--b1aeae81-6c32-4a16-af6a-4aa98f2b8c87", "sighting--67b45e39-8d10-41f2-9955-a1802ff1480a", "sighting--ff60fd22-3e6a-4421-9e53-cdf1d2609558", "sighting--607fc66d-c072-4458-bb63-382d9d12bc09", "sighting--e93046b4-20dc-4379-a340-fe9b8abfd7e7", "sighting--1e7d3554-f907-466f-8104-72ae472347c7", "sighting--c76384dc-07db-4b81-8e7d-0e777f575a6d", "sighting--e3a4702a-465a-444c-8be3-6c3a03984779", "sighting--1184a968-9c5c-4109-b107-d7e7e7e3be72", "sighting--010882e0-b621-400f-a15b-620446ae5f77", "sighting--19672fa7-3ca0-465d-aa3a-25ddfdcb7642", "sighting--3a0c0c44-713c-48e8-8a87-e12fbdb60760", "sighting--ac491d90-d50a-4953-bc8a-a8402822804e", "sighting--189aa22f-1a4d-42dd-86c9-6b2884d6c70c", "sighting--8273ad3f-98f0-4931-b58f-9ba3f8c30ac0", "sighting--2548b4b5-26cc-4574-99d1-9ccd7efe58ce", "sighting--86a190d5-d5bb-478c-8fcd-6569c9729b46", "sighting--a4e6b593-5fcc-4adb-b199-678200923000", "sighting--cdbb8b6d-fd9d-4db2-8c1e-174b5d62fb30", "sighting--ef4a1626-345f-4d32-9c74-8a37d556a724", "sighting--dc283616-04d0-44b6-a4aa-fd453442c122", "sighting--66b022f8-ceed-4a8f-a504-a51e82c5d009", "sighting--9d2b2936-b27e-40e1-b0c0-ebeedc6d22e2", "sighting--3bf458fc-ef17-4faa-9d85-09a07421ad4f", "sighting--71ab736e-cf23-4911-a696-0f9036265205", "sighting--2a90fc0d-febc-46c2-b399-14912b27784a", "sighting--12c25db6-0488-466b-ac35-5f33fae10f0e", "sighting--a7e0333e-d1e4-4fbe-b78b-730ab8eb0a42", "sighting--1c6c1e2d-ae9b-45bf-9597-34754bca456f", "sighting--d3ba7885-4e2b-42a6-ac09-895c58a33e5f", "sighting--c5a9d56e-e1e1-4119-8da4-bc55db5e9c7b", "sighting--d3072879-10f5-45bb-a626-4ec1290f270d", "sighting--4438436e-80de-4eae-a63f-dddfc5523bbf", "sighting--65ad05b6-f559-4f8e-898f-5a3eed747ca8", "sighting--255950ab-19f5-4223-8fb5-c3d190486a7d", "sighting--dc6b13e2-3101-4024-a925-fcc1944dfd65", "sighting--2dafb847-07ee-4264-8f7b-1cd442df2e70", "sighting--d7c4c5f2-619f-48e1-bb28-05d3c277f3b2", "sighting--0c970673-e158-4455-afb9-b6c925d99105", "sighting--c8a517a6-b36e-42e5-8749-4324e0f029b6", "sighting--7e21c727-cef6-45be-bdcd-24a2b67e5b02", "sighting--38f51152-4d01-422f-b64d-82b48bc654ab", "sighting--c764a412-786a-4446-bdd7-b789d712725e", "sighting--a7fd69f8-b79a-495b-b9c2-eca9d8b8c383", "sighting--527e5fe6-4e69-4477-8a06-2ab2e4fe509b", "sighting--79075771-ed57-4b16-a496-8e0ee9d23987", "sighting--dd1e776d-3da1-4398-96cf-3ccfca898cdd", "sighting--107b36d9-6bd6-4da3-b593-c7c76f96152b", "sighting--5b7f250d-ed3c-4011-a80d-703f4eecfe7d", "sighting--38b7fb95-e31c-400a-b614-d545b0a697cd", "sighting--cccad26e-3d66-4976-90b3-1c156ed1343f", "sighting--307c74e7-4f06-4351-8734-1730a6b4bf20", "sighting--61819976-5829-43a7-9cd9-0d08a89ce595", "sighting--6b483842-93d1-4438-bce9-f9d1f3170d50", "sighting--75b026a9-bf77-46f4-879c-d12bd8cbad2e", "sighting--7b0b8866-101f-4427-a83c-51f3d0078904", "sighting--55b27132-b8aa-42e7-947a-c50c9729fa7d", "sighting--fafacae8-6a30-4b60-bccf-8c6e2c61b5c9", "sighting--3ed0ba14-a6c4-4f1a-919b-9c2f14568c72", "sighting--75f66816-de57-4b63-a356-f2ea27040299", "sighting--28e68708-2914-4f46-829f-68c48399da88", "sighting--b0e2f43b-f5b2-460f-856c-af13cb54a11d", "sighting--73fc6e40-4035-46bc-8909-7a1d42b98bbf", "sighting--265ac042-acd9-4a98-a535-d2b640b7fdc0", "sighting--f7ccfc9d-798a-4e71-9162-9db3053fccd4", "sighting--f55f51b0-b194-49f7-9794-ca64bde1be6a", "sighting--cc97a3b9-a491-4a76-a318-4b2cfe1e213e", "sighting--56a28236-f1af-49d3-9c36-a4e4c2ac29f5", "sighting--154ffc76-e344-4125-98d2-12171299d70a", "sighting--2cbf93ef-cc72-4d03-9e88-3a8b2e799b68", "sighting--013ada8c-0d7e-49a1-b67f-60e6effb8873", "sighting--846704e1-a076-4569-9b50-e74dca7aec6d", "sighting--8c57f0ee-7a7b-4477-835d-09afcab184b3", "sighting--f370781e-9f12-428d-8d66-275090572ca3", "sighting--609264e1-b74b-4da4-ba12-c4c9db8a9749", "sighting--0a3e6273-c955-459c-8f22-303c5f7c7b6e", "sighting--95d03697-7b82-4a19-8c41-fef40785fd0b", "sighting--ad9ae4a4-2abf-4cb5-b16c-ed0211dbbade", "sighting--fd780d1f-3733-477f-bd6a-b3c2a4c0da57", "sighting--f29d1da5-f754-418d-91d6-555123958f7e", "sighting--bf30c460-ff8f-4b39-9ae5-0cc34efd9ec0", "sighting--716e5da7-0463-43e3-9cd6-9a17834c70b0", "sighting--3b1a42bf-17e6-4222-acf0-7e8d519a523d", "sighting--90830b54-0b2a-44db-8889-6cc5a2c2afb9", "sighting--46321c4f-e88d-41fd-b30d-4a631bf30da0", "sighting--f8cf4b6e-fdd4-4075-86c7-61870ea11b59", "sighting--fb35d1f8-5777-44a9-8a41-aaa803de8100", "sighting--f2507122-e940-4f4c-a606-827bcbf30f04", "sighting--28bcb797-3d80-4646-aed4-741abfdb6f20", "sighting--f74968ce-0e6e-4c6b-bbf3-9a607264fb91", "sighting--14d345a7-118f-4646-9204-cd8ed82ba94e", "sighting--d93b2003-a3ea-4244-bdf4-d6e25f168c28", "sighting--51ba6598-8683-4351-95e5-4e24d176e8e9", "sighting--bf0f6136-5d97-41fa-8f63-078d93557f23", "sighting--e641049f-731e-4c36-a6fc-232152e4bb65", "sighting--76a52016-2d81-42b8-b879-e96a44d45d52", "sighting--ea030244-965e-4372-92a8-506e45b4b534", "sighting--3e971792-1126-42b0-96cf-0bfb2fe5b410", "sighting--d7a09593-652c-4742-8d3d-051d659c6062", "sighting--8da6b32d-3390-420c-b33a-d7557a312d99", "sighting--37dc62e3-a816-4cb8-8bad-c4bfb5787804", "sighting--4380c90f-fda2-45eb-b3b5-cff017e20a60", "sighting--f386573f-df8a-49b6-bc88-c06fdadf8858", "sighting--81c26a20-aba0-4f43-9ca5-fd3ba6a4908e", "sighting--c13c399d-49a0-4e87-b49e-939330759840", "sighting--f8aa6d08-0e28-4b4b-ae6c-470403290dc8", "sighting--f180c6d6-ebc8-4640-bc22-11f11dc113b8", "sighting--d3da2c01-cfe0-4d63-8f69-51f9be7ffb8e", "sighting--bdd043ad-d689-4ec8-9e41-711166d6c355", "sighting--5b90ee34-4ba6-4537-9dce-6bc4c3a41923", "sighting--e9984bc0-bc89-4dc4-a053-1b252e46f7a3", "sighting--036c105a-032d-4442-9151-ad583d1eb4dc", "sighting--2ee1888e-3928-4c7e-984a-69b75a16990d", "sighting--d70a54a9-cce0-41a3-95ab-445cf88bd570", "sighting--83ab1604-2ce5-4f8e-8643-53aa624955c9", "sighting--4dc52453-8f5f-4e7b-8f5d-9c0a560794af", "sighting--ba1b6354-c607-4a05-9f36-201173cd54cd", "sighting--2e040c56-1d1d-4b52-ab95-d8ba55b847e2", "sighting--daa55a88-d9e0-417f-9083-0233468791c5", "sighting--0301e1dc-29eb-4275-9fcf-0aa47ccdce9d", "sighting--2a1a3302-2085-483e-9513-dcc745b1cd38", "sighting--cf337e34-f60d-4fdc-a8d6-53fb262a25b9", "sighting--71960a9a-a149-4a0f-87a0-d4b88d46e964", "sighting--434480a1-3331-4239-8bdb-35b443789f1a", "sighting--dd5df317-9e49-43d7-ad60-90bcd3bc2427", "sighting--0444e318-906e-40a4-897c-60ee7f74aa42", "sighting--226fac99-6bef-4479-86ff-cf656a3938b7", "sighting--17735fb8-4ca0-4323-9973-7d69e3da2c34", "sighting--f68bb7b3-4e60-469e-9cee-065f2ff9588c", "sighting--963dc0c4-9b84-48c8-a72d-ae166fa49ac5", "sighting--de05a645-78c3-4767-a94d-429399186c37", "sighting--f93ee6f7-575d-47cf-9226-a6f4464ac9c0", "sighting--166f7bdd-9673-4813-ab4b-66d93c2a1298", "sighting--c57b11da-184f-46d0-9fd3-5358718dc5b4", "sighting--4d7bf688-58ca-4ab8-bc24-6f5158186e22", "sighting--9023a76b-cbdb-4040-bfdd-6a62a87c5531", "sighting--c5e1f982-a8c1-4f00-9d07-d0ab709ecaed", "sighting--51397a8a-f35b-4380-9562-a18d33d0ceec", "sighting--1ffb459a-7762-4bbf-b591-568b16359e97", "sighting--70b42739-730a-46d3-8b42-bf4d1137b2de", "sighting--a8af90a9-7ea0-4018-9c6f-8b655d7e2680", "sighting--c6c26887-5ec3-4814-b341-bdccb44708a7", "sighting--be73e4cc-7419-4b29-bcf5-1b2f7698bbf5", "sighting--76c19e68-bfd3-4531-a8d6-dc1d75d739b6", "sighting--75d4fd88-bf6b-4c02-8a79-09ff7e8bf2a0", "sighting--b112bddd-ae76-40b4-833b-3d3a22db48fa", "sighting--22d35cec-6c5a-48bd-8a86-113e6c454e72", "sighting--b6a8ddb9-8ff4-4a6c-ba85-c0dc39c6a886", "sighting--62523fcf-b976-45e6-b158-bd1bbe91250b", "sighting--043ba58d-9977-4d9f-bb7e-381b55d2d6d9", "sighting--19906af4-6596-4b28-b242-d0592059a1a0", "sighting--6a80efbe-4acc-4399-a152-0cc6aa588038", "sighting--15ba8060-1d85-42ab-9dd5-8578341948bd", "sighting--428c597a-ff5f-48d6-a1df-9952e93dd7eb", "sighting--e43f8371-c144-48b8-b330-c809a3d9f3d0", "sighting--0f498a1b-1edf-41e6-bab1-a85ebcf967be", "sighting--68b8cfaa-807e-459c-90f0-f31f3eb64575", "sighting--d29483a5-b69b-4760-a849-159e3df1f854", "sighting--6bd3e77e-31ee-410e-bc43-e894eb06a82f", "sighting--3c0d4a4e-fe61-43e6-a6f0-d8b61da7d22f", "sighting--7d5e3fc2-f6ce-414b-a69e-4b7a73ad2baa", "sighting--85330403-603f-4934-9825-7eec7335ae71", "sighting--a772ed37-b735-47a7-a9be-2afb274d06ef", "sighting--88a4a9de-da86-4861-91fc-0d9863050246", "sighting--50d64266-f48d-419e-8842-1d7cb35234e1", "sighting--556069ce-397c-49f1-a90f-ef736aed309f", "sighting--739a965e-3dba-44ed-9cb5-f3f76ba7c908", "sighting--bf7be23d-799f-4258-9ba3-19ae7f632df0", "sighting--5c075706-af96-492a-a99d-2323cc6d5843", "sighting--4cf2c981-154d-429b-874b-54ba9600ddae", "sighting--0c74768f-c015-42ff-b07e-a80d9ae9e2c8", "sighting--56fbaa9c-2bdc-4b4a-ad49-82fc1a40945e", "sighting--2d5bb52f-edb0-444f-8c72-cfda0c31c65e", "sighting--f080a283-d1ff-41f0-b38d-c9f1c21b553a", "sighting--e25cb0b3-d61e-4103-b4ed-8f17579e434a", "sighting--4a8e27ce-fc23-40b1-bd04-e64db984767d", "sighting--ef9e3f40-1e44-43b7-8c8f-0607925759b8", "sighting--05d92524-e31c-406d-a524-2a4461a86617", "sighting--d5b387e4-5fb5-4e84-8cbc-bf61dd79c241", "sighting--29f7f347-1fd1-47fe-a34f-5ce0fb401ad4", "sighting--73195493-74d2-4628-ab83-b954131eb4de", "sighting--82ae8f65-686a-43dd-9edd-9a84cd50b340", "sighting--82f9394d-ca19-4244-b50f-9d8adb4a4389", "sighting--9a66ff8a-e266-40b9-ae7c-71e4e3f4c255", "sighting--50abb439-8ce2-497c-bb15-7c38a616ec59", "sighting--2e5b39f3-8097-4356-b7d0-a6d18e8cbe27", "sighting--b461ed44-a672-415d-b9b7-568c98cf836b", "sighting--0e35119f-1f11-4785-8d51-8f61fa14e76f", "sighting--d9c6f53f-9eaf-4d81-b5de-9ec0f695de2b", "sighting--06f9a414-c091-4f53-bad1-8bdc121c57c3", "sighting--eb43aa7b-64cd-4036-80f2-dbca2ffcdae7", "sighting--7800ef11-1e1b-4ce9-881e-4bf79788a869", "sighting--eb8788d8-9736-4ea7-ae36-57fcd30b125c", "sighting--50e3335c-fc88-4143-9356-6a685aad21d3", "sighting--976bbda5-16f7-40ce-8a84-779a2cd2f36e", "sighting--e2e101cf-584e-42b8-bfbc-7cda75afb464", "sighting--063c2261-7cf2-4f0f-9e8f-a5ead9e6161d", "sighting--ef7b1fbc-de10-460c-be65-e9cb2001bd3c", "sighting--8cf510b5-58bb-4427-8058-22b81751f8cd", "sighting--f19d9def-aa50-4410-bbef-0be4be6867e7", "sighting--dd9334bd-91fc-4f16-ac61-4969d20e2c33", "sighting--59a42a73-f8d3-4682-8d10-ce0c5e9b365f", "sighting--f853ed9f-4e08-4ed7-90fd-906f6d83c45a", "sighting--7e638a2d-fd61-4e36-80d1-01e282776e5b", "sighting--bf45809a-f568-486a-82d5-df0e7bfe89ce", "sighting--4959e51d-c581-493b-9005-fb77115493d6", "sighting--693205aa-436e-4a8c-b2b0-bfac8df66a8a", "sighting--fa875b0d-4456-4c76-88ae-1e2db9b50c01", "sighting--3585c9e7-bd33-48b4-a73f-d9bd3432ae06", "sighting--266d98a1-2eb2-433c-9886-43ebd4c0695b", "sighting--c14b654b-51d7-4a8c-8f37-4b9375767b49", "sighting--f9b7482f-beeb-452d-a761-9bbc00b99435", "sighting--a2509545-18b4-413c-b66a-a4928c27e958", "sighting--5e8f77fc-dc1f-466d-9aa0-1baeed10fec3", "sighting--ef75bdb0-142e-4dd7-bcc2-5e865b78417a", "sighting--550971f0-ca49-46b7-8a1b-21f6f8bc3637", "sighting--8084ad53-61fb-42b5-b874-fc522428f074", "sighting--144052da-8f00-4a92-ae5c-b19d8458f620", "sighting--884b271b-7221-403f-94eb-9748cecf4db1", "sighting--8edfa190-7bc8-4511-8434-8140ab0418a2", "sighting--31d42979-750a-4145-86da-8bddf8418a22", "sighting--df9b1f8b-26a5-4d6b-b543-48313d96692c", "sighting--cf8f43d2-45b8-4b8c-ab4d-d5757f965192", "sighting--a6a51ce1-b0c1-4095-964d-2c71d04ac935", "sighting--f693bcaa-fae5-4e87-b147-614070a19cb2", "sighting--43651d26-5cd7-431a-95c5-cee7e050073d", "sighting--e0cc503d-2071-4209-9ace-4077ed075653", "sighting--e54a7358-bcfb-4927-8830-e8c79d551a6e", "sighting--9b6d900c-c1c2-4c7f-9bdf-c8cd2cf6e75d", "sighting--c22c5f7d-46f4-411c-b4a4-dca544fdb597", "sighting--73757546-3dee-46d9-89e9-88361b805e97", "sighting--2c3a0ae7-ba6e-4c26-be3b-288717269957", "sighting--19e158a5-7ba3-4c7f-bb7c-a243aab3c24d", "sighting--1a2ed7f4-eecd-4743-9cbb-60660383c85f", "sighting--d58fd029-a5a7-4202-a5f4-71678682255a", "sighting--77e87094-8335-482f-ae9e-dde4af25cb9d", "sighting--369536ce-46c5-4238-bbbf-12537efef201", "sighting--114fb364-88de-49ab-a8b3-b1a2732e2c0e", "sighting--fd317a26-c63e-4d6a-9b73-5c80728a63bf", "sighting--05344c1c-0812-4c55-a74b-915cec24e6aa", "sighting--1cd227b5-66b6-452e-879d-8f4c954c5777", "sighting--5e2f5bb7-fd16-49a9-b96c-86960ef775ec", "sighting--ceff8352-092b-4f02-9bb9-1e3630840e6f", "sighting--5c0332d2-77ef-4723-a164-10e257639831", "sighting--5e684efa-8765-448d-bedb-61e1d5b9baf0", "sighting--c1488fbd-0640-42dd-a2ad-725b9c27086f", "sighting--464cc1b9-0e7b-42dc-8783-e275051560c9", "sighting--006e14bf-7499-47b7-affe-17775e1a11d5", "sighting--40548088-a2d0-4280-b3ef-0ff481078457", "sighting--904f288f-4e54-40be-9999-077ab8583c3a", "sighting--76713642-275f-4346-a562-6a3fc8521f25", "sighting--b09a0972-ac66-4eb9-834f-55ccdcf5b412", "sighting--faa104f2-2ec4-419d-855a-9b6f7f342c10", "sighting--cbc0fc71-1b9a-4735-b576-239891850f9f", "sighting--c8764f42-b04a-4bee-bb6c-28712ce424df", "sighting--f8d0eff3-9c78-43d5-8b34-2e2794f178c2", "sighting--a7eed1f3-b045-406e-87ad-8db014a4bb43", "sighting--2e07ee47-9c29-4df6-9f54-a3ff24310877", "sighting--103a1f12-d4e6-487a-a747-452478a4e557", "sighting--5b59360c-e4ce-43e5-9a89-604884bf7f8d", "sighting--3c9e9fa2-5e69-4ba3-8a30-426ed3f435e9", "sighting--a3bc9432-dbdc-4fc2-ba6e-9ff749c7a63e", "sighting--4fff8958-9ed5-43b0-af6e-266dc93f592f", "sighting--c1d45572-38bd-473a-949d-535beb6b544d", "sighting--fdb47be0-7a0c-436d-ba71-58b13bb7ce1b", "sighting--41fc70ae-8e88-416d-b3d5-287264518de9", "sighting--5631db25-c91e-47bd-8802-f583f4352119", "sighting--dad217a2-b6cb-4211-b078-a036fda98784", "sighting--73a4233d-31f2-4406-bdf3-aa55afe69c7c", "sighting--48991f5c-e527-44c3-8850-1b92034e2b2a", "sighting--67650ba1-3ee5-40e3-8614-27d1bd29938c", "sighting--9f9a7cbe-5704-456a-864a-2e908ce98bc9", "sighting--40bd29bc-5765-4455-9256-eb4ef9afbfc5", "sighting--67eca00a-fb3f-499f-863c-309ecc8d9d8c", "sighting--47e52b95-69e1-4121-bc2d-1fbe1d5172bd", "sighting--fd82737b-b41d-432e-b31c-9a28354e6311", "sighting--696bf863-9db2-450c-af5e-62197b63fb23", "sighting--bc708010-6af7-4dbd-a8d2-a530a29a9961", "sighting--2c41d4c5-c000-407d-a89d-63234189b6e1", "sighting--29354472-0d70-4e94-b79a-c209e82f2cb7", "sighting--842e60cc-5b16-4384-8466-4b946608cedd", "sighting--53439cab-02a1-4850-9bc0-cd5c510eb90c", "sighting--fbade389-be94-4dcc-88e9-1ae4a0efc2dc", "sighting--226ff2e3-3c8c-496e-bb96-83676a63167b", "sighting--1098c025-c9da-4575-8dbb-f9e0cf96f18d", "sighting--656b1822-f9fc-4395-8122-870e511731f5", "sighting--bc7ea496-1c2d-4605-9f32-6c1156341c1e", "sighting--5c1c4ee1-f487-4f2b-a194-a6652d28fdde", "sighting--38788940-9ed2-4573-ae10-b9a8560b33e2", "sighting--00991cc5-cfc2-434f-89ef-bb5f878c73fc", "sighting--911ddf80-c44a-4f02-af6e-1ddba2c30d2a", "sighting--d309b66f-526f-433a-bd2f-e1d28d9494c6", "sighting--b22fad10-edc1-4b73-96f3-54dae530f1bd", "sighting--3ba53027-81a0-4dd2-9008-4e087cc5f974", "sighting--a23cd28e-8eaf-40e1-93bc-10e35d67fdc3", "sighting--b1c6ec99-8c59-4dc2-988d-9cd9f376e632", "sighting--ff16edd2-6e99-4baa-aed6-34ef6d3a5cbd", "sighting--189e0898-7e02-4cf3-b649-9ab8254e9643", "sighting--76b8279e-c25c-4af4-ab64-1f505729a190", "sighting--3caa406a-4f47-48b5-9c5f-b4e03b8ba15b", "sighting--8e29d5a1-bb43-475d-8be7-166864f6db5d", "sighting--3ffa0de7-b603-451a-8ec1-feebe9098a9b", "sighting--987e2cc3-7fb0-41fd-aa31-4a5a2839d01f", "sighting--7ae6d20d-8cc0-47a7-8589-8cc7aee8c306", "sighting--e105132a-8a82-49ca-9603-56836174d696", "sighting--385b6497-6335-4277-b6c6-1b53b45174cb", "sighting--8e6bbbee-8846-4464-a0a3-3da8d1a581ff", "sighting--26b0bb3e-104d-470d-83a3-0c6d0e4a0b0d", "sighting--45e6307a-2003-438c-ac7c-20190a558327", "sighting--b48e436d-9bea-4102-8e28-53a972053de3", "sighting--b128e38d-c795-418c-ad30-df83cdea6f0d", "sighting--14db3966-3ec0-4392-aea2-7dcef37373da", "sighting--e03b2aa3-043f-43ad-9d85-d53227af5fc4", "sighting--dc5eb6ae-e471-44e5-bf15-c4e562b72255", "sighting--b8df052d-3095-4c9a-87e6-e48a407e1212", "sighting--ef0e71d6-b538-41a7-88b9-d7e2cdb2cb84", "sighting--189bcaec-3708-4552-967f-cb2dd2d56cd5", "sighting--d4eb91bf-8d03-4d52-86bb-3c134abb4594", "sighting--68f29732-2b0b-4fbf-96bc-c56024eed8cc", "sighting--3524c8e7-ee97-4087-b1b2-ba8b02c8718c", "sighting--df46e183-e3eb-4726-b54b-f3f7576f86f0", "sighting--53c7a0b8-7d3c-45de-ab90-ad7f8b2587ab", "sighting--d2ca5e20-5cc7-49ae-8838-a958fb192d44", "sighting--14953913-ec6b-483c-8e30-62b064394231", "sighting--79c2c3c5-df38-417d-a5c8-c81ef0f111c9", "sighting--1a461ab4-91b3-40f9-b403-a5626b24167c", "sighting--a5d5f671-56eb-4684-92bb-fbdd21816767", "sighting--0a8265c1-b135-43a6-9699-7c766e2aef04", "sighting--717a67fa-8d84-4716-b8a7-0e677bad4dff", "sighting--64d98c9f-7979-4769-aee7-328529cefd7e", "sighting--be076239-f216-46c4-abe0-b7ae62d942f6", "sighting--faf7fcb1-b4ce-48af-8e38-ac8c3a28da41", "sighting--e944db54-e49c-4591-a56e-53206285a24a", "sighting--b247d618-355e-4b33-80af-9c2ce745ffb8", "sighting--1816b41f-b82c-49ad-950f-cf26d2fe534d", "sighting--4b1d45ee-ee1d-4375-9e30-5e4e49e53f8f", "sighting--cc0fb84e-c60f-41bd-9362-8c9da3a53781", "sighting--10cc7be1-bc78-4907-ab70-07e9ec1bfdd3", "sighting--f325e136-8c86-4cf9-a8a4-b9e76bce278e", "sighting--d9081b9c-3092-4bb2-88b4-5933adabb1e8", "sighting--2b7c0fd1-8b60-43db-bbaa-dff6d4372758", "sighting--23f3aa12-1533-4083-80bc-06b5549be10d", "sighting--f5596fb3-1902-4f50-a1ce-eee3623b922b", "sighting--1693abfe-34dc-4b31-9d77-a4c1b75ed6e3", "sighting--a2a236c9-e26c-4327-ab0c-54b319f9a92a", "sighting--16de4825-820f-4432-a111-a03af5782468", "sighting--5536d6d7-0390-4950-aaa0-1903c2a703f0", "sighting--9f045739-532e-4baa-8057-e31160c3036e", "sighting--6d34a754-c3cd-4c0d-b72e-004c843348b8", "sighting--3ffa4a9f-87ab-405e-bac7-3791cfb77dc4", "sighting--ceb65584-51e8-4dbe-b36f-e35eb382d2f9", "sighting--38e0c491-06da-4899-865a-0f353398045b", "sighting--4f046cc7-1eb4-4723-9861-2d6b29490365", "sighting--4ca52350-d30f-4680-825a-c93efd907c55", "sighting--4e65dc61-048a-4ed4-86c2-9447d1dedc58", "sighting--5d342924-07cc-4610-8dae-0e6ac4a5bca7", "sighting--7b7a6cbf-bbab-472c-99d5-d1ec85bd5caf", "sighting--1ba1e434-8bf3-4be9-aeee-c8f57dfdce85", "sighting--66f5084d-90de-4ed1-8c45-e0f2bab14be9", "sighting--88788ed9-3408-4411-a9c8-d6ad5cd83626", "sighting--7efcc791-dd0a-4d4b-8e51-a346e6babd86", "sighting--54f16cf6-6428-43f3-9230-dd880abd274d", "sighting--74f379e3-ad41-483f-8142-db20983ab1aa", "sighting--2718f1ad-4fb0-4fdc-86cd-faee16a5adaf", "sighting--9f73472f-a067-4da3-8247-fc5fbba6145a", "sighting--a354ea26-23af-42eb-9ef5-3756a4e784c6", "sighting--867d76cc-347c-4357-b650-4aac3b36ec2f", "sighting--b0c2605e-de16-428b-89a1-669bf3414029", "sighting--1bae6a37-f51d-499b-8bf9-abc3ef99b81e", "sighting--c459e10c-0bab-4123-82dd-0d526accfe07", "sighting--84464a7a-ca10-47be-9598-208e168e466d", "sighting--9dec8228-e266-45db-980c-aac84f6e978f", "sighting--06141637-c1e7-4be2-84ab-11992641b06e", "sighting--82458ac7-5413-478a-91a3-9f8d0142e9db", "sighting--f15169a1-2542-4440-a53b-adffc23d1c29", "sighting--bee3fd4a-1d9e-46b6-9814-a21435b17c83", "sighting--154823bf-fdd9-459a-a610-1d7a642d585f", "sighting--b61ea5bd-f5b0-4580-beb8-1b1f53c2831d", "sighting--ae788435-5634-4f20-927d-2ed75af7b25e", "sighting--cd286178-c386-4f5f-af51-391fb4c1217d", "sighting--38b587d7-fc3c-41b4-b2b1-c26e854bded7", "sighting--f1e6f211-6555-44e4-a976-9c549242b128", "sighting--f80b7465-73fd-4e71-8772-979a4d4d9c90", "sighting--58b16186-9fc2-49dd-84df-becb76e2843f", "sighting--4bda4b35-1757-41ff-b1cf-d2ba672552d4", "sighting--dd63b734-c8c8-4d16-90bd-14d96a3e1ae5", "sighting--eeebc6d0-c37a-4396-858b-e3647be95b7a", "sighting--10c1a21d-9b73-4d70-814d-df141e059a67", "sighting--8a67a015-ac3b-4ba9-8c59-b7dde3e4bee9", "sighting--f8d8a895-5509-47ff-b96d-708a1c987214", "sighting--8b044480-7816-4941-ac52-c39bd1dcb009", "sighting--1ec7e177-04a2-4457-84aa-b71f5ecccc14", "sighting--7a4143d1-b749-4be6-81cc-f1933b20e540", "sighting--2f20e228-4f59-4a79-ba32-df37fdd0b2f9", "sighting--3d2427e2-e2ea-4a5d-a83e-d341fa501f8a", "sighting--d5161dee-1684-4030-a16d-cd19dce52c71", "sighting--d5ad0084-ae11-4ca7-a0a9-4b5129f21b80", "sighting--40d58aa7-05b8-468f-8d42-8f658a586bc2", "sighting--261af86e-2cd0-40f9-8a41-0daa509a3dc3", "sighting--bfc8e92d-f73c-47ae-b638-622f9b2ee2d5", "sighting--cffb470d-ed44-4b1c-9d23-7706cc4e73c8", "sighting--f482ff11-b268-4db1-a1df-5e3cbe5c9550", "sighting--99677663-9539-48df-88c5-3b7dd0015f5b", "sighting--414c1ca8-027b-4e8f-b3b6-ff718db3df6b", "sighting--bc28a899-f7a2-4013-9106-108f0fd82631", "sighting--7ae1aef8-7b4c-486b-a924-1fddc0c21028", "sighting--a9174b15-544c-4072-89b9-bcf15598d758", "sighting--d05cf407-0122-4e27-9978-78e7ad83a58e", "sighting--1295acb5-ae7d-4c04-aeff-9577441b4a92", "sighting--6aee8e7b-467c-4b14-a755-4c6e679daf40", "sighting--17ffa74b-fe9f-4e8f-b3c4-28717c585e9e", "sighting--15dedcd2-0de4-4833-8b85-7ac0971d15da", "sighting--69f57839-ae7c-40b7-913d-0a5c027ea40f", "sighting--1bb07eda-599b-4734-be6b-825d5225891c", "sighting--4f07359b-9551-4d24-a60e-3763913a13d0", "sighting--f9897ea4-ddda-483a-97fb-dc701cb4e4bf", "sighting--ea5b76f9-ea22-4064-96b0-08eee2d1d80c", "sighting--37511d84-a92d-4b66-b8ce-be7f23de9d47", "sighting--1a3fbbac-f8cf-4a33-997c-b7d61da9b50b", "sighting--394642a6-94a9-4d59-af07-e81cef75e3e0", "sighting--f4eecfcc-61f4-43da-9acd-4579f93d07cb", "sighting--3b56d111-9cbb-4a8d-a114-87fed20960ba", "sighting--82f41d5a-9b09-4c16-a8fd-fff5ad03ea0f", "sighting--9839020c-6a5a-4359-91f2-0a2d2927c682", "sighting--66a705e4-e813-4bae-8444-5d5dc153fc39", "sighting--04d4f707-228c-4274-a999-8b221dde1952", "sighting--911c1bcf-9f62-4635-9c78-54de0b413af1", "sighting--a6fe2e01-70cc-4999-aab8-68b3c1cb97ac", "sighting--cadefa27-a502-49b8-9f3a-c0f8bf7e6d78", "sighting--086a38e2-47f0-4d47-befc-d991cc045ecf", "sighting--4780537f-0527-413f-8b8a-b932c2f999c2", "sighting--364d67ce-cbf9-4ff3-b30f-3ab6c4f6cad9", "sighting--08c8b27b-0ce8-40c2-8198-b6a87b259023", "sighting--01599e7b-cecb-452f-97b8-07584c3414ea", "sighting--1a71560f-3547-4a7f-a7be-c1c85cbf73b0", "sighting--11ec22ad-949a-46f8-8b91-170601a3d890", "sighting--3b2c678f-f692-4f09-8d3c-46b73ca8ca02", "sighting--18df7844-9b3a-4b95-8165-8a7f48cebf55", "sighting--31e48ea0-f50b-4de4-b931-225011b4ead7", "sighting--805b6c67-0119-4162-801b-46834916cb26", "sighting--042b372f-80fd-495f-be9f-61c7d0738669", "sighting--7eaa1085-b8cf-4a4c-b39a-135bf1de9315", "sighting--4be3fb6e-84e8-4815-9678-fd44afcd0ecd", "sighting--c7b10755-7752-4907-b75f-0d30ffa0d26d", "sighting--37f43525-31c6-4136-80ca-bb0ec565f61b", "sighting--8c6d2f35-027e-4fc5-8050-8a2eebd61171", "sighting--8c7c4c75-6c93-42eb-bc83-f85a33444311", "sighting--6f5b11ab-3e4c-44b5-8a2a-770cba4c6b7d", "sighting--a49b87eb-fb88-4b3d-a1b7-5f663e353d81", "sighting--1ddc928c-678d-4add-8b89-25a148c6ff9a", "sighting--d9d307b0-7398-48d2-a733-89372d8a1848", "sighting--01087e9b-3b22-4406-8a34-da2c5487958c", "sighting--c3676438-c218-4a76-bbf7-a255f24b73e6", "sighting--fa5424c7-31ae-4cf7-b4e9-92527c09ccd7", "sighting--45477b04-21b3-4116-a526-4cdb4131b5e9", "sighting--3a4f3118-b86e-45c6-a8bc-36e1afc2cdad", "sighting--a4c5b363-8e10-4f2a-b4b2-369b3de1c1a4", "sighting--10070c82-c361-4797-9632-533d8da39cbc", "sighting--af317154-365f-427f-ba11-e629c5f14cb2", "sighting--e5d4e708-75c7-4e1c-81c3-c8c297e8e119", "sighting--4f13bbc8-3f12-4936-85db-30d5ba955d04", "sighting--52cb6a83-5d41-4407-83be-ae9715fe668c", "sighting--fb8d8481-bbbe-4641-8fe6-3dd3afbf1d59", "sighting--aa2ef66a-d602-4679-8709-1b9634fc512e", "sighting--809c0590-0ea0-4312-8d7f-afa10385cbce", "sighting--bffcde97-403a-4888-98c8-1498189bfa05", "sighting--7c44e08d-5410-4fdc-bcfe-732d15c4d528", "sighting--c5bc9d86-ff9b-4065-b4cc-e874f729d9ed", "sighting--08cf4f8c-15f6-481a-a83d-e06b5fb516f3", "sighting--442e4d17-ac6b-451b-8ccc-e41f1bcf369f", "sighting--7825fc09-ce81-4dd5-a54f-91d2163ee118", "sighting--45376042-ede3-48ff-b4e0-4a9bb6d2c920", "sighting--f8659fcd-5e25-48d7-9722-a67dbf551748", "sighting--3be855b2-30ad-4490-85ad-67bd4d4dcf2f", "sighting--5f444b61-8f06-4ad8-9c6b-c0f6137239c5", "sighting--8b679a33-42bf-453e-a275-71036955e51b", "sighting--b74ec694-ccb4-4ae1-9792-834dc34a02c0", "sighting--4bd2fe6c-ce1e-4309-b2a7-db5956425a0a", "sighting--0f980344-d8af-463d-9871-8bc497c73ea9", "sighting--17c52bf8-22c8-410b-b8c0-a2027ddae0c5", "sighting--d6d49490-99f9-418f-97a8-04bb796ea249", "sighting--40cf80cf-31d1-4d9c-9f2a-dda7604ff87b", "sighting--e7966de5-eff9-433f-b3f9-485eba5d9384", "sighting--87b8bfbc-e3f7-40a1-97d6-2205a34cfa22", "sighting--b05a05d6-0e43-4478-835b-0838ac47d4ff", "sighting--6ac94eae-49c9-42b5-b0aa-3ea9ad35b953", "sighting--f54d81c3-5ef6-4972-abef-193f66246b01", "sighting--f4b58aaf-4838-4bd5-8837-92c9a2b3586c", "sighting--b0ce5950-1c50-4afa-8369-1619a5926eca", "sighting--6fb57e45-5d03-4b4b-8a9e-6a6fef9dc2a7", "sighting--e0424604-edb5-4a0e-a00d-9ffe0d206164", "sighting--c7108ede-0efb-4760-a8e1-0c25cfd9a422", "sighting--aadf96a4-c8f6-4442-926f-667cb5352655", "sighting--239b6bac-d906-4942-a63d-656d36aa2459", "sighting--6e12aed8-0502-4073-9549-007dcf660a6f", "sighting--8fa84ccf-a92f-48f3-b11c-be749f68b699", "sighting--89aa1728-8ec2-4c38-ad87-e5589d0cfe80", "sighting--4f0f6ffd-b65b-45f5-8aa4-0570e5de18d8", "sighting--4a42d016-255f-40fc-afee-b0a1681c0907", "sighting--6ce9b2e3-2315-4ccc-83fc-2cb643245c41", "sighting--ef2f0f22-49b0-4bfb-9a10-a319977014d7", "sighting--268531b9-474c-4e07-815a-2b708993ca64", "sighting--1d0af62f-ff8c-4c16-86e9-24a0a80cc9ad", "sighting--ff67214b-81a9-4302-8ad5-e8257b16b6cd", "sighting--0483fd19-ce64-449c-bed9-e6033b1c4ce2", "sighting--e3ced5ee-26c0-4087-8875-0e0576d1415a", "sighting--fbaef093-ca63-49e0-96ec-fedb4ce3c899", "sighting--9285f9b6-abe0-4ac7-9be2-0759f0ddbd85", "sighting--dd2c3bec-be1c-4657-9c19-26f0ebce57a0", "sighting--b2542232-f8e7-43ad-8be8-f313b0f41d12", "sighting--a1ea6a7e-32bd-4ed5-9848-498dec18c243", "sighting--b815c227-fd42-4bd2-b37c-b1eac60b377d", "sighting--4e3477ff-6ea1-48af-b119-4b4153b0c5ca", "sighting--07718a12-6b41-478a-bc06-cf99925a7968", "sighting--a58b12a2-0f99-4c23-9621-530a3c5abf80", "sighting--5345acfe-1854-4f5c-973f-3bf4d40cc40e", "sighting--080e9fe2-402a-41b9-91e4-c27c0063ffe0", "sighting--51370b5a-ca83-4a82-be3f-2fe1c9660209", "sighting--2979a5d3-0070-4d39-985b-b541b6a0c234", "sighting--308b7633-6476-49ea-9732-4ea6807dd7b8", "sighting--f1928445-07e8-4021-996a-52190b002f7e", "sighting--41705749-aacc-4745-b582-8118c96fae02", "sighting--aa3a4143-cb4c-4ee0-84b8-e2686f797779", "sighting--7c8846e8-39b0-4eb5-8f87-e1574ef14a18", "sighting--5c770160-a444-4f00-87e8-a8a397378320", "sighting--21553047-b6cc-44da-a179-105c15cd2182", "sighting--8f93c6de-405e-47f9-a472-815c99b34c45", "sighting--c88a9e36-c17c-46c2-8107-f4bb3dbe9bbe", "sighting--ff7c0dad-625e-423a-836d-53bfb0c0b070", "sighting--2e9a57b6-0c39-4638-bd7a-a92642d7af3e", "sighting--e3c8895a-5420-4eb6-bb69-fd480f002747", "sighting--1eec15ef-9a85-4865-bee2-09c956c98007", "sighting--f44a224a-6eac-42d7-bcfa-1bca24d787e0", "sighting--6899290d-6f57-47c9-b403-69cc13b0a8df", "sighting--834af781-92f7-49ea-aa97-1250adb7305d", "sighting--9f87c41c-af14-460a-aa31-c6a7d1cab65b", "sighting--8e357599-ee86-4d81-94df-e3b02aaacd2a", "sighting--4f6169e8-a5db-4a7b-9b57-f137d9e0ecbe", "sighting--d8e5b8e6-e17d-4e48-9763-0b863a85bdd7", "sighting--1dd6fa24-6711-4f5c-a22b-b8fcbf8378c3", "sighting--fa228f31-0926-4265-a52c-3c657460f69a", "sighting--ad3c9a08-c586-4cd8-89de-d928d07d5eb7", "sighting--8d7ee5fb-8383-405d-9d50-b66c91a51d57", "sighting--d0cad8f7-5b3e-4e69-86e6-a636f145ef4e", "sighting--2fe89898-622d-4571-9baa-75693010a2c1", "sighting--e72cf588-6d42-4bbc-8973-862e34619bd0", "sighting--c57f5755-4307-41eb-ab49-f2610b1bb2f7", "sighting--9c52d514-2f22-4a19-a1fd-b7e30f28653e", "sighting--25ec5ab1-92f8-441a-a491-06ed82bf1345", "sighting--242bc9c9-8cb5-4c26-8958-6675084aa86f", "sighting--287823aa-71c7-4960-898e-3a0d77e4e526", "sighting--ac563698-0433-4bd3-a3bb-eb3907223a5a", "sighting--e4464d49-dd5f-4163-b1df-af94fce46611", "sighting--6c5f1ba4-b4b8-472e-97eb-34f799c68023", "sighting--0caf2bd2-7fe0-489f-8dcb-30ddb3aacd87", "sighting--b52a91a9-a35d-487c-901f-4aa1118d46c5", "sighting--be04291d-f7a3-40e8-9a04-a4bf2919bffb", "sighting--2fb6f33d-6327-4445-8044-6f6819aa14a4", "sighting--d4366468-063d-4709-b008-55f1dfdec11c", "sighting--9a931935-ee09-4f9d-b9a4-d00aba88ae47", "sighting--6188456e-4e14-4733-b4a1-86f3c1b98a19", "sighting--a3f2adb3-f572-4598-9a41-95e0d48f0d43", "sighting--5920acc2-e774-4451-9612-5ec54071f5a6", "sighting--c10e6576-5ac7-48e3-9ff8-b2d857aaaab7", "sighting--ddb11870-3abb-4688-96a4-117a91a6ff35", "sighting--6734b736-622a-40da-9b27-273bac2c00fd", "sighting--258859aa-01d4-48e3-9353-9a98b4e21943", "sighting--9541bf15-896a-46ea-a17e-8354bd32f647", "sighting--bf092dbe-01f1-4269-8619-0e3e4be43fde", "sighting--633ad34b-830e-427d-bf03-ef6b09f8e100", "sighting--51c7eb58-b88f-4fd3-94b3-8ae9cb3deda7", "sighting--3582ca1c-0f13-45e1-aff9-6cb23c05f780", "sighting--29ae2c20-83fa-4a2f-8521-73083acfae2a", "sighting--1b966964-9cd0-4472-afaa-a7aa5ce99e27", "sighting--d5a9e668-54a0-467b-98be-0fb011f0dc68", "sighting--327d3b7d-e8d8-4010-81ce-70391aa7ef60", "sighting--38d9e95d-1c65-4858-8fa4-6d8c07140cca", "sighting--bf5e9958-8a67-47b6-9310-dfe98cfda34b", "sighting--05f9ac54-4304-4141-8a43-e0fb7e096bf1", "sighting--4adafbb8-2d51-422c-8884-33e666c2f52c", "sighting--cfeb2d87-b8c2-4dda-8652-5722f4293b4f", "sighting--6e052091-3249-43eb-a88e-f35a44c8e07b", "sighting--8f180384-8ae0-425c-ae57-48e78a8944d1", "sighting--ba008882-4c97-4f13-bb4a-84b447004bbf", "sighting--564245b2-a4a8-45bc-a878-85c79bd5047e", "sighting--6793df75-b9c1-463d-83b4-7c3eb39c2c05", "sighting--67b03ba1-b485-48ed-b359-9e771904473c", "sighting--237afe10-0556-4b15-8d47-69b843937ec4", "sighting--abf82b72-7a20-4eb6-9328-ace161248c0b", "sighting--88dcca2a-bd43-41b6-b4d5-1e0897282e28", "sighting--dc1ed085-9105-4105-9260-8e5b6fc80e67", "sighting--4031145f-78af-4afe-b0bf-4d98febf1f86", "sighting--0bdd6ea0-52eb-4188-b775-27511978f9ca", "sighting--94da5c02-7ef8-40c5-abb5-9b8f6bbb0779", "sighting--bb2cc395-596f-41d5-b939-e584dc997a1c", "sighting--8e0f9971-2ae8-452d-b028-4220028908ee", "sighting--4732ecef-b149-4d60-9a2f-dcc6a7b469f6", "sighting--49423d8f-ce1a-4f4e-a092-5a07491f48d5", "sighting--bf2bf27e-71a8-43be-b27b-99bd62abec61", "sighting--58b7f404-5e9b-4d40-9b4c-92966c7d46a9", "sighting--d429c2a8-9ef4-493d-83e6-daa5ad69bdc4", "sighting--2c6e83a1-a5bf-4f6e-b266-50cc7b8a1ef6", "sighting--5f748836-5c86-4966-b1d8-472dfc7bc7fa", "sighting--9093de73-9c35-461c-972e-7aca0fa126b3", "sighting--4fd867d1-068a-497e-9d05-80906f24de89", "sighting--329f5cce-4098-438a-8010-4b5980041bec", "sighting--9f672ee5-d74f-4a4a-a5ab-735ad23d93f9", "sighting--1482d792-66a3-4a3c-861f-e0bb8349bcdc", "sighting--81a6da22-e4fa-427d-89c9-58ec39f45a29", "sighting--e1957bfe-5e07-4761-9901-9ef7d23b9650", "sighting--49bb8ee7-151a-4fef-9fe4-daac9cb641e9", "sighting--4962fe1c-e017-44dd-b825-0f791d755d20", "sighting--f07e2785-e51c-4de4-be94-268d780e2f62", "sighting--1fd1c774-5263-450c-94b7-5d109bfaa420", "sighting--262e3aaa-a289-47e2-b365-12a97f219ded", "sighting--072b284e-8faa-4003-a1f6-bb65903ab6ce", "sighting--51637d05-d640-4ae1-af0d-d27e93f764a2", "sighting--69b53840-fbae-4cae-89f1-b68fb8208f72", "sighting--33f6bb94-c8fb-4f7c-9f65-7f68be6a3b89", "sighting--79049578-eb3c-48da-9b5b-9744525c7e5f", "sighting--23bc5d69-711f-4735-a157-c8a979f621e8", "sighting--f6a9a239-f694-4f61-bea1-d4f110ccc7b7", "sighting--e76deb33-0c27-4c62-a320-2f0efac53d91", "sighting--76adaa44-d928-4877-be5e-0747d6709450", "sighting--3ddb230d-5d2e-4b7d-b850-499b9b4fd2f9", "sighting--5fd0e4ed-ec32-43b3-a99f-5b5498d4a60b", "sighting--3b773a58-8373-45ea-8825-1f780179f61b", "sighting--fc5ebbcf-3f59-477c-a8ce-4ed04add1c09", "sighting--8ee95b2d-450a-48b1-a10e-6d15c7adb7ff", "sighting--3b68741f-c07d-43fe-9689-299f3db079de", "sighting--6a329161-2929-4189-8537-c14ad60a8cb3", "sighting--0302f96b-79d2-47b3-be72-319352ffa27b", "sighting--47adddbb-9d1c-4118-a7dd-98ad6fb1776e", "sighting--85791216-b969-4da2-9297-6720b59fd9fe", "sighting--2073e980-0605-4e3b-9cb3-65175e08d9e7", "sighting--67600ecf-9c9f-4ad5-ac82-7d37608d7c29", "sighting--f0d20f39-26de-464d-a30d-05fda338af50", "sighting--5f4453d4-a6ae-4347-971a-882ab0a16de3", "sighting--b3d006c1-9008-4ae5-ab06-749b8b178d8e", "sighting--7cf19fc7-829f-4330-ad33-4fb01bdff0d2", "sighting--720a99b3-246b-4abe-9cdb-b26465be4fbc", "sighting--8ede7275-616e-47ca-a621-95d4a0495fed", "sighting--add72244-6022-4017-8289-0ac61723ab75", "sighting--c3cd8658-db8b-426e-b82e-aaf2c9f11ce5", "sighting--815e7d1f-9041-4afd-8648-1638ac0a7bff", "sighting--ae351569-1beb-47fc-a3d3-b915f8fcad96", "sighting--99a945da-10e5-4495-989a-5b376cf3cd82", "sighting--8e58a57b-70d2-40aa-bbd5-0c57ed3283c3", "sighting--9ea750d7-925d-4c57-aeda-97b18561f0ef", "sighting--a2836dbb-e05d-4fb0-8b6a-fee72b87af2c", "sighting--b3f48230-d000-403d-b03a-90570f951d2a", "sighting--2566427f-f3c6-4006-af3c-25dd87e83117", "sighting--a09faa01-4293-484d-9a93-c841c10509f1", "sighting--12bd27b0-2527-4971-8b5f-4113f85a46b5", "sighting--fc688251-4e49-4b51-97c3-b861c4afa970", "sighting--104c24ba-83fc-4d24-a9ec-3185670c7b34", "sighting--ada4a429-521c-4389-bd12-cadb5e30efe7", "sighting--2f67d79f-3c37-4bb4-a729-a24d6ade1c4f", "sighting--2fbf7252-7876-4377-b4aa-71272e079919", "sighting--bdf10747-934e-4ffa-8a01-52a1402e699f", "sighting--a90ba65b-adf1-4727-b3dd-1b7a41b357df", "sighting--273fb13f-da98-4be1-987b-cbc593767fd3", "sighting--c8f9a7af-5046-4277-92b3-40eb9f907002", "sighting--c8c6673a-af84-493c-b676-a1f8d4140709", "sighting--f9789648-c125-4e20-a687-b239b686407d", "sighting--07320ac0-afdb-4966-8c44-84b3e6d79066", "sighting--7bab58c3-0030-4441-90e4-b187f365e420", "sighting--2d028b39-bb2d-4810-bd37-45d1cc22325b", "sighting--e4adff87-a404-4b1f-a478-1853a15c4080", "sighting--58ffa351-1cb0-4bad-8383-e7929181225d", "sighting--3d7a744b-c73a-4034-9ad0-29d659c951a6", "sighting--905d8610-e91e-4319-999a-ff6c644fbc76", "sighting--568b1eb0-c61e-4e45-8c43-1eb82bea99c6", "sighting--0b6ac0e4-4d60-496c-99a5-52a3fd7cefcd", "sighting--8997d439-7f92-410e-af14-b700d0c791b4", "sighting--bf8e7803-4db4-45ba-aa1d-39c79db4646b", "sighting--865ee167-9dd0-4926-8712-9c3648b37f67", "sighting--571f9975-1434-43aa-9532-be0c4d03f66e", "sighting--bf543249-6e71-43b2-afb6-9c13e73a5a44", "sighting--2eac2a5e-3ae1-4ac2-b711-987892434d64", "sighting--597f913e-e892-4c47-a04b-e33d71d6a68c", "sighting--767264a1-9684-49fd-bb8c-296754af0dc3", "sighting--5673b13b-9112-42a7-a46d-eb2132392f23", "sighting--f03b5c1f-3edf-49a2-9878-bc2ae0a2ed09", "sighting--849e866c-e862-4286-82ba-69bf32417b13", "sighting--99c02528-0466-4d8f-a48e-d561dce50b83", "sighting--66a85ddb-0bc4-4877-a9d8-0c211941c6ef", "sighting--cdc22ed3-beb9-4b6e-b33e-d8cff77e6fdd", "sighting--d34815dc-fb3f-4ca0-8c68-91c86901a595", "sighting--981ba270-2399-4753-834d-40cc3b114c9a", "sighting--fb3f487e-d3ea-41d3-96a3-a504875fcced", "sighting--957062e7-a896-4cf6-b81f-d903bb0efc05", "sighting--a36cc94e-c37d-4d01-b115-dd9ece5c9cb4", "sighting--c941f493-5e09-4719-ad7e-2d05aabed677", "sighting--3eb37b5d-b6c4-4963-a8da-da6f7c1dab56", "sighting--6f9dc146-2f47-4c6e-8995-0c3aa76b2f70", "sighting--015ee301-a918-4509-992a-6c575e400d77", "sighting--83c35688-407c-47e1-a0a1-8847dc6df0a8", "sighting--24124888-d163-4b0e-b83d-3fa98118b925", "sighting--bfa6cfc5-fbc6-4631-9c15-725c0368e445", "sighting--864b71c4-19f8-41bb-85cf-079202dbcbed", "sighting--0d969c3a-4bc8-4cc9-bcc6-19f46da35af2", "sighting--686e149c-f7f7-4312-941e-0910c7e8f7cb", "sighting--8d8fd1c6-23e8-4689-948a-66e50912bf72", "sighting--83a900eb-36ef-4eec-beb5-273e5de8ff3a", "sighting--67144617-8720-4a4b-b32f-d387fb70301b", "sighting--e0fbdae8-8ae5-4f8c-8424-e821eecc61a9", "sighting--d5c0ef2b-2774-4821-9891-bb1a1cbc9aea", "sighting--ed652bbc-f6a4-4f5c-93bc-cb75a70b6c1c", "sighting--9122067a-058f-4f42-bf9e-7f9d05bcfbf6", "sighting--82aa06e2-5cd9-4384-9450-240ca6af5a56", "sighting--ef14c319-6367-4ceb-83da-4b2aedeb9b6f", "sighting--ebe8ebdf-9a89-4139-b3fa-97d67b0b5be4", "sighting--f842d95d-abf3-4891-86e0-4e13dfde3a20", "sighting--24ecb209-8506-4865-82cc-6ee8abd6ca70", "sighting--53b45ad0-ce91-4d98-a346-1963ce8c833a", "sighting--26131287-af15-4f3d-bf2c-61aadd861970", "sighting--57a0f13e-29cd-496e-bae6-3d9320d71d0a", "sighting--2ef0e257-2e54-454b-942a-4b563b2a4af9", "sighting--976f1843-c384-4877-90c6-81553cc44f21", "sighting--9fa561e5-f32e-475d-9101-0705cc111f53", "sighting--f91377b7-c08d-447b-82bf-54cdc0cfcd62", "sighting--2e745820-9274-4fb2-9590-229ddbf15734", "sighting--0496a6ab-2490-4b4a-bd37-c7da53ffba31", "sighting--2f228601-103b-41f6-b0e0-4a2f0fb76d67", "sighting--660c2965-beaa-4490-bd91-0774b5e9e72d", "sighting--83392030-b5c9-4d66-aa0e-867fa0bf3fff", "sighting--f1e843b6-46dd-4892-8649-59d37c6fcbf9", "sighting--a6934505-7a67-406a-aa43-bc128a3a954e", "sighting--eff697d5-f112-4c33-b863-aea35a6ddf30", "sighting--89451fff-8b81-4c6b-aab2-b7540eae50b4", "sighting--261eab70-c1c9-4ad2-9696-c76e81d0d1df", "sighting--f73854fb-2022-4884-ba62-2a3b7a3a14b4", "sighting--cf81e632-7338-4f3a-9aa5-a53d6cdd0bf3", "sighting--35881c5a-6958-4e88-ac74-5f65e6cca208", "sighting--4ba49ff9-86ef-49cc-ba45-fe054f353907", "sighting--0e230492-db51-4426-92ac-0588e0743c66", "sighting--036f2657-a753-4f98-951f-51af6002df70", "sighting--58d7fde3-4039-42c7-800d-7ad192151343", "sighting--bf97d0d6-9cdf-4871-b6fa-0570d1fa218c", "sighting--97ff54e0-02ac-4127-9a55-95e88ea06bc5", "sighting--5b362327-f88f-4821-916b-ad362caa22c0", "sighting--08a784ee-3278-48b1-883a-d5cfccb7ff35", "sighting--8ecd3a5f-1da2-4b5c-b498-85ff7560384d", "sighting--983e7d88-dc05-4490-a173-22076e378332", "sighting--758ed1b7-f756-44ae-91e4-4ece7de1e2ca", "sighting--7cd71bea-bd37-4f01-81a9-83e1ba17a2e0", "sighting--ee410d3f-bbf2-4a3a-a58d-1b0f9d9d11c7", "sighting--4b5a3366-5dab-4c77-b718-1158427a22ee", "sighting--a5e68b97-2c57-4bde-b210-4fb3b5942c86", "sighting--0084913b-1a66-45a3-aeb0-70a937b4bcad", "sighting--cbb77026-142e-4643-b4a9-94e1bbe902d8", "sighting--79a0cd4c-0761-4e6a-ae53-eb041900ac32", "sighting--9ec6c2f0-0494-4fab-9b2e-0fbeeb9f6afc", "sighting--745ba9d0-42a9-43d1-a3fb-92e7b04b44af", "sighting--c0412b6e-84c4-4b27-b566-c56767ad7310", "sighting--ae68c14a-b2a4-4b8e-b800-8380605cf2e3", "sighting--e2815a68-6cca-4645-8571-b03214dc390e", "sighting--7e99ca5e-e743-4b84-8562-6f0a02120e4b", "sighting--1464eda3-36cf-475d-b53b-192016f75452", "sighting--52d4d414-ac5b-47dd-9475-c334490f907f", "sighting--415fff0c-b8d4-4397-9167-648ce1543ecd", "sighting--123fd7a7-9a18-4d5b-93f5-0e17dd4d1c7d", "sighting--1b20e2f2-212d-433c-b9d0-0a06d3071ded", "sighting--19878d76-1e88-4496-8dee-18d5a6639028", "sighting--f6a85b7f-6352-41d3-951f-594d3d4f3286", "sighting--0cc04168-0e08-448e-94f5-56750c671226", "sighting--839864da-91db-4c3d-a6b0-0950c421546e", "sighting--5b98675a-5aad-4fab-aa99-80e0add9ffaa", "sighting--cbe4c377-7338-41c7-b1d7-90e0952ef258", "sighting--0f25a876-b0f4-41bc-8675-fa9219a66d0d", "sighting--f184bab0-654c-4afe-89ad-b45913ba4c65", "sighting--50c40e93-1a45-4d1f-8b30-b27732750d78", "sighting--1ba00af8-05db-4968-b97b-456e247319a4", "sighting--721e3efa-b1ea-421f-bd66-c6df32b37081", "sighting--7fca2eeb-6c1f-4eed-a321-58aa2725d7a1", "sighting--a9d57ec5-2e20-46ba-a384-055504685054", "sighting--c9737fe4-dbcf-4d7c-b476-de1fe2c3d421", "sighting--990d97ba-78f0-4429-964a-13660037a8e5", "sighting--978f8abd-9add-4b40-9357-5c90ddf87116", "sighting--930d259a-accf-44fc-bf5c-d87a0098d148", "sighting--a6025035-3c23-4f25-9a8b-b5f5b3f209e4", "sighting--6c6ae2a5-936b-4c4c-9db4-ff96b399b823", "sighting--24ad38aa-4806-494b-b0a3-da18050786ff", "sighting--73769005-81e8-4abc-9b7a-03e3a8020eea", "sighting--42d334cd-8cda-4768-92a6-7ebed21008dc", "sighting--94502b06-cf15-41c1-afb6-d172fea5b2ce", "sighting--92e7da2e-6e9f-48fa-9d76-ab7114999c65", "sighting--f0e8cc4e-f7ee-4eec-89e2-4073624821d6", "sighting--0ccd279c-eccc-4ee8-9c1b-976f38bd5cdc", "sighting--3c73069c-5927-456c-9373-1a4342aa68b5", "sighting--0bf7f93e-26af-4b84-b81a-12134cd554ea", "sighting--49d696c3-815d-4f7d-9cee-9ae0fea3a212", "sighting--a3fdd5c5-981e-41c3-aba8-1ed6f478444a", "sighting--52046da5-8b7d-4adb-8f22-179fc16bca1f", "sighting--a81d31fa-bc33-4d12-8c5f-b3299acfdc6b", "sighting--5110a10c-9a39-427b-805e-d8ab5a63bc5c", "sighting--8442bd7b-2141-4e7c-b53f-b0ca1b35480d", "sighting--6650aea3-0021-480e-b9c8-a15f19763cbb", "sighting--04e98121-04e0-4653-91b6-1ee23f1b17a9", "sighting--3e07a8ed-1e10-4c81-9f74-a85b49094c41", "sighting--c1fbd7bc-6e7a-4453-9ac9-55e18480fe90", "sighting--63fff00e-e62a-497a-8269-52d46127f9e8", "sighting--f4785500-a7ea-4bb1-8a2f-9028d329553d", "sighting--19b60b24-98aa-4328-b009-b5e7f14a7496", "sighting--86ac7f76-d5e2-450a-8da9-97c4061ee728", "sighting--7802f098-e41a-4c73-adfc-22b517c756e0", "sighting--340f39c5-ab94-4bb7-bad4-6b3b92cf0d3a", "sighting--641b7cc8-20b5-4f4d-be99-f276187967d7", "sighting--0a41e3c1-0295-4471-95ca-8b71fbc07720", "sighting--e8f82929-a022-4bdf-9567-45dde8246f26", "sighting--b489a86e-a55c-4277-b923-70ee38d298b6", "sighting--9e2572bc-d2c7-4c3d-b865-2c12172baa68", "sighting--4d4eb363-8683-4c1e-aa03-4577a53e2a26", "sighting--485a1e31-39ab-42d0-a68e-f215dd0de8c1", "sighting--ab0dc9b9-e1e2-448f-acf7-daafc61eff17", "sighting--84ef625c-f458-4e42-8cdf-42ced33326b7", "sighting--69a54f88-b774-4553-a8c2-0f0f68248feb", "sighting--6c3f8941-4ab9-49ed-9fc7-239769266e2b", "sighting--ff6357fa-99e2-4a14-8abd-5450144e19d9", "sighting--7a96a446-20c5-4c5a-af17-911ed2da6fee", "sighting--cb103d99-9234-4ab5-a0ed-f4d6584fff55", "sighting--94c94fc6-1ae2-424e-bbe2-30c2925606c5", "sighting--e6112ddb-5708-41bf-a1a6-4270782bc7fa", "sighting--deaa8e38-d45e-4810-adf8-a7e251681661", "sighting--838ed86d-88ec-47e1-8dd2-134637aa3f90", "sighting--214d48c8-cb55-47b5-ac94-dbee477f667a", "sighting--1f0c9e52-2643-4d8b-bb22-54a90e736617", "sighting--baffb330-bbc8-4ca4-b94b-c7d6423332db", "sighting--5e02989f-d0c5-429d-bccd-8eff2b6370ac", "sighting--912708c4-9894-457b-829a-50b7735eb117", "sighting--4264246b-f3a4-49f1-a2b2-f7fe36a4acb2", "sighting--91ae00da-da10-408b-b769-a00ac5e2efdb", "sighting--6ec90e67-5d82-4b83-8328-bffbb91a09d0", "sighting--8aab4ebe-07d9-4d25-b6dc-8fb95f332b21", "sighting--2f08324b-2beb-406f-9960-649443d980da", "sighting--ea4460e2-eb11-4a8a-81ac-ffa2d5dbb3f1", "sighting--6e8d9357-1156-4aa1-a195-3aae8566eec4", "sighting--f377fdde-87e7-42e6-a9e6-0bd551531b0d", "sighting--c938ff6e-401a-4179-b1e4-38dbbbba5357", "sighting--24661f67-539d-40fa-a5eb-ff1ced36c748", "sighting--108a2ae5-5447-40a6-9b09-0ec57badadcb", "sighting--02b5dc73-99b0-4941-aeb2-ec2f9e48fe34", "sighting--df9295eb-7cd3-4495-b4c7-bb43d9c930b8", "sighting--db0c6552-7bdd-4556-a13d-817f5951f89f", "sighting--5bffa98c-4b69-4c14-9ec6-cf6d25c9d476", "sighting--14e4642c-9150-4dd8-91fd-2323aac4d861", "sighting--b79b8c29-51a6-4485-83fa-fc1832f20170", "sighting--8c9a8502-0429-45ef-a7e8-ac1e8dac8863", "sighting--d8d2914b-a9f0-4956-a034-0b39f9e7a748", "sighting--17bc1d80-a76b-4ae6-9aae-668fd1d41cad", "sighting--7a8b724c-61bb-414b-ae95-46f042c93519", "sighting--f1b313ed-f8d2-4d3a-9ff7-d1b564ad0bc3", "sighting--a5422d04-6b79-4503-a639-b17817b45627", "sighting--6ee65f80-a312-4319-a68f-b10fddfd3f25", "sighting--b4098e40-bbee-41a9-b543-69bdc38f9966", "sighting--63cef8d4-3f1f-47cf-9c75-904cf2a7d547", "sighting--40a7992d-f567-49b9-8ea8-b2024b601ef4", "sighting--8e269823-f9e1-48aa-80bb-558359719dfa", "sighting--be0754ab-54aa-489b-b0f5-89e29f3fc534", "sighting--f37dab95-f92c-458f-8660-47a44b44c0a2", "sighting--1e6e8da7-a208-459c-9f5e-4c62807e1a7c", "sighting--1b782910-804a-4973-b9aa-3fb252957e35", "sighting--b5a15206-50dd-4b6d-be5c-59dece4513d9", "sighting--0f6734eb-f9a4-44e5-b2cd-c8d37c074ebf", "sighting--e6bc9e76-fe8f-48ef-b226-d60184a6e038", "sighting--00b3c52a-2aa8-4671-8191-951ae702f8cd", "sighting--7ef212aa-7a68-4d06-8794-92cc77098632", "sighting--9c183a71-f627-4f88-8584-f117288dd9ee", "sighting--562185ea-80e3-46d2-9410-80ac56c11546", "sighting--05441af0-313c-4076-9dca-bc4581686cf7", "sighting--cc8d1b23-b383-478f-8124-b051d890319e", "sighting--35cbc0e9-095b-4534-b294-9ea7020bc6dd", "sighting--ca00e894-de81-4f35-8881-f6dd066218cb", "sighting--844b9319-01bc-41a8-9056-4b3d0cd12d71", "sighting--8b0e6858-ead6-404a-ac08-78893c103651", "sighting--752c5dc8-8510-4373-a74f-51903f512f2e", "sighting--3dc321e4-8a99-4eb1-b2fc-024af7500530", "sighting--a665e1b6-e218-42bb-ba05-4057db959d06", "sighting--d0ddb3e1-7d90-4d7d-aeea-078875b5801e", "sighting--61dcad7a-342d-4da1-a48b-8c361258f5c2", "sighting--90f38d83-8319-4161-885b-fbbf7aa9d39a", "sighting--3ce10dbf-fb1a-4fe9-a4de-55db14e84240", "sighting--8d9c433d-1cf3-482c-a9b6-6e76f207c162", "sighting--a333aaed-4273-4b4c-9dd5-c01157f1cd80", "sighting--3eb4a615-a6cd-49e0-bd26-de7f500249d3", "sighting--8be28b21-57c3-4a7e-939f-785b568a63e6", "sighting--563bad54-5e46-41b0-b432-0bbf49456030", "sighting--190d4265-8e90-409a-afd6-71eab4ddb549", "sighting--ffa1b803-6533-472c-9928-37040a4e99e2", "sighting--c93c663c-e6ff-4542-b86e-6dfdd450564e", "sighting--387612ca-cd09-4b4a-bc3a-9d62201a7109", "sighting--febac96b-20ab-4f59-b611-04e7daffd468", "sighting--48d67ea0-764b-47f9-adc6-bde358fb0d98", "sighting--667f5c28-b4d8-40ca-940c-5b62113019ea", "sighting--8ebd31e1-8678-40ed-ae48-9f87b22d6730", "sighting--f0d94d9e-4028-460c-a372-786e47d0dbaf", "sighting--b0483465-44e8-4c05-b76c-5ecaf72758cd", "sighting--5f09a690-c21b-411e-8e57-7eb1a37850fb", "sighting--17331558-0de6-4ddc-a1df-3f7e85621d4f", "sighting--343ff1d3-2231-4a75-9b83-f6f565832e88", "sighting--ae300720-8007-49f5-9b91-c8de8b9beee5", "sighting--84ca84ca-f346-4f7b-9580-b58190fb0278", "sighting--c7e71e78-605d-47c6-a17b-609e286db908", "sighting--9cd779b6-fdb2-45a4-bb38-9787632dc57e", "sighting--2b21aa07-8014-4d6e-a389-1b196e969e75", "sighting--54cd9a1f-a781-4d5f-bc91-2e6f4be14ac8", "sighting--c736454b-c6f7-49d0-9b6f-c085d3a43907", "sighting--34812718-5a80-4b74-9506-6412c9465d49", "sighting--adfac7aa-7afc-4ecf-84e5-1d7bc0e0d827", "sighting--b3784b7d-c8b1-4a3e-9546-b6fbf1aff076", "sighting--06f164aa-26c1-4e19-843c-a6d62d9acf83", "sighting--e759eea3-ebc4-4470-bdaf-488facbf8164", "sighting--9702695f-d431-4777-bed6-4b1db4628dc1", "sighting--0b5a9d64-9c42-48a7-ac45-88684a8c4fba", "sighting--78506d13-a43a-434a-8a6f-d5f5671ea931", "sighting--d73e424f-76de-456f-9411-69b42293aaf5", "sighting--a245e90b-ad20-4fa3-8d79-df26d82eaa63", "sighting--7b49282e-24af-4a23-a507-2ac4d307241a", "sighting--2e20295d-a96b-4158-8cee-4dc38795ef03", "sighting--3696a388-713e-4429-987a-376ddcaa9423", "sighting--724138d8-5b7e-4d25-b668-d23b16e6b32e", "sighting--6d990f62-c3ed-4586-86a0-5bc2d2940264", "sighting--4e70488a-0278-49fb-8c64-8eb537aebfaa", "sighting--c5df319b-35cb-4a86-858b-0192497541a8", "sighting--896f7413-c963-49bc-bb11-3a7938bbc546", "sighting--a5da7f6d-813f-4f8b-83b5-8ad18450fb42", "sighting--f0d3aa8f-da77-4532-ab5c-ca1604b830ea", "sighting--9e5f8153-1487-47ff-9d5b-e3433150409f", "sighting--fa015495-3b79-458d-bb7c-6f257a208125", "sighting--2d403e8d-eda3-4dab-95d8-bcb86806b28f", "sighting--268644aa-4374-43ff-b7f5-9e32174708d6", "sighting--6c7ab0b2-cec0-4a0c-ade1-5e19ac0da887", "sighting--5f59dc04-516f-4213-9f0a-7cd3d86350cb", "sighting--5aba06c7-bcf0-4de3-b373-96f89005a987", "sighting--533d31d1-5520-418d-973b-0d39460034ec", "sighting--851d4bdb-3ae4-4589-8192-8ff30dc3deee", "sighting--f92eac29-bfdf-4415-8367-078180ebd886", "sighting--deaef342-b4cf-4312-ba0d-520d36afa5f7", "sighting--cfa189fb-1bc6-415e-a1e1-9b2e70fe4911", "sighting--f8d35d20-85d6-49d7-97ef-176e1c46c573", "sighting--fca7d101-ea5f-471f-8cb8-36b6728fd3cf", "sighting--4477e547-5b79-4a64-b51d-3f5641b18bd1", "sighting--20c603c3-542d-439f-961e-c76f8321671b", "sighting--8d7924fc-abe7-4523-8be6-1891d24e5f74", "sighting--3a0f3197-9ebd-455e-b556-11d23acd6b70", "sighting--be99e9b7-a746-4743-a81b-0abcd5b4393b", "sighting--4646f801-5421-4b98-8d3f-8d853fc6216e", "sighting--5f4fa304-6839-4302-9ca5-9e621a8127de", "sighting--e0a4aa6e-8a3e-4446-b765-5049ed53687b", "sighting--16dbc8f7-e022-4ec3-a052-f529f7754e94", "sighting--a19fba31-d4c9-4db1-bcaf-47ed649f08bf", "sighting--e4da1849-7d72-4a21-8d26-ff6231d882b0", "sighting--8fbf6463-2929-4f93-9dc5-a6fbfb8db193", "sighting--281b228b-9968-4c08-9a60-fb44cb366794", "sighting--ca2b2672-160a-4058-a2cf-ab5196de3b69", "sighting--9eef41bd-1093-478c-884e-492e2612ec23", "sighting--946760bc-eb58-40c5-a250-85d608bda082", "sighting--32b36488-bfc4-482f-8512-98db70290f30", "sighting--ad6e3e1a-78a8-425b-bc71-f5083dd305ac", "sighting--77bd1d93-3209-47a3-a148-7a4ffd08e346", "sighting--2b79b1a8-6eb1-4289-a0a0-5a3ce25e7218", "sighting--273ac7e4-1778-4b28-89dd-0bac94e888ba", "sighting--5437b7b5-cd52-4e2a-bec7-c6552042026a", "sighting--8cb153a6-68c8-4117-a412-274b1e2c5fb4", "sighting--25d41e2c-8ce2-446c-8669-0d7a964dc6a9", "sighting--ec489958-ebdf-4dcd-a078-d6c4e0fa4825", "sighting--b990d9c4-93ac-4bc5-98ef-f78f4cc939bf", "sighting--924cec3a-e131-4cdd-9638-b267f27272f3", "sighting--4841ed83-9fc3-413b-99f6-774d7d775fd4", "sighting--b2abdbbf-732c-4908-a70b-3cc7441e2f0f", "sighting--fa2395ac-7385-47da-885c-3e40e4165b81", "sighting--890e9c88-4201-47f1-a7d7-1775680df10f", "sighting--c80ad1a3-3bae-4129-a634-fb4e2bd0fdb3", "sighting--7897a105-07fc-45fd-a90d-fadc286a4d4b", "sighting--5ae9739b-8f54-47ff-bcbc-54c9c4e2903a", "sighting--1be63b8a-9d11-465b-8deb-573b3f44b251", "sighting--dcff587e-8945-4b9d-9a8f-ac6a6421ba34", "sighting--b682bc9b-527a-4efb-ac24-901ab3342fd7", "sighting--80e63a22-8ed8-40c3-8a65-203fa38fe61e", "sighting--ede72d7b-7c13-4bb5-b173-9914eb20fa3b", "sighting--bfb39200-6ce0-430c-8cb5-d27f9b7697bd", "sighting--e46b5f96-842b-4684-999a-82b1e7b5f5a6", "sighting--80c449b3-cc81-4a78-bda7-44cd8ba6b1ef", "sighting--7cd3d449-a29f-442f-ae78-a22f4ab4ec5e", "sighting--6f71281a-051d-4693-8f69-9c25e721f620", "sighting--b60502c4-96c5-4745-b27a-1e0fa6f64584", "sighting--1a73344d-ea2e-4468-92e4-88223c0702b3", "sighting--9124b7fb-85fc-4fc4-b726-9aa0da16b6fb", "sighting--b6f2ec66-a686-4181-a0e4-3aafb472cc68", "sighting--f7e584b1-6ef5-495d-bab1-5d76e344c66c", "sighting--7e8e23c8-717e-4a48-b19e-553f7cbbb00d", "sighting--adf3da2b-5434-4ba9-8fd9-ad765ee8df15", "sighting--beb58a43-34bd-4f30-bd58-2b2209799261", "sighting--9c829758-b716-4f1a-a817-a34fd1ae9906", "sighting--de451e29-9635-48b0-8dd7-df4668d9253d", "sighting--64301f82-8e46-4b06-9fea-df0c81deb015", "sighting--797a97bb-7edf-435b-967b-18f2cc3e9524", "sighting--c7d0cfbf-1257-4482-983c-5793e3d7ba8e", "sighting--a93e205a-fa12-4457-b8dd-cc6b7d1a0c30", "sighting--0da52f0b-a096-4d0c-82b4-331dde639f17", "sighting--eb9e8e73-8dac-49ac-b222-92e3aec2d7d6", "sighting--2846cce4-5f63-4802-b6ba-a289dedc204b", "sighting--4f175276-fdb9-485b-a889-f8d7b31c614b", "sighting--9bcb74ec-189e-467a-893e-3fb3227b63c0", "sighting--39a383a9-82b9-47f4-b636-6a90cf24eaf8", "sighting--cfc2e824-2f69-4788-83ed-a1eb1c66b16e", "sighting--467f17b1-a9a6-4e89-a8c1-3be0ff3e0558", "sighting--826309fe-27ac-4f65-a17d-54eb4365c4eb", "sighting--691c714d-728d-466d-b008-59958bd2efb6", "sighting--d8dfd37c-c1cc-43cc-bfa6-6a59031ee25f", "sighting--0e3211c5-815a-4dc7-8280-47c6a4a193bf", "sighting--d2e339e0-14c0-40e0-a711-b3e931353649", "sighting--a9ab1c13-bae1-464c-be00-e1085dcfd321", "sighting--3a494f8c-8a2f-4ffa-a96d-0c0ae25ae467", "sighting--a735f666-9489-42bf-b30c-7615f3dd5190", "sighting--1c12e973-f296-4dbd-b1c9-9502f647e292", "sighting--294e3a18-39e4-422d-b873-0ab88a41baf5", "sighting--384daa90-98fb-4869-9c06-b8961f961228", "sighting--311b697a-7238-4432-a64f-b067484a8551", "sighting--dac2610c-367a-489c-b8f6-e523f3b2fdd8", "sighting--5a87063a-9f82-427d-815d-6009483e5fad", "sighting--f6942f48-496a-424c-8518-1487b5df8f2e", "sighting--f54b2c13-fe20-40c4-a59c-eecfc99a5e4f", "sighting--f99b5659-a2d8-48e4-b542-7e64d8a4276d", "sighting--8a2cd1cf-c155-449a-969a-d84f5804f4ff", "sighting--e14010b6-830a-482b-bfc3-2e1853804468", "sighting--bf4a66e0-5f31-4b55-afec-37c0385750dc", "sighting--113bd631-3097-4e2e-8b01-82d9a72e7ac7", "sighting--60ad29a1-8b39-4314-9f19-09d6ab1b3303", "sighting--450c0c92-8ac8-48ba-85c9-2cde8aaa4f15", "sighting--8679d645-ed27-46c9-a29e-49a1e1a7547c", "sighting--aa52a13a-fbd5-4d78-a24c-c27e56245cf3", "sighting--70248cbf-02ca-477e-9965-65df0784e17b", "sighting--b5a44f5d-2b05-4d03-afb3-07dbdf3aa30d", "sighting--4eb2fcf2-6beb-483f-8473-d6d926fd84b8", "sighting--0c2615f9-42d4-41ef-a4fc-0cb75cea95ff", "sighting--f2119f76-d8ab-4b9e-9537-ddbfc0948108", "sighting--c70673bf-1714-41ae-b2b6-c120f3e6a0c8", "sighting--bbeec220-c32f-4e53-abb1-6d99735a77b9", "sighting--57dbd912-6763-4645-bd87-571cb7a04ee1", "sighting--b358db76-d4eb-4b99-ab06-664c4211f68b", "sighting--aae77571-d36d-4118-8a4c-8cf80c98cdac", "sighting--8f5c5a8d-8194-486d-afad-36a09696c94d", "sighting--322f3baa-663b-4917-a383-911d78ff9f40", "sighting--8e096937-5a5e-4d3c-a588-365f26a64990", "sighting--ea298abb-b9a9-4ee9-b937-a966114c03bb", "sighting--fad1076f-3501-41bf-95bd-e9ec5ec763b6", "sighting--1755b3be-ff35-48c4-b3d2-c3a37824ab14", "sighting--09511052-d60a-435e-9ed6-76fadfbc70e2", "sighting--dc41dee8-446e-4816-8654-788fb0aca185", "sighting--4936df92-56f8-4d8d-9372-55933d294a9a", "sighting--2b3fcd18-a1dc-4dc0-9db3-4b29046dc985", "sighting--b90b3828-aa4b-4a34-9aac-5aedc626c190", "sighting--ec1de19f-0e95-463f-9ea2-f050e387159c", "sighting--c0300c54-e6d1-4247-bcdb-b259469c5911", "sighting--3fcae7c6-95da-4a06-a331-c81f0573081a", "sighting--1965566c-7191-4213-86bc-c7d0b127cdac", "sighting--f3576c34-e05b-44c0-9c43-63b7aad8a855", "sighting--cc137da7-d270-4bfd-ab77-064f2898e2a8", "sighting--e23bcc09-a07e-4bc4-af7c-ecb37195b1d5", "sighting--3b034cb6-17ba-4b4f-919b-48334891c124", "sighting--caa0cdb5-6bf3-4ff5-944d-65f9c16dccf3", "sighting--3f6952ea-a9b2-43a6-84d6-fdfc2ca49373", "sighting--581537d5-e7ed-4e5a-b36b-02e3000264d2", "sighting--6ab0d368-ef6b-4bce-a8a8-bff73d677617", "sighting--485338e5-3943-470e-a601-82f61bf928f8", "sighting--f6688ada-efea-4254-9dde-b28805d02d02", "sighting--ac6362e8-2bc9-4a6a-950e-260cc4eb6ca1", "sighting--6dfe78a3-67aa-49e4-afbd-7c0db74675e5", "sighting--db4453b8-e0e3-48d6-80db-9b9d38685b4a", "sighting--c416e0ef-b085-4a96-9273-dd2df47493a5", "sighting--0fed1f04-f6a3-4487-a1b5-e70d6d5cf073", "sighting--835c13f7-a2b0-43bc-814a-9d308b039ccb", "sighting--71127183-3158-43ef-a645-1c9a977c4bb7", "sighting--3d9fffc7-7154-4383-a9cf-60928c0fb1c6", "sighting--3d6e43fb-c106-4e3c-95db-74cc29c062b4", "sighting--f05d749f-d304-4c9e-a1f4-5061ab75fd8c", "sighting--6fe1afbc-7acb-47aa-b1e8-35f0b6766e31", "sighting--d09274da-5f8d-4575-bd0e-b91fbfef3300", "sighting--dad2637a-e0b9-49e3-bb5b-431287f0b888", "sighting--db3fe467-a7b1-4327-b92e-52f8d41d2128", "sighting--27af4e7e-82e9-427f-b7ac-e21aab834661", "sighting--970b5ed5-4aae-4217-9e1d-394fcea400ec", "sighting--77f32f0b-27de-476c-a54d-41dcc62d1eb5", "sighting--73b2507f-b577-42b3-ac97-72ad0863a101", "sighting--8834d447-ae48-4c43-a079-59b778ca4287", "sighting--a4ef50b4-9ab0-4777-9b7c-7a364659bacb", "sighting--ad16837b-d4af-4552-a1b4-8643ab1436ef", "sighting--d662a280-f55f-4c1b-b012-64e3efa8d842", "sighting--4b88c8d3-5281-415f-9959-64c48b48bc5e", "sighting--b8b06c02-707b-40bf-9244-e969b07aa16c", "sighting--0bf274b4-51a7-40a5-8809-47223a3ddc56", "sighting--97de2dfa-264f-4c83-9507-2379a597d210", "sighting--01d0cf7d-42fe-42e7-a84e-f0e4ca6453e2", "sighting--9cd4641f-38e6-4003-8eea-bfeba64b6985", "sighting--36af0c5c-1afa-4a7d-9e8c-0c8fad990932", "sighting--a3156d9b-99c0-43c8-859e-57896042f571", "sighting--c9f12306-3f6c-4cee-8f65-9ae0f1ce5a0d", "sighting--a166825a-ebbe-4d8a-845d-67294c2d2848", "sighting--6f23936a-c90f-40f3-9690-e53f2a7755ef", "sighting--102a308a-d469-4ec5-b546-53c928116503", "sighting--aa763fcc-988f-4e5f-99da-08c28f7f06d9", "sighting--21a82788-15c8-4eac-aafd-01be2f72e862", "sighting--474c6a5d-2f62-408c-9bb5-caa957920d2b", "sighting--d46824ee-084e-4b50-835e-c401db832588", "sighting--5c6dae59-34d5-4f18-9909-d3b462b14533", "sighting--27f7e7b9-4cf9-426b-b750-491136579517", "sighting--6c135bc2-44e8-40bc-93a1-8cbfd77c2cf1", "sighting--9938d33f-085b-4cc3-8ddf-3d61d2b459da", "sighting--6798c955-206a-4b16-971b-64ebad455e96", "sighting--d8b792d3-f4e5-4b76-a68c-3e7044f5d7fe", "sighting--8dd5cd89-aa55-45d6-ad9a-2af155f1ae70", "sighting--cfa387f3-cac9-4001-9463-ee37c670fb69", "sighting--b60ac5b9-c9a0-4d60-9fb3-4c525b5e0221", "sighting--c91e2f34-2e2e-4b65-933e-5f02680c3a43", "sighting--c303513a-45ee-4f70-9ee1-7092e2082fee", "sighting--e1d324ed-5cf1-45f0-a01f-b5cd40cb82b3", "sighting--2d725bdd-8f05-44c0-91e9-9969bc7a4e97", "sighting--3bfda218-11d9-4f12-8973-f5fba84fc91a", "sighting--9bdb6f2c-b600-4ff9-a575-6153deea776e", "sighting--634745dc-5b5d-4384-8b1d-4221fc0c9a52", "sighting--8d73a5d6-4651-4307-920c-0c52d664751e", "sighting--22f9d9b8-e36a-498d-9e9a-124a54541f0a", "sighting--f28ead00-9089-47a4-b9a0-5b3db8836943", "sighting--60f9ed48-afc5-4872-8598-522368b552d8", "sighting--19389077-6580-485b-96a5-59aa68cf62aa", "sighting--d63eb133-1e89-4fa8-96a7-297bbf752aa4", "sighting--0dddd9a0-1a06-4ce1-a3cd-4f823a94e4da", "sighting--c92d4f61-4659-48d3-8aee-fceffb419385", "sighting--d089b8b6-0d41-43c1-8166-30467bb09541", "sighting--bf67e370-c205-4626-a944-936ded5d21e9", "sighting--2616cc6f-5d45-4291-a080-402fd1e09121", "sighting--c5bd169b-0f60-4ee5-8687-a0158c4b765d", "sighting--f5afcba5-75bc-4f7b-8ee4-274e32feafaa", "sighting--e531524f-f506-45ef-94f3-4cc821294f70", "sighting--c8c1dd8e-c88d-4e32-a803-c7a5ac0b28af", "sighting--696e2169-c349-4df2-b6a3-5ab3586f0a04", "sighting--055e119a-cc68-47d9-bab0-5c21bc369f48", "sighting--fdd7f024-7e6d-487d-80ef-2f9d5d3b3a9d", "sighting--b38fe99a-0cfd-404f-a775-8a2814d0d554", "sighting--6ac6ba1b-0a29-440d-a2f1-90707fb85f69", "sighting--5d5c5909-6d79-4633-ae44-a1ad474d9de6", "sighting--60f2c3a4-2c70-4ee6-a85f-71c53b96bde4", "sighting--12955dce-bd0b-4ea3-9b50-862e0e070643", "sighting--ad1cc733-a245-48c2-80b3-3136b3503282", "sighting--9b023a1d-faa0-4319-9d8b-4c167ff8afc2", "sighting--22223988-8b42-4332-9fc4-19c01a67fbc3", "sighting--bd25550e-6f7a-4fdc-b73a-4cc3d10f2666", "sighting--d1e9c599-c9dc-4244-a1d4-acf4f5d6064d", "sighting--5c56b0a4-e988-4859-9aa0-f6392e9a9a0f", "sighting--95b57b15-3b22-4fb0-9db3-cabbb345e8ce", "sighting--4279c42d-5f32-464b-a60a-847ade8c638f", "sighting--f8f70a40-2176-4036-90b8-5048b77c5da9", "sighting--e692dfec-4051-4704-9c0f-c8ea3c1e8b34", "sighting--03b52156-3be1-4b30-8a1d-335700d80974", "sighting--45d1008f-21f9-4a72-9cd0-b0863a3ad1c4", "sighting--1d5854de-8a4c-49aa-a6e8-59e710071768", "sighting--770ff53e-36a8-46be-9f08-0302aba8fd3e", "sighting--32ebde11-018c-4a0e-857f-711e2ca34c3e", "sighting--823e67db-aafe-4da2-9716-377939edf9ef", "sighting--ad818b03-fa8f-41d0-8ef7-cdf0e82e9945", "sighting--243b321a-10c1-44c5-9a9e-a77f5b095540", "sighting--a1b6fa59-3caf-4164-9d73-633416288c3a", "sighting--8d0c14ed-8db0-47a8-b05a-b54ab5f1330b", "sighting--b42a1efd-dfb6-4fc6-8b3f-ccabaea3474f", "sighting--f4f969e6-e63e-4a42-a37f-3017de65b5eb", "sighting--3bbc1d78-ba6c-4d73-80d6-b86d8097783a", "sighting--554ccce8-9145-4796-9b21-5fed590f641c", "sighting--566efb6b-ee66-40e9-aa6f-486276a849df", "sighting--6e7723ef-b15d-479a-8728-1af098f977c2", "sighting--74a2fb4e-5d06-43d6-ac31-294408c1aa9c", "sighting--f42abcc4-aae9-4322-91d5-e1fe1ae26021", "sighting--833bf665-82c4-4817-b1cc-7c338eaee4c6", "sighting--b1eb0a72-719d-4e6b-8b37-cc090e9cfc9c", "sighting--db076417-61c4-4813-b637-f1ebd5b9fa41", "sighting--76bb50c5-8ffc-4a3a-94e7-f9ce2c97b604", "sighting--def9dd46-9abe-49a0-afd4-0428bc5199a7", "sighting--94c4edec-bf0a-4692-9944-ed8e49529f82", "sighting--4cf38689-742e-4a70-81ff-3a64ade419cb", "sighting--c440d8f3-a7c0-434a-992f-d8390029a1e8", "sighting--8660a990-0515-440a-a6d4-daf2820c1c04", "sighting--b522d60f-146c-41f7-8a57-971ba7199304", "sighting--17dc3a0e-6d59-4c30-a7c6-9b3db65f3c68", "sighting--e73f477c-2f9f-403e-9835-2fc39fec5ab6", "sighting--dac6d3fb-980d-4e42-938e-f5ce729f5397", "sighting--b93f31e7-b454-49f5-a69d-e3059ca85db5", "sighting--7b13e19e-cb8a-4c4c-91ca-557d2b7147ae", "sighting--a2f3674e-f3f2-457d-9361-b3770b4c2569", "sighting--d018d0fe-07b0-4605-83ff-c63ca7a62502", "sighting--363e503b-eb1f-4769-8af7-d16014bacd26", "sighting--4dafd123-737e-44a1-9f4e-e7925ae88ea6", "sighting--d631850d-3c3b-4b81-bb31-1dd3c66708da", "sighting--5c796e4f-35ca-4bb8-bac6-52f9c4b093a6", "sighting--55dc36da-c6ce-41a7-9f8f-5118faba5b0b", "sighting--8b42a533-09ee-4bf4-a711-a78aa881341c", "sighting--c45bd178-91d7-418e-b46e-af2c75c83c93", "sighting--627bf079-1688-4148-98e1-0b54ba962f57", "sighting--3ed14317-b996-4cc3-9831-bdb404432eaf", "sighting--8aeea9d1-e3f6-42ed-87c6-c99f370f7698", "sighting--1369afa1-533c-49d1-b4c3-ed106df396ce", "sighting--8ab359c7-8ed3-4497-ba76-d15a97f837de", "sighting--8e7314ba-7581-4521-8cec-43fc9495d865", "sighting--17978f67-a3ed-4bbc-8ae2-c024f42b7a12", "sighting--70b3dc02-d990-4225-9249-4bde3980717d", "sighting--997c7eb0-09a9-4f38-b3e6-94f72f5bf266", "sighting--2bb3d58f-c03e-4945-8cf0-eaafea1f5c8c", "sighting--820273fc-2b0a-4e25-9017-b7df8987349d", "sighting--ca8a3b09-ef5b-4ace-a3b0-6ed251d6f81a", "sighting--48a36b7a-9ac4-4017-8195-6583517b14e2", "sighting--28be460e-b0b8-4f1f-9157-4e72897a36ce", "sighting--195e0618-d704-4d18-a82e-901461f3495b", "sighting--2c1e21ec-3d32-4d38-bec2-e9915caa7ec5", "sighting--82f5cb22-129b-4ba9-8e69-a82e933e10c6", "sighting--70cdbdad-aaa2-4b23-ace0-c07be160d74d", "sighting--76af6bc2-767e-4e0f-a4b6-100c4c94689b", "sighting--7b96c330-3985-405f-a7ce-0b6912464ad7", "sighting--a685cea4-5568-47e3-ac0c-28199a8c8e7d", "sighting--b76919d3-3949-4cb4-8551-23b3de572759", "sighting--35b2f211-2330-40e2-adf8-59964f8904c6", "sighting--c86f31ab-9182-4563-b75b-604b319a37a0", "sighting--cb657463-dfdb-443e-8d84-37e2767a7d57", "sighting--a366a143-d859-43bf-9084-322f1ed802d7", "sighting--972bf1d7-aa1d-40a1-832c-c74a22a860d7", "sighting--c80b9966-702e-4aa6-9de8-c2fdf7a0da17", "sighting--53825137-14ba-4131-af72-f483d692b113", "sighting--f14b9697-e8a8-4c1e-85bb-b6e2c299d4ba", "sighting--3e90a322-4966-417b-abab-f8ad47d9952f", "sighting--6986d6b2-c33b-46f5-8ea6-630ea40ece66", "sighting--cccf97e2-7ad9-47c0-91f4-744081a1fd71", "sighting--99ddcf19-9ab2-4c0e-97e0-5dd1746ff649", "sighting--8aa15a8b-6af0-4c2c-bf48-c02c386d54f2", "sighting--5bcd0ebf-c55b-4973-a1e5-0c641259b8b6", "sighting--97989ac7-395e-455e-956e-6a5f4ff22145", "sighting--9a87f8e1-ab0c-481e-bc38-d4a983633f20", "sighting--f9c15540-86e4-488f-a694-c105c8ea6805", "sighting--1910fbe0-f13f-4346-b58c-ecc380b12d83", "sighting--0a3a23f7-03be-4e24-a75d-7ed51dd7a221", "sighting--317f0a0c-d768-4d13-b640-e169e2fefc24", "sighting--d56ef8c1-f8e3-4786-b9f6-5afc99e18cf0", "sighting--967ae2e3-e05a-464c-8974-d8347f524407", "sighting--7cb1dba6-4be3-4c34-b659-212e87645dd0", "sighting--1367970a-8fa5-43ef-b158-4b3b6842e544", "sighting--da214d02-9c7d-486b-b8de-a39536b26b76", "sighting--b2546d96-fca6-402d-a59e-6037c60bc06c", "sighting--dfb99cd8-e87e-4655-bbf5-109cf78c42de", "sighting--c7d24416-ee6b-40b4-998a-e57aa1e753a6", "sighting--bf0edb1f-b92b-4054-b98e-cabae6f9c730", "sighting--a0ddff38-d0d1-458e-8ad8-4db3154b8a4e", "sighting--ea1f6db2-5ecc-499c-a1d2-02edeb995dc1", "sighting--747ce1ff-ba92-4a58-aa75-8120dd73c81b", "sighting--c1003fa4-b974-439d-8941-c2a9d71bf356", "sighting--a917d584-9e59-4831-af87-8a2dcdc74acb", "sighting--78483a2b-8eec-4e43-9386-8e8aaef22ea6", "sighting--d8fe83eb-357b-4c4b-bd94-5ee97ac1492d", "sighting--453edda9-8131-43ef-89f5-17fee544da27", "sighting--8501aa17-f235-4be7-b8c0-e32e03a43d5e", "sighting--1aa159c0-c2bd-46e0-a991-81faedca6468", "sighting--e2f315b6-3200-4f45-affd-793b55f393c5", "sighting--1c48842d-51a4-46bc-9f69-ce0ec8219f1e", "sighting--6fbc98d2-9dc8-406c-b3f3-61d1966b2fd2", "sighting--33c4f65e-63d3-4d23-8434-825ffdbc277d", "sighting--52c2d588-c285-4f56-9a9d-5dbcc4e5611b", "sighting--c25ce767-6844-4321-b0cc-1d13ee5242ae", "sighting--d5341f27-410b-426a-afe9-be0633b3809a", "sighting--a17fc8bb-5dde-471e-a3f1-4f71fd457fac", "sighting--912ae15e-a2c8-4af0-9a84-d325315459d4", "sighting--56220365-dbe5-4d15-86ae-fa8a1499f4e2", "sighting--de7c0d42-3f77-4b19-b07c-e85c30e7b928", "sighting--4f65772f-9539-4c82-9b5d-85481011ce8e", "sighting--1d0594ad-f6df-474b-aa69-a94617818ec3", "sighting--0865fba1-01df-4d3e-be96-e6acefbe11b6", "sighting--afbeadec-3447-4a66-b04d-15a2084a54ce", "sighting--02c4575a-efdf-43f6-bf8d-6c8738776f0e", "sighting--4ac057ca-9c93-48ad-b2df-93eb6be0d264", "sighting--e01f8b53-9b3c-446a-a7f3-5d3e7043dfd4", "sighting--fe477d2e-1385-4c82-9f78-4a8104101369", "sighting--25157d61-f415-48ba-9c6e-330b6e48128a", "sighting--bed13bb6-b879-4ca8-bac7-eff5eb95e51d", "sighting--62f87979-2c7b-48ed-82b7-64d1b12e315d", "sighting--2e92cc2f-99af-4ade-9a9e-5c953d0ea890", "sighting--ef549cc1-e2fb-4a12-838d-1331e1e89424", "sighting--14fe994a-4cc0-4aa8-b856-f38318ab9427", "sighting--b22dc943-3d78-4b61-984c-c6acbc0ca500", "sighting--6ee95b99-9033-4473-ac02-6fa89ea2778a", "sighting--64636adb-5a07-4038-a5e9-7d2305fb9a64", "sighting--394597be-314f-41e3-8e99-95ae04c82d68", "sighting--6a0cde39-170f-45fa-aefa-0ea9f3a03ece", "sighting--46a3b507-5714-4bf2-a967-2015591e2ad4", "sighting--f968e91e-520f-4d52-a1ea-1738426cfa83", "sighting--99990fa9-587c-4985-b939-bfbb08e330ce", "sighting--37860e7f-ceba-403e-a512-010223e0bbb5", "sighting--57e0f96b-641a-4c85-9764-f46cb584b6a1", "sighting--0298aec0-c3eb-41c1-a106-9f379b4de8dd", "sighting--14c978c9-c608-4a4e-8cd8-612f0e4fb1fb", "sighting--2225a951-8755-4968-ae37-bc130cd8f6d8", "sighting--3cb42c5c-ef03-426d-9a74-daa6fd6bcf07", "sighting--3c4db24b-2221-4b3a-9ec7-a7c2e70a6653", "sighting--e38c0373-7478-4345-9b8f-f7ef2cb81f48", "sighting--666689cd-1234-48d5-a799-17a08860be40", "sighting--1a8cbc50-da7f-4e6b-a5ae-cbf373dbaa65", "sighting--e1bf2444-4af5-466b-8ff8-e3fab8fc535d", "sighting--72528b27-997c-46fb-a32b-59a9fbd85fae", "sighting--ceaa1436-700c-4e6b-92e7-e0f8089ab1b7", "sighting--c5c37d72-e80a-4c57-8e75-80291725d540", "sighting--d3b86127-9173-483b-9dd5-e405377858d0", "sighting--735f0ab9-937e-4143-88fc-699114ab7c17", "sighting--47663075-f363-47d9-8a52-34174718492d", "sighting--2ec3d017-4bf0-40de-83a7-39c916401bad", "sighting--9cef99c8-caa1-4ca9-b687-2062f949ef32", "sighting--55d7b831-53a4-4641-a9ee-3f577aab63fc", "sighting--572a7c9c-d093-453e-8167-0640388d894a", "sighting--93401137-d6f8-4325-bb4a-7da482d3150e", "sighting--0818a06e-c310-4408-8dba-3c1136bb86e0", "sighting--8106c2b8-efec-4a7d-b86c-f4a677636783", "sighting--b785e7e4-6dba-4296-8703-2bbc068542b0", "sighting--3f224765-bb9c-4dcb-b06b-8da844ae2973", "sighting--c58c4323-c5cf-402b-a5e9-692de2c83f0c", "sighting--0a64d136-bb0d-4d68-876a-9e608defb351", "sighting--93fd3044-f5e5-441d-a712-5385376f97ef", "sighting--e30c6555-a192-4696-a5e9-3f33678254d1", "sighting--306cba5e-c9dc-42c1-b2b5-653f8bdb9ecf", "sighting--e9d0ba33-c310-4cd8-bebe-6680a48ae98b", "sighting--682e799a-1f6f-4035-889f-8eeb263300b1", "sighting--6e5b3e78-a3a9-433d-8ffd-5cbb251980c1", "sighting--35a920aa-16e8-4134-b1a7-1a6cac4f5d05", "sighting--a6e5fc3c-3a7b-42f2-8016-2eef474cf2e8", "sighting--d3023cca-9bd1-40bf-a563-06579f17b95f", "sighting--b5d85023-90a8-4510-9ca3-16a1373aba55", "sighting--3ac0e29f-9680-4b5c-8848-c4f13e94be9d", "sighting--6fdc905e-9fef-479b-b704-b04740e92eec", "sighting--4f7f5e90-f030-406a-962f-fae239c99959", "sighting--5e24fe06-361a-427e-8ae9-7ba83dc3e96b", "sighting--7e78f564-3630-40fd-97ba-42bea486f6eb", "sighting--fbf963de-0d58-4fac-88a3-b17fd1127b2b", "sighting--4221ea73-6e25-48e1-8c1b-33690b1afa0f", "sighting--269ffda2-7d8f-47a5-b227-473653f1d367", "sighting--e0a617d9-af72-4a31-8f5a-7e30d367669b", "sighting--6d5d598f-fb43-43b8-8385-01ee1cfacad1", "sighting--8420b2b5-4953-4a93-853b-e39255170705", "sighting--f662e0a8-1c7a-466f-8aa2-2d16051471ba", "sighting--fbc8de81-b870-4c28-8c96-08482bdc6ff4", "sighting--f37afffb-ce68-4fdd-8493-f98e39ef1d58", "sighting--8887586b-8580-46a2-969e-e1de71360da2", "sighting--1973aa57-a60b-4201-99cf-6114816b2f14", "sighting--6bee1bbe-97de-4832-bfba-486c6b66de93", "sighting--9bdc5772-997c-46d9-a5e5-f7b926864064", "sighting--16e994f1-8b7b-4e44-9b29-0ebcf2d55c30", "sighting--d54385d9-0beb-447a-a5b2-10cbd17ae351", "sighting--b022b004-fcc4-42a6-ab63-198cea844854", "sighting--54c92bc7-0085-4fb7-9ed5-f39257d38f03", "sighting--8323d016-93d4-4c6d-bf85-c6492b389fb2", "sighting--21d2fbc9-419e-4827-864e-7427ae4dfa71", "sighting--4454eb2c-3eac-4b18-89f3-741193476838", "sighting--88ff346b-9923-4a7e-b404-59c6a29f2f77", "sighting--7cae6d26-97b2-4135-958b-314e235d5bf2", "sighting--24a41ee0-fe9e-4330-b063-3d7d27861f83", "sighting--7975151b-d179-40cd-9379-15314825443c", "sighting--173acfd1-943c-411a-baa0-e74559e1dc78", "sighting--4b9caf66-34c9-4aba-b869-c0e6b2af7fd8", "sighting--dcd98546-d3e3-4e1a-adad-0e2827d6bfa3", "sighting--74ae1b90-89df-4846-a6f3-d42d5726c8ed", "sighting--bc6db048-e1d4-46e1-a273-f85c5a653c44", "sighting--9d69c2d5-5e28-437d-9eff-03bb87296d3e", "sighting--d23077aa-4d15-4914-b185-7b75ce9effc6", "sighting--b8a2a257-8228-4b1f-820f-dc56099dfc81", "sighting--47c4a545-7523-4b2b-875f-aff97a9061ef", "sighting--c2aea9d5-0ea7-485f-8de1-ae5a464cdbb2", "sighting--318f9ad4-6373-4d5a-b456-bb90d64ffe5a", "sighting--ba106b96-ab9f-4691-8726-b76a9fe31eaf", "sighting--6b11582e-6569-46f9-b61b-e3a8152e82b3", "sighting--6a69f72f-6e92-4a21-a1a8-cbca50a4330a", "sighting--5047263c-2c43-49c2-b8be-1cd69b655407", "sighting--6fb8bd69-bf5d-49d8-8461-e14e8f1e14c2", "sighting--fa4d65ba-98c1-4ba7-a468-eb79e6006629", "sighting--fd187901-b48f-41c4-a245-62fe217af7ed", "sighting--e31cdfbd-c6cc-46db-924f-65fbde4e08d5", "sighting--395dadbc-d595-46af-9adc-161ec28b014c", "sighting--3c114267-0401-447d-abc6-c56f5ce3689d", "sighting--73429852-38ba-4f5a-b322-601bd4fc7f58", "sighting--ce922608-3577-41a8-bc36-ebfe98be90ea", "sighting--61b9cd14-5382-44b9-b1ff-d5fa13f03d10", "sighting--704ff104-cd5e-475d-8c19-0190872231ea", "sighting--36e4a54e-a580-4c4b-95b6-bc725f3d4f48", "sighting--8083e09f-e17b-47cc-9a63-fbd96c7591f8", "sighting--24435ed3-445c-415d-970f-7cacd08aa602", "sighting--cc2324bb-a978-4398-977e-ddd7a6104d31", "sighting--a570fe09-28a7-447e-8fb1-74adc15c0781", "sighting--a6c6db38-4986-4b97-92f6-e2212ee7dbe8", "sighting--6555c737-61c1-4047-9366-e24f652e34dd", "sighting--955d81c6-45ca-4272-a963-195b8732d6f3", "sighting--2bd763d4-74c1-4e92-b7e6-299b6c74c3bc", "sighting--febf0dcd-da1b-4832-abe8-5978e44c2ed9", "sighting--d7390570-8fcf-4164-b8e9-d5726a6f9a90", "sighting--31f4186c-d72f-412e-a12b-697f07907d26", "sighting--7d420939-fda9-46e3-a27c-3a4422e9cac4", "sighting--7e79d3ce-54b1-4118-b347-51dd68ae6290", "sighting--5c257550-4527-416f-b35a-2660632a9e07", "sighting--3dedf528-3527-4c33-b552-4a913efbd189", "sighting--f77174d1-e516-4162-9aa8-0207b27bf8d5", "sighting--a18aa45d-f552-4bc1-a070-c1fcc0ad52fc", "sighting--7135babf-738f-4ef6-bcc3-d8f3a797369b", "sighting--1800b4d0-d36b-4027-89e5-c070acfeec35", "sighting--31c70453-78c1-45b9-8fb4-dadc8bb21b0e", "sighting--ecbd4cdb-e732-432c-9eea-0a3e7cab73cd", "sighting--272ddf99-4c21-433b-956a-495f72e50557", "sighting--2b71335f-92b0-4b58-95cd-9b6b9f882546", "sighting--7b448b00-b2a6-4848-816c-4dd53e90f47f", "sighting--0800cfb9-f87c-4f2e-96f4-4d52bde1d5db", "sighting--98b122ef-b9ea-454c-9bcb-163512eac185", "sighting--e989b676-d3da-4528-88de-c44a32ddc23b", "sighting--60da97b3-4229-425b-a41f-5d8042cc1f29", "sighting--bf055a59-6fa3-44ab-8d7d-9cf261e4bc5c", "sighting--0d9beeed-0a7c-4e96-a8bc-26f458a7b36a", "sighting--c9af5ef5-895e-4241-9c56-ed2a5d008f71", "sighting--fb66c66e-d7d6-4916-9e34-5c455caf863e", "sighting--c5f53935-d68f-4422-9247-af7d7c147266", "sighting--01585fa9-0a42-439c-b1ee-273dbf3ba632", "sighting--a311884d-fa25-4fa1-bf63-ecaf72cc0112", "sighting--e794ad2d-b4ed-44f0-9a7f-828f87a1ac13", "sighting--1b5297bb-6a5d-4c5c-af9f-1395be44705a", "sighting--5ca5be0d-7df0-4097-84d6-169c67d3a514", "sighting--52716778-31f1-4994-b8f8-d231856038f3", "sighting--4f190c1c-c7e1-49ce-9dc4-753e0567fd96", "sighting--8c1e15a2-f287-47ff-a008-51f509d0eff7", "sighting--c8cb13cd-4532-4f80-962e-0c54899eb861", "sighting--40e38028-6ddf-44d2-b378-136b8e57095d", "sighting--a741285b-aa59-481c-b171-33b5308ae9be", "sighting--1a5216e2-8d97-4744-9f33-2346cab8b90b", "sighting--b59e96c1-0b27-4add-9d11-305c3d2e5548", "sighting--797edf2b-85c6-4bbf-8a54-af8be699f2ef", "sighting--8cad2f44-406c-47fc-9b55-23618f0c0eae", "sighting--04f97e83-8296-4cee-9ced-d756acdafda1", "sighting--95e91668-4583-44f3-be1c-a1a653d42717", "sighting--dfc21de0-8d79-4916-986b-9a76c65c6e51", "sighting--b3619cc9-51d3-4d58-8068-4d833fc931d9", "sighting--427e7ba2-8be2-4649-b434-7de9a7181b90", "sighting--95136130-a316-4f5d-8b64-91c7594473fb", "sighting--c4bb3de5-b80a-4b61-8d3c-9394a8581ffa", "sighting--8e0c1acb-5400-488b-a530-4c48b26eaabb", "sighting--741b9ebc-0771-40f2-9440-9b58f9b8d9d2", "sighting--b8e21322-c1f5-4c92-abf7-afd348648bf6", "sighting--ceca89f7-d0ee-404b-a405-a53a04c98a66", "sighting--3ac31317-0dc0-4718-adb3-66f3638b6367", "sighting--9c4ca7ba-2744-4482-b3e8-fd5057c3fe65", "sighting--d2213036-313f-4055-a69e-7dfb807c9f75", "sighting--ac02dc91-4394-4ccf-be88-14ad7f3382bf", "sighting--8295a4bf-7c58-4b99-9c7e-2d4ffe6b9e23", "sighting--4f4db7b7-6e52-4d40-bfb0-d98b0a472d82", "sighting--6341f06b-4bed-4140-ab88-672dcffb0de4", "sighting--df433ee0-e886-48ad-9236-c23e9e37299c", "sighting--36dcbf03-49ff-4932-93a9-faeeebe6473a", "sighting--a27b930d-dec9-408b-a021-706f23873d06", "sighting--4ad7914e-cf61-424e-83e6-504cfd6e02b0", "sighting--0a628b01-af11-479a-b9ac-83bf0e5907a1", "sighting--4d256d23-3e71-4b16-9647-94a2eec2a02c", "sighting--c312e647-9994-40dd-8506-444c3f72e0e4", "sighting--b6570d2b-9d8d-423e-9e67-6672799efdac", "sighting--86887bec-7ed5-4f22-a560-93ffe86948dd", "sighting--57950b1f-f4bf-4c47-8535-246eee80d9f5", "sighting--cb7810c9-cd6e-4ff2-888f-239d6a9189cd", "sighting--070f3753-a662-4941-b6d1-1fcd99d6913f", "sighting--58e1e5cd-e639-4847-905a-a94d106feb33", "sighting--339090e3-b1c0-40f8-889e-5cad85cbecf0", "sighting--0dd03adf-d6e3-4428-8a99-dbae8a451345", "sighting--bc467718-c4ad-4bd3-9a23-5cb1afec12cf", "sighting--70e12d24-4fa4-418f-89e2-c5550da42d30", "sighting--ba120ad3-c720-4779-941e-dac61888c3ed", "sighting--7a3658ad-c505-491a-9043-1fbf003cea71", "sighting--9cddd9de-33e5-47dd-93c4-208e8adae479", "sighting--8f83a4d9-0cc4-4909-853c-050434f7d913", "sighting--e738ff67-9c69-481f-be0b-05de07d83a5a", "sighting--e98f16b6-bdfe-465c-95f9-d089a3781a02", "sighting--0cb21dac-cd9e-4130-822c-65a97ab9d8d5", "sighting--fd66c8f5-ae5b-410b-a69f-1d89ff88e5c5", "sighting--52e596d8-9960-4270-8da0-56c9207acf92", "sighting--7b779b46-9f60-48a7-bbd3-067e8901f09a", "sighting--7636e661-f586-418c-960e-8d551a81aa5d", "sighting--ad3da683-277a-4dbc-9dc6-7c9d95d764b3", "sighting--0c01e955-31ac-40a2-be03-95d9a0c672f3", "sighting--fa1251eb-8916-4e79-802b-c83dad75738e", "sighting--b5edffbd-8e81-4369-b87b-579a4c0b7f19", "sighting--56b0729b-8b90-41f8-b172-1f40e7eda18b", "sighting--eb3608b9-4dc9-4405-91c4-18ecf421bb0e", "sighting--bcb0848f-3dda-4cfa-ad8e-d0492b775616", "sighting--52120b63-4a10-44d0-8888-82f598fd7186", "sighting--2c82ee7d-b861-49df-959b-9bb0c9e5fed5", "sighting--de71c704-1f75-48f3-9898-40ef750e1250", "sighting--9a2a4db1-df47-4482-8156-40f735f695f3", "sighting--d4389e5a-e3b0-43d6-a9b6-828aeebda37a", "sighting--27259c0d-e7d8-4b25-9857-d2e47e8c8af5", "sighting--cb0e7c8f-7aef-4fe3-90e9-65c1441fe9f1", "sighting--6b936af0-801a-4bd3-bb84-24c86d692773", "sighting--083b3ce5-83e1-4eb3-9711-6652e65e9f72", "sighting--02856da0-16a5-42db-96c6-194c00524746", "sighting--17cff9f1-46b7-458f-b717-6578f90b4966", "sighting--029bfab7-e672-4ce0-971e-3cd015c60457", "sighting--d3ad2708-3ca9-4d53-b2d8-99a505ce56d9", "sighting--06bc8e27-969e-4c10-969e-7686999725d1", "sighting--cfa8f8f1-17bc-4782-a032-8cdc3d74ee09", "sighting--25d408f5-3420-4b0b-a78b-d87c551c8b5c", "sighting--f935e379-a0d1-4244-8886-ba2e1ebfcddf", "sighting--b055da76-be6e-4df6-abd5-8ece7e273885", "sighting--95e6e16c-f7e5-4f23-9b9e-697043ed6532", "sighting--877603f4-599d-4bcf-a24e-d9ee3cd07314", "sighting--cce8fe91-9669-4cc1-8091-f931d553ac4d", "sighting--cf8ff4a1-6690-48d5-bb11-0a4c3dacc4e7", "sighting--f5dfa8d6-f8b9-4da1-b723-a81d624d72ca", "sighting--c322a39d-dbe7-4559-a8ac-2118d9fbbb51", "sighting--8ae21e0d-240a-4bdc-874b-39f46e3cd019", "sighting--d4e9569c-a358-438f-b49d-bc5c7b4e16cd", "sighting--d325d0a7-52dd-4f73-b797-405d7518ca51", "sighting--dda0c21f-7fc4-407b-9e0c-8023119bfa50", "sighting--6b389d77-3cc2-4d38-b934-a6725b7fd2f2", "sighting--8369d232-ac3d-4f2e-bafc-79ae110680c4", "sighting--a028ded3-e328-4593-b881-709ee8afd1b6", "sighting--2480f3eb-aa0e-42ad-928b-18ad1c436150", "sighting--fc817357-3187-4da7-87a6-291fc9710bc1", "sighting--ec96a38a-f73b-4937-a4b9-4f82e23e2c01", "sighting--5759e86d-347a-49cd-b3cd-b7c47ddcb92a", "sighting--227f4d67-7807-400d-adcd-aa9b9b723df3", "sighting--995ff7e1-251e-4c28-be25-0facd3108a12", "sighting--5605a98e-e049-41d6-bc78-d6a099f83991", "sighting--84156891-35ff-4adc-a172-6c177c5c4649", "sighting--c9aff71c-896a-4b54-ae75-bd17719c6b29", "sighting--ae5eaccc-2f05-4d5e-8c41-f4813a879daa", "sighting--dbafe242-3c48-49fd-adf4-ef87af11202e", "sighting--8dde9576-8e8d-4a54-8987-f484d74e3a17", "sighting--d8f95b73-45c0-4296-97ba-17d8ab077792", "sighting--c3fb2e79-6f9d-4f24-b522-335ac1b69268", "sighting--632fae94-e58a-4168-8cf6-b04fa59ab49d", "sighting--08c3ec2d-3b08-41ad-8517-caeb96a140c5", "sighting--bc81b6cc-84ce-4756-a0b6-d40c1a2c2efc", "sighting--8c36895a-a033-4b6f-b974-7a82c5599f73", "sighting--465198f2-1624-452d-b343-62ea6dd501a1", "sighting--12b42eb7-ef4f-4064-89a3-ca1f33bbb86e", "sighting--686b53d5-d0ce-4c22-b7d9-e3f9a547435f", "sighting--dd22cb4c-2a4c-4c8e-833a-255f48ead353", "sighting--14914f97-a9ee-41aa-b21d-6a86d66551ad", "sighting--5660fcd8-3283-470f-a049-4ecee9eb49b6", "sighting--e0fff50d-db65-4733-99f4-f3f08cb83266", "sighting--f921297e-c73b-401f-88e9-5b9319fb547f", "sighting--c7bfd68f-36ab-4257-b07e-8f1309991bf2", "sighting--5894454c-e5ee-4435-9082-af44a099ac83", "sighting--e74f2d34-9e00-4a66-a8c6-55370a8a9063", "sighting--a7f1ded8-5291-4ef3-95b5-afc64fe1ccf2", "sighting--07518c46-a9f2-454d-99e1-5dead692b738", "sighting--d9f481eb-a084-452d-b975-d5c331919fbb", "sighting--5cd2b829-a3b0-4281-83c0-e004953cbed5", "sighting--5d9dd51a-8173-405d-b095-8cc1c7e3197c", "sighting--78d68e9e-f70f-4115-82da-cfbf3d1af12d", "sighting--712c5f94-dac1-4432-a49e-c50e75734aed", "sighting--4c67e3e8-31e6-43e1-9a69-9ff09463541d", "sighting--ee26ec6c-3c77-4851-a930-d4120f408798", "sighting--c6240510-de79-49f9-849e-275e6f4f0738", "sighting--6351b8e8-a934-4a46-bb2e-3101d10bb542", "sighting--38dd3300-9b4a-4840-9550-55c5b3d8066e", "sighting--ef258a66-3abb-449f-9cb7-7bd36e163bd9", "sighting--fac706e2-ed66-46fc-8cdc-dc9c694b957d", "sighting--a5265c2a-f99a-46c7-8abb-c3c37648ab19", "sighting--dd457123-a678-43a7-8b5b-8edff9fbaa47", "sighting--3f0c5fc9-6ea2-4d0d-a09b-ef98abf922d6", "sighting--621805b2-c121-462c-92c3-20c302c3a837", "sighting--a650ee95-9665-4646-bc7e-36c066b9ee8c", "sighting--32a3f8b1-906b-4224-95be-75832f1486cb", "sighting--09bbd685-19f8-4bf1-8151-6d8e97653549", "sighting--0c3af4eb-d15f-4d5e-b71b-9267bcd13522", "sighting--ffbce39e-3f54-4b9e-b6a8-f5972426938d", "sighting--f3d59020-81c3-44b4-ba73-19f35caf8a15", "sighting--3d24fb9e-1411-4e0a-866e-253cfbd26318", "sighting--61abd8d5-bf4b-4e53-a9e8-655814f83a77", "sighting--845a4b2c-9d67-4aa1-8fcd-de212dc53f13", "sighting--039c20ec-7330-4b51-8cde-c1040056bd06", "sighting--e4350bf1-c546-4db0-a103-38a0a1d2d9a3", "sighting--6f12422a-7c7d-43d0-9bb6-f85af3ecf171", "sighting--d578fa49-c477-44f5-8f14-f70feaa48685", "sighting--810e39b6-c679-44c9-b7cd-2e4d4e88f86e", "sighting--7f3d1fe5-dc59-47ef-959e-a457e5349b09", "sighting--b1524c81-1516-4a79-945b-196f4de7727a", "sighting--e9ae341c-0eb8-4dc0-a25d-8753ae4b7362", "sighting--3302f9f7-0576-4d9c-85fc-61f0c79009d3", "sighting--46acfe4a-e0c3-492c-9e41-c2c5cf74eeee", "sighting--5ec6dd33-8b9b-468e-83e6-c4c315ff1d78", "sighting--c34917df-1b82-4a8f-8bb0-2f1cb4b443a4", "sighting--a24a43f9-3114-4632-91d3-ba4f8c42a85b", "sighting--d4988bc7-ec2f-4615-9f3f-96c529f45e85", "sighting--2137844b-c72c-43c3-b88c-1016d9f545e5", "sighting--0d082318-af2f-4882-b11c-b1ba5fa25c66", "sighting--3989aba0-2ba0-4def-b4f2-b83bc08391d0", "sighting--44dd00ea-c670-4f24-b466-bb9ac501559b", "sighting--b28b8644-90ab-40e8-b494-9268c3425d39", "sighting--5a3f788f-341e-46f4-8298-ef3193b09a68", "sighting--19c06c5f-9e14-4d26-8433-46861343cbfb", "sighting--25fd3bc0-04b0-46ba-bb5c-abe4181d3d32", "sighting--868dd125-9e6c-44ea-94ba-ebf2ce80a455", "sighting--61a59ddf-35ac-4b84-8e14-8aac99f534ea", "sighting--734399f2-1ca5-4c64-b0e0-d5c34946851a", "sighting--7bb412f2-a86d-41b3-9a3d-589d2b7ddd4c", "sighting--766dc7c8-0e86-4459-8452-7ca21323fa35", "sighting--fa3a644b-02f7-406a-a4cd-9be3ed0f50a5", "sighting--43b68c2c-9d60-45d2-af0b-3dba98e22599", "sighting--b4eb9d57-657c-4820-b93f-1ad0d2331aa2", "sighting--5f09024c-e24d-4072-923b-760d7c9b659a", "sighting--1b5c50e2-4045-4e7f-8ace-ae3c63b59d5e", "sighting--5622fa0b-9fa5-4a51-938e-4d9002f4e0c6", "sighting--cd088298-4139-4e20-820b-451376576632", "sighting--fa686624-12b2-4e48-9e14-1fbc456fa38c", "sighting--e9f23fa5-c929-42c5-82dc-11be85e1679e", "sighting--080aa4c7-1af4-4923-867a-4e81e47f4f68", "sighting--c60803dc-99c7-4566-8553-ae3d04398d20", "sighting--a416ea4c-2405-4e31-8f25-b471b7c1598c", "sighting--a2ca0dc4-06c2-489c-a39c-1667f578b0cb", "sighting--5b461cdb-ae57-4bf1-9010-1856e29f680f", "sighting--4447f101-7172-47b6-af88-971d387c7aef", "sighting--eaf0d088-cc17-46a8-88ae-b13524160d98", "sighting--5823d110-6f30-4bbb-9684-ff75edc5e357", "sighting--bb2ea3ae-812e-4db5-a0ac-3e6dd51ae472", "sighting--fb0fa92b-e3dc-456a-bc9d-3d8caa1d577f", "sighting--4ad4f9b3-3b96-4619-ac94-e56021127958", "sighting--fb9796e0-6621-4a55-9cd6-c411659518c9", "sighting--071741f0-cbce-4cd1-89a6-e7d22ffdb4da", "sighting--4342ddd7-a79c-49bf-812e-7e4b92f25c05", "sighting--af330394-4069-4cdc-8440-4d9abe8a25cc", "sighting--771e3856-e134-463e-babc-a481bb18431e", "sighting--6712b335-c9cf-416f-ab9c-041f28b40f82", "sighting--7d171bb2-cc35-426e-91f2-1e74c3b2cf46", "sighting--0eac58aa-f101-4d71-b1ca-dcf1c9f8f57e", "sighting--9825d7ca-db48-4788-a048-e760858176e6", "sighting--ec5d5bc2-3b59-41ba-8697-7ee9398bb14d", "sighting--4c6f6e91-2428-4f54-bb7d-f074b012e252", "sighting--40c52d4e-62a2-4ebb-8714-a60febffdcd9", "sighting--73990f05-6527-4759-83dc-548430c836af", "sighting--ba18b187-8713-4f2c-b583-c82eeb64d56c", "sighting--38b1265b-edd6-41d8-a332-0ba7603b5ced", "sighting--2e46f558-79c5-44ae-b51c-c20fb6e1dea5", "sighting--436cdd9c-bc9b-4152-9a73-d5ac694dc098", "sighting--0df106fd-a46a-4194-85b8-49cb2a73a55f", "sighting--846e328e-9a75-4b44-8a59-e5d1a5050ffd", "sighting--1fb59700-11f4-4cec-8a63-66cecd54cedf", "sighting--8f4e90bf-738d-49fe-85cd-849371783c17", "sighting--930bda13-0376-4b94-9f83-fdcc71254f31", "sighting--10314a98-755b-453c-bff0-e25737eee40f", "sighting--7ec21b4d-d8a5-4bb5-affb-b5bbf59ceb24", "sighting--810640ed-1e3f-4000-85da-487d0b5873c7", "sighting--20fe0113-a7ac-4097-851c-32731faa8e64", "sighting--7649cd53-8f06-4ff7-8288-3495b40a4411", "sighting--a18850db-9d89-4b78-820b-b23c8fe3a8d7", "sighting--52b201df-8a2c-44a1-b6ee-8d450182872f", "sighting--60e7fcf1-5ccd-475a-ab78-e70fc3fbace1", "sighting--9dae7b1d-5c76-4088-8945-cb3eaa9c5d03", "sighting--f508f35d-4e74-4f53-a783-70faa0a2bd9d", "sighting--ae51f632-4447-41ec-95cc-112319c9a60e", "sighting--3f9baa72-fc8e-4f15-ae9b-a8e1f301ba72", "sighting--add0afb2-ac1f-4a8d-b9f8-bd43a1961559", "sighting--6a507c9d-502d-42fe-a7e2-8d4d0eda0cf6", "sighting--40a97c22-d89b-469b-be80-139ef16ee18d", "sighting--f4cc2820-d896-490d-8a7e-c580a657c785", "sighting--42883c74-145f-4ba5-bbbc-44a427270ad6", "sighting--33235676-3cb2-4ade-a65d-16f870e056dc", "sighting--619cb44d-6bb3-43e2-869c-4a51b44d9914", "sighting--9065aef4-934e-4593-8559-0b9b4d8d9bbc", "sighting--389899b8-d13d-4d9a-84f2-84090c988f5b", "sighting--d325bcc1-765b-4a89-8f70-ae1b29405a3e", "sighting--6c3896a8-162b-4972-93ce-966700076fe8", "sighting--4f523045-fba1-4b39-a757-f3d75bb84d3f", "sighting--b54ea0ea-f634-4373-8401-d27dd3c88d32", "sighting--f498227b-9702-4615-9820-f203e49b4f83", "sighting--e4e4e46b-5467-465e-be83-6911a6800fb5", "sighting--c8b2bcde-e0b7-418a-b9b1-3905391b34d7", "sighting--1eab0237-8e73-4590-9bd0-c64c3f521d15", "sighting--4793ce30-4a7a-4c64-bc0e-43d45c578cf0", "sighting--d58f1af6-15ee-4cf4-a72f-6ea26731a330", "sighting--fa302770-3fc0-4e27-9380-801f8ca02e18", "sighting--282045d1-303e-47b0-a57e-1b5d3e4f6c88", "sighting--be924669-70cb-44be-8178-0000754a01bb", "sighting--858608e7-ff43-4b5b-8fac-ef2896134698", "sighting--41eae914-0618-4ecb-abfe-bc1d3dde6f38", "sighting--840d6de6-86e6-480a-9b7c-8422ac997fd9", "sighting--94719193-e243-4fdd-bfd8-af0e1602bf83", "sighting--8a7b9113-b949-411f-970a-88075c78d97c", "sighting--fc7ae4cb-33b8-4149-8b8b-5c1f4856fcc4", "sighting--28bcf628-7f98-49fa-8ed4-064c6577eb05", "sighting--8f96480e-15a4-41f3-927c-a029bafa9788", "sighting--655e7e31-4f76-4a4b-9ec7-c4b5ad8d72c9", "sighting--0d25c9ac-ecff-4ba4-8cd4-a793b4bf26ce", "sighting--b36f6d5e-a0ba-4b88-9984-0eaade7f70b8", "sighting--cabea2ad-c786-423c-8530-5a259a0cc982", "sighting--1e6cf931-71f0-4ff5-a298-2a88ca9de066", "sighting--6f5bb2f0-dcb6-4b3e-9ebf-2dd9c22e5972", "sighting--684afe13-bd74-4b36-8446-f5e6089d96cf", "sighting--326a3783-724a-46c1-a02d-0f64a65d5461", "sighting--d099853f-c452-4a6b-ae1b-92b6aebbd88c", "sighting--ec87c3ff-337e-49f4-a1ba-3745292c377e", "sighting--58e5c182-4f20-40e0-89ae-218b8ecbb02f", "sighting--dd8634ff-229f-4c06-b717-c3cdf7fc33af", "sighting--f0e1a13b-af0c-44d8-86ed-b18cbbf77043", "sighting--78404767-cc73-4502-9c68-9ca284599408", "sighting--43850397-69fe-459b-9472-fc2b9bfb8be6", "sighting--99a5514e-e1f0-4b96-ab0f-e4574c342b53", "sighting--c60a69c7-d5e1-44d8-9b4d-884a38e58ac1", "sighting--24579729-3162-4531-acc2-c1c6df2956b9", "sighting--c49fde15-6aa9-4748-80e0-d08b826ff4fc", "sighting--8dbb3590-13ed-4ff0-9402-355d453d48d5", "sighting--1e496c1e-d385-43e0-bcb2-2dbf62cf69ed", "sighting--a3866176-75a7-42c8-bbd9-da6ee244920e", "sighting--62f5511a-320b-4ea0-9c04-987192cb02fb", "sighting--8f557ff8-9fa9-4e4c-bd70-5e6075a1caa0", "sighting--93e82db8-deef-41d0-a55e-d0f20760be8a", "sighting--e0dde960-47b0-422c-9e7f-3f0050732497", "sighting--5072536b-0c3e-4241-937a-88e43f8c16c4", "sighting--f438b173-b8b4-4673-99d3-ca53f2df850b", "sighting--3e4761cd-7b84-4ce4-b3e7-28c014b75670", "sighting--f6c4e241-2ea2-4aee-af1a-2536f0d8428f", "sighting--fa2a0269-2057-4a39-8c87-9442a5e78603", "sighting--fd78ee2a-ca80-4e3c-831b-e1694bd00e4f", "sighting--3c874aea-a05a-4562-9603-a99b82099503", "sighting--10c74b4f-67cd-4105-a53e-a11c67a7fc1d", "sighting--e2139680-2573-47b1-94f9-28d68b4b5a24", "sighting--bb66a4a2-1379-4605-8cc4-9f7e6fb4174e", "sighting--856dc07d-6561-4d33-a1a1-9ae4efdf05a7", "sighting--21472882-acc5-4a6d-911f-9c1db23c2196", "sighting--ab11ecea-b608-44e1-be6b-e4749d0b564f", "sighting--f5482e59-c4cd-44c7-be38-14e76c1dfdb5", "sighting--5f65ec24-2eff-407f-b91a-a11815598f0a", "sighting--ec1838ba-e4b6-4bc5-83b4-1ed8360d31aa", "sighting--2a1e7a60-1eac-4bd1-a433-bee887470eb8", "sighting--9e177aaf-e467-45d5-9dd2-3e6898a68f3b", "sighting--cf10a6d0-5c96-47a9-89f2-09430dd55de9", "sighting--541d8081-0eab-4bbc-9e60-3311cfaac39c", "sighting--d8448551-4ceb-48b6-b10a-63a6b8718f64", "sighting--b3db4ee2-6777-4120-96c9-cf7be1568f5e", "sighting--17444c40-493a-47fc-ac5b-250446146d21", "sighting--fd40a9ac-5fef-4f7e-a595-d61f9096bd36", "sighting--1b6a3294-afb6-4ca4-b5ce-025ab09c0ffb", "sighting--2819a254-7762-40ff-87f4-f9dce459b205", "sighting--d9a03898-7bdc-472f-83ad-87c20896322b", "sighting--9cf038b8-e670-49da-9ce5-a975fe34842e", "sighting--d3c27857-437a-4a73-a966-510ca1800f05", "sighting--f2849f0b-96d8-4493-81a2-46051dd57202", "sighting--65a96e42-10ec-4305-8275-70c55fd78e36", "sighting--c3828ca9-f13a-4263-9568-b1a7f9f6d78b", "sighting--c5f504e9-bba9-4683-a3de-9d3caa971e6b", "sighting--1f6b9b1a-230b-4d08-b3e3-2b492c0fa840", "sighting--1eeb1f64-6371-47a1-ba10-6a892db5cdbe", "sighting--0719e7bf-f6c7-4a1a-a12a-3e944a43759b", "sighting--ed6e8156-905e-411b-a811-a27cae2e2477", "sighting--216d0d69-71f6-4235-a402-4ad75c471e76", "sighting--bf0571b3-a010-414f-a5ff-f7f16a42d1b8", "sighting--faf46dae-99d2-467f-a078-bdfb603c836d", "sighting--bca85fdc-916b-4f72-a3c3-d6f5a138fd65", "sighting--3ebf2fb6-4270-4482-9149-6650d85fe343", "sighting--ba7225dd-4fd8-4024-80af-b860c71bf2a7", "sighting--07dd0b63-643d-4dd4-8c2d-fe1862670a54", "sighting--5fdecd03-65ba-4863-a37d-20718fc79223", "sighting--6f392900-cbff-46a1-ab3f-fb402b4eced7", "sighting--950ea962-9165-4237-b6c3-3226348853cd", "sighting--aa71355b-82e2-4982-a5cd-0d019951525a", "sighting--19ede9ae-244c-41e6-9db3-7f44904dda9a", "sighting--a101cd54-0ed8-4af6-a26d-02978469a7df", "sighting--76a3dd31-076b-49c5-a4d4-051fc57ddd92", "sighting--58f6ff3d-a5fd-4805-8db9-f6f9e24b71e0", "sighting--ad4a0405-53aa-4eea-b12c-20c271e9eade", "sighting--c8e6d60b-2c10-4d15-b7e3-c9182d0d7d25", "sighting--94eee388-64ba-44a9-840a-ad56ce6b2efe", "sighting--0bb12877-8184-4657-a4c1-57a5f96a24c4", "sighting--96527399-533b-4f4d-b7f0-18b8c23d34dc", "sighting--d1bdeece-1d3f-46fa-8505-cf85136a59aa", "sighting--f7875106-2426-4425-a701-94501cabd1e2", "sighting--40326d3d-3d12-46d0-8ee3-7213332352df", "sighting--40bbdcd9-827d-45fc-9f68-c32c16992968", "sighting--40d5fecc-c974-4ad7-ab74-65ad6a6586cb", "sighting--392cd48e-a8f3-4602-912b-ee3cc9acb1dd", "sighting--fe597934-b6f0-4339-acff-70da8723dadc", "sighting--ed3b6d30-a4b0-412f-830a-c33b840fa95e", "sighting--c9bf29b8-ee24-4074-8671-0204be9c73e2", "sighting--013b9cde-3097-4dab-9be7-053108916db1", "sighting--fd1fcb87-3add-42e6-be98-713cab50927c", "sighting--cbb19707-2ab1-497a-b99e-1a77efed899c", "sighting--f3967e5a-9772-41f1-822f-f6324992791b", "sighting--ce94f6d8-5645-4eb5-a5ba-e63f6a7b21b1", "sighting--b01a2e51-2f6e-42cc-80fa-95c287bc2d56", "sighting--28b6eba6-8e03-438a-aca0-a2d2d3121d93", "sighting--34ca13f4-f10a-4136-8f3b-e770b8a99e4c", "sighting--4aea214a-96bb-4d11-9454-f294fae8f194", "sighting--d294d0e4-6b9a-4e64-b51c-8d6f306d3215", "sighting--12581a15-c3d1-48a8-b0ec-ea4f25267bac", "sighting--90ad99d2-98cc-462f-83aa-c4532d6fb931", "sighting--312e056e-0677-4ab8-bdc2-c22347217de6", "sighting--508d43fb-5a52-4d58-a694-b0646096be9e", "sighting--26161d98-d88e-4b8b-8c74-3a3e0c3ed387", "sighting--16363eed-8e8f-4024-b860-73a6670d2d1d", "sighting--f4862485-4ca9-4924-ab0d-87e33796d5a1", "sighting--c2c2f7e9-9b22-4ff1-9d00-e0e269155afc", "sighting--5d41dac8-daf6-429b-813b-cd51067c78ca", "sighting--d4a3052f-2fb6-41d7-b0f2-26d796753a29", "sighting--aa25701c-8012-4a08-9961-f60f1eb3f329", "sighting--65e3a2d5-a91d-4c8d-a7c4-16d4bc611c19", "sighting--38f9ea64-bce8-49cb-997c-62444eb435b5", "sighting--8f4c7643-2c04-47dd-bad6-af9574e5343d", "sighting--2bff0bee-9ab4-41fc-99c8-b64185b1b8c2", "sighting--5eb2ff01-e054-448c-88fa-cc09b673c634", "sighting--94055b2b-1206-4877-8e08-85c68559442e", "sighting--351a5390-9974-4043-b0d6-1aed8c8a2954", "sighting--7fd35c99-1c12-42ab-8c5b-8b27dba7eca7", "sighting--249c4dca-c2b7-4d4d-89f4-ab0523878e4b", "sighting--5790e59c-64d4-49bb-8b0a-fb31c8f641da", "sighting--b88a569c-6f64-4b87-94ab-01e3e7957879", "sighting--af80a9ac-bc72-4de4-88be-974da10ed1c4", "sighting--1decd753-cb14-4819-93c6-fb8920fdcf84", "sighting--f5e13324-f0e1-4502-8d3a-d2d13bb0880e", "sighting--c238746a-6fe3-49da-be18-e3ff9684b8f3", "sighting--b3bbb8a8-84a4-4b01-ace9-69ebc2918d6d", "sighting--9e4267d2-02ac-4666-87e2-0102dd23682e", "sighting--96aa8665-d740-44b6-9289-d3f780edabf3", "sighting--32fd9fd7-703b-4d73-8f07-6bdab5ea97db", "sighting--f82f59df-3b80-45a2-b790-3aa0b68070a3", "sighting--259e208d-10f9-462b-8345-10d99f803b90", "sighting--f81cc435-8eac-468b-9682-95aea5827c41", "sighting--9312c4ac-061f-4c84-a819-1280a1a4a0f1", "sighting--706b91e1-1a18-48e4-b81d-59e58a1ad689", "sighting--91a7f88c-25b8-4097-9596-6052b88c5919", "sighting--687e7fdc-c85d-4972-9a39-c3251897c974", "sighting--8724baf6-4923-41b1-9472-9f97c46075af", "sighting--9a335681-91ac-4af9-a354-abf8e9bbcfae", "sighting--514ad7fb-730d-4d3f-8ade-3bf59ecb8601", "sighting--d249412c-0225-4383-b9e8-b5b47b8b6493", "sighting--405456c2-0e10-40f1-8a97-318ab45361e6", "sighting--81217413-d5e0-4743-9fbe-46ec4ed66b02", "sighting--b61fb42a-2a55-4886-b7b0-266a0c4ff92e", "sighting--66b6205e-cca3-4dbf-8601-ff309539a4bb", "sighting--7cba51a8-7d64-464d-8477-eb7935577ff2", "sighting--f9649b0f-d27e-440a-acbf-ac434418ba68", "sighting--ee46d9dc-ebcd-4dfc-b069-dae5fbf19f1d", "sighting--0fd03606-3853-449d-bec5-26a4254f3bac", "sighting--96f57c9f-23aa-46a8-92cc-e1be944b13a8", "sighting--d04e0353-5c0f-4158-a6f0-f9152aa96f64", "sighting--ea6289c7-810c-45e2-baa8-0be2625e90c1", "sighting--2a5a0da0-12aa-457f-a775-49d0d2991426", "sighting--289e3d94-ca88-467c-9928-c0587f6c3fa6", "sighting--73e6965e-270c-498e-99e9-5711ac67662c", "sighting--09bce7f9-0946-4b00-991e-686ab6dfcc23", "sighting--a9ec3c4e-ae24-40b3-96ed-0142112ae03a", "sighting--cc8db986-8082-4710-8e3d-918f306e690e", "sighting--104bafc4-184b-495f-a8a5-ece0cb70eaae", "sighting--f5539ed3-0ed4-4abc-8cf3-5376f8292619", "sighting--c276765e-7dc0-4b31-a463-777126da957f", "sighting--9178d287-dbe2-432a-ac62-43bd8442e9ae", "sighting--36a37115-f249-473e-93ad-eefdcc8166ae", "sighting--a196908d-66ee-46c7-92e0-e8a1a7ca7c64", "sighting--3ed61166-f096-4618-bcd7-ce4ae7e3a789", "sighting--4c5bbd8a-96cb-4386-af70-b704b4891593", "sighting--ee4e864d-7ae2-4d6b-9cc4-44632ad77d51", "sighting--e68402dc-e5a7-4f46-91dc-9ba674a64b6f", "sighting--07165e47-aa1b-4313-909a-1b3b4a0fd8a0", "sighting--e2704319-b0b1-4e0e-a111-4f59d70f0335", "sighting--50fbf4e8-98e8-4124-8455-9d6251422712", "sighting--91f0f941-5744-4ddd-ad7b-ad435ae88115", "sighting--14ee70b2-c827-4391-baeb-633d4c52e600", "sighting--f6a5a045-9d41-436e-9435-75b0a8b845c3", "sighting--d2e62b49-11b6-4dd5-ab4c-53949e1b40c5", "sighting--8d062039-cf7c-40c5-a82a-033717109a7c", "sighting--dd3286f1-06c1-46dc-a6c8-f57d42b3bfef", "sighting--62d859f9-0b10-421d-8c0a-a1ed090e0a4b", "sighting--962bbb38-8921-4b74-b576-c89247cf7f76", "sighting--ff8b9f26-e67e-46f8-aa3e-134487cc4071", "sighting--fdf12ba4-caf5-42d9-9134-c2e99e4604b0", "sighting--572647ae-4455-4952-a925-206ff3042ba6", "sighting--c444bca4-6d65-4bc8-9a25-a1e1a14bed0a", "sighting--62e54c0a-17f1-4f46-adaa-6d8f5720c282", "sighting--f6311c5b-c65b-44cb-b35e-4cd68c724f3e", "sighting--b18e05e7-62b2-4060-8f23-ed2c875dd88e", "sighting--3db40d2a-93b7-4a1a-bb0d-8a78a259f0d0", "sighting--b30e6820-5d6c-425d-be38-407b2d53c332", "sighting--9a0b6cc9-054d-486a-845f-1605db998f9c", "sighting--3b7864cd-c7a2-48ae-bfcf-83027abd776c", "sighting--1df38069-74ee-40f5-bf6a-c764d1b02e49", "sighting--d4108bae-ec42-444b-9782-d2d80d8baf79", "sighting--5bc3cdfa-c304-4642-b230-e10e0f56ce11", "sighting--24fe7b2f-88dd-4986-8560-87ef08628b78", "sighting--e616f9f2-cdb2-480f-a1ac-b95481ce1366", "sighting--6adabe84-49d7-4fdd-a21f-ea1afb054f0a", "sighting--edac0a96-e680-4dd0-ab3d-6c4859af31d1", "sighting--f33508cd-4d09-440c-9a05-582a4c074073", "sighting--c3500aa4-712d-418d-a041-2787c619926b", "sighting--68f63be3-59ee-4108-a9a8-1ac8359d6f2b", "sighting--70ced629-247b-4ff5-8b3c-26b74e5c4af3", "sighting--acece1ac-d655-4aeb-885a-debbe0e94b44", "sighting--a1e4f532-3b7f-4176-8b5b-b22f93ee4365", "sighting--fb7b8bd3-48b8-46a3-90e6-9897d70327fd", "sighting--6ba7de62-c97e-4bd8-9d11-d013ae4863f8", "sighting--bfd4ac48-1f9b-4d29-a052-b99570c8e67b", "sighting--d8287b48-f9c0-410c-b568-3a6c93a8d0fa", "sighting--ede43801-9461-4f4e-9e7b-5d2b7af49bac", "sighting--c783d4c7-7995-4a5f-b4b0-622c5fced5a1", "sighting--6688c700-9791-47d2-983e-3df3e916cd28", "sighting--1997713f-e70f-4d9c-a1c4-b9d2818d3245", "sighting--ed89998a-5daa-42cb-b5b4-bf46d1175bdb", "sighting--3b13fbc7-2646-4a6f-8ff1-e71f4bc8ad23", "sighting--bea83971-077b-4801-b2c2-2247842adfa8", "sighting--121a0f6a-f98c-4a58-8265-0e4ae85ba4b5", "sighting--ca6e4633-c6a5-405f-9447-12302f7d8d1e", "sighting--d3f5f9ff-4b89-4190-b342-dbab031dd9b6", "sighting--4d4e8929-fdca-4ee3-83bc-be8408a896f5", "sighting--643a2146-df20-41cb-b980-45a487d90127", "sighting--2a362bbb-2778-4515-b6cd-ff5ea1db5bc4", "sighting--a18dd51e-318e-4d46-be09-5a95616b371a", "sighting--05d4514e-96c9-45bf-b58a-62922304b4a3", "sighting--c458b997-c02d-4c3c-9006-905656f469fd", "sighting--bc257989-a832-4731-9c33-f005c594a0cb", "sighting--0c5d71c2-0a71-43e3-814e-98c58623fee3", "sighting--b02fe82e-a9fa-46f5-aebb-794d8777c3d2", "sighting--4f11fa1a-dad6-478f-913a-6066173b3b05", "sighting--32c27e01-15b6-4010-b80a-a3f6744ce9dc", "sighting--c1c375dd-2fd3-4260-9937-cd3f28589039", "sighting--36971a15-fd00-49cd-aa2a-13439e9c1c0d", "sighting--1372f341-9e82-46b0-ba74-bdd374e7baa2", "sighting--d33a8961-9925-4071-ae0e-229e53bba462", "sighting--bebb4093-8d82-4ce3-9fe4-8cdad5e37e1f", "sighting--677d4b3e-ba05-4aa9-a23e-73ca1072e6c3", "sighting--6614c2f1-bafe-4e5e-89b5-9ff1431ccf8c", "sighting--3e560b60-043c-4ba4-b57c-13f93d7b0d29", "sighting--b9c18dc7-545d-4567-b411-d9d078d7ba94", "sighting--40be48c3-cdaf-44c4-afbc-b10e1a9fea9a", "sighting--3fffc703-8f8f-43fe-85c7-4ac585ce3b2a", "sighting--bdf13e80-af5b-4fab-a11d-873cd9480583", "sighting--ea71b75b-a96f-4ddf-a7ec-eeec4e76fc73", "sighting--fc47f20e-7c8e-4464-b432-42490064ba1f", "sighting--42a04f4f-8f80-4d96-aba8-cc9b9c74109d", "sighting--ab622059-65a3-4d13-9d37-728140114eeb", "sighting--6d5d008a-348a-4b0c-b612-b71804199309", "sighting--0cc5f9d9-864d-4f1e-b0ee-246bb035a444", "sighting--ff0bfda5-acc0-4852-8078-540ccf34f5be", "sighting--033cca9f-c143-485d-ab24-9937a713b357", "sighting--662cc893-3e23-49d7-970f-35436fa4c27d", "sighting--44a1e404-547c-4464-9d93-9f9de05d092c", "sighting--73928698-8200-43ea-a578-a86669612a36", "sighting--471b5396-6550-4d81-9efb-0baf1efb5d1e", "sighting--2846c91d-4467-40de-b8dd-83e76603ef6b", "sighting--563a389d-6c00-415f-a516-dd2804bb3aa7", "sighting--a2385e3c-c7fb-419e-aa85-25598c181bc0", "sighting--9835897f-fefe-4eb3-a94d-691ada0cbe09", "sighting--802a3570-5695-4bd4-9d30-7636432f8a8d", "sighting--b5c2c9cf-06ac-4cc0-ac4c-3f3075eccd47", "sighting--dac406f2-fe77-412a-90e3-6b4da54e1d73", "sighting--232e9381-05ea-42c4-ab68-3d405f5e073b", "sighting--4e2ac255-8141-4c98-af8a-c1e2093a96f2", "sighting--d12bdd3c-831f-4608-ab21-39df5b0f4b32", "sighting--6fd7e024-b9dc-40e8-b444-024f64650982", "sighting--22927e49-8771-458c-bd80-fd3cc3691f06", "sighting--ebd66ee2-32dc-451e-9f88-948e77eb3ba4", "sighting--db317ef9-ec23-4e34-8dbd-06c72abebc5e", "sighting--04d63020-af7b-4ef3-b019-1c3c781322ba", "sighting--5e704fb0-8b39-4a62-960c-a7c814a405a7", "sighting--dc84ab4a-630c-4ff1-aa81-19a426aa7903", "sighting--fc67881e-1d7f-4336-b7ca-a5b4a3cee5b2", "sighting--0f8bea19-46bd-4bf4-8b3d-7551e214ae74", "sighting--a114df4b-470b-464b-a8ab-3ffc3dda05c8", "sighting--7200797f-2530-4fb9-98f0-e03d83f5468f", "sighting--0179640a-1af9-44d1-bd04-2730e4a459c0", "sighting--f3e747e1-7f80-424c-86a4-2fb1f3ed4327", "sighting--70f4fd6c-1a9e-410a-be1c-4dc534c6567b", "sighting--24a21984-fbd7-4ed9-bb1b-f5ffbb94d154", "sighting--5cbb3f73-3e39-4af9-9a31-76a6438dad77", "sighting--7a53be49-7189-4810-a07f-51c7d6f56116", "sighting--f9ad1300-c2c9-4b02-b9fd-1538cc50f2c8", "sighting--59d2d32e-663f-42c1-a274-1669ec6b9198", "sighting--2a651013-b92f-4f7c-9aaa-3d76c5936b0b", "sighting--6297fc56-9ac1-4f5c-a030-adf07e3b52d6", "sighting--693da5ad-371a-4701-b821-6eb98fd68f67", "sighting--31a64cf0-d5da-44bf-9804-67ff6629b938", "sighting--cbbf0a85-045e-47a5-a19e-53d8e492bd5b", "sighting--6bee0e1a-dafe-471a-9466-3cf3eafc7542", "sighting--f1acb357-bfd8-4a9e-b1a4-6afeca238973", "sighting--83a70454-9fc4-43b0-8e5e-ce76b1793fd9", "sighting--7fe16e67-981d-44fa-919f-caecce273b25", "sighting--9b2af7d5-9f61-48b9-9ffd-58636795c0d1", "sighting--d10013cb-1182-4599-b377-bef977764d1e", "sighting--972edeee-b21a-49ca-838f-da9932e708da", "sighting--d173c59c-6ed5-4211-ab67-4d3d25b09f05", "sighting--8dc65daa-6336-488d-8657-feb9db9974be", "sighting--7ac9f596-d506-45b6-9bde-e07169bc394c", "sighting--4e0baecf-6082-4620-a51a-66ec7861096b", "sighting--f431f957-bd53-4eb4-abb2-89839e54234f", "sighting--d857b41a-a354-46e3-8c15-92ffe23c9178", "sighting--54a93171-2950-4427-ab9e-67d8e11cf642", "sighting--4a8efdf4-6ad4-4cb0-a781-0386e7592158", "sighting--fd2a1ef7-41ef-4706-b230-46ea25a0a0e7", "sighting--3664c94f-3c93-434b-918a-a3879db8eadb", "sighting--594df268-703a-4ba2-9d54-5c782562ad2c", "sighting--762b0b5a-4a2f-4ae6-8334-63ddd14be8d6", "sighting--be8cc5ff-0b15-4efd-8929-8ad2c99907a6", "sighting--68592c0b-ebad-4f13-8d3a-c4750a47cd8c", "sighting--fab33177-ec25-4425-90e6-18edbe810881", "sighting--289726fe-ab21-431f-ae07-3242c23f027b", "sighting--5aee4769-7b08-40d4-8571-18ec00cf9d68", "sighting--88f3de4c-df3e-47f0-8d04-439be64d32d1", "sighting--b6591c2c-94f6-418d-821b-113dab9620a1", "sighting--c3d8e658-6177-4858-a229-6ce28890a88c", "sighting--9fcb2388-b20f-4802-ab88-56a281536b09", "sighting--c4f9ecf8-a750-4d41-b993-b36d81f98186", "sighting--133c0df3-f426-4026-99ca-e64f47ed7314", "sighting--f419bcae-f644-42cd-9767-9c159abe3787", "sighting--6c13a359-edf4-493e-a0c1-cee19f930aa8", "sighting--036e1049-b38c-4e09-88b8-9ecde7af436c", "sighting--a086c3be-b915-41a2-824a-ed7e5ee6c1b6", "sighting--43b2ab15-b089-4556-ac06-728e6f5bfb0d", "sighting--8c97246a-2fa3-438a-9630-024bf0e0d925", "sighting--9d884a35-e701-4b5b-8722-322b466346ff", "sighting--2f79028b-8e54-4c28-a425-fd5ac356886c", "sighting--79622c80-d31c-4b82-a7d3-ee8b9490ccdd", "sighting--ac161680-2199-4eae-8f5c-a4be136b7028", "sighting--54bef7fb-08cd-4e22-9581-96f8152a2709", "sighting--8b261c60-4400-4844-b3ef-45ee1c3c5ae1", "sighting--1df85799-5d4b-45f1-b27a-4d19105c56e2", "sighting--35c1087a-1483-49d7-8e78-82eedb366519", "sighting--2d02cb2d-2596-43ed-8828-094d4a39cfe9", "sighting--b0251bb3-a998-44aa-87a8-8c84a185e014", "sighting--bf59d3d2-0487-4163-ae82-bb16366ade8a", "sighting--db524a62-fdac-4c8a-8b48-d6c3ce5ff862", "sighting--ad7cc5b1-221f-4c53-b236-dc4a74b52ed9", "sighting--bb567e2e-a717-428f-9059-9737b64a753f", "sighting--b03a9c17-29fa-48db-85b9-f4932bc6c697", "sighting--150e5633-6cde-4003-98ab-f43daefb4aa9", "sighting--15751ed0-6490-46ef-9e5a-7c0ffc3b5876", "sighting--493310f3-fb62-4b5b-8833-816dc431efb4", "sighting--05ac585a-4d52-4463-9931-ad0575208d7d", "sighting--5dd315f5-63d3-4d38-a76b-9771370c7a8b", "sighting--4c5ffd44-cc65-4a73-992e-77de2425006a", "sighting--76dbda10-2b9c-49b5-b082-4573e44af7f0", "sighting--8e044c51-7846-4ea2-a9b4-0e7c474df388", "sighting--e57cc25f-94c1-49d1-9ca8-982c22b0e813", "sighting--b267807c-e39c-41ea-9ca4-e2e93959f670", "sighting--dce423a9-91dc-4e1e-a8ed-1f6a5a6bd91f", "sighting--00a33f4e-6074-4b7f-8a3d-6d2796e5fba1", "sighting--b5a33650-e0f2-43ab-8b1e-a274aa7f261e", "sighting--e5170722-3232-4d02-a744-9ce518264f81", "sighting--8333fb10-585d-4437-aa88-08f0bc65f8c9", "sighting--d7eda098-9d94-4fce-862c-427bb34ce294", "sighting--3df360a4-4c1b-4963-8381-30533cbe6141", "sighting--d18ba5d6-717d-4ab0-9867-fe8daedcbcdd", "sighting--ef284cf1-3788-4e34-9269-67dea3c2e0b3", "sighting--7171f1e5-2116-4282-b0df-2b5191efff70", "sighting--b1602995-04a1-4501-9bf1-4e3dbe930c3a", "sighting--c8a937fb-6188-43b4-b2ec-fb157d7f617b", "sighting--f5ee8eb8-8d25-4702-b21c-9404fdcca1c1", "sighting--6b8c4549-7f2d-471f-a196-f0ef1e9ac1fc", "sighting--751bd774-44f3-4c08-89ac-5eac0599908c", "sighting--c1f1e98d-921f-4c81-832b-fe6e1d8c634c", "sighting--29432266-f948-4acb-9e50-a187db93e932", "sighting--4acf5fbc-0780-4e93-a0e2-87ab72a045b3", "sighting--e6af3490-2bca-4947-bbd5-a706ae51371d", "sighting--7692b856-d6af-4a64-8073-6a2de7399909", "sighting--21571373-ebda-498b-ac0e-819d64512367", "sighting--b0d436c8-54c4-472c-ab60-4de6c3c7bc51", "sighting--c40c2526-6e5b-4e46-a4e5-f95d0a933dac", "sighting--45ed4fc8-1b88-4727-bfac-eb4a0df09b22", "sighting--5e18fbec-852a-4fa4-87ae-ebee84b6da11", "sighting--0c950347-bc7e-4661-a6b8-e8ef54085111", "sighting--57be1d93-0250-42fd-89ec-f495bbefb150", "sighting--7d7f8315-63c0-4760-9894-cbe64758466b", "sighting--8352ea6a-fb3d-41ee-b71a-e88572d758fd", "sighting--01d4e3e7-5596-4397-9467-bd15299dc71e", "sighting--f0dbc2c2-f1e5-4570-973f-4acd036b1af0", "sighting--f6753ddb-9915-44e1-a08a-b78b47445bb5", "sighting--ff4cb285-7c97-4a31-aea2-ad33b098d506", "sighting--ebd2b69f-6e89-4ae2-a455-e35589906139", "sighting--c8914f5f-0b1a-4b85-8201-ec1ae9ed3200", "sighting--b93c23c1-e60b-49ed-b01f-3bf51680f6fe", "sighting--93d2b996-329c-417b-adb2-ede4b8fb1ff6", "sighting--0f7c48b7-1657-4e46-923e-0b7f6f53bbfe", "sighting--b85a4a5f-672d-4bc2-93a4-22ed9a8d27bd", "sighting--88362766-6ebb-438a-bd2d-905cf06af9a4", "sighting--376caeae-de25-4882-ba71-e453308e490c", "sighting--34a572ef-f135-4194-84a4-a79adae91a92", "sighting--9cb70ac1-468c-4350-8b23-84520368b70e", "sighting--13995e30-41c9-41fc-81b0-af7f35065ba2", "sighting--35ff186f-fa8d-4a58-a1d9-6da0242a18db", "sighting--763ba99c-5ee2-48de-8850-49f8b45e4117", "sighting--81753807-70ac-4009-800c-233df830553b", "sighting--059c03ee-6cde-4d94-9b3f-889a360eebfb", "sighting--e4347bd4-f885-4630-a1dc-6c3ee9ccda2c", "sighting--792ed6cb-2cfc-4f7c-b18e-56854ad05885", "sighting--fda06b56-64d7-40ae-905d-9050680e3c57", "sighting--2fada13c-fc8b-4de5-bdd8-4798ca4ee6fb", "sighting--7aad49fc-dfa6-400b-bed1-0a1fb86e633b", "sighting--986121bc-2427-467a-935b-0dcd15b37cfc", "sighting--92dc514c-5d93-4a8f-89e2-d3a848831e92", "sighting--54cc19d4-bf30-4a72-8236-5ed28b62b7d2", "sighting--5b42f6bc-de97-4b69-ae6f-fefad8277760", "sighting--a028e32e-d778-4b58-8f62-ad62bb766e3b", "sighting--0257774c-6f27-431e-b05f-192cbcd1e3be", "sighting--f79245b2-a13f-4672-b3f9-069c93ac67f6", "sighting--2d326c7c-8ca5-4561-8e37-e06792bbc0d6", "sighting--89d58ab3-4fc9-47dd-b4f0-a2113dcb2faf", "sighting--4e8a991c-9118-448d-abc6-09d0b0128046", "sighting--559bde51-9b1d-4c5e-93ae-45b29ee960a1", "sighting--baa29845-0e68-4df1-86b5-fe20dc8eef54", "sighting--4362de82-1ba0-46ea-9819-43ac41b667fd", "sighting--c07d0483-d602-449a-b9f4-8397dbe160b7", "sighting--32149a80-a537-466e-a469-0df00d16bec6", "sighting--053e8f34-521b-4e64-a432-8f44e183f99e", "sighting--dd2f9cca-8713-4d11-a039-2a010def7010", "sighting--4df73585-df8f-448c-873d-eccdcdf0a23b", "sighting--13a47912-a995-4268-a703-b440152d304f", "sighting--d2da70eb-2d73-4dd0-9494-696d4256aa55", "sighting--1350aeb4-97f2-4dcd-8fbd-a4153cf33117", "sighting--d662683c-4c47-4a9a-af6a-9808af22598b", "sighting--45b30406-d09e-45d8-b08f-dc8cebfff56c", "sighting--7e49000f-1221-461b-8e6d-709dc9461722", "sighting--f5613c79-4d3e-4a0e-87af-9b040c40ce48", "sighting--c9bddd9e-2824-4c39-972f-177a788870d9", "sighting--4787187d-924c-4b34-9617-5a4a86743711", "sighting--5c69c369-3987-4746-9a00-21df2c4046ed", "sighting--af0bb08c-f5ab-4934-b1f8-ca2497e782a1", "sighting--c1b1252f-285c-466a-beda-b19b51089b61", "sighting--71dac84d-d2e3-4d48-9bbd-15fae762a0ac", "sighting--bf0e4444-2b47-4477-8d30-87f8932f813f", "sighting--27980c11-9941-421c-80fd-38dca97157a1", "sighting--c31304af-ebaa-482b-9775-d378d746e1a6", "sighting--fa7284f5-5dbb-4e40-92cc-2e4a1be536c2", "sighting--7f12d5e6-b551-4029-aa1f-103b26dad14b", "sighting--a4ed0247-b085-41b9-b649-618425d21ea4", "sighting--c2017940-c583-4aaa-a6d0-2d7bfbededd8", "sighting--c8a1fbe2-eb37-444a-9011-4f9fba545b07", "sighting--3d2b1de2-daf3-4d8d-853b-3975edbcd381", "sighting--fe632c2c-7920-4dc6-aaa9-0430c4e7299f", "sighting--a2a54887-c5d1-452f-9215-c5b1620dc490", "sighting--a6e68d0c-8c86-4b9d-971c-a62772c9a752", "sighting--1cd4b774-8b32-4abd-8104-ec5aa966c693", "sighting--4b1ee6e1-b882-4b0a-91e2-56db7a053d7f", "sighting--5b8c4df0-2fc5-4b39-b78f-ff24dde43335", "sighting--624b8df1-a078-4043-ad8d-461f3967640d", "sighting--f2a982f4-6d2f-485b-a3ec-a179cabb191b", "sighting--71e6a1bb-6cbc-41c5-8036-50786d8b2777", "sighting--4ce509cb-fe27-4ee2-96ba-93c0446a950d", "sighting--5034dbea-0b18-4942-b0f9-c5131e9ddab8", "sighting--f3bb6a7c-797c-4b0b-8116-4da9afd28e64", "sighting--2ac56fe9-e0a2-4624-979a-3f33bd396baa", "sighting--f53cf1e2-8d88-47ec-b776-fa612213caf9", "sighting--9ac483b2-2003-4801-b1fe-2c8e2e7afa2f", "sighting--b580d0fc-975d-4e73-9880-3d3cefabc7c4", "sighting--c4e3210a-9cfa-414b-a8b4-39e81cd0d9d2", "sighting--0195ef80-6fb8-4395-9d1c-37f8d2db6f1b", "sighting--ca6614e6-3691-44e2-98bc-b25ec286e8b4", "sighting--bda2c14e-2ba5-4438-a29e-68ebf861afdb", "sighting--5f4289fa-8171-48bd-b21f-ce306d17bb63", "sighting--42420db4-0685-4d17-be1e-6cf6a20a36fb", "sighting--18c2ee84-051f-417d-babd-6add1ee9ac66", "sighting--ac419844-b775-4d0a-9df9-0628b9566bfc", "sighting--ce65ef89-9e6a-438f-986e-8ac262565cb9", "sighting--a7b1a0a7-0320-4aa9-83a3-d175a62be868", "sighting--d7075d1f-97d1-4407-b405-b3644afe03c5", "sighting--6cd54fac-e2d9-44c1-afe5-64bb52e51236", "sighting--d23936b2-cfe3-4f7d-a568-3b4d66e1392a", "sighting--3ffd4708-65f9-4f2a-b1f3-c7d8852ef1b8", "sighting--51137512-e056-49ef-b194-196037319f1f", "sighting--75c8e27d-6905-4bd9-bf62-0c0074ad1248", "sighting--eff57be6-2e13-4b1a-914d-d799d857c533", "sighting--1dcfb8b9-e8a3-447c-8610-95c0dfb842e3", "sighting--3347209c-ab8a-423b-8957-8a80e8ed5428", "sighting--34174659-1f85-4ea2-b880-05375f76e240", "sighting--45bf21fb-b135-450f-a2e6-6a7ed670c4fa", "sighting--87da1890-96eb-4ba4-af4c-29e9c96445b6", "sighting--94b2307c-1512-4214-81d2-5bcd4ed14fec", "sighting--cc4961c0-ada5-4024-96ed-5d037672a375", "sighting--c15143ad-a56f-4656-866a-df1374527802", "sighting--7c4aa8e7-68c4-448a-9b99-01a542a3b76b", "sighting--ea93b0d6-79c2-45c9-8f97-49ed7da8a904", "sighting--b45a6f41-c019-4853-aa70-7bb12ea14687", "sighting--ce268144-25ea-4f1a-9d49-decdb9612b6a", "sighting--4934da69-f686-4b02-9fd2-a1078dc06633", "sighting--21c32887-e531-4447-ba23-a84471886a0e", "sighting--43f00d88-2ca9-4d75-b69e-fbf0b684399d", "sighting--4b3856bc-0812-4e8b-aefa-4e6e00c6f04d", "sighting--9713ddc8-8427-4244-94c0-14d2ed7eb713", "sighting--2ae31732-23ba-4087-b198-7f2b5ce86541", "sighting--012e7ec4-7f00-47bf-83fc-1299efd248db", "sighting--df1af23a-ce8d-4789-80de-a034bb170678", "sighting--fec9f5b0-b775-4ce1-9e36-90c512b888ed", "sighting--0b321b5b-5136-4bfc-ae0e-0956b242ba08", "sighting--88d85bf1-a892-4dfa-b364-47d9545b1c96", "sighting--c163b303-9665-4a9e-8626-1cf1d53d1559", "sighting--4c73c934-b6c8-4a5b-96fb-fbca23ae0d37", "sighting--cd18d007-212d-4a75-9cd2-b93ec744ebcc", "sighting--fc6603c1-884b-455e-9adb-b8fe47b9a3b3", "sighting--d9b7b2df-4622-4eb7-94a1-41f289dde448", "sighting--a14010c7-0990-4698-b3e6-593661c5a619", "sighting--8d92869b-6132-410f-a6a0-6338cf487e4a", "sighting--fa16b35a-48ec-4452-9548-8231ff84948b", "sighting--1f713519-3ee4-4b39-bda3-b002141ec91a", "sighting--67b36bdd-3551-4a10-b9ed-bdf84b5228cf", "sighting--a47e0705-0342-4069-8a68-dbcf556caa1e", "sighting--24f2fe08-82d9-41e9-ac32-c9dac0249f2f", "sighting--d1dfbd9e-35f8-4cd0-8402-f179b2cec10a", "sighting--7b2a553e-f262-4524-8f00-599a7d0f7ef3", "sighting--e9469a50-aff6-428b-a9de-42738125b4a0", "sighting--89c2da54-3943-4bdf-b923-437e32944148", "sighting--713404e8-7021-4d90-b0a9-25a8ae91e754", "sighting--09bb9749-da1f-4eea-a172-dffbffe3573d", "sighting--a2133e7b-dbe2-4228-ac70-26964b30d8a3", "sighting--e51ea13e-e5ff-46ae-8ae6-16ed132e6e8c", "sighting--11dea9d7-4cd3-4af9-b9e6-9c91cf586100", "sighting--0d64d136-2cac-4a42-8762-909a30f82363", "sighting--e25260ce-04f4-4417-92ac-fb8b83a45cfd", "sighting--08a6c295-120d-48e9-b35b-f53cccacf7d5", "sighting--f771208d-18b1-4316-95e4-aa8de9e31f87", "sighting--180ccb87-c4dd-4aa3-9125-c241d58f6c26", "sighting--81fb485f-2472-4fe9-bb93-c7e8fbf2041e", "sighting--1808c63a-3b87-4449-8bb8-e83b484e124c", "sighting--4635fd14-ab0f-49e3-b34a-a0449ca93e24", "sighting--3496ed3f-5a17-4fbb-a983-d20cacd2d8fd", "sighting--ac3bec1e-8c2c-417a-925d-c914280993ec", "sighting--e8cfa383-0b5f-4e2a-8a24-466b4ee7118a", "sighting--f4098e21-784f-4985-ae6d-9def3aab437f", "sighting--7efde75e-2628-4156-a2a8-6758c3b625b1", "sighting--2a95fd8a-0567-4d4f-b66c-22aab1538786", "sighting--fa12e4d4-c4ed-4a30-b836-7b9b19c7ced4", "sighting--af4f7728-9f15-46b6-a364-0f092690f82d", "sighting--382d6f3e-ce71-4e8e-a193-ab641299aa64", "sighting--1cffb3ba-e0e1-438e-93a9-5ec27d042d5f", "sighting--a0310ea5-99df-45c9-afea-25ed48d820a7", "sighting--5681c9c0-c06e-4bc9-a68d-03f4bc77d4dd", "sighting--957b49e8-1c4b-4d15-9611-460b07127108", "sighting--6f1ed671-3087-4396-be16-8bea753156d8", "sighting--6cdbb135-0fa5-4f17-8733-d91497cb9d3e", "sighting--572568f8-aa25-4d32-b6b5-fc813eba047c", "sighting--7e8ea6da-1553-4089-8653-dacaad3536e9", "sighting--ce8acc28-0279-469b-acfe-ded5e139fb3a", "sighting--22c412f9-80d5-4c14-af04-00f67086b208", "sighting--4c256f50-ac62-43a4-a713-fcd8cccaf6e8", "sighting--3a0d1db9-de87-4e41-802f-591656f45837", "sighting--a62ff96d-782e-4ec5-9bd4-00addd088107", "sighting--024cb865-bae2-4338-9e9d-0dac0e86ecd0", "sighting--4b89e010-4be9-4bce-8b11-ec3eaada3c53", "sighting--bee424c2-14e0-4c51-8c4f-f24ff319628b", "sighting--946cb63a-bad6-488f-a745-a32c9d2a1033", "sighting--d93d4c85-f296-4919-809e-8f4b35e6a38a", "sighting--ac323d70-0302-4578-8f1a-c7d8ec13f670", "sighting--7b32dfa5-cb35-41f7-96ab-ebaa578042c4", "sighting--4fd441e7-92c3-4f50-8dbb-c0c5e2b7aae5", "sighting--6dde0e1f-fe9e-4ed2-b05d-cc29887fe724", "sighting--58ba4de2-9e5f-4f27-88b5-ca9722a6a587", "sighting--b3a012da-1e09-4817-a85e-b5aa50ebb8aa", "sighting--7a8dd00f-22dd-43e0-b3bf-ca6b738c58b4", "sighting--5639094d-b4d8-41fd-9458-2d7ec83cfbed", "sighting--0ce1b068-76ad-45df-8149-ab4a5cdbc50c", "sighting--902f1cd3-1ff9-4c05-a8b6-7ffc756d542c", "sighting--ef7886a3-5531-4339-a5f4-cbc9bb7a31bc", "sighting--6eb94c0d-ed1a-4131-a0ea-1ee0f5562892", "sighting--0446a3a2-5a3f-4345-a482-baecfa3f4ccd", "sighting--e5d974e6-04eb-4d6a-8532-ca819413b73e", "sighting--56b258a6-bd27-4fe6-bff5-a1e9b1798df3", "sighting--77fc0c5e-6fc2-4ba0-9e28-38d407af397a", "sighting--e7be99d9-5371-4216-9364-f149d8deefdd", "sighting--4f2c7277-6815-4806-8334-e75fdc365cfa", "sighting--04a014e4-4ec4-4113-898d-e7194f365722", "sighting--10797877-aff2-45b3-a06e-758b8282c244", "sighting--ff12312f-f243-48f4-837a-a5f5a2d0be5c", "sighting--8017d334-0083-4f62-ab0d-3fb294f28e2a", "sighting--2cae141b-62eb-4982-a6e9-ab647fc66aa4", "sighting--fa3f1784-aaab-4da8-91a7-e36c14a9f15b", "sighting--5b8e5c4b-8ca1-477f-82ff-97cc598e85ac", "sighting--c83909b6-685f-41ca-8c42-7e07e0e36002", "sighting--9e398c61-d7ce-4235-a78b-72891df3fc2f", "sighting--87e7f824-c1e4-4f7c-b7dc-4485621a53e9", "sighting--0e046e1c-ca1d-4b4e-8f25-fa1a2aecc950", "sighting--c4711c38-6d0e-4d8f-bae6-2ac437f27cad", "sighting--7ea36a5f-4faf-49c3-bd0c-f456e5a425c9", "sighting--73463613-20a0-4534-8a3a-fb4a845bef6f", "sighting--fcb86624-3687-4200-a16d-a8a40dedef5d", "sighting--586b5e7c-c8d0-470f-a0f5-5a91097248b6", "sighting--b9bd57f2-52da-4f8c-a85d-912806665029", "sighting--240e71f3-1769-46a7-bedd-f7686cf3fdca", "sighting--ff76b5b7-e52d-424c-a969-1b9403ff8d50", "sighting--4be59e21-df78-4ffa-aad0-1cb3528caaea", "sighting--3bd28beb-5a06-42ed-bf82-9f4d12f99f23", "sighting--1e88cd8f-75d3-4375-8d46-6367584abb72", "sighting--4627b26d-64b1-411a-9167-66f56e7e2c06", "sighting--289d6792-b6f4-4b7e-9e75-10ce05798cdc", "sighting--b90ac537-aed5-405e-8149-53e91881ddd7", "sighting--7d3af5ee-b454-4774-9745-4866e0744b5a", "sighting--cc0693f5-9f64-4d17-98ab-5f903e9b472a", "sighting--7293bec7-e187-4903-993a-467cff60eb79", "sighting--4cae54bd-38b2-47f9-883e-1fb00dc09b2e", "sighting--c6455adf-d651-4e18-8481-d3ccb493c5c2", "sighting--5d754751-33d7-4fe7-9459-c0185159d118", "sighting--befa5ab2-8784-4f50-933f-da372fa50603", "sighting--1a3113f7-87b3-4521-9a44-0d2cd4a013fb", "sighting--5c149456-0ea3-481c-be12-7557f1b5b403", "sighting--1fa42a7f-1c4d-4406-8622-2282e9493c7c", "sighting--2fb98721-dab4-4b9c-b95c-7030828a3e85", "sighting--73dbcafe-a766-4f5e-9c1e-f8f02133a20b", "sighting--73834634-9474-4bbf-bee2-b00274375d8a", "sighting--6aa89218-dda1-4d6a-aa12-1f73fd3e2060", "sighting--4e38a6c7-5702-473c-b03a-cecabc86badc", "sighting--5831e9fa-1d21-4f58-a21b-9eb77d7f7ca4", "sighting--2d34683a-11e5-41c2-8b92-3b9954ef2659", "sighting--d439a1e1-68b9-4ecb-9594-53d327fd7ee5", "sighting--0777a990-5c32-423a-87a3-60efc39463f9", "sighting--789e0d24-171f-4a4a-ab73-efea3973c835", "sighting--d19d1b63-434f-4abc-a7a1-5b23e5badb6f", "sighting--bbbd4396-5c81-4bea-ae09-8a890ed0f5fe", "sighting--3215041f-9677-4748-bc92-bc46e2e7187c", "sighting--203d71a7-14e5-41da-9bcc-a071623d5b34", "sighting--d46066b8-1bea-42ef-8a82-9497f3c180f3", "sighting--01cb6c29-f259-4731-a9ac-6bf4a69f26aa", "sighting--2086fcff-02a5-4785-8bc7-960960106770", "sighting--fa994442-0250-4472-87e5-eb6bcc311102", "sighting--f6d2035c-90e8-4f12-9a90-967bc3249ffa", "sighting--029e302f-9aaf-43f7-adee-32da16d03914", "sighting--9bde533a-0233-4d89-bdc0-dadef6f484ab", "sighting--cc448f8d-fae5-4941-816e-bc207088d2f2"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-12T11:00:01.266Z", "modified": "2026-09-12T11:00:01.266Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": {"tlp": "white"}}]}